Digital certificate generation, identity authentication method and quantum ca authentication center and system

Abstract

The present invention proposes a digital certificate generation, identity authentication method, quantum CA authentication center and system, each CA authentication center is used to provide message authenticity authentication function, that is, quantum digital signature service based on credible identity authentication, the CA authentication center It includes a registration authentication unit, a basic function unit, a quantum security unit and an interface unit connected in sequence. When a signature is initiated between two users, the CA certification center and the communication parties jointly constitute a message authenticity verification system. First, the signer requests the CA certification center for "one identity at a time" authentication, and then prepares a key, generates a signature, and verifies the signature These several processes complete the quantum security verification of the authenticity of the sent message and complete the quantum digital signature. The CA certification center of the present invention needs to issue a trusted identity certificate to each user, but the certificate does not need to be bound with the key for verifying the signature, so the certificate management of the quantum-safe CA center is more convenient.

Description

technical field [0001] The invention relates to the field of information security, in particular to a digital certificate generation, identity authentication method, and a quantum CA authentication center and system. Background technique [0002] With the rapid development of Internet technology, users gradually complete various operations and obtain various services online. While online operations bring convenience to users, they also bring users concerns about confidentiality and security. The authenticity of the information sent by users is generally average. It is ensured by Public Key Infrastructure (PKI), which is a universal security service measure that uses the principle of asymmetric cryptography (public key theory) and third-party authentication technology to realize and provide security services. The core of PKI is the Certificate Authority (CA). The traditional CA center issues a digital certificate to each user who uses the public key. The function of the digit...

AI Technical Summary

Problems solved by technology

The core of PKI is CA (Certificate Authority). The traditional CA center issues a digital certificate to each user who uses the public key. The function of the digital certificate is to prove that the user listed in the certificate legally owns the public key listed in the certificate. That is, the certificate is bound to the public key, so the change of the public key will inevitably bring about the renewal of the digital certificate. If the encryption algorithm is no longer safe, the encryption algorithm needs to be updated, and the encryption technology upgrade is complicated and costly, resulting in poor practical performance of the entire system

Images