Digital certificate generation method, identity authentication method, quantum CA authentication center and quantum CA authentication system

Abstract

The invention provides a digital certificate generation method, an identity authentication method, a quantum CA authentication center and a quantum CA authentication system, and each CA authentication center is used for providing a message authenticity authentication function, namely a quantum digital signature service based on trusted identity authentication. The CA authentication center comprises a registration authentication unit, a basic function unit, a quantum security unit and an interface unit which are connected in sequence. When a signature is initiated between two users, a CA authentication center and two communication parties jointly form a message authenticity verification system, firstly, a signer requests one identity authentication from the CA authentication center, and then quantum security verification is completed on the authenticity of a sent message through the processes of secret key preparation, signature generation and signature verification. And completing the quantum digital signature. According to the invention, the CA needs to issue a trusted identity certificate to each user, but the certificate does not need to be bound with a secret key for verifying the signature, so that the certificate management of the CA with quantum security is more convenient.

Description

technical field [0001] The invention relates to the field of information security, in particular to a digital certificate generation, identity authentication method, quantum CA authentication center and system. Background technique [0002] With the rapid development of Internet technology, users gradually complete various operations and obtain various services online. While online operations bring convenience to users, they also bring concerns about confidentiality and security to users. The authenticity of information sent by users is generally It is ensured by the public key infrastructure (Public Key Infrastructure, PKI), which is a universal security service measure that uses the principle of asymmetric cryptographic algorithm (public key theory) and third-party authentication technology to realize and provide security services. The core of PKI is CA (Certificate Authority). The traditional CA center issues a digital certificate to each user who uses the public key. The...

AI Technical Summary

Problems solved by technology

The core of PKI is CA (Certificate Authority). The traditional CA center issues a digital certificate to each user who uses the public key. The function of the digital certificate is to prove that the user listed in the certificate legally owns the public key listed in the certificate. That is, the certificate is bound to the public key, so the change of the public key will inevitably bring about the renewal of the digital certificate. If the encryption algorithm is no longer safe, the encryption algorithm needs to be updated, and the encryption technology upgrade is complicated and costly, resulting in poor practical performance of the entire system

Images