16 results about "Quantum authentication" patented technology

The present technology pertains to systems and methods for one-way authentication of quantum channels. A transmitter generates an entangled quantum state comprising a first state and a second state, modulates the second state according to a clock-synchronized pattern, and transmits it through a quantum channel to a receiver. The first state is retained and measured at the transmitter to extract quantum-state information. Authentication is performed based on this information, without requiring feedback from the receiver. The quantum-state information may be derived using quadrature measurements, Gaussian tomography, or other statistical analyses to detect whether the second state underwent irreversible interactions such as eavesdropping or decoherence. The system enables secure unidirectional quantum authentication, reduces protocol complexity, and supports real-time anomaly detection. It is compatible with continuous-variable quantum states, quantum key distribution (QKD), and scalable communication architectures.

The invention relates to the technical field of quantum communication, discloses a quantum key remote security injection method and system based on PQC and zero trust, and aims to solve the problems that post-quantum authentication is high in calculation overhead, difficult in terminal adaptation due to resource limitation and lack of continuous verification capability. The method comprises the following steps: presetting a secret seed; the terminal generates a disturbance public key based on the seed and the basic temporary public key and initiates a request; the server carries out implicit authentication by comparing the disturbance public key and executes key encapsulation to generate a session key; the server encrypts the quantum key and signs and sends the quantum key; and after the terminal verifies the signature, the basic private key is used for de-encapsulation to obtain the quantum key. The system comprises a key injection server, a terminal security agent and a disturbance function module. According to the method, authentication logic is integrated into a cryptographic primitive algebraic structure, so that authentication internal biochemistry and light weight are realized, the terminal power consumption and storage occupation are remarkably reduced, the resource exhaustion attack resistance is enhanced, and the continuous authentication requirement of a zero-trust architecture is met.

The invention discloses an anti-quantum identity authentication method based on a two-dimensional dynamic primitive, and belongs to the technical field of anti-quantum authentication, and the method comprises the steps: carrying out the dynamic feature collection from the identity feature dimension and behavior feature dimension of an access subject, carrying out the hierarchical processing and mapping index distribution of collected data, and obtaining an associated feature set; performing hierarchical encryption and ciphertext splicing on the associated feature set to obtain a composite authentication packet; respectively extracting an auxiliary layer ciphertext and a core layer ciphertext from the composite authentication packet, firstly performing auxiliary layer verification through the auxiliary layer ciphertext, then performing core layer verification through the core layer ciphertext, and outputting a verification result; and sending a corresponding operation instruction to the access control component according to the verification result, and outputting a final authentication result. Therefore, by implementing the application, the problem that the normal operation of the system is influenced by high authentication delay due to the fact that the existing anti-quantum authentication technology occupies more computing resources in the identity authentication process can be solved.

The invention provides an anti-quantum mobile virtual network protection protocol method and a network security protection system. The method comprises the steps that an MVNO generates an anti-quantum authentication credential of UE and adds an identity label of the UE to a registration list, the MNO generates a first anti-quantum identity credential of a gNB and a second anti-quantum identity credential of a CN and generates credential information, the gNB generates a first message according to the credential information, the UE generates a second message based on the anti-quantum authentication credential and the registration list, and the second message is sent to the registration list. And the gNB signs the second message to generate first signature information and generate a third message, and the CN generates an anti-quantum authentication response based on the second anti-quantum identity certificate and sends the anti-quantum authentication response to the UE, so that the UE decrypts the anti-quantum authentication response to complete identity authentication. According to the application, by introducing an anti-quantum cryptography technology based on a lattice password, the problem of security threats faced by a mobile virtual network in a quantum computing environment is solved.

A server configured to provide a pre-shared key “PSK” with a first user node, to allow a first user node and a second user node to share a PSK, the server comprising:a network interface; an authentication unit; an encryption unit; a key management system and a quantum key distribution unit,the authentication unit being configured to receive a request for authentication, via the network interface, of a first channel between a first user node and the server,the quantum key distribution unit being configured to allow a quantum key to be distributed between the first user node and the server, the quantum key being sifted using communication over the authenticated first channel to establish a first quantum key for the first user and server,the key management system being configured to provide a first PSK for the first user to allow the first user to authenticate with the second user,the encryption unit being configured to encrypt the first PSK with the quantum key to send to the first user node via the network interface.

The application discloses a substation relay protection communication authentication method based on continuous variable quantum key distribution, and belongs to the technical field of wireless communication; the method is: evaluating the physical channel quality of each link, screening a safe link; generating quantum keys by using the safe link, and cutting the generated quantum keys according to the key block granularity; adopting a GQA handshake protocol to establish a complete mapping relationship between the key block and the frame sequence number; performing GQA quantum authentication encapsulation on a GOOSE message; and completing the authentication of a receiving end by adopting a three-layer verification mode. The application establishes the mapping relationship between the key block and the frame sequence number by the handshake protocol, the sending end and the receiving end independently calculate the corresponding key block index according to the frame sequence number, any additional key negotiation or synchronous communication is not needed in the message authentication process, the communication of the key block between the sending end and the receiving end is guaranteed, the communication response time is reduced, and the security is improved.

A method, system, or apparatus for generating and / or verifying a signature on a message is provided. The method, system, or apparatus at a signer may include receiving a message, generating a security parameter, generating at least two seeds corresponding to at least two servers based on the security parameter, transmitting the at least two seeds to each server of the at least two servers, determine a private key based on the security parameter or the at least two seeds, and generating, on the message, a signature based on the private key. The method, system, or apparatus at a verifier may include receiving, from a signer, a signature on a message, obtaining at least two partial public keys, determining a full public key based on the at least two partial public keys, and authenticating the signature on the message based on the full public key. Other aspects, embodiments, and features are also claimed and described.

This invention discloses a post-quantum cryptographic encryption communication device for a satellite constellation communication network, belonging to the field of satellite communication security technology. It includes a constellation link management module, a post-quantum authentication module, a post-quantum key negotiation module, a data encryption processing module, a secure key storage module, and a hardware acceleration and power consumption control module. The constellation link management module is communicatively connected to the post-quantum key negotiation module, the post-quantum authentication module, and the data encryption processing module. The post-quantum authentication module is communicatively connected to the post-quantum key negotiation module and the secure key storage module. The post-quantum key negotiation module is communicatively connected to the data encryption processing module, the secure key storage module, and the hardware acceleration and power consumption control module. This invention uses the above device to achieve real-time perception of the satellite communication link status through the constellation link management module, enabling key negotiation to be dynamically triggered according to constellation topology changes, thereby improving communication security.

The invention provides an intelligent chip equipment security authentication method and system based on a quantum SIM card, and the method comprises the steps: receiving a first challenge initiated by a quantum authentication system, and carrying out the decryption of the first challenge through a quantum key, and obtaining a first challenge plaintext; generating a first response based on the first challenge plaintext; encrypting the first response through the quantum key based on the quantum SIM card, and sending the encrypted first response to the quantum authentication system, so that the quantum authentication system performs identity authentication on the intelligent chip equipment based on the first response; under the condition that the identity authentication is successful, performing key negotiation with a quantum authentication system based on a quantum key distribution protocol to obtain a shared key; and establishing a communication connection with the quantum authentication system by using the shared key. Therefore, according to the method, reliable authentication of the intelligent chip equipment and the quantum authentication system can be realized by fusing the quantum SIM card and the quantum key, so that secure connection is guaranteed.

The present disclosure relates to a quantum communication system. Particularly, the present disclosure relates to a device and a method for performing quantum state modulation based on quantum authentication in a quantum communication system.

The invention relates to a microgrid encrypted database access control system. The system comprises a dispatching center used for sending a symmetric key of a micro-grid edge node to a post-quantum authentication center and an encryption database server; the micro-grid edge node is used for generating a Hash-based signature according to request information and sending the Hash-based signature to the post-quantum authentication center under the condition that a database access control request is initiated, encrypting the request information and an access token by using a symmetric key, generating ciphertext information and sending the ciphertext information to the encrypted database server; the post quantum authentication center is used for carrying out signature verification on the Hash-based signature, generating an access token and returning the access token to the micro-grid edge node under the condition that the signature verification is passed; and the encryption database server is used for decrypting the ciphertext information by using the symmetric key and responding to the database access control request under the condition that the access token passes verification. By adopting the system, the security access control of the encrypted database of the micro-grid can be realized.

The invention discloses a remote access handshake method, device and equipment based on dual anti-quantum protection and a medium, which are applied to a client and relate to the field of encrypted communication, and the method comprises the following steps: sending a connection request to a server, and setting a corresponding authentication protocol according to a quantum authentication identifier fed back by the server and an anti-quantum authentication key exchange suite; performing handshake with the server side based on the authentication protocol and the anti-quantum authentication key exchange suite, if handshake succeeds, sending a certificate anti-quantum authentication protocol request to the server side, and analyzing anti-quantum information fed back by the server side; performing anti-quantum verification on a target certificate fed back by the server for the first time through the obtained preset anti-quantum signature algorithm, the server anti-quantum public key and the certificate signature value, and performing subsequent communication after the verification is passed; and if the handshake fails, ending the communication with the server. Therefore, after conventional anti-quantum key exchange handshake is completed, anti-quantum signature verification can be supplemented in a targeted manner, and double anti-quantum protection is realized.

The invention belongs to the field of wireless ad hoc networks, and discloses a wireless ad hoc network quantum security authentication method and a related device, in a master station mode, a quantum protection key is written into equipment offline and is used for encrypting a one-time quantum authentication key, and symmetric challenge-response authentication is realized through ciphertext transmission and decryption; in the independent mode of the device, the device generates quantum random public and private keys and requests for a digital certificate, the server signs with a root certificate and then distributes, and certificate exchange and challenge-response authentication are supported. By adopting the method, the network security is remarkably improved, illegal access and data leakage are effectively prevented, stable operation of the key information infrastructure is ensured, the authentication reliability is enhanced, and different deployment requirements are met.

The invention relates to the technical field of data security and privacy protection of intelligent networked automobiles, in particular to an Internet of Vehicles anti-quantum authentication and differential privacy lightweight integration method and system, and the method comprises the steps: collecting original trajectory data in real time; performing anti-quantum authentication on the original trajectory data; laplace random noise is added to the original trajectory data passing the anti-quantum authentication, and vehicle data is generated; and through privacy budget, the Laplace scale is adjusted, and the amplitude of adding Laplace random noise is controlled. According to the scheme, quantum attacks can be resisted, privacy protection is carried out, and a complete closed loop from data acquisition to secure transmission is realized.

A method for quantum-resistant cryptographic identity authentication is disclosed, comprising the collection of biometric data from a user and the application of a stable bit vector algorithm to generate a stable bit vector. The stable bit vector algorithm combines the user's biometric features with public parameters to deterministically compute the stable bit vector. Cryptographic information, including private, secret, and public information, are deterministically generated from the stable bit vector using a post-quantum cryptographic algorithm. The method includes deleting the biometric data after enrollment, storing public information in a privacy-centric Certificate Authority, and updating and revoking public information as needed. During authentication, a new stable bit vector is computed from newly collected biometric data, and a new set of cryptographic information is generated for identity verification against stored public information. The method provides a secure, scalable, and quantum-resistant authentication system compatible with various devices.

According to various embodiments of the present disclosure, an operation method of a first node in a communication system is provided, the method comprising the steps of: transmitting at least one synchronization signal to a second node; transmitting a control signal to the second node; transmitting, to the second node, a first quantum key packet including a first private key of the first node and a first quantum key based on a key pre-shared between the first node and the second node; receiving, from the second node, a second quantum key packet including a second private key of the second node and a second quantum key based on the pre-shared key; acquiring a first quantum master key based on a first operation and a second operation on the second quantum key, the first operation being on the basis of the first private key and the second operation being related to compensation of the pre-shared key; transmitting, to the second node, a first quantum authenticated secure message in which first message information is encoded on the basis of the first quantum master key; and receiving, from the second node, first feedback related to a first error of the first message information.