Post Quantum Cryptography Virtual Private Network Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual private networks (VPNs) are vulnerable to quantum computers due to weakened encryption algorithms, necessitating the adoption of post-quantum cryptography to maintain security.
Innovation Solution
A method for forming a VPN using post-quantum cryptography involves generating a private key with a lattice-based key vector and a random polynomial ring, performing a signature by hashing and encrypting messages, and authenticating clients using a public key and lattice-based algorithms to ensure secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing encryption algorithms are used in VPN, then the system is easy to implement and operate, but the security is weakened against quantum computer attacks
Solution Approach 1:
The patent changes the cryptographic parameters from classical encryption algorithms to post-quantum cryptography algorithms, specifically lattice-based cryptography. This involves changing the mathematical foundations from problems solvable by quantum computers (like factoring and discrete logarithms) to lattice-based problems that remain hard even for quantum computers, thereby improving security against quantum attacks while maintaining system operability
Solution Approach 2:
The patent substitutes the classical cryptographic mechanism with a post-quantum cryptographic mechanism. Specifically, it replaces traditional public-key infrastructure (PKI) based on RSA or ECC with lattice-based cryptography mechanisms including key generation, digital signature, and authentication protocols that are resistant to quantum computer attacks
2Reliability
If post quantum cryptography is adopted for VPN authentication, then security against quantum computers is maintained, but the computational complexity and processing time increase
Solution Approach 1:
The patent implements preliminary key generation and distribution before the actual VPN connection is established. The public key infrastructure is set up in advance, allowing the computationally intensive lattice-based key operations to be performed beforehand, so that during actual authentication, the processing time is reduced to verification operations only
Solution Approach 2:
The authentication process is segmented into distinct phases: key generation phase, certificate issuance phase, and actual authentication phase. This segmentation allows the heavy computational work to be distributed and performed in advance, while the real-time authentication uses pre-computed values, thereby reducing perceived authentication time
Data Source
AI summary
The technical idea of the present invention relates to a method for forming a virtual private network and a virtual private network operating system, which provide a virtual private network by performing signature and authentication based on a post quantum cryptography. A method for forming a virtual private network performed by a server according to the technical idea of the present invention comprises the steps of: generating a private key including a first key vector corresponding to a grid and a second key vector having a first distance from the first key vector; receiving a handshake request from a client; performing a signature by using the private key; and transmitting a certificate and an authentication message including the signature to the client.