Quantum key distribution method and system for authentication based on post-quantum cryptography algorithm

Abstract

The invention provides a quantum key distribution method and system for authentication based on a post-quantum cryptography algorithm. The quantum key distribution system comprises a PQC authentication center, a PQC user side and QKD equipment. Communication in the quantum key distribution data post-processing process needs to be authenticated, a key presetting method is generally adopted at present, but the method is not suitable for a large-scale QKD network. According to the method and the system for authenticating the QKD by combining the PQC algorithm with the public key infrastructure, each user of the QKD network only needs to apply for one digital certificate from the authentication center, and the abstract of the authenticated information is signed and verified by using the PQC algorithm, so that the quantum-resistant computing security of the PQC algorithm in the authentication process can be ensured. And the operability and the flexibility of a large-scale QKD network are ensured.

Description

technical field [0001] The present invention relates to the field of quantum communication network and quantum key technology, more specifically to a quantum key distribution (Quantum key distribution, QKD) method for authentication based on Post-quantum Cryptography (PQC) algorithm and application of the method Quantum communication network system. Background technique [0002] Based on the physical principles of quantum mechanics, the quantum key distribution protocol can provide security in the sense of information theory, and is an important development direction in the field of information security. The realization of quantum key distribution (Quantum key distribution, QKD) includes quantum channel and classical channel, the former is used to transmit quantum state, and the latter is used to transmit information in the process of data post-processing. Both quantum channels and classical channels are open channels, but the security of QKD requires the latter to be authe...

AI Technical Summary

Problems solved by technology

This method has the following problems in practical application: 1. In order to ensure the security of the key, the pre-set key is generally passed face-to-face. For a QKD network with n users, key pre-setting is required between any two users. A total of n(n-1) / 2 pairs of keys are required. For example, for a network of 100 users, a total of 4950 pairs of keys need to be preset, which is a very heavy workload; 2. When a new user joins the QKD network, the new user needs to To pre-set keys with all the original users, face-to-face key delivery requires huge labor costs, travel and transportation costs, time-consuming and labor-intensive, and very inefficient

However, the security of the public key algorithms used in current authentication is generally based on the complexity of specific mathematical problems, such as factorization of large numbers or discrete logarithms, etc.

With the development of quantum computers, these mathematical problems face the risk of being effectively solved, so its security, especially long-term security, cannot be guaranteed

Images