HK1229575B - Identity authentication methods, devices and system applied to quantum key distribution process - Google Patents

Description

Identity authentication method, device and system for quantum key distribution process

Technical Field

This application relates to identity authentication technology, specifically to an identity authentication method for use in a quantum key distribution process. This application also relates to two other identity authentication methods and corresponding devices for use in a quantum key distribution process, as well as an identity authentication system for use in a quantum key distribution process.

Background Art

Quantum cryptography, a cross between quantum mechanics and cryptography, is secure thanks to the fundamental principles of quantum mechanics. It is independent of the attacker's computing and storage capabilities, and has been proven to be unconditionally secure and detectable against eavesdroppers. Initially proposed quantum key distribution protocols (such as BB84) can detect eavesdroppers attempting to steal keys, but they lack effective authentication mechanisms.

Identity authentication is a crucial component of network security. It ensures the authenticity of both communicating parties, the integrity of messages, and the reliability of their origins, preventing unauthorized parties from forging, modifying, or delaying information. Because traditional quantum key distribution protocols lack effective identity authentication mechanisms, they can be vulnerable to man-in-the-middle attacks or distributed denial of service (DDoS) attacks during the quantum key distribution process.

To address the above problems, the prior art proposes the following two solutions:

(1) M. Dusek et al. believe that it is not necessary to authenticate all classical information during communication. Only the classical information that affects the error rate of correctly judging the quantum state needs to be authenticated. Other classical information does not need to be authenticated, and even if this information is modified, it will not affect security. Therefore, M. Dusek proposed a quantum identity authentication protocol that combines a classical message authentication algorithm. Its essence is to use a classical authentication algorithm to authenticate as few classical messages as possible.

(2) Adopting the BB84 protocol with identity authentication. The main difference between this protocol and the original BB84 protocol is that certain bits in the randomly transmitted quantum bit string are set as specific authentication key bits. One of every four bits in the quantum bit string is a specific authentication key bit, and its specific position is determined by the authentication key. The identity of the communicating parties is authenticated by the measurement basis vector represented by the bit and the polarization state of the light quantum. The quantum state information of the authentication bit cannot be sent randomly, but is determined by the authentication key shared by both parties according to specific rules. At the same time, the basic principles of quantum mechanics ensure absolutely secure key distribution.

Since both of the above two solutions use identity authentication mechanisms, they can enhance the security of the quantum key distribution process to a certain extent. However, each has certain drawbacks:

(1) The M.Dusek scheme has a limited number of authentication keys shared in advance by both communicating parties, making it vulnerable to man-in-the-middle attacks and DDOS attacks. Moreover, this scheme does not fully utilize quantum superiority and still uses classical authentication technology, which poses a risk of being cracked.

(2) Although the BB84 protocol with identity authentication transmits the shared authentication key information in the form of a quantum state, improving the security of key distribution, this technical solution assumes that the authentication key quantum state of the sender can be transmitted to the receiver. The receiver can select the corresponding measurement basis according to the preset authentication key to detect. If the detection results are consistent, the other party is passed; otherwise, the other party is considered to be illegitimate and the quantum key distribution process is terminated. This solution does not consider the attenuation of photons during actual transmission (i.e., photons may not be transmitted to the other party, so the consistency of the quantum state cannot be guaranteed). In other words, this technical solution does not provide fault tolerance for channel attenuation, resulting in a decrease in identity recognition rate and quantum key distribution.

Summary of the Invention

The present application proposes an identity authentication method for use in a quantum key distribution process. This method not only provides a new approach to identity authentication during the quantum key distribution process, but also effectively addresses the vulnerability of existing identity authentication technologies to attacks and the resulting reduction in quantum key distribution throughput. The present application also provides two identity authentication methods and devices for use in a quantum key distribution process, as well as an identity authentication system for use in a quantum key distribution process.

The present application provides an identity authentication method for a quantum key distribution process, which is implemented in quantum communication devices of both the sender and receiver participating in the quantum key distribution process, and includes:

The sender selects a preparation basis for the identity authentication bit string according to a pre-set basis selection rule, and transmits the quantum states of the identity authentication bit string and the randomly generated key bit string using different wavelengths, with the identity authentication bit string interspersed with the key bit string at random positions and lengths.

The receiver measures the received quantum state according to the different wavelengths and basis vector selection rules. When the identity authentication information obtained by the measurement is consistent with the basis vector selection rule, the receiver selects the receiver authentication key from the identity authentication information and sends the location information of the key and the pre-set shared key encrypted with the key. Otherwise, the quantum key distribution process ends.

The sender selects the corresponding sender authentication key based on the received location information, and determines whether the information after decrypting the received ciphertext using the key is consistent with the local preset shared key. If not, the quantum key distribution process is terminated.

Optionally, when the identity authentication information measured by the receiving party is consistent with the basis vector selection rule, the receiving party further performs the following operations:

Publicizing a measurement basis for measuring a key quantum state through a classical channel;

Accordingly, when the sender determines that the decrypted information is consistent with the local preset shared key, the sender performs the following operations:

Determine the correct measurement basis of the key quantum state and screen the original key;

Publishing a correct measurement basis of the key quantum state through a classical channel;

Accordingly, after the above step of publishing the correct measurement basis of the key quantum state, the following operations are performed:

The receiver filters the original key; and,

The sender and receiver obtain the final shared quantum key through bit error rate estimation, error correction and privacy amplification processes.

Optionally, before the sender sends the quantum state of the identity authentication bit string and the randomly generated key bit string, the following operations are performed:

The sender and receiver use preset account information to authenticate each other with the other device through a classical channel. If either device fails the authentication, the quantum key distribution process ends.

Optionally, the preset account information includes: identity information and certificate.

Optionally, the preset basis vector selection rule includes:

According to the position of the authentication bit in the quantum state information, the corresponding preparation basis or measurement basis is selected.

Optionally, selecting a corresponding preparation basis or measurement basis according to the position of the identity verification bit in the quantum state information specifically refers to:

According to the position information of each authentication bit in the quantum state information and the different results of modulo 4, the corresponding horizontal polarization basis, vertical polarization basis, left-hand polarization basis, or right-hand polarization basis is selected.

Optionally, the receiver measures the received quantum state according to the different wavelengths and basis vector selection rules, including:

Distinguishing identity authentication quantum state information from key quantum state information according to the different wavelengths;

Selecting a measurement basis for identity authentication quantum state information according to the preset basis vector selection rule;

The identity authentication quantum state information is measured using the selected measurement basis, and the portion in which no photons are detected is eliminated to obtain the identity authentication information obtained by the measurement.

Optionally, the identity authentication information measured by the receiver is consistent with the basis vector selection rule, which means that the difference between the identity authentication information measured by the receiver and the expected information following the basis vector selection rule is less than a preset threshold.

Optionally, the recipient selects a recipient authentication key from the identity authentication information, including:

The receiver uses the identity authentication information as the receiver authentication key; or,

The receiver randomly selects bits at different positions from the identity authentication information, and uses a bit string composed of the selected bits as the receiver authentication key.

Optionally, the information encrypted by the receiver using the receiver authentication key includes not only the preset shared key but also locally generated auxiliary authentication information;

Correspondingly, the sender decrypting the received ciphertext using the sender authentication key means that the sender decrypts the received ciphertext using the sender authentication key to obtain the decrypted preset shared key and the decrypted auxiliary authentication information;

Correspondingly, the sender judging whether the decrypted information is consistent with the local preset shared key means that the sender judges whether the decrypted preset shared key is consistent with the local preset shared key.

Optionally, when the sender determines whether the decrypted preset shared key is consistent with the local preset shared key, and the result is yes, the following operation is further performed:

The sender encrypts the variant of the auxiliary authentication information obtained through the decryption operation using a preset strategy;

And send the ciphertext after performing the above encryption operation through the classical channel;

Accordingly, after receiving the correct measurement basis and the ciphertext, the receiver performs the following operations:

Decrypting the received ciphertext in a manner corresponding to the preset policy;

determining whether information obtained after performing the decryption operation is consistent with the variant of the locally generated auxiliary authentication information;

If they are consistent, the step of screening the original key is performed according to the received correct measurement basis, and the measurement results of the partial key quantum state are announced; otherwise, the quantum key distribution process is terminated.

Optionally, the preset strategy includes:

Using a local preset shared key to perform the encryption operation; or,

The encryption operation is performed using the sender authentication key.

Optionally, variants of the auxiliary authentication information include:

The auxiliary authentication information itself; or

A result obtained by processing the auxiliary authentication information using a preset mathematical transformation method.

Optionally, after estimating a bit error rate based on a measurement result of a partial key quantum state published by the receiver, the sender encrypts the bit error rate using the sender authentication key, and sends the encrypted information to the receiver;

Correspondingly, the receiver uses the receiver authentication key to decrypt the received ciphertext and obtain the decrypted bit error rate.

In addition, the present application also provides another identity authentication method for a quantum key distribution process, which is implemented on a sender quantum communication device participating in the quantum key distribution process, comprising:

Selecting a preparation basis for the identity authentication bit string according to a pre-set basis vector selection rule, and transmitting the quantum states of the identity authentication bit string and the randomly generated key bit string to a peer device participating in the quantum key distribution process using pre-set different wavelengths, wherein the identity authentication bit string is interspersed with the key bit string at random positions and lengths;

Receiving the authentication key location information and the ciphertext to be verified returned by the peer device;

Selecting an authentication key based on the position information and the transmitted quantum state information, and using the authentication key to decrypt the received ciphertext to be verified;

Determine whether the decrypted information is consistent with the local preset shared key; if not, end the quantum key distribution process.

Optionally, the information returned by the peer device includes not only the authentication key location information and the ciphertext to be verified, but also the measurement basis used to measure the quantum state of the key;

Accordingly, when the result of determining whether the decrypted information is consistent with the local preset shared key is yes, the following operations are performed:

Determine the correct measurement basis of the key quantum state and screen the original key;

Publishing a correct measurement basis of the key quantum state through a classical channel;

The final shared quantum key is obtained through bit error rate estimation, error correction and privacy amplification processes.

Optionally, before sending the quantum state of the identity authentication bit string and the randomly generated key secret string, the following operations are performed:

Sending a quantum key agreement request to the peer device, where the request includes the sender's account information;

Receiving account information sent by the peer device;

The identity of the peer device is verified based on the received account information. If the verification fails, the quantum key distribution process is terminated.

Optionally, the preset basis vector selection rule includes:

According to the position of the authentication bit in the quantum state information, the corresponding preparation basis is selected.

Optionally, selecting a corresponding preparation base according to the position of the authentication bit in the quantum state information specifically refers to:

According to the position information of each authentication bit in the quantum state information and the different results of modulo 4, the corresponding horizontal polarization basis, vertical polarization basis, left-hand polarization basis, or right-hand polarization basis is selected.

Accordingly, the present application also provides an identity authentication device for a quantum key distribution process, which is deployed on a sender quantum communication device participating in the quantum key distribution process, and includes:

a quantum state sending unit, configured to select a preparation basis for the identity authentication bit string according to a preset basis vector selection rule, and to send the quantum states of the identity authentication bit string and the randomly generated key bit string to a peer device participating in the quantum key distribution process using preset different wavelengths, wherein the identity authentication bit string is interspersed with the key bit string at random positions and lengths;

a response information receiving unit, configured to receive the authentication key location information and the ciphertext to be verified returned by the peer device;

An information decryption unit, configured to select an authentication key based on the position information and the transmitted quantum state information, and decrypt the received ciphertext to be verified using the authentication key;

The sender authentication judgment unit is used to determine whether the decrypted information is consistent with the local preset shared key; if not, the quantum key distribution process is terminated.

Optionally, the information received by the response information receiving unit includes not only the authentication key location information and the ciphertext to be verified, but also the measurement basis used to measure the quantum state of the key;

Accordingly, the device further includes:

an original key screening unit, configured to determine a correct measurement basis of the key quantum state and screen the original key when the output result of the authentication judgment unit is yes;

a correct measurement basis publishing unit, configured to publish the correct measurement basis of the key quantum state via a classical channel;

The sender's quantum key acquisition unit is used to obtain the final shared quantum key through bit error rate estimation, error correction and privacy amplification processes.

Optionally, the device further includes:

a negotiation request sending unit, configured to send a quantum key negotiation request to the peer device, wherein the request includes the sender's account information;

An account information receiving unit, configured to receive the account information sent by the peer device;

The first identity authentication unit is used to verify the identity of the peer device based on the account information. If the verification fails, the quantum key distribution process is terminated.

Optionally, the preset basis vector selection rule adopted by the quantum state sending unit includes: selecting a corresponding preparation basis according to the position of the identity authentication bit in the quantum state information.

Optionally, the pre-set basis vector selection rule adopted by the quantum state sending unit is to select the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis according to the position information of each authentication bit in the quantum state information and the different results of modulo 4.

In addition, the present application also provides a third identity authentication method for a quantum key distribution process, which is implemented on a receiving quantum communication device participating in the quantum key distribution process, comprising:

Receive the quantum state sent by the peer device participating in the quantum key distribution process;

According to the pre-set different wavelength and basis vector selection rules, the received quantum state is measured, and the identity authentication information is obtained based on the measurement results;

Determining whether the identity authentication information is consistent with the basis vector selection rule;

If so, selecting an authentication key from the identity authentication information, and sending the location information of the authentication key and a preset shared key encrypted with the authentication key to the peer device;

If not, end the quantum key distribution process.

Optionally, when the result of determining whether the identity authentication information is consistent with the basis vector selection rule is yes, further performing the following operations:

The measurement basis used to publicly measure the key quantum state through a classical channel;

Accordingly, the method further includes:

Receiving a correct measurement basis of the key quantum state sent by the opposite device through a classical channel;

The original key is screened and the final shared quantum key is obtained through the bit error rate, error correction and privacy amplification processes.

Optionally, before receiving the quantum state sent by the opposite-end device participating in the quantum key distribution process, the following operations are performed:

receiving a key negotiation request sent by the peer device;

The identity of the peer device is verified according to the account information included in the request. If the verification fails, the quantum key distribution process is terminated. Otherwise, the recipient's account information is sent to the peer device.

Optionally, the preset basis vector selection rule includes:

According to the position of the identity authentication bit in the quantum state information, the corresponding measurement basis is selected.

Optionally, selecting a corresponding measurement basis according to the position of the authentication bit in the quantum state information specifically refers to:

According to the position information of each authentication bit in the quantum state information and the different results of modulo 4, the corresponding horizontal polarization basis, vertical polarization basis, left-hand polarization basis, or right-hand polarization basis is selected.

Optionally, measuring the received quantum state according to pre-set different wavelength and basis vector selection rules, and obtaining identity authentication information based on the measurement results, includes:

Distinguishing identity authentication quantum state information from key quantum state information according to the preset different wavelengths;

Selecting a measurement basis for identity authentication quantum state information according to the preset basis vector selection rule;

The identity authentication quantum state information is measured using the selected measurement basis, and the portion in which no photons are detected is eliminated to obtain the identity authentication information.

Optionally, selecting an authentication key from the identity authentication information includes:

Selecting the identity authentication information as the authentication key; or,

Bits at different positions are randomly selected from the identity authentication information, and a bit string composed of the selected bits is used as the authentication key.

Accordingly, the present application also provides an identity authentication device for a quantum key distribution process, which is deployed on a receiving quantum communication device participating in the quantum key distribution process, and includes:

A quantum state receiving unit, configured to receive the quantum state sent by a peer device participating in the quantum key distribution process;

The quantum state measurement unit is used to measure the received quantum state according to the pre-set different wavelength and basis vector selection rules, and obtain identity authentication information based on the measurement results;

The receiving party authentication judgment unit is used to judge whether the identity authentication information is consistent with the basis vector selection rule, and if not, end the quantum key distribution process;

The information sending unit is used to select an authentication key from the identity authentication information when the output of the receiver authentication judgment unit is yes, and send the location information of the authentication key and the preset shared key encrypted with the authentication key to the opposite device.

Optionally, the device further includes:

a measurement basis publishing unit, configured to publicly disclose the measurement basis used for measuring the quantum state of the key through a classical channel when the output of the receiver authentication judgment unit is yes;

Accordingly, the device further includes:

a correct measurement basis receiving unit, configured to receive the correct measurement basis of the key quantum state sent by the opposite device via a classical channel;

The receiving party's quantum key acquisition unit is used to screen the original key and obtain the final shared quantum key through bit error rate estimation, error correction and privacy amplification processes.

Optionally, the device further includes:

A negotiation request receiving unit, configured to receive a key negotiation request sent by the peer device;

The second identity authentication unit is used to verify the identity of the peer device according to the account information included in the request. If the verification fails, the quantum key distribution process is terminated; otherwise, the account information of the recipient is sent to the peer device.

Optionally, the pre-set basis vector selection rule adopted by the quantum state measurement unit includes: selecting a corresponding preparation basis according to the position of the identity authentication bit in the quantum state information.

Optionally, the pre-set basis vector selection rule adopted by the quantum state measurement unit is to select the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis according to the position information of each identity authentication bit in the quantum state information and the different results of modulo 4.

Optionally, the quantum state measurement unit includes:

An information differentiation subunit, configured to differentiate between identity authentication quantum state information and key quantum state information according to the preset different wavelengths;

An identity authentication measurement basis selection subunit, configured to select a measurement basis for identity authentication quantum state information according to the preset basis vector selection rule;

The identity authentication information acquisition subunit is used to measure the identity authentication quantum state information using the selected measurement basis and eliminate the part in which no photons are detected to obtain the identity authentication information.

Optionally, the information sending unit includes:

an authentication key selection subunit, configured to select an authentication key from the identity authentication information;

An information sending subunit, configured to send the location information of the authentication key and a preset shared key encrypted with the authentication key to the peer device;

The authentication key selection subunit is specifically used to:

Selecting the identity authentication information as the authentication key; or,

Bits at different positions are randomly selected from the identity authentication information, and a bit string composed of the selected bits is used as the authentication key.

In addition, the present application also provides an identity authentication system for a quantum key distribution process, comprising: an identity authentication device as described in any one of the above items deployed on a quantum communication device of a sender, and an identity authentication device as described in any one of the above items deployed on a quantum communication device of a receiver;

The identity authentication device deployed in the quantum communication equipment of the transmitter and receiver is preset with the same basis vector selection rule and the same shared key, and adopts the same wavelength setting for distinguishing identity authentication information from key information.

Compared with the prior art, this application has the following advantages:

This application provides an identity authentication method for the quantum key distribution process. It uses a method that randomly intersperses the quantum state of identity authentication information with the quantum state of the key, and uses a specific wavelength to distinguish quantum key information from identity authentication information. When the quantum communication device participating in the quantum key distribution process detects that the identity authentication information does not conform to the basis vector selection rules pre-set by both parties, or detects that the preset shared keys of both parties are inconsistent, it determines that the peer device has failed identity authentication and ends the quantum key distribution process. The above technical solution implements an identity authentication method based on zero-knowledge proof of quantum state. It can perform identity authentication in real time during the quantum key distribution process, thereby effectively defending against man-in-the-middle attacks and DDOS attacks, ensuring the security of the quantum key distribution process, and will not cause a decrease in identity recognition rate and quantum key distribution volume.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a flow chart of an embodiment of an identity authentication method for a quantum key distribution process of the present application;

2 is a flowchart of a process in which a receiver verifies the identity of a sender based on measurement results provided by this embodiment;

FIG3 is a flow chart of another embodiment of an identity authentication method for a quantum key distribution process of the present application;

FIG4 is a schematic diagram of an embodiment of an identity authentication device for a quantum key distribution process of the present application;

FIG5 is a flowchart of an embodiment of a third identity authentication method for a quantum key distribution process of the present application;

FIG6 is a schematic diagram of an embodiment of an identity authentication device for a quantum key distribution process of the present application;

FIG7 is a schematic diagram of an embodiment of an identity authentication system for a quantum key distribution process of the present application;

FIG8 is a schematic diagram of the interactive processing flow of the identity authentication system provided in this embodiment.

DETAILED DESCRIPTION

The following description sets forth many specific details to facilitate a thorough understanding of the present application. However, the present application can be implemented in many other ways than those described herein, and those skilled in the art can make similar generalizations without violating the scope of the present application. Therefore, the present application is not limited to the specific implementations disclosed below.

In this application, an identity authentication method for a quantum key distribution process, two other identity authentication methods for a quantum key distribution process and corresponding devices, and an identity authentication system for a quantum key distribution process are provided, which are described in detail one by one in the following embodiments.

Please refer to Figure 1, which is a flowchart of an embodiment of an identity authentication method for a quantum key distribution process of the present application. This method is implemented in quantum communication devices on both the sender and receiver sides of the quantum key distribution process. Before describing the specific steps of this embodiment in detail, a brief description of the quantum communication devices involved in this technical solution will be provided.

This technical solution dynamically verifies the identities of both participating quantum communication devices during quantum key distribution. The device that selects a preparation base to send quantum state information to the other device, typically Alice, is referred to as the sending quantum communication device in this technical solution, or simply the sender. The device that selects a measurement base to measure the received quantum state information, typically Bob, is referred to as the receiving quantum communication device in this technical solution, or simply the receiver. This embodiment is described in detail below.

The identity authentication method for the quantum key distribution process comprises the following steps:

Step 101: The sender selects a preparation basis for the identity authentication bit string according to a pre-set basis selection rule, and uses different wavelengths to send the quantum states of the identity authentication bit string and the randomly generated key bit string, where the identity authentication bit string is interspersed in the key bit string with random positions and lengths.

The technical solution provided in this embodiment enables dynamic identity authentication during the quantum key distribution process (also known as quantum key agreement). To prevent the quantum key distribution process from being executed between illegitimate quantum communication devices, this embodiment provides a preferred implementation: before the sender initiates the quantum key distribution process, both the sending and receiving quantum communication devices verify the identity of the other device via a classical channel. Only when both devices pass verification can the subsequent quantum key distribution process proceed.

Specifically, the initiator of the quantum key agreement process, referred to herein as the sender, may first initiate a quantum key agreement request. The request includes the sender's account information, which may include the sender's identity information and signature certificate. Upon receiving the account information, the peer device participating in the quantum key agreement process, referred to herein as the receiver, verifies the certificate using the identity information contained therein. If verification is successful, a response message containing the receiver's account information is returned to the sender. If verification fails, the quantum key distribution process ends.

By the same token, after the sender receives the account information from the receiver, it can verify the receiver's identity in the same way as above. If the verification is successful, the subsequent quantum key distribution process can be executed; otherwise, the quantum key distribution process is terminated.

If both the sender and receiver pass the aforementioned identity verification process, the subsequent quantum key distribution process continues. To dynamically authenticate during quantum key distribution, this technical solution pre-sets the same shared key between the sender and receiver. The sender inserts a random-length identity authentication bit string at any position within the key bit string, and uses pre-set wavelengths to distinguish the quantum states of the two types of information (referred to as the key quantum state and the identity authentication quantum state). The preparation basis for the identity authentication quantum state follows the basis vector selection rules pre-set by both the sender and receiver.

For example, the sender wants to send the quantum state of a binary bit string of length n at time points t ₁ , t ₂ , ... t _{n .} This binary bit string consists of two parts: a randomly generated classical binary bit string, which serves as the key bit string, and an identity authentication bit string corresponding to a pre-set basis vector selection rule. The sender can select a random number m less than n according to a certain strategy as the length of the identity authentication bit string. Then, the sender randomly selects a natural number i from 1 to nm as the length of the key bit string that precedes the identity authentication bit string. That is, the identity authentication bit string is inserted starting from position i+1, resulting in the following binary bit string. In this bit string, x _i+1 ...x _i+m are the identity authentication bit strings, and the rest are the key bit string information:

x ₁ ,x ₂ …x _i ,x _i+1 …x _i+m ,x _i+m+1 …x _n (x _i ∈{0,1},＝1,…,n-)

The sender sends the encoded quantum state of the above binary bit string to the receiver at time points t ₁ , t ₂ ...t _n , where j ₁ , j ₂ , ... j _i , j _i+1 ... j _i+m , j _i+m+1 , ... j _n is the preparation basis sequence used by the sender, where j ₁ , j ₂ , ... j _i and j _i+m+1 , ... j _n are the random quantum state preparation bases corresponding to the key bit string, and j _i+1 ... j _i+m is the quantum state preparation basis of the identity authentication bit string selected according to a preset basis vector selection rule.

Correspondingly, in the subsequent step 102, the receiver uses the measurement basis sequence _k1 , _k2 … _ki ,ki ₊₁ …ki _+m ,ki _+m+1 … _kn to measure the received quantum state, where _k1 , _k2 ,… _ki and ki _+m+1 ,… _kn are the random quantum state measurement bases corresponding to the key quantum state, and ki ₊₁ …ki _+m is the measurement basis corresponding to the identity authentication quantum state, and the measurement basis is also selected according to a preset basis vector selection rule.

In a specific implementation, different strategies can be used to set the basis selection rules followed by the sending and receiving devices. For example, the corresponding preparation basis or measurement basis can be selected according to the position of the authentication bit in the quantum state information. In a specific example of this embodiment, the following rules are set: according to the position information of each authentication bit in the quantum state information and the different results of modulo 4, the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis is selected.

Still using the above description of the binary bit string, let i + m = l. Then in the specific example, the preparation basis and measurement basis corresponding to the identity authentication quantum state meet the following conditions:

A specific example of a pre-set basis vector selection rule is given above. When implementing this technical solution, other basis vector selection rules different from the above rules can be preset for the sender and receiver. For example, different algorithms can be used. As long as the sender and receiver use the same rules to select the preparation basis and measurement basis of the identity authentication quantum state, the technical solution of this application can be implemented and is within the scope of protection of this application.

In this step, the sender selects the quantum state of the authentication bit string according to a pre-set basis selection rule to prepare a basis. It then uses pre-set wavelengths to carry the quantum state of the authentication bit string and the randomly generated quantum state of the key bit string. These quantum states are then transmitted to the peer device participating in the quantum key distribution process. Because the authentication bit string is interspersed with the key bit string at random positions and lengths, this effectively prevents eavesdropping on the authentication information and mitigates man-in-the-middle and DDoS attacks during the quantum key distribution process.

Step 102: The receiver measures the received quantum state according to the different wavelengths and basis vector selection rules. When the identity authentication information obtained by the measurement is consistent with the basis vector selection rule, the receiver selects the receiver authentication key from the identity authentication information, and sends the location information of the key and the preset shared key encrypted with the key. Otherwise, the quantum key distribution process ends.

After the sender executes step 101 and sends the quantum state information, the sender and receiver can complete the identity authentication process through an interactive process based on the measurement results of the identity verification quantum state and the verification of the shared key preset by both parties. The sender and receiver can then continue the subsequent key negotiation process according to the quantum key distribution protocol. To improve the execution efficiency of key distribution and reduce the number of interactions, this embodiment provides a preferred implementation method for interleaving identity authentication at each stage of key negotiation.

In this step, the receiver not only completes the conventional key quantum state measurement, but also verifies the sender's identity based on the measurement results of the identity authentication quantum state information. This process includes sub-steps 102-1 to 102-7, which are further explained below in conjunction with Figure 2.

Step 102-1: Distinguish identity authentication quantum state information and key quantum state information according to the different wavelengths.

Since the sender uses different wavelengths to send the identity authentication quantum state and the key quantum state, the receiver can distinguish the above two types of information from the received quantum state information according to the same wavelength setting as the sender.

Step 102-2: Randomly select a measurement basis for the key quantum state information, and select a measurement basis for the identity authentication quantum state information according to a pre-set basis vector selection rule.

For the key quantum state part, the measurement basis can still be randomly selected according to the quantum key distribution protocol (such as the BB84 protocol). For the identity authentication quantum state part, the corresponding measurement basis is selected according to the pre-set basis vector selection rule. This part has been explained in step 101 and will not be repeated here.

Step 102-3: Measure the received quantum state information and obtain identity authentication information.

This step measures the key quantum state and obtains the original measurement results about the key information.

This step also uses the measurement basis selected in step 102-2 according to the pre-set basis vector selection rule to measure the received identity authentication quantum state information. Considering that the quantum channel may be attenuated, the part where no photons are detected is eliminated to obtain the measured identity authentication information.

Step 102-4: Determine whether the measured identity authentication information is consistent with the pre-set basis vector selection rule. If it is consistent, execute step 102-5; otherwise, end the quantum key distribution process.

Since the sender and receiver involved in the quantum key distribution process have preset the same basis vector selection rule for identity authentication information, the sender follows this rule to select the quantum state for preparing the basis to send the identity authentication information, and the receiver also follows this rule to select the measurement basis for measuring the corresponding quantum state. Therefore, after eliminating photons that are not detected due to attenuation, the identity authentication information measured by the receiver should be consistent with the corresponding expected information.

For the receiver, if the measured identity authentication information is consistent with the corresponding expected information, it can be considered that the basis vector selection rule adopted by the sender for the identity authentication information is the same as its own. Only the sender with a legitimate identity can know this rule, so it can be determined that the sender has passed the identity authentication.

Considering that during quantum channel transmission, the measurement results of individual quantum states may not match expectations due to factors such as noise interference, if in this case, the sender is deemed to have failed identity authentication and the quantum key distribution process is terminated, this will result in a pointless reduction in the amount of quantum key distribution. Taking the above situation into consideration, while also taking into account the need to defend against man-in-the-middle attacks and DDoS attacks, a threshold setting method can be adopted. That is, if the difference between the identity authentication information measured by the receiver and the expected information following the basis vector selection rule is less than a pre-set threshold, for example, the number of bits where the measurement result does not match the expected information is less than a pre-set upper limit, then the receiver can assume that the sender has passed identity authentication.

Step 102-5: Select a recipient authentication key from the identity authentication information.

In step 102-4 above, the receiver has verified the sender's identity. Next, the receiver needs to prove the legitimacy of its identity to the sender. This technical solution implements this verification function by having the sender compare the pre-set shared key. The receiver can use the identity authentication information obtained from the quantum state to encrypt the locally pre-set shared key and provide it to the sender for verification. In other words, the identity authentication information is directly used as the receiver authentication key IDkey.

In order to prevent a malicious middleman or attacker from using stolen identity authentication information to encrypt and transmit the stolen shared key in the same way as above, the recipient may not directly use the identity authentication information as IDkey, but may randomly select bits at different positions from the identity authentication information and use the bit string composed of the selected bits as the recipient authentication key IDkey.

Step 102-6: Use the receiver authentication key to encrypt the locally preset shared key.

The receiver uses the IDkey selected in step 102-5 to encrypt the locally preset shared key.

In order to verify the identity of the information publisher in other subsequent stages of quantum key distribution, such as when publishing the correct measurement basis, and to further ensure the security of the key distribution process, this embodiment also provides a preferred implementation method: the information encrypted by the receiver using IDkey includes not only the preset shared key, but also the locally generated auxiliary authentication information m.

Step 102-7: Send the location information of the receiver authentication key and the encrypted ciphertext through the classical channel, and at the same time disclose the measurement basis of the key quantum state information.

The receiver sends the location information corresponding to the IDkey selected in step 102-5 and the ciphertext obtained by executing step 102-6 through the classical channel.

At the same time, according to the quantum key distribution protocol, the measurement basis used by the receiver to measure the key quantum state can also be made public through the classical channel.

Step 103: The sender selects a corresponding sender authentication key based on the received location information, and determines whether the information obtained by decrypting the received ciphertext using the key is consistent with the local preset shared key. If not, the quantum key distribution process is terminated.

The sender receives the receiver's public measurement basis, the location information of the selected IDkey, and the encrypted ciphertext through the classical channel.

The sender obtains the sender authentication key, i.e., the sender's IDkey, based on the location information and the quantum state information sent in step 101. The sender uses the IDkey to decrypt the received ciphertext to obtain the decrypted preset shared key and auxiliary authentication information.

Then, it is determined whether the decrypted pre-shared key is consistent with the local pre-shared key. For the sender, if the pre-shared key information obtained by decrypting the ciphertext sent by the receiver with its own IDkey is consistent with the local pre-shared key, on the one hand, it means that the receiver's pre-shared key is the same as its own local pre-shared key, and only a legitimate receiver can have this shared key. On the other hand, it means that the receiver follows the same basis selection rules as itself to select the measurement basis and uses the correct IDkey to perform encryption operations. Therefore, the sender can decrypt the pre-shared key that is consistent with the local one, and therefore it can be determined that the receiver has passed the identity authentication. On the contrary, if the two are inconsistent, it can be considered that the receiver may be a middleman or an attacker, and the quantum key distribution process ends.

If the sender determines that the identity of the receiver is legitimate, it can compare the measurement basis disclosed by the receiver with the preparation basis used by itself according to the process of the quantum key distribution protocol, select the correct measurement basis, filter out the original key based on the correct measurement basis, and disclose the correct measurement basis to the receiver through the classical channel.

At this point, through steps 101-103, the receiver verifies the sender's identity by determining whether the identity authentication quantum state information complies with the basis vector selection rules. The sender verifies the receiver's identity by comparing the pre-set shared key. If both the sender and the receiver pass this verification, the subsequent key distribution process can proceed according to the quantum key distribution protocol process.

In order to further ensure the security of the key distribution process, this embodiment also intersperses identity authentication and data encryption processing processes in the subsequent distribution process. This preferred implementation method is further explained below.

1) The sender encrypts a variant of the auxiliary authentication information and sends the ciphertext.

In the above step 103, the sender obtains the decrypted auxiliary authentication information. After verifying the legitimacy of the recipient's identity, the sender can first use a preset strategy to encrypt a variant of the decrypted auxiliary authentication information, and then send the ciphertext information after performing the above encryption operation together when publishing the correct measurement basis of the key quantum state through the classical channel.

The preset strategy can be preset by the sender and receiver, or determined through negotiation. The preset strategy includes: using a preset shared key to perform encryption operations; or using an IDkey to perform encryption operations.

The variant of the auxiliary authentication information refers to information generated based on the auxiliary authentication information. For example, it can be the auxiliary authentication information itself, or the result of processing the auxiliary authentication information using a preset mathematical transformation method, such as m+1. The sender and receiver can preset the same variant generation algorithm or function to ensure that the variant information generated by both parties for the same auxiliary authentication information m is consistent.

2) After receiving the correct measurement basis and the ciphertext, the receiver verifies the identity of the sender by decrypting the ciphertext.

First, the receiver decrypts the received ciphertext using a method corresponding to the preset strategy adopted by the sender. For example, if the sender uses IDkey to perform the encryption operation, the receiver also uses its own IDkey to perform the decryption operation; if the sender uses the local preset shared key to perform the encryption operation, the receiver also uses the local preset shared key to perform the decryption operation.

Then, a determination is made as to whether the information obtained after the decryption operation is consistent with a locally generated variant of the auxiliary authentication information m. The auxiliary authentication information m was originally generated locally by the receiver and sent to the sender in encrypted form via classical information. After decryption and restoration, the sender then encrypted the variant of the information using a preset strategy and sent it to the receiver. If the receiver's decrypted result is consistent with the variant of the original locally generated auxiliary authentication information, this indicates that the sender was not only able to successfully decrypt and restore m, but also that the encryption method and variant generation algorithm or function used by the sender are consistent with those of the receiver. This reaffirms the sender's identity and confirms that the correct measurement basis of the key quantum state published by the sender via the classical channel is credible.

Therefore, if the above judgment result is "yes", the receiver can screen the original key according to the correct measurement basis disclosed by the classical channel, and publish the measurement results of part of the key quantum state through the classical channel for subsequent bit error rate estimation; if the above judgment result is "no", it means that the sender's identity is untrustworthy, so the quantum key distribution process can be ended.

It should be noted that the sender may also use a dynamically changing algorithm or function to calculate a variant of the decrypted auxiliary authentication information. As long as the receiver knows the corresponding rules for calculating the variant, this technical solution can still be implemented, and security can be further improved. For example, the sender may first calculate the variant using the following method: Auxiliary Authentication Information + 1, and the receiver may compare the decrypted information with the variant m+1 of the locally generated auxiliary authentication information m. The sender may then calculate the variant using the following method: Auxiliary Authentication Information + 2, and the receiver may compare the decrypted information with the variant m+2 of the locally generated auxiliary authentication information m.

3) After the sender estimates the bit error rate, it encrypts the bit error rate with the IDkey and sends it to the receiver.

The sender estimates the bit error rate (BER) based on the measurement results of the partial key quantum state published by the receiver. If the BER is within a certain threshold, it uses error correction technology to correct the errors. It then further amplifies the privacy of the corrected quantum key, eliminating information leakage caused by the communication and error correction processes. Finally, it extracts the unconditionally secure shared quantum key. If the BER exceeds a certain threshold, the quantum key distribution process is abandoned.

If the bit error rate does not exceed the threshold, then after completing the above operations, the sender can send the bit error rate to the receiver for reference, ensuring that both parties make the same judgment and perform subsequent privacy amplification and other processing operations based on the same strategy, thereby obtaining the same shared quantum key. To prevent middlemen or attackers from eavesdropping on the bit error rate information, the sender can encrypt the bit error rate using the IDkey and send the encrypted information to the receiver.

4) The receiver decrypts the received information, obtains the bit error rate, and performs corresponding processing.

After the receiver receives the ciphertext of the bit error rate, it uses the IDkey to decrypt the information and obtain the bit error rate estimated by the sender. The receiver can perform the same operation as the sender based on the bit error rate, or compare its own estimated bit error rate with the bit error rate sent by the sender. If the difference between the two is within a pre-set range, that is, the judgment results and subsequent processing strategies based on the bit error rate of the sender and receiver are the same, then the receiver can continue to perform subsequent operations and ultimately obtain the same unconditionally secure shared quantum key as the sender.

At this point, through steps 101-103 above, identity authentication of both the sender and the receiver has been achieved during the quantum key distribution process. This technical solution uses different wavelengths to distinguish between key information and identity authentication information, randomly interspersing quantum states of identity authentication information of variable length within the key quantum state. The sender and receiver complete the identity authentication process by detecting whether the other device follows the same basis vector selection rules when selecting the preparation basis or measurement basis, and whether the other device has the same preset shared key. Because this technical solution fully utilizes quantum security, performs identity authentication through quantum state information, and does not require the sender and receiver to preset the same identity authentication information, it implements a quantum state zero-knowledge proof authentication method. This not only effectively defends against man-in-the-middle attacks and DDoS attacks, ensuring the security of the quantum key distribution process, but also does not reduce the amount of quantum key distribution.

In addition, this application also provides another identity authentication method for a quantum key distribution process, which is implemented on a quantum communication device that sends a message during the quantum key distribution process. Please refer to Figure 3, which is a flowchart of another embodiment of this application's identity authentication method for a quantum key distribution process. The steps of this embodiment that are identical to the first embodiment above are not repeated here, and the differences are described below. The method includes the following steps:

Step 301: Select a preparation basis for the identity authentication bit string according to a pre-set basis selection rule, and use pre-set different wavelengths to send the quantum state of the identity authentication bit string and the randomly generated key bit string to the opposite device participating in the quantum key distribution process, where the identity authentication bit string is interspersed in the key bit string with random positions and lengths.

Before this step, a quantum key agreement request can be sent to the peer device. The request contains the sender's account information for the peer device to verify its own identity. Then, the account information sent by the peer device can be received and the identity of the other party can be verified based on the account information. If the verification fails, the quantum key distribution process is terminated; if the verification is successful, this step can be executed to send the quantum state.

The pre-set basis vector selection rule includes: selecting a corresponding preparation basis according to the position of the authentication bit in the quantum state information, for example, selecting a corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis according to the position information of each authentication bit in the quantum state information and the different results of modulo 4.

Step 302: Receive the authentication key location information and the ciphertext to be verified returned by the peer device.

As a preferred embodiment, this method can be executed intermittently during the quantum key distribution process. In this way, the information returned by the peer device includes not only the authentication key location information and the ciphertext to be verified, but also the measurement basis used to measure the quantum state of the key.

Step 303: Select an authentication key based on the position information and the sent quantum state information, and use the authentication key to decrypt the received ciphertext to be verified.

Step 304: Determine whether the decrypted information is consistent with the local preset shared key. If not, end the quantum key distribution process.

If the result of this step is yes, you can continue to perform subsequent operations according to the quantum key distribution protocol:

Determine the correct measurement basis of the key quantum state and screen the original key;

Publishing a correct measurement basis of the key quantum state through a classical channel;

The final shared quantum key is obtained through bit error rate estimation, error correction and privacy amplification processes.

If auxiliary authentication information sent by the recipient is also received in step 302, then when the judgment result of this step is "yes", a variant of the auxiliary authentication information can also be encrypted. At the same time as the correct measurement base is published as mentioned above, the ciphertext of the variant of the auxiliary authentication information is sent for further verification by the recipient; in addition, after estimating the bit error rate, the bit error rate can also be encrypted using the authentication key selected in step 303 and sent to the recipient.

In the above-mentioned embodiment, another identity authentication method for use in a quantum key distribution process is provided. Correspondingly, this application also provides an identity authentication device for use in a quantum key distribution process, which is deployed on a sending quantum communication device participating in the quantum key distribution process. Please refer to Figure 4, which is a schematic diagram of an embodiment of an identity authentication device for use in a quantum key distribution process of this application. Since the device embodiment is substantially similar to the method embodiment, the description is relatively simple. For relevant details, please refer to the description of the method embodiment. The device embodiment described below is merely illustrative.

An identity authentication device for a quantum key distribution process according to this embodiment includes: a quantum state sending unit 401, configured to select a preparation basis for an identity authentication bit string according to a preset basis vector selection rule, and to send the identity authentication bit string and the quantum state of a randomly generated key bit string to a peer device participating in the quantum key distribution process using preset different wavelengths, wherein the identity authentication bit string is interspersed with the key bit string at random positions and lengths; a response information receiving unit 402, configured to receive authentication key location information and a ciphertext to be verified returned by the peer device; an information decryption unit 403, configured to select an authentication key based on the location information and the sent quantum state information, and to decrypt the received ciphertext to be verified using the authentication key; and a sender authentication determination unit 404, configured to determine whether the decrypted information is consistent with a locally preset shared key; if not, terminating the quantum key distribution process.

Optionally, the information received by the response information receiving unit includes not only the authentication key location information and the ciphertext to be verified, but also the measurement basis used to measure the quantum state of the key;

Accordingly, the device further includes:

an original key screening unit, configured to determine a correct measurement basis of the key quantum state and screen the original key when the output result of the authentication judgment unit is yes;

a correct measurement basis publishing unit, configured to publish the correct measurement basis of the key quantum state via a classical channel;

The sender's quantum key acquisition unit is used to obtain the final shared quantum key through bit error rate estimation, error correction and privacy amplification processes.

Optionally, the device further includes:

a negotiation request sending unit, configured to send a quantum key negotiation request to the peer device, wherein the request includes the sender's account information;

An account information receiving unit, configured to receive the account information sent by the peer device;

The first identity authentication unit is used to verify the identity of the peer device based on the account information. If the verification fails, the quantum key distribution process is terminated.

Optionally, the preset basis vector selection rule adopted by the quantum state sending unit includes: selecting a corresponding preparation basis according to the position of the identity authentication bit in the quantum state information.

Optionally, the pre-set basis vector selection rule adopted by the quantum state sending unit is to select the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis according to the position information of each authentication bit in the quantum state information and the different results of modulo 4.

In addition, this application also provides a third identity authentication method for a quantum key distribution process, which is implemented on a receiving quantum communication device participating in the quantum key distribution process. Please refer to Figure 5, which is a flowchart of an embodiment of the third identity authentication method for a quantum key distribution process of this application. The steps of this embodiment that are identical to the first embodiment above are not repeated here, and the differences are described below. The method includes the following steps:

Step 501: Receive a quantum state sent by a peer device participating in a quantum key distribution process.

Before this step, a key agreement request sent by the peer device can be received, and the identity of the other party can be verified based on the account information contained in the request. If the verification fails, the quantum key distribution process is terminated; if the verification is successful, the recipient's account information is sent to the peer device, and this step can be performed to receive the quantum state sent by the peer device.

Step 502: Measure the received quantum state according to the pre-set different wavelength and basis vector selection rules, and obtain identity authentication information based on the measurement results.

The pre-set basis vector selection rule includes: selecting a corresponding measurement basis according to the position of the authentication bit in the quantum state information, for example, selecting a corresponding horizontal polarization basis, vertical polarization basis, left-hand polarization basis, or right-hand polarization basis according to the position information of each authentication bit in the quantum state information and the different results of modulo 4.

Specifically, this step includes the following processing procedures: distinguishing identity authentication quantum state information and key quantum state information according to the pre-set different wavelengths; selecting a measurement basis for the identity authentication quantum state information according to the pre-set basis vector selection rule; using the selected measurement basis to measure the identity authentication quantum state information, and eliminating the part in which no photons are detected to obtain the identity authentication information.

Step 503: Determine whether the identity authentication information is consistent with the basis vector selection rule. If so, execute step 504; otherwise, end the quantum key distribution process.

Step 504: Select an authentication key from the identity authentication information, and send the location information of the authentication key and the preset shared key encrypted with the authentication key to the peer device.

The selecting an authentication key from the identity authentication information includes: selecting the identity authentication information as the authentication key; or randomly selecting bits at different positions from the identity authentication information, and using a bit string composed of the selected bits as the authentication key.

In this step, the locally generated auxiliary authentication information m may also be encrypted with the authentication key, and the encrypted ciphertext, the location information, and the encrypted preset shared key are sent to the peer device.

This identity authentication method can be interspersed in the quantum key distribution process, so this step can also publicly measure the measurement basis used for the key quantum state through the classical channel.

After this step, you can also perform the following operations:

1) Receiving a correct measurement basis of the key quantum state sent by the opposite device through a classical channel.

If the ciphertext of the variant of the auxiliary authentication information is also received at the same time, the decryption operation is performed, and it is verified whether the variant of the auxiliary authentication information is consistent with the variant of the auxiliary authentication information originally generated locally. If they are consistent, subsequent operations such as screening the original key are performed. Otherwise, the quantum key distribution process is terminated.

2) Screen the original key and obtain the final shared quantum key by obtaining the bit error rate, error correction and privacy amplification process.

If the bit error rate ciphertext sent by the sender is received after screening the original key, the authentication key selected in step 504 can be used for decryption, and based on the result, subsequent error correction, privacy amplification and other processes are performed to obtain the final shared quantum key.

In the above-mentioned embodiment, a third identity authentication method for use in a quantum key distribution process is provided. Correspondingly, this application also provides an identity authentication device for use in a quantum key distribution process, which is deployed on a receiving quantum communication device participating in the quantum key distribution process. Please refer to Figure 6, which is a schematic diagram of an embodiment of an identity authentication device for use in a quantum key distribution process of this application. Since the device embodiment is substantially similar to the method embodiment, the description is relatively simple. For relevant details, please refer to the description of the method embodiment. The device embodiment described below is merely illustrative.

An identity authentication device for a quantum key distribution process according to this embodiment includes: a quantum state receiving unit 601, configured to receive a quantum state sent by a peer device participating in the quantum key distribution process; a quantum state measuring unit 602, configured to measure the received quantum state according to preset different wavelengths and basis vector selection rules, and obtain identity authentication information based on the measurement results; a receiving party authentication judgment unit 603, configured to judge whether the identity authentication information is consistent with the basis vector selection rules, and if not, terminate the quantum key distribution process; and an information sending unit 604, configured to select an authentication key from the identity authentication information when the output of the receiving party authentication judgment unit is yes, and to send location information of the authentication key and a pre-set shared key encrypted with the authentication key to the peer device.

Optionally, the device further includes:

a measurement basis publishing unit, configured to publicly disclose the measurement basis used for measuring the quantum state of the key through a classical channel when the output of the receiver authentication judgment unit is yes;

Accordingly, the device further includes:

a correct measurement basis receiving unit, configured to receive the correct measurement basis of the key quantum state sent by the opposite device via a classical channel;

The receiving party's quantum key acquisition unit is used to screen the original key and obtain the final shared quantum key through bit error rate estimation, error correction and privacy amplification processes.

Optionally, the device further includes:

A negotiation request receiving unit, configured to receive a key negotiation request sent by the peer device;

The second identity authentication unit is used to verify the identity of the peer device according to the account information included in the request. If the verification fails, the quantum key distribution process is terminated; otherwise, the account information of the recipient is sent to the peer device.

Optionally, the pre-set basis vector selection rule adopted by the quantum state measurement unit includes: selecting a corresponding preparation basis according to the position of the identity authentication bit in the quantum state information.

Optionally, the pre-set basis vector selection rule adopted by the quantum state measurement unit is to select the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis according to the position information of each identity authentication bit in the quantum state information and the different results of modulo 4.

Optionally, the quantum state measurement unit includes:

An information differentiation subunit, configured to differentiate between identity authentication quantum state information and key quantum state information according to the preset different wavelengths;

An identity authentication measurement basis selection subunit, configured to select a measurement basis for identity authentication quantum state information according to the preset basis vector selection rule;

The identity authentication information acquisition subunit is used to measure the identity authentication quantum state information using the selected measurement basis and eliminate the part in which no photons are detected to obtain the identity authentication information.

Optionally, the information sending unit includes:

an authentication key selection subunit, configured to select an authentication key from the identity authentication information;

An information sending subunit, configured to send the location information of the authentication key and a preset shared key encrypted with the authentication key to the peer device;

The authentication key selection subunit is specifically used to:

Selecting the identity authentication information as the authentication key; or,

Bits at different positions are randomly selected from the identity authentication information, and a bit string composed of the selected bits is used as the authentication key.

In addition, an embodiment of the present application also provides an identity authentication system for a quantum key distribution process, as shown in FIG7 , the system includes: an identity authentication device 701 deployed on a quantum communication device of a sender, and an identity authentication device 702 deployed on a quantum communication device of a receiver; the identity authentication devices deployed on quantum communication devices of both the sender and the receiver are pre-set with the same basis vector selection rules, the same shared key, and use the same wavelength setting for distinguishing identity authentication information from key information.

Identity authentication devices deployed on both the sending and receiving quantum communication devices use the identity authentication method provided in this application to dynamically verify the identity of the peer device during the quantum key distribution process. The interactive processing flow of the identity authentication system used in the quantum key distribution process is briefly described below, in conjunction with Figure 8. The identity authentication device deployed on the sending quantum communication device is referred to as A, and the identity authentication device deployed on the receiving quantum communication device is referred to as B.

1) A sends a key negotiation request to B, which includes A's account information.

2) B verifies the legitimacy of A's identity and sends B's account information to A;

3) A verifies the legitimacy of B's identity based on the received account information; A selects a basis for preparing the identity authentication bit string according to a pre-set basis selection rule, and transmits the quantum states of the identity authentication bit string and the randomly generated key bit string using different wavelengths, with the identity authentication bit string interspersed with the key bit string at random positions and lengths;

4) B measures the received quantum state according to the different wavelengths and basis vector selection rules. When the identity authentication information obtained by the measurement is consistent with the basis vector selection rule, the receiver authentication key IDkey, the location information of sending the key, the preset shared key encrypted with the key, and the local auxiliary authentication information m are selected from the identity authentication information, and the measurement basis of the key quantum state is made public. Otherwise, the quantum key distribution process is terminated.

5) A selects a corresponding sender authentication key based on the received location information, and determines whether the preset shared key after decrypting the received ciphertext using the key is consistent with the local preset shared key. If they are consistent, the original key, the correct measurement basis of the published key quantum state, and the ciphertext of the obtained variant of the auxiliary authentication information are screened. If they are inconsistent, the quantum key distribution process is terminated.

6) B decrypts the ciphertext of the auxiliary authentication information variant. If it is consistent with the locally generated variant of the auxiliary authentication information m, B filters the original key according to the received correct measurement basis and publishes the measurement results of the partial key quantum state. Otherwise, the quantum key distribution process ends.

7) A obtains the final shared quantum key by calculating the bit error rate, error correction, and privacy amplification, and sends the bit error rate encrypted with IDkey to B; B decrypts the received bit error rate and performs corresponding error correction and privacy amplification based on the bit error rate to obtain the final shared quantum key.

It should be noted that what is shown above is a preferred embodiment of the present system. In other embodiments, different interaction methods may be used. For example, the identity authentication steps based on preset account information in steps 1) and 2) may not be performed. In the process of B's identity authentication of A in step 4) and A's identity authentication of B in step 5), the auxiliary authentication information m may not be used, nor may the variant information of m be used for identity authentication in subsequent steps. The IDkey may not be used for encryption and decryption operations on the bit error rate, etc. As long as the mutual authentication between A and B is completed by using the identity authentication quantum state to determine whether it conforms to the basis vector selection rule in steps 3), 4), and 5), and whether the preset shared keys of both parties are consistent, it does not deviate from the core of this application and is within the scope of protection of this application.

Although the present application is disclosed as above with the preferred embodiments, it is not intended to limit the present application. Any person skilled in the art may make possible changes and modifications without departing from the spirit and scope of the present application. Therefore, the scope of protection of the present application shall be based on the scope defined by the claims of the present application.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and/or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

1. Computer-readable media includes permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include non-transitory media such as modulated data signals and carrier waves.

2. Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Furthermore, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

Claims (39)

1. An authentication method for a quantum key distribution process, characterized in that the method is implemented in the quantum communication devices of both the sender and receiver participating in the quantum key distribution process, comprising: The sender selects the preparation basis of the authentication bit string according to the pre-set basis selection rule, and sends the quantum states of the authentication bit string and the randomly generated key bit string at different wavelengths. The authentication bit string is interspersed in the key bit string at random positions and lengths. The receiver measures the received quantum state according to the different wavelengths and basis selection rules. When the measured authentication information matches the basis selection rules, the receiver authentication key is selected from the authentication information, and the location information of the receiver authentication key and the preset shared key encrypted with the key are sent. Otherwise, the quantum key distribution process ends. The sender selects the corresponding sender authentication key based on the received location information, and determines whether the information after decrypting the received ciphertext using the key is consistent with the local preset shared key. If they are inconsistent, the quantum key distribution process ends. 2. The authentication method for quantum key distribution according to claim 1, characterized in that, when the authentication information measured by the receiver matches the basis selection rule, the receiver further performs the following operation: The measurement basis for measuring the quantum state of the key is disclosed through a classical channel; Accordingly, when the sender determines that the decrypted information matches the local preset shared key, the sender performs the following operation: Determine the correct measurement basis for the key quantum state and screen the original key; The correct measurement basis of the quantum state of the sender's authentication key is published through a classical channel; Accordingly, after the step of publishing the correct measurement basis of the key quantum state described above, the following operation is performed: The recipient filters the original key; and, The sender and receiver obtain the final shared quantum key through a process of bit error rate estimation, error correction, and privacy amplification. 3. The authentication method for quantum key distribution according to claim 2, characterized in that, before the sender sends the quantum states of the authentication bit string and the randomly generated key bit string, the following operation is performed: The sender and receiver authenticate each other through a classical channel using pre-set account information. If either device fails the authentication, the quantum key distribution process ends. 4. The authentication method for quantum key distribution process according to claim 3, wherein the preset account information includes: identity information and certificate. 5. The authentication method for quantum key distribution according to claim 2, characterized in that the pre-set basis vector selection rule includes: Based on the position of the authentication bit in the quantum state information, the corresponding preparation basis or measurement basis is selected. 6. The authentication method for quantum key distribution according to claim 5, characterized in that, the step of selecting the corresponding preparation basis or measurement basis according to the position of the authentication bit in the quantum state information specifically refers to: Based on the position information of each authentication bit in the quantum state information and the different results of 4-modulo operation, the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis is selected. 7. The authentication method for quantum key distribution according to claim 2, characterized in that the receiver measures the received quantum state according to the different wavelengths and basis selection rules, including: Based on the different wavelengths, the quantum state information for identity authentication and the quantum state information for the key are distinguished; The measurement basis of the identity authentication quantum state information is selected according to the pre-set basis selection rule; The identity authentication quantum state information is measured using the selected measurement basis, and the portion of the quantum state from which no photons were detected is removed to obtain the identity authentication information obtained from the measurement. 8. The authentication method for quantum key distribution according to claim 7, wherein the authentication information measured by the receiver conforms to the basis selection rule means that the difference between the authentication information measured by the receiver and the expected information following the basis selection rule is less than a preset threshold. 9. The authentication method for quantum key distribution according to claim 2, characterized in that the receiver selects a receiver authentication key from the authentication information, comprising: The recipient uses the identity authentication information as its authentication key; or... The receiver randomly selects bits at different positions from the identity authentication information and uses the bit string composed of the selected bits as the receiver's authentication key. 10. The authentication method for quantum key distribution process according to any one of claims 2-9, wherein the information encrypted by the receiver using the receiver authentication key includes not only the preset shared key, but also locally generated auxiliary authentication information; Accordingly, the sender using the sender authentication key to decrypt the received ciphertext means that the sender uses the sender authentication key to decrypt the received ciphertext and obtain the decrypted preset shared key and the decrypted auxiliary authentication information. Accordingly, the sender's determination of whether the decrypted information is consistent with the local preset shared key means that the sender determines whether the decrypted preset shared key is consistent with the local preset shared key. 11. The authentication method for quantum key distribution according to claim 10, characterized in that, when the sender determines whether the decrypted preset shared key is consistent with the local preset shared key and the result is yes, the following operation is further performed: The sender uses a preset strategy to encrypt the variant of the auxiliary authentication information obtained through the decryption operation; And send the ciphertext after performing the above encryption operation through a classic channel; Accordingly, after receiving the correct measurement basis and the ciphertext, the receiver performs the following operations: The received ciphertext is decrypted using a method corresponding to the preset strategy. Determine whether the information obtained after performing the decryption operation is consistent with the variant of the locally generated auxiliary authentication information; If they match, the process of filtering the original key is performed based on the received correct measurement basis, and the measurement results of some key quantum states are published; otherwise, the quantum key distribution process ends. 12. The authentication method for quantum key distribution according to claim 11, wherein the preset strategy includes: The encryption operation is performed using a locally pre-configured shared key; or, The encryption operation is performed using the sender's authentication key. 13. The authentication method for quantum key distribution according to claim 11, wherein the variants of the auxiliary authentication information include: The auxiliary authentication information itself; or... The result is obtained by processing the auxiliary authentication information using a preset mathematical transformation method. 14. The authentication method for quantum key distribution process according to claim 11, characterized in that, after estimating the bit error rate based on the measurement results of the partial key quantum states published by the receiver, the sender encrypts the bit error rate using the sender's authentication key and sends the encrypted information to the receiver; Accordingly, the receiver uses its authentication key to decrypt the received ciphertext and obtain the decrypted bit error rate. 15. An authentication method for a quantum key distribution process, characterized in that the method is implemented on a quantum communication device of the sender participating in the quantum key distribution process, comprising: The basis for preparing the authentication bit string is selected according to a pre-set basis selection rule, and the quantum states of the authentication bit string and the randomly generated key bit string are sent to the peer device participating in the quantum key distribution process using different pre-set wavelengths. The authentication bit string is interspersed in the key bit string with random positions and lengths. Receive the authentication key location information and the ciphertext to be verified returned by the peer device; Based on the location information and the transmitted quantum state information, an authentication key is selected, and the received ciphertext to be verified is decrypted using the authentication key. Determine whether the decrypted information matches the local preset shared key; if not, end the current quantum key distribution process. 16. The authentication method for quantum key distribution process according to claim 15, wherein the information returned by the peer device includes not only: authentication key location information and ciphertext to be verified, but also: the measurement basis used to measure the quantum state of the key; Accordingly, when the result of determining whether the decrypted information matches the local preset shared key is yes, the following operation is performed: Determine the correct measurement basis for the key quantum state and screen the original key; The correct measurement basis of the quantum state of the authentication key is published through a classical channel; The final shared quantum key is obtained through bit error rate estimation, error correction, and privacy amplification processes. 17. The authentication method for a quantum key distribution process according to claim 16, characterized in that, before sending the quantum states of the authentication bit string and the randomly generated key mite string, the following operation is performed: Send a quantum key negotiation request to the peer device, the request containing the sender's account information; Receive account information sent by the peer device; The identity of the peer device is verified based on the received account information. If the verification fails, the quantum key distribution process ends. 18. The authentication method for quantum key distribution according to claim 16, wherein the pre-set basis selection rule includes: The appropriate preparation basis is selected based on the position of the authentication bit in the quantum state information. 19. The authentication method for quantum key distribution according to claim 18, characterized in that, the step of selecting the corresponding preparation basis according to the position of the authentication bit in the quantum state information specifically refers to: Based on the position information of each authentication bit in the quantum state information and the different results of 4-modulo operation, the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis is selected. 20. An authentication device for a quantum key distribution process, characterized in that the device is deployed on the quantum communication device of the sender participating in the quantum key distribution process, comprising: The quantum state transmission unit is used to select the preparation basis of the authentication bit string according to the pre-set basis selection rule, and send the quantum states of the authentication bit string and the randomly generated key bit string to the peer device participating in the quantum key distribution process using different pre-set wavelengths. The authentication bit string is interspersed in the key bit string at random positions and lengths. The response information receiving unit is used to receive the authentication key location information and the ciphertext to be verified returned by the peer device; The information decryption unit is used to select an authentication key based on the location information and the transmitted quantum state information, and to use the authentication key to decrypt the received ciphertext to be verified. The sender authentication judgment unit is used to determine whether the decrypted information is consistent with the local preset shared key; if not, the quantum key distribution process ends. 21. The authentication device for quantum key distribution process according to claim 20, wherein the information received by the response information receiving unit includes not only: authentication key location information and ciphertext to be verified, but also: the measurement basis used to measure the quantum state of the key; Accordingly, the device also includes: The original key screening unit is used to determine the correct measurement basis of the key quantum state and screen the original key when the output result of the authentication judgment unit is yes; A correct measurement basis publication unit is used to publish the correct measurement basis of the quantum state of the authentication key through a classical channel; The sender quantum key acquisition unit is used to obtain the final shared quantum key through bit error rate estimation, error correction, and privacy amplification processes. 22. The authentication device for quantum key distribution process according to claim 21, characterized in that the device further comprises: The negotiation request sending unit is used to send a quantum key negotiation request to the peer device, the request containing the sender's account information; An account information receiving unit is used to receive account information sent by the peer device; The first identity authentication unit is used to verify the identity of the peer device based on the account information. If the verification fails, the quantum key distribution process ends. 23. The authentication device for quantum key distribution process according to claim 21, wherein the pre-set basis selection rule adopted by the quantum state transmission unit includes: selecting the corresponding preparation basis according to the position of the authentication bit in the quantum state information. 24. The authentication device for quantum key distribution process according to claim 23, wherein the pre-set basis selection rule adopted by the quantum state sending unit refers to selecting the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis according to the position information of each authentication bit in the quantum state information and the different results of 4-modulo operation. 25. An authentication method for a quantum key distribution process, characterized in that the method is implemented on a quantum communication device of the receiver participating in the quantum key distribution process, comprising: Receive quantum states sent by the peer device participating in the quantum key distribution process; According to different preset wavelengths and basis selection rules, the received quantum state is measured, and the identity authentication information is obtained based on the measurement results; Determine whether the identity authentication information matches the basis selection rule; If so, select an authentication key from the identity authentication information and send the location information of the authentication key and a preset shared key encrypted with the authentication key to the peer device; If not, end this quantum key distribution process. 26. The authentication method for quantum key distribution according to claim 25, characterized in that, when the result of determining whether the authentication information matches the basis selection rule is yes, the following operation is further performed: The measurement basis used to publicly measure the quantum state of the key via a classical channel; Accordingly, the method further includes: The correct measurement basis for receiving the authentication key quantum state sent by the peer device through a classical channel; The original key is filtered, and the final shared quantum key is obtained by acquiring the bit error rate, error correction, and privacy amplification processes. 27. The authentication method for a quantum key distribution process according to claim 25, characterized in that, before receiving the quantum state sent by the peer device participating in the quantum key distribution process, the following operation is performed: Receive the key negotiation request sent by the peer device; The identity of the peer device is verified based on the account information contained in the request. If the verification fails, the quantum key distribution process ends; otherwise, the recipient's account information is sent to the peer device. 28. The authentication method for quantum key distribution according to claim 25, wherein the pre-set basis selection rule includes: The corresponding measurement basis is selected based on the position of the authentication bit in the quantum state information. 29. The authentication method for quantum key distribution according to claim 28, characterized in that, the step of selecting the corresponding measurement basis according to the position of the authentication bit in the quantum state information specifically refers to: Based on the position information of each authentication bit in the quantum state information and the different results of 4-modulo operation, the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis is selected. 30. The authentication method for quantum key distribution according to claim 25, characterized in that, the step of measuring the received quantum state according to pre-set different wavelengths and basis vector selection rules, and obtaining authentication information based on the measurement results, includes: Based on the pre-set different wavelengths, the identity authentication quantum state information and the key quantum state information are distinguished; The measurement basis of the identity authentication quantum state information is selected according to the pre-set basis selection rule; The identity authentication quantum state information is measured using the selected measurement basis, and the portion of the quantum state in which no photons were detected is removed to obtain the identity authentication information. 31. The authentication method for quantum key distribution according to claim 25, characterized in that, selecting an authentication key from the authentication information includes: Select the identity authentication information as the authentication key; or, Bits at different positions are randomly selected from the identity authentication information, and the bit string composed of the selected bits is used as the authentication key. 32. An authentication device for a quantum key distribution process, characterized in that the device is deployed on the quantum communication equipment of the receiver participating in the quantum key distribution process, comprising: A quantum state receiving unit is used to receive quantum states sent by the peer device participating in the quantum key distribution process; The quantum state measurement unit is used to measure the received quantum state according to different preset wavelengths and basis selection rules, and to obtain identity authentication information based on the measurement results. The receiver authentication judgment unit is used to determine whether the identity authentication information matches the basis selection rule. If not, the quantum key distribution process ends. The information sending unit is configured to select an authentication key from the identity authentication information and send the location information of the authentication key and a preset shared key encrypted with the authentication key to the peer device when the output of the receiver authentication judgment unit is yes. 33. The authentication device for quantum key distribution process according to claim 32, characterized in that the device further comprises: The measurement basis publication unit is used to publish the measurement basis used for the quantum state of the measurement key through a classical channel when the output of the receiver authentication judgment unit is yes. Accordingly, the device also includes: A correct measurement basis receiving unit is used to receive the correct measurement basis of the authentication key quantum state sent by the peer device through a classical channel; The receiver quantum key acquisition unit is used to screen the original key and obtain the final shared quantum key through bit error rate estimation, error correction and privacy amplification processes. 34. The authentication device for quantum key distribution process according to claim 32, characterized in that the device further comprises: The negotiation request receiving unit is used to receive the key negotiation request sent by the peer device; The second identity authentication unit is used to verify the identity of the peer device based on the account information contained in the request. If the verification fails, the current quantum key distribution process ends; otherwise, the recipient's account information is sent to the peer device. 35. The authentication device for quantum key distribution process according to claim 32, wherein the pre-set basis selection rule adopted by the quantum state measurement unit includes: selecting the corresponding preparation basis according to the position of the authentication bit in the quantum state information. 36. The authentication device for quantum key distribution process according to claim 35, wherein the pre-set basis selection rule adopted by the quantum state measurement unit refers to selecting the corresponding horizontal polarization basis, vertical polarization basis, left-handed polarization basis, or right-handed polarization basis according to the position information of each authentication bit in the quantum state information and the different results of 4-modulo operation. 37. The authentication device for quantum key distribution process according to claim 32, wherein the quantum state measurement unit comprises: The information region molecular unit is used to distinguish between identity authentication quantum state information and key quantum state information based on the pre-set different wavelengths; The identity authentication measurement basis selection subunit is used to select the measurement basis of the identity authentication quantum state information according to the pre-set basis selection rule; The identity authentication information acquisition subunit is used to measure the identity authentication quantum state information using a selected measurement basis, and remove the portion of the information in which no photons were detected, thereby acquiring the identity authentication information. 38. The authentication device for quantum key distribution process according to claim 32, wherein the information sending unit comprises: The authentication key selection subunit is used to select an authentication key from the identity authentication information; The information sending subunit is used to send the location information of the authentication key and the preset shared key encrypted with the authentication key to the peer device; Specifically, the authentication key selection subunit is used for: Select the identity authentication information as the authentication key; or, Bits at different positions are randomly selected from the identity authentication information, and the bit string composed of the selected bits is used as the authentication key. 39. An authentication system for a quantum key distribution process, characterized in that it comprises: an authentication device deployed on a sending quantum communication device as described in claim 20, and an authentication device deployed on a receiving quantum communication device as described in claim 32; The authentication device deployed on the quantum communication equipment of both the transmitter and receiver has the same basis selection rules, the same shared key, and uses the same wavelength settings to distinguish between authentication information and key information.