HK1237156B - Authentication method, apparatus, terminal device and system - Google Patents

Description

Method, device, terminal equipment and system for authentication

Technical Field

The present application relates to the field of electronic technology, and specifically to an authentication method, apparatus, and terminal device for a client, an authentication method, apparatus, and terminal device for a server, and a system for user authentication.

Background Art

Since static password authentication mechanisms are vulnerable to eavesdropping attacks, password guessing attacks, replay attacks, and password leaks, dynamic passwords have become the mainstream of identity authentication technology because of their ease of use and ability to quickly and seamlessly interoperate with various business systems. They are widely used in e-commerce, online games, finance, and other fields.

The dynamic password authentication mechanism is based on a cryptographic algorithm. It takes the user's ID and some uncertain factors as input parameters. The algorithm transforms the result into a variable, which serves as the user's login password. The authentication server uses the corresponding algorithm to perform a calculation and compares the result with the user's login password. If they match, the user is allowed to log in. This generates a dynamic, unique password that the user does not need to remember. A password can only be used once; repeated use will result in login rejection.

Existing terminals for generating dynamic password authentication include hardware tokens, SMS passwords, mobile phone tokens, and software tokens. These four types of tokens have the following shortcomings: First, they only provide one-way authentication from the server to the client, failing to prevent fake servers from spoofing legitimate users. If an attacker intercepts the server's authentication information, they can use databases, password replay, and other means to impersonate the server and deceive the client. Second, they are vulnerable to decimal attacks. When a client requests authentication from the authentication server, an attacker can intercept the challenge information (i.e., Seed and Iteration) sent by the authentication server through network eavesdropping and modify the Iteration to a smaller value. The fake server then sends the intercepted Seed and Iteration to the client. The client calculates a one-time password using the attacker's Seed and Iteration and sends it to the server. The attacker then intercepts the client's one-time password again and uses a known one-way hash function to sequentially calculate one-time passwords with larger Iterations, obtaining a series of subsequent passwords for the user. This allows the attacker to impersonate the legitimate user and launch a decimal attack. Third, it is difficult to defend against man-in-the-middle attacks. The specific process of a man-in-the-middle attack is as follows: an attacker between the client and the server may intercept the authentication information, on the one hand, impersonate the client to connect to the server, and on the other hand, impersonate the server to connect to the client. The client sends a one-time password to the server when logging in. The attacker can intercept the one-time password, making it impossible for the client to log in, causing the network connection to be disconnected or the connection to time out. At the same time, the intercepted one-time password can be used to impersonate the client to log in to the server. Fourth, the storage of sensitive and confidential data on the client and server (such as the protection of the PIN password if the hardware token is lost) lacks security measures.

Summary of the Invention

In view of the above problems, the present application provides an authentication method for a client, an authentication device for a client and an authentication terminal device for a client, an authentication method for a server, an authentication device for a server and an authentication terminal device for a server, and a system for user authentication.

The technical solution adopted in this application is:

This application provides a client authentication method, including:

generating first dynamic interaction verification information;

Sending the first dynamic interaction verification information to the server;

Receiving second dynamic interaction verification information generated according to the first dynamic interaction verification information and sent by the server;

determining whether the server is legitimate according to the second dynamic interaction verification information, and generating third dynamic interaction verification information according to the second dynamic interaction verification information;

If it is legal, the third dynamic interaction verification information is sent to the server, so that the server can determine whether the client has passed the authentication based on the third dynamic interaction verification information.

Optionally, the client and the server both pre-store corresponding or identical information processing methods, and a result of the client processing the dynamic interactive verification information according to the information processing method is corresponding or identical to a result of the server processing the dynamic interactive verification information;

The step of determining whether the server is legitimate according to the second dynamic interaction verification information includes:

The second dynamic interaction verification information is processed according to a pre-stored information processing method, and whether the server is legitimate is determined based on whether the processing result meets expectations.

Optionally, the client and the server both pre-store multiple groups of corresponding or identical information processing methods, and each group of information processing methods has a corresponding or identical information processing method identifier on the client and the server;

The dynamic interactive verification information includes an information processing method identifier;

The step of processing the second dynamic interactive verification information according to a pre-stored information processing method and determining whether the server is legitimate based on the processing result includes:

querying a corresponding pre-stored information processing method according to the information processing method identifier in the first dynamic interactive verification information;

The second dynamic interaction verification information is processed according to the information processing method, and whether the server is legitimate is determined based on whether the processing result meets expectations.

Optionally, the information processing method identifier is synchronized between the client and the server and is changed periodically.

Optionally, both the client and the server pre-store the same quantum state library containing a quantum state preparation base, the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, each quantum state preparation base has a corresponding quantum state preparation base identifier, and the first dynamic interactive verification information includes the quantum state preparation base identifier;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation basis on the server according to the quantum state preparation basis identifier, and generating a first quantum bit string through the quantum state preparation basis;

The step of determining whether the server is legitimate according to the second dynamic interaction verification information includes:

Measuring the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier to obtain a bit value measurement result;

Whether the server is legitimate is determined based on whether the bit value measurement result meets expectations.

Optionally, the step of generating the first dynamic interaction verification information includes:

Selecting at least one quantum state preparation basis from a quantum state library;

extracting a quantum state preparation base identifier of the quantum state preparation base;

Generate first dynamic interactive verification information including the quantum state preparation base identifier.

Optionally, the at least one quantum state preparation base is selected from the quantum state library in a random selection manner, and the quantum state preparation base selected for each authentication is different.

Optionally, the first dynamic interactive verification information further includes the length of the first quantum bit string;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base on the server according to the quantum state preparation base identifier, and generating a first quantum bit string through the quantum state preparation base according to the length of the first quantum bit string, and the first quantum bit string is sent to the client through the quantum state preparation base.

Optionally, the second dynamic interactive verification information further includes a decimal first quantum bit string obtained by performing decimal conversion on the first quantum bit string;

The step of determining whether the server is legitimate according to the second dynamic interaction verification information includes:

Measuring the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier to obtain a bit value measurement result;

Converting the decimal first quantum bit string into a converted first quantum bit string according to a decimal conversion method;

Measuring the length of the first quantum bit string to obtain a bit string length measurement result;

Whether the server is legitimate is determined based on whether the bit value measurement result meets expectations and whether the bit string length measurement result meets expectations.

Optionally, the client and the server both pre-store the same quantum string length database, and the first dynamic interactive verification information further includes a first quantum bit string length code;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base in the quantum state library according to the quantum state preparation base identifier, querying the corresponding first quantum bit string length in the quantum string length database according to the first quantum bit string length code, and then generating a first quantum bit string through the quantum state preparation base according to the first quantum bit string length, and the first quantum bit string is sent to the client through the quantum state preparation base.

Optionally, the step of measuring the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier includes:

Searching for a quantum state preparation base corresponding to the quantum state preparation base identifier in a quantum state library;

The quantum state of the quantum state preparation basis is randomly selected to measure the bit value of the first quantum bit string.

Optionally, the step of generating third dynamic interaction verification information according to the second dynamic interaction verification information includes:

The bit value measurement result and the quantum bit identifier of the quantum state used in the measurement are used as third dynamic interactive verification information.

Optionally, the second dynamic interactive verification information further includes a code of a quantum state preparation basis selected by the server and a length of the second quantum bit string;

The step of generating third dynamic interaction verification information according to the second dynamic interaction verification information includes:

Querying the quantum state preparation base corresponding to the code of the quantum state preparation base selected by the server in the quantum state library;

generating a second qubit string using the quantum state preparation basis according to the length of the second qubit string;

Generate third dynamic interactive verification information including the second quantum bit string.

Optionally, the step of generating third dynamic interactive verification information according to the second dynamic interactive verification information further includes: converting the second quantum bit string according to a decimal conversion method to obtain a decimal second quantum bit string;

The step of generating third dynamic interactive verification information including the second quantum bit string comprises:

Generate third dynamic interactive verification information including the second quantum bit string and the decimal second quantum bit string.

Optionally, if the authentication is legal, the step of sending the third dynamic interaction verification information to the server includes:

If it is legal, the second quantum bit string is sent to the server using the quantum state preparation basis.

Optionally, the quantum state library of the client is synchronized with the quantum state library of the server and is changed regularly according to predetermined rules.

Optionally, the first dynamic interaction verification information includes an identity identifier of the client, and the identity identifier is used by the server to perform preliminary authentication on the client.

Optionally, the client's identity includes a user identification code and an identity certificate of the client.

Optionally, the step of sending the first dynamic interaction verification information to the server includes:

Encrypting all or part of the first dynamic interaction verification information with a key and sending the encrypted information to the server;

If the verification result is valid, the step of sending the third dynamic interaction verification information to the server includes:

If it is legal, all or part of the third dynamic interactive verification information is encrypted with a key and sent to the server.

Optionally, the key and the key used for decryption on the server are symmetric quantum keys of each other, or are public-private keys of each other.

Optionally, the step of receiving second dynamic interaction verification information generated according to the first dynamic interaction verification information and sent by the server includes:

receiving second dynamic interaction verification information sent by the server and generated based on the first dynamic interaction verification information, at least part of which is encrypted;

The encrypted portion of information is decrypted using a decryption key corresponding to the key used for encryption on the server side.

Optionally, the decryption key and the key used for encryption on the server are symmetric quantum keys of each other, or are public-private keys of each other.

Accordingly, the present application also provides an authentication device for a client, comprising:

A first dynamic interaction verification information generating unit, configured to generate first dynamic interaction verification information;

A first dynamic interaction verification information sending unit, configured to send the first dynamic interaction verification information to a server;

A second dynamic interaction verification information receiving unit is configured to receive second dynamic interaction verification information generated according to the first dynamic interaction verification information and sent by the server;

a second dynamic interaction verification information verification unit, configured to determine whether the server is legitimate based on the second dynamic interaction verification information, and to generate third dynamic interaction verification information based on the second dynamic interaction verification information;

The third dynamic interaction verification information sending unit is configured to send the third dynamic interaction verification information to the server if the third dynamic interaction verification information is valid, so that the server can determine whether the client has passed the authentication based on the third dynamic interaction verification information.

Optionally, the client and the server both pre-store corresponding or identical information processing methods, and a result of the client processing the dynamic interactive verification information according to the information processing method is corresponding or identical to a result of the server processing the dynamic interactive verification information;

The second dynamic interaction verification information verification unit includes:

The processing and judging subunit is used to process the second dynamic interactive verification information according to a pre-stored information processing method, and judge whether the server is legal according to the processing result.

Optionally, the client and the server both pre-store multiple groups of corresponding or identical information processing methods, and each group of information processing methods has a corresponding or identical information processing method identifier on the client and the server;

The dynamic interactive verification information includes an information processing method identifier;

The processing and judging subunit includes:

a processing method query subunit, configured to query a corresponding pre-stored information processing method according to the information processing method identifier in the first dynamic interactive verification information;

The processing method processing subunit is used to process the second dynamic interactive verification information according to the information processing method, and determine whether the server is legal based on the processing result.

Optionally, the information processing method identifier is synchronized between the client and the server and is changed periodically.

Optionally, both the client and the server pre-store the same quantum state library containing a quantum state preparation base, the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, each quantum state preparation base has a corresponding quantum state preparation base identifier, and the first dynamic interactive verification information includes the quantum state preparation base identifier;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation basis on the server according to the quantum state preparation basis identifier, and generating a first quantum bit string through the quantum state preparation basis;

The second dynamic interaction verification information verification unit includes:

a first quantum measurement subunit, configured to measure the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier to obtain a bit value measurement result;

The first quantum judgment subunit is used to judge whether the server is legal according to whether the bit value measurement result meets expectations.

Optionally, the first dynamic interaction verification information generating unit includes:

A first preparation base selection subunit, configured to select at least one quantum state preparation base from a quantum state library;

A first identifier extraction subunit, configured to extract a quantum state preparation base identifier of the quantum state preparation base;

The first verification information generating subunit is used to generate first dynamic interactive verification information including the quantum state preparation base identifier.

Optionally, the at least one quantum state preparation base is selected from the quantum state library in a random selection manner, and the quantum state preparation base selected for each authentication is different.

Optionally, the first dynamic interactive verification information further includes the length of the first quantum bit string;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base on the server according to the quantum state preparation base identifier, and generating a first quantum bit string through the quantum state preparation base according to the length of the first quantum bit string, and the first quantum bit string is sent to the client through the quantum state preparation base.

Optionally, the second dynamic interactive verification information further includes a decimal first quantum bit string obtained by performing decimal conversion on the first quantum bit string;

The second dynamic interaction verification information verification unit includes:

a second quantum measurement subunit, configured to measure the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier to obtain a bit value measurement result;

A second conversion subunit, configured to convert the decimal first quantum bit string into a converted first quantum bit string according to a decimal conversion method;

A second length measurement subunit, configured to measure the length of the first quantum bit string and obtain a bit string length measurement result;

The second judgment subunit is configured to judge whether the server is legal according to whether the bit value measurement result meets expectations and whether the bit string length measurement result meets expectations.

Optionally, the client and the server both pre-store the same quantum string length database, and the first dynamic interactive verification information further includes a first quantum bit string length code;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base in the quantum state library according to the quantum state preparation base identifier, querying the corresponding first quantum bit string length in the quantum string length database according to the first quantum bit string length code, and then generating a first quantum bit string through the quantum state preparation base according to the first quantum bit string length, and the first quantum bit string is sent to the client through the quantum state preparation base.

Optionally, the first quantum measurement subunit includes:

A first quantum query subunit is configured to search a quantum state preparation base corresponding to the quantum state preparation base identifier in a quantum state library;

The first random measurement subunit is used to randomly select the quantum state of the quantum state preparation basis to measure the bit value of the first quantum bit string.

Optionally, the second dynamic interaction verification information verification unit includes:

The third dynamic verification information generating subunit is configured to use the bit value measurement result and the quantum bit identifier of the quantum state used in the measurement as the third dynamic interactive verification information.

Optionally, the second dynamic interactive verification information further includes a quantum state preparation basis identifier and a second quantum bit string length selected by the server;

The second dynamic interaction verification information verification unit includes:

A second quantum query subunit is used to query the quantum state preparation base corresponding to the quantum state preparation base identifier selected by the server in the quantum state library;

A second quantum preparation subunit, configured to generate a second quantum bit string using the quantum state preparation basis according to the length of the second quantum bit string;

The third information generation subunit is used to generate third dynamic interactive verification information containing the second quantum bit string.

Optionally, the second dynamic interaction verification information verification unit further includes:

a decimal conversion subunit, configured to convert the second quantum bit string according to a decimal conversion method to obtain a decimal second quantum bit string;

The third information generating subunit includes:

The decimal third information generation subunit is used to generate third dynamic interactive verification information including the second quantum bit string and the decimal second quantum bit string.

Optionally, the third dynamic interaction verification information sending unit includes:

The third dynamic interactive verification information quantum sending subunit is used to send the second quantum bit string to the server using the quantum state preparation basis if it is legal.

Optionally, the quantum state library of the client is synchronized with the quantum state library of the server and is changed regularly according to predetermined rules.

Optionally, the first dynamic interaction verification information includes an identity identifier of the client, and the identity identifier is used by the server to perform preliminary authentication on the client.

Optionally, the client's identity includes a user identification code and an identity certificate of the client.

Optionally, the first dynamic interaction verification information sending unit includes:

A first dynamic interaction verification information encryption subunit is configured to encrypt all or part of the first dynamic interaction verification information using a key and then send the encrypted information to the server;

The third dynamic interaction verification information sending unit includes:

The third dynamic interaction verification information encryption subunit is configured to encrypt all or part of the third dynamic interaction verification information with a key and then send the encrypted information to the server if the information is legitimate.

Optionally, the key and the key used for decryption on the server are symmetric quantum keys of each other, or are public-private keys of each other.

Optionally, the second dynamic interaction verification information receiving unit includes:

an encrypted second dynamic interaction verification information receiving subunit, configured to receive second dynamic interaction verification information generated based on the first dynamic interaction verification information and at least part of which is encrypted and sent by the server;

The second dynamic interactive verification information decryption subunit is used to decrypt the encrypted part of the information using a decryption key corresponding to the key used for encryption by the server.

Optionally, the decryption key and the key used for encryption on the server are symmetric quantum keys of each other, or are public-private keys of each other.

This application also provides an authentication method for the server, including:

Receiving first dynamic interaction verification information sent by the client;

generating second dynamic interaction verification information according to the first dynamic interaction verification information;

Sending the second dynamic interaction verification information to the client;

Receiving third dynamic interaction verification information generated according to the second dynamic interaction verification information and sent by the client;

Determine whether the client passes the authentication according to the third dynamic interaction verification information.

Optionally, the server and the client both pre-store corresponding or identical information processing methods, and a result of the server processing the dynamic interactive verification information according to the information processing method is corresponding or identical to a result of the client processing the dynamic interactive verification information;

The step of determining whether the client has passed authentication according to the third dynamic interaction verification information includes:

The third dynamic interaction verification information is processed using an information processing method corresponding to or the same as that of the client, and whether the client has passed the authentication is determined based on whether the processing result meets expectations.

Optionally, the server and the client both pre-store multiple groups of corresponding or identical information processing methods, and each group of information processing methods has a corresponding or identical information processing method identifier on the server and the client;

The dynamic interactive verification information includes an information processing method identifier;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

searching for a corresponding information processing method according to the information processing method identifier in the first dynamic interactive verification information;

The first dynamic interaction verification information is processed using the information processing method to generate second dynamic interaction verification information.

Optionally, the information processing method identifier is synchronized between the server and the client and is changed periodically.

Optionally, the server and the client both pre-store the same quantum state library containing a quantum state preparation base, where the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, and each quantum state preparation base has a corresponding quantum state preparation base identifier;

The first dynamic interactive verification information includes a quantum state preparation base identifier of at least one quantum state preparation base selected by the client;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

Searching for a corresponding quantum state preparation base in a quantum state library according to the quantum state preparation base identifier;

Generating a first quantum bit string using the quantum state preparation basis;

Second dynamic interactive verification information including the first quantum bit string is generated.

Optionally, the step of sending the second dynamic interaction verification information to the client includes:

The first quantum bit string is sent to the client using the quantum state preparation basis.

Optionally, the first dynamic interactive verification information further includes the length of the first quantum bit string;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

Searching for a corresponding quantum state preparation base in a quantum state library according to the quantum state preparation base identifier;

Generate a first quantum bit string using the quantum state preparation basis according to the length of the first quantum bit string;

Converting the first quantum bit string into a decimal first quantum bit string according to a decimal conversion method;

Second dynamic interactive verification information including the first quantum bit string and the decimal first quantum bit string is generated.

Optionally, the server and the client both pre-store the same quantum string length database, and the first dynamic interactive verification information further includes a first quantum bit string length code;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

Searching for a corresponding quantum state preparation base in a quantum state library according to the quantum state preparation base identifier; and

searching the quantum string length database for a corresponding first quantum bit string length according to the first quantum bit string length code;

Generate a first quantum bit string using the quantum state preparation basis according to the length of the first quantum bit string;

Converting the first quantum bit string into a decimal first quantum bit string according to a decimal conversion method;

Second dynamic interactive verification information including the first quantum bit string and the decimal first quantum bit string is generated.

Optionally, the third dynamic interactive verification information includes a quantum bit identifier and a bit value measurement result of the quantum state used by the client when measuring the second dynamic interactive verification information;

The step of determining whether the client has passed authentication according to the third dynamic interaction verification information includes:

Measuring the bit value of the first qubit string using the quantum state corresponding to the qubit identifier to obtain a server-side bit value measurement result;

The bit value measurement result is compared with the bit value measurement result of the server, and whether the client passes the authentication is determined based on whether the comparison result meets a preset judgment condition.

Optionally, the second dynamic interactive verification information further includes a quantum state preparation base identifier of the quantum state preparation base selected by the server and a length of the second quantum bit string;

The third dynamic interactive verification information includes the second quantum bit string generated by the client according to the quantum state preparation base identifier and the second quantum bit string length selected by the server;

The step of determining whether the client has passed authentication according to the third dynamic interaction verification information includes:

Measuring the bit value of the second quantum bit string using the quantum state preparation basis selected by the server to obtain a second quantum bit value measurement result;

Whether the client has passed the authentication is determined based on whether the second quantum bit value measurement result meets expectations.

Optionally, the second dynamic interactive verification information further includes a quantum state preparation base identifier of the quantum state preparation base selected by the server and a length of the second quantum bit string;

The third dynamic interactive verification information includes a second quantum bit string generated by the client according to the quantum state preparation basis identifier and the length of the second quantum bit string selected by the server, and a decimal second quantum bit string obtained by performing decimal conversion on the second quantum bit string;

The step of determining whether the client has passed authentication according to the third dynamic interaction verification information includes:

Measuring the bit value of the second quantum bit string using the quantum state preparation basis selected by the server to obtain a second quantum bit value measurement result;

Converting the decimal second quantum bit string into a converted second quantum bit string according to a decimal conversion method;

Measuring the length of the second quantum bit string to obtain a second quantum bit string length measurement result;

Whether the server has passed the authentication is determined based on whether the second quantum bit value measurement result meets expectations and whether the second quantum bit string length measurement result meets expectations.

Optionally, the quantum state library of the server is synchronized with the quantum state library of the client and is changed regularly according to a predetermined rule.

Optionally, the first dynamic interaction verification information includes an identity identifier of the client;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

Performing preliminary authentication on the client according to the identity identifier of the client;

If the preliminary authentication is passed, second dynamic interaction verification information is generated according to the first dynamic interaction verification information.

Optionally, the client's identity includes a user identification code and an identity certificate of the client.

Optionally, the step of sending the second dynamic interaction verification information to the client includes:

All or part of the second dynamic interaction verification information is encrypted with a key and sent to the server.

Optionally, the key and the key used for decryption by the client are symmetric quantum keys of each other, or are public-private keys of each other.

Optionally, the step of receiving the first dynamic interaction verification information sent by the client includes:

Receiving first dynamic interaction verification information sent by a client, at least part of which is encrypted;

Decrypting the encrypted portion of information using a decryption key corresponding to the key used for encryption by the client;

The step of receiving third dynamic interaction verification information generated according to the second dynamic interaction verification information and sent by the client includes:

receiving third dynamic interaction verification information sent by the client, at least part of which is encrypted and generated based on the second dynamic interaction verification information;

The encrypted portion of information is decrypted using a decryption key corresponding to the key used for encryption on the client.

Optionally, the decryption key and the key used for encryption on the client are symmetric quantum keys of each other, or are public-private keys of each other.

Accordingly, the present application also provides an authentication device for a server, comprising:

A first dynamic interaction verification information receiving unit, configured to receive first dynamic interaction verification information sent by a client;

a second dynamic interaction verification information generating unit, configured to generate second dynamic interaction verification information according to the first dynamic interaction verification information;

A second dynamic interaction verification information sending unit, configured to send the second dynamic interaction verification information to the client;

a third dynamic interaction verification information receiving unit, configured to receive third dynamic interaction verification information generated according to the second dynamic interaction verification information and sent by the client;

The third dynamic interaction verification information judgment unit is configured to judge whether the client has passed the authentication according to the third dynamic interaction verification information.

Optionally, the server and the client both pre-store corresponding or identical information processing methods, and a result of the server processing the dynamic interactive verification information according to the information processing method is corresponding or identical to a result of the client processing the dynamic interactive verification information;

The third dynamic interaction verification information judgment unit includes:

The third dynamic interactive verification information processing subunit is configured to process the third dynamic interactive verification information using an information processing method corresponding to or the same as that of the client, and determine whether the client has passed the authentication based on whether the processing result meets expectations.

Optionally, the server and the client both pre-store multiple groups of corresponding or identical information processing methods, and each group of information processing methods has a corresponding or identical information processing method identifier on the server and the client;

The dynamic interactive verification information includes an information processing method identifier;

The second dynamic interaction verification information generating unit includes:

a processing method query subunit, configured to search for a corresponding information processing method according to the information processing method identifier in the first dynamic interactive verification information;

The first information processing sub-unit is configured to process the first dynamic interaction verification information using the information processing method to generate second dynamic interaction verification information.

Optionally, the information processing method identifier is synchronized between the server and the client and is changed periodically.

Optionally, the server and the client both pre-store the same quantum state library containing a quantum state preparation base, where the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, and each quantum state preparation base has a corresponding quantum state preparation base identifier;

The first dynamic interactive verification information includes a quantum state preparation base identifier of at least one quantum state preparation base selected by the client;

The second dynamic interaction verification information generating unit includes:

A first server-side quantum query subunit is configured to search for a corresponding quantum state preparation basis in a quantum state library according to the quantum state preparation basis identifier;

A first server-side bit string generation subunit, configured to generate a first quantum bit string using the quantum state preparation basis;

The first server-side verification information generation subunit is used to generate second dynamic interactive verification information containing the first quantum bit string.

Optionally, the second dynamic interaction verification information sending unit includes:

The first quantum bit string sending subunit is used to send the first quantum bit string to the client using the quantum state preparation basis.

Optionally, the first dynamic interactive verification information further includes the length of the first quantum bit string;

The second dynamic interaction verification information generating unit includes:

A second server-side quantum query subunit is configured to search for a corresponding quantum state preparation basis in a quantum state library according to the quantum state preparation basis identifier;

A second server-side bit string generation subunit is configured to generate a first quantum bit string using the quantum state preparation basis according to the length of the first quantum bit string;

A second decimal conversion subunit, configured to convert the first quantum bit string into a decimal first quantum bit string according to a decimal conversion method;

The second server-side verification information generation subunit is used to generate second dynamic interactive verification information including the first quantum bit string and the decimal first quantum bit string.

Optionally, the server and the client both pre-store the same quantum string length database, and the first dynamic interactive verification information further includes a first quantum bit string length code;

The second dynamic interaction verification information generating unit includes:

A third server-side quantum query subunit searches for a corresponding quantum state preparation basis in a quantum state library according to the quantum state preparation basis identifier;

a third server-side length query subunit, searching the quantum string length database for a corresponding first quantum bit string length according to the first quantum bit string length code;

A third server-side bit string generation subunit is configured to generate a first quantum bit string using the quantum state preparation basis according to the length of the first quantum bit string;

A third decimal conversion subunit, configured to convert the first quantum bit string into a decimal first quantum bit string according to a decimal conversion method;

The third server-side verification information generation subunit is used to generate second dynamic interactive verification information including the first quantum bit string and the decimal first quantum bit string.

Optionally, the third dynamic interactive verification information includes a quantum bit identifier and a bit value measurement result of the quantum state used by the client when measuring the second dynamic interactive verification information;

The third dynamic interaction verification information judgment unit includes:

A server-side first quantum string measurement subunit, configured to measure the bit value of the first quantum bit string using the quantum state corresponding to the quantum bit identifier to obtain a server-side bit value measurement result;

The server-side measurement comparison subunit is configured to compare the bit value measurement result with the server-side bit value measurement result, and determine whether the client has passed the authentication based on whether the comparison result meets a preset judgment condition.

Optionally, the second dynamic interactive verification information further includes a quantum state preparation base identifier of the quantum state preparation base selected by the server and a length of the second quantum bit string;

The third dynamic interactive verification information includes the second quantum bit string generated by the client according to the quantum state preparation base identifier and the second quantum bit string length selected by the server;

The third dynamic interaction verification information judgment unit includes:

The first server-side bit string measurement subunit is used to measure the bit value of the second quantum bit string using the quantum state preparation basis selected by the server to obtain a second quantum bit value measurement result; the first server-side measurement judgment subunit is used to judge whether the client has passed the authentication based on whether the second quantum bit value measurement result meets expectations.

Optionally, the second dynamic interactive verification information further includes a quantum state preparation base identifier of the quantum state preparation base selected by the server and a length of the second quantum bit string;

The third dynamic interactive verification information includes a second quantum bit string generated by the client according to the quantum state preparation basis identifier and the length of the second quantum bit string selected by the server, and a decimal second quantum bit string obtained by performing decimal conversion on the second quantum bit string;

The third dynamic interaction verification information judgment unit includes:

A second server-side bit string measurement subunit is configured to measure the bit value of the second quantum bit string using the quantum state preparation basis selected by the server to obtain a second quantum bit value measurement result;

A second server-side decimal conversion subunit is configured to convert the decimal second quantum bit string into a converted second quantum bit string according to a decimal conversion method;

The second server-side length determination subunit is configured to measure the length of the second quantum bit string and obtain a second quantum bit string length measurement result;

The second server-side measurement and judgment subunit is used to judge whether the server has passed the authentication based on whether the second quantum bit value measurement result meets expectations and whether the second quantum bit string length measurement result meets expectations.

Optionally, the quantum state library of the server is synchronized with the quantum state library of the client and is changed regularly according to a predetermined rule.

Optionally, the first dynamic interaction verification information includes an identity identifier of the client;

The second dynamic interaction verification information generating unit includes:

A preliminary authentication subunit, configured to perform preliminary authentication on the client according to the identity identifier of the client;

The second dynamic interaction verification information generating subunit is configured to generate second dynamic interaction verification information according to the first dynamic interaction verification information if the preliminary authentication is passed.

Optionally, the client's identity includes a user identification code and an identity certificate of the client.

Optionally, the second dynamic interaction verification information sending unit includes:

The encrypted second dynamic interaction verification information sending subunit is configured to encrypt all or part of the second dynamic interaction verification information with a key and then send the encrypted information to the server.

Optionally, the key and the key used for decryption by the client are symmetric quantum keys of each other, or are public-private keys of each other.

Optionally, the first dynamic interaction verification information receiving unit includes:

The encrypted first dynamic interaction verification information receiving subunit is configured to receive the first dynamic interaction verification information sent by the client, at least part of which is encrypted;

A first dynamic interactive authentication information decryption subunit, configured to decrypt the encrypted portion of information using a decryption key corresponding to the key used for encryption by the client;

The third dynamic interaction verification information receiving unit includes:

an encrypted third dynamic interaction verification information receiving subunit, configured to receive third dynamic interaction verification information generated based on the second dynamic interaction verification information, at least part of which is encrypted and sent by the client;

The third dynamic interactive verification information decryption subunit is used to decrypt the encrypted part of the information using a decryption key corresponding to the key used for encryption by the client.

Optionally, the decryption key and the key used for encryption on the client are symmetric quantum keys of each other, or are public-private keys of each other.

This application also provides an authentication terminal device for a client, including:

CPU;

Input and output units;

Memory;

The memory stores the authentication method for the client provided in this application; and can run according to the above method after startup.

This application also provides an authentication terminal device for a server, including:

CPU;

Input and output units;

Memory;

The memory stores the authentication method for the server provided in this application; and can run according to the above method after startup.

The present application also provides a system for user authentication, including a client and a server, wherein the client is configured with the authentication device for the client provided in the present application, and the server is configured with the authentication device for the server provided in the present application.

Compared with the prior art, this application has the following advantages:

The present application provides an authentication method for a client, which first generates a first dynamic interactive verification information; then sends the first dynamic interactive verification information to the server; next, receives the second dynamic interactive verification information generated by the server according to the first dynamic interactive verification information; then determines whether the server is legitimate according to the second dynamic interactive verification information, and generates a third dynamic interactive verification information according to the second dynamic interactive verification information; if it is legitimate, sends the third dynamic interactive verification information to the server, so that the server can determine whether the client has passed the authentication according to the third dynamic interactive verification information. Compared with the traditional dynamic password authentication, this method realizes the interactive authentication between the client and the server through the interactive communication between the client and the server, which can prevent fake servers from deceiving legitimate users. At the same time, since both the client and the server dynamically use the other party's verification information to make their own verification information and then send it to the other party for verification, it can resist man-in-the-middle attacks and decimal attacks. After the verification information is processed in a quantum state, the security of the transmission and storage of the verification information can be further improved.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a flow chart of an embodiment of an authentication method for a client provided by the present application;

FIG2 is a schematic diagram of an embodiment of an authentication device for a client provided by the present application;

FIG3 is a flow chart of an embodiment of an authentication method for a server provided by the present application;

FIG4 is a schematic diagram of an embodiment of an authentication device for a server provided in the present application.

DETAILED DESCRIPTION

The following description sets forth many specific details to facilitate a thorough understanding of the present application. However, the present application can be implemented in many other ways than those described herein, and those skilled in the art can make similar generalizations without violating the scope of the present application. Therefore, the present application is not limited to the specific implementations disclosed below.

The present application provides an authentication method for a client, an authentication device for a client, and an authentication terminal device for a client, an authentication method for a server, an authentication device for a server, and an authentication terminal device for a server, as well as a system for user authentication. The embodiments of the present application are described in detail below in conjunction with the accompanying drawings.

Please refer to FIG1 , which is a flowchart of an embodiment of an authentication method for a client provided by this application. The method includes the following steps:

Step S101: Generate first dynamic interaction verification information.

In this step, first dynamic interaction verification information is generated. The first dynamic interaction verification information is sent to the server, so that the server can generate second dynamic interaction verification information based on the first dynamic interaction verification information.

In one embodiment provided herein, the client and the server both pre-store corresponding or identical information processing methods, and the client's processing result of dynamic interactive verification information according to the information processing method is corresponding or identical to the server's processing result of the dynamic interactive verification information. The step of generating first dynamic interactive verification information includes: generating first dynamic interactive verification information that can be processed using the information processing method.

In another embodiment provided herein, the client and the server both pre-store multiple sets of corresponding or identical information processing methods, and each set of information processing methods has a corresponding or identical information processing method identifier on both the client and the server. The step of generating first dynamic interactive verification information includes generating first dynamic interactive verification information including the information processing method identifier. The information processing method identifier is used by the server to search for the corresponding information processing method based on the information processing method identifier.

Furthermore, in an embodiment provided in the present application, the information processing method identifier is synchronized between the client and the server and is changed periodically. In this way, the information processing method corresponding to the information processing method identifier sent during each authentication may be different, thereby increasing the difficulty of deciphering, effectively preventing the first dynamic interactive verification information from being forged or copied, and improving security.

In a preferred embodiment provided by the present application, the client and the server both pre-store the same quantum state library containing a quantum state preparation base, wherein the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, and each quantum state preparation base has a corresponding quantum state preparation base identifier, and the first dynamic interactive verification information includes the quantum state preparation base identifier. The step of generating the first dynamic interactive verification information includes:

Selecting at least one quantum state preparation basis from a quantum state library;

extracting a quantum state preparation base identifier of the quantum state preparation base;

Generate first dynamic interactive verification information including the quantum state preparation base identifier.

Taking into account that the parameters for producing the quantum bit string by the quantum state preparation base can be pre-set or specified by the client, in one embodiment provided in the present application, the first dynamic interactive verification information also includes the length of the first quantum bit string, so that the server can generate the corresponding first quantum bit string based on the length of the first quantum bit string, thereby improving the reliability of authentication.

In a preferred embodiment provided herein, a lightweight quantum state library is installed on both the client and server. The library contains multiple orthogonal quantum state preparation bases, each with a different quantum state preparation base identifier. The quantum states in each quantum state preparation base correspond to corresponding qubit identifiers, and the quantum state preparation base identifier can be a number. For example, the quantum state preparation base {|0>,|1>} is numbered 1, where the qubit identifier corresponding to quantum state |0> is 1.1, and the qubit identifier corresponding to quantum state |1> is 1.2; the quantum state preparation base {|+>,|->} is numbered 2, where the qubit identifier corresponding to quantum state |+> is 2.1, and the qubit identifier corresponding to quantum state |2> is 2.2, and so on.

It should be noted that the quantum state preparation base number can be periodically re-numbered synchronously on the client and server based on a certain type of algorithm. For example, x represents the current number of the quantum state, and y represents the quantum state number at the next request, then y can be derived with x as the base, and the derivation rule can be y=2x; or y=2+x, etc., rules negotiated by the client and the server. This prevents the quantum state library from being stolen or cracked, resulting in the counterfeit server initiating deception against the client. In one embodiment provided in the present application, the selection of at least one quantum state preparation base from the quantum state library is carried out in a random manner to ensure that the quantum state preparation base selected for each authentication is different, thereby realizing the dynamic variability of the first dynamic interactive verification information, thereby preventing the first dynamic interactive verification information from being forged or copied.

During specific implementation, the client randomly selects one or more quantum state preparation bases from the quantum state library, and uses the number of the quantum state preparation base and the length ι of the quantum bit string sent with this number as the first dynamic interactive verification information, for example: {quantum state preparation base identifier 1, ι ₁ ; quantum state preparation base identifier 2, ι ₂ ; ... quantum state preparation base identifier n, ι _n }. For example, assuming that the client randomly selects two quantum state preparation bases with quantum state preparation base numbers 2 and 4, and their lengths are 3 and 6 respectively, then the first dynamic interactive verification information is {2, 3; 4, 6}.

It should be noted that in the above-mentioned preferred embodiment, the length of the first quantum bit string can also be sent in the form of a code to increase the difficulty of deciphering the present method and further improve the security. For example, the same quantum string length database is pre-stored on the client and the server, and the first dynamic interactive verification information also includes a first quantum bit string length code. After receiving the first quantum bit string length code, the server searches for the corresponding first quantum bit string length in the quantum string length database, which can be used to generate the corresponding first quantum bit string.

Step S102: Send the first dynamic interaction verification information to the server.

Through step S101, the first dynamic interaction verification information has been generated. Next, the first dynamic interaction verification information needs to be sent to the server.

In a preferred embodiment provided in the present application, the first dynamic interactive verification information includes a quantum state preparation base identifier and a first quantum bit string length;

The step of sending the first dynamic interaction verification information to the server includes:

The quantum state preparation basis identifier and the length of the first quantum bit string are sent to the server.

To prevent fake clients from maliciously attacking the server, forging client authentication, or illegal user access, in one embodiment provided herein, the first dynamic interactive verification information also includes the client's identity identifier, which is used by the server to perform preliminary authentication of the client, such as the client's user identification code and identity certificate. After receiving the identity identifier, the server performs preliminary authentication of the client based on the identity identifier. If the preliminary authentication passes, the server continues; otherwise, the server determines that the client is illegal and terminates the authentication process.

Still taking the above preferred embodiment as an example, the step of sending the first dynamic interaction verification information to the server includes:

The quantum state preparation base identifier, the length of the first quantum bit string and the client's identity identifier are sent to the server, wherein the client's identity identifier includes the client's user identification code and identity certificate.

For example, the extracted quantum state preparation base identifier and the length of the first quantum bit string are {2,3; 4,6}, the client's user identifier is userid_A, and the client's identity certificate is Cer_A, then the first dynamic interactive verification information sent to the server is: {2,3; 4,6}, userid_A, Cer_A.

Taking into account the security of data transmission, in one embodiment provided in the present application, the client needs to encrypt the first dynamic interaction verification information before sending it, and can use the https encrypted transmission protocol for transmission.

The step of sending the first dynamic interaction verification information to the server includes:

Encrypting all or part of the first dynamic interaction verification information with a key and sending the encrypted information to the server;

Continuing with the above preferred embodiment, the client and server each have their own public-private key pair and identity certificate before communication, or they share a symmetric quantum key. The public-private key pair, identity certificate, and shared symmetric quantum key can be dynamically changed based on business needs. In one embodiment provided in this application, based on the client's computing power, when communicating with the server, the symmetric quantum key Key_AB is used to ensure the security of sensitive data transmitted.

In a specific embodiment provided in the present application, part of the information in the first dynamic interactive verification information can be encrypted and sent to the server. For example, the quantum state preparation base identifier and the length of the first quantum bit string are encrypted using the symmetric quantum key Key_AB, and the first dynamic interactive verification information sent to the server is: {2,3;4,6} _{Key_AB} , userid_A, Cer_A.

Step S103: receiving second dynamic interaction verification information generated according to the first dynamic interaction verification information and sent by the server.

Through step S102, the first dynamic interaction verification information has been sent to the server. Next, the second dynamic interaction verification information generated according to the first dynamic interaction verification information and sent by the server is received.

After receiving the first dynamic interaction verification information, the server generates second dynamic interaction verification information according to the first dynamic interaction verification information, and sends the second dynamic interaction verification information to the client for verification.

Taking into account the security of data transmission, in one embodiment provided in the present application, the server needs to encrypt the dynamic interaction verification information before sending it, and can use the https encrypted transmission protocol for transmission.

In a preferred embodiment provided in the present application, the client and the server both pre-store the same quantum state library containing a quantum state preparation base, the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, each of the quantum state preparation bases has a corresponding quantum state preparation base identifier, and the first dynamic interactive verification information includes the quantum state preparation base identifier; the second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base on the server according to the quantum state preparation base identifier, and generating a first quantum bit string through the quantum state preparation base, the first quantum bit string is sent to the client through the quantum state preparation base, and the client uses the same quantum state preparation base to receive the first quantum bit string.

In one embodiment provided in the present application, the first dynamic interactive verification information also includes the length of the first quantum bit string; the second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base on the server according to the quantum state preparation base identifier, and generating a first quantum bit string through the quantum state preparation base according to the length of the first quantum bit string, and the first quantum bit string is sent to the client through the quantum state preparation base.

In one embodiment provided in the present application, the client and the server both pre-store the same quantum string length database, and the first dynamic interactive verification information also includes a first quantum bit string length code; the second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base in the quantum state library according to the quantum state preparation base identifier, querying the corresponding first quantum bit string length in the quantum string length database according to the first quantum bit string length code, and then generating a first quantum bit string through the quantum state preparation base according to the first quantum bit string length, and the first quantum bit string is sent to the client through the quantum state preparation base.

In one embodiment provided in the present application, the second dynamic interactive verification information also includes a decimal first quantum bit string obtained by performing a decimal conversion on the first quantum bit string. After generating the first quantum bit string, the server also converts the first quantum bit string into a decimal first quantum bit string using a decimal conversion method, and encrypts it using a symmetric quantum key before transmitting it to the client. The receiving of the second dynamic interactive verification information generated by the server based on the first dynamic interactive verification information further includes: receiving the decimal first quantum bit string generated by the server based on the first dynamic interactive verification information.

In one embodiment provided in the present application, the second dynamic interaction verification information is sent after being encrypted. Therefore, the step of receiving the second dynamic interaction verification information generated by the server based on the first dynamic interaction verification information includes:

receiving second dynamic interaction verification information sent by the server and generated based on the first dynamic interaction verification information, at least part of which is encrypted;

The encrypted portion of information is decrypted using a decryption key corresponding to the key used for encryption on the server side.

The decryption key and the key used for encryption on the server are symmetric quantum keys of each other, or public-private keys of each other.

Still taking the above-mentioned specific preferred embodiment as an example, after the server passes the preliminary authentication of the client, it searches for the corresponding symmetric quantum key Key_AB according to the user identifier, decrypts {2,3;4,6} _{Key_AB} to obtain {2,3;4,6}, queries the quantum state preparation basis a represented by the quantum state preparation basis identifier 2, and uses the quantum state preparation basis a to generate a bit string q1 with a length of 3; and queries the quantum state preparation basis b represented by the quantum state preparation basis identifier 4, and uses the quantum state preparation basis b to generate a bit string q2 with a length of 6; q1 and q2 together constitute the first quantum bit string. Since the first quantum bit string is a quantum state, the corresponding quantum state preparation basis is used to send it to the client. In addition, the server uses a decimal conversion method to convert each of the bit strings into a decimal bit string, for example, converting q1 into decimal Q1 and converting q2 into Q2, and Q1 and Q2 together constitute the decimal first quantum bit string, and then encrypting it with the symmetric quantum key Key_AB, and transmitting {Q1, Q2} _{Key_AB} to the client. After receiving the {Q1, Q2} _{Key_AB} , the client decrypts it to obtain the decimal first quantum bit string Q1, Q2.

Step S104: judging whether the server is legitimate according to the second dynamic interaction verification information, and generating third dynamic interaction verification information according to the second dynamic interaction verification information.

Through step S103, the second dynamic interaction verification information generated according to the first dynamic interaction verification information sent by the server has been received. Next, it is necessary to determine whether the server is legal according to the second dynamic interaction verification information, and generate third dynamic interaction verification information according to the second dynamic interaction verification information.

In one embodiment provided by the present application, the client and the server both pre-store corresponding or identical information processing methods, and the processing result of the dynamic interaction verification information by the client according to the information processing method is corresponding or identical to the processing result of the dynamic interaction verification information by the server. Based on the above setting, the client generates the first dynamic interaction verification information and sends it to the server. The server generates the second dynamic interaction verification information after processing the first dynamic interaction verification information according to the predetermined information processing method. After receiving the second dynamic interaction verification information, the client can use the corresponding information processing method to process the second dynamic interaction verification information, and judge whether the server is legal based on whether the processing result meets expectations or based on the correlation between the processing result and the first dynamic interaction verification information; or it can use the corresponding or identical information processing method to process the first dynamic interaction verification information, and judge whether the server is legal based on whether the processing result meets expectations or based on the correlation between the processing result and the second dynamic interaction verification information.

It is easy to understand that the essence of the above embodiment is that the client sends designated information to the server, and the server processes the designated information according to a predetermined processing method to generate verification information and sends it to the client. The client judges the legitimacy of the server based on whether the processing result meets expectations or based on the correlation between the verification information and the designated information. This application does not limit the specific form of the designated information, the verification information, and the processing method. As long as the client authenticates the server through the above essential method, it is within the scope of protection of this application and will not be repeated here.

In one embodiment provided in the present application, the client and the server both pre-store multiple groups of corresponding or identical information processing methods, and each group of the information processing methods has a corresponding or identical information processing method identifier on the client and the server;

The dynamic interactive verification information includes an information processing method identifier;

The step of processing the second dynamic interactive verification information according to a pre-stored information processing method and determining whether the server is legitimate based on the processing result includes:

querying a corresponding pre-stored information processing method according to the information processing method identifier in the first dynamic interactive verification information;

The second dynamic interaction verification information is processed according to the information processing method, and whether the server is legitimate is determined based on whether the processing result meets expectations.

In a preferred embodiment provided in the present application, the client and the server both pre-store the same quantum state library containing a quantum state preparation base, wherein the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, and each quantum state preparation base has a corresponding quantum state preparation base identifier, and the first dynamic interactive verification information includes the quantum state preparation base identifier;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation basis on the server according to the quantum state preparation basis identifier, and generating a first quantum bit string through the quantum state preparation basis;

The step of determining whether the server is legitimate according to the second dynamic interaction verification information includes:

Measuring the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier to obtain a bit value measurement result;

Whether the server is legitimate is determined based on whether the bit value measurement result meets expectations.

It is easy to understand that the quantum state preparation basis corresponding to the quantum state preparation basis identifier is, for the client, the measurement basis of the first quantum bit string sent by the server, and for the server, it is the quantum state preparation basis of the first quantum bit string sent to the client.

According to the above method provided in the present application, the first quantum bit string is generated based on the quantum state preparation base identifier sent by the client. In view of the non-cloning and test collapse properties of the quantum bit string, by measuring the first quantum bit string, whether the server is legal can be effectively judged based on whether the bit value measurement result meets the expectation, thereby realizing the authentication of the server by the client. At the same time, using the quantum bit string as dynamic verification information can effectively avoid the leakage of dynamic verification information, thereby resisting the attacks of middlemen and the deception initiated by forged servers.

Taking into account the uncertainty of the quantum state itself, the measurement of the first quantum bit string is based on the probability of determining whether the bit value measurement result meets the expectation. In order to further increase the accuracy of the server authentication, in one embodiment provided in the present application, the first dynamic interactive verification information also includes the length of the first quantum bit string; the second dynamic interactive verification information also includes the decimal first quantum bit string obtained by decimal conversion of the first quantum bit string;

The step of determining whether the server is legitimate according to the second dynamic interaction verification information includes:

Measuring the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier to obtain a bit value measurement result;

Converting the decimal first quantum bit string into a converted first quantum bit string according to a decimal conversion method;

Measuring the length of the first quantum bit string to obtain a bit string length measurement result;

Whether the server is legitimate is determined based on whether the bit value measurement result meets expectations and whether the bit string length measurement result meets expectations.

Among them, with respect to the measurement of the first quantum bit string, in one embodiment provided in the present application, the client and the server both pre-store the same quantum string length database, and the first dynamic interactive verification information also includes a first quantum bit string length code. In this case, the step of measuring the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier includes:

Searching for a quantum state preparation base corresponding to the quantum state preparation base identifier in a quantum state library;

The quantum state of the quantum state preparation basis is randomly selected to measure the bit value of the first quantum bit string.

In the above embodiment, taking into account that the quantum bit string will cause a certain bit error rate due to light attenuation during the transmission process, whether the bit value measurement result meets expectations can be judged by whether the bit error rate of the first quantum bit string meets expectations. For example, it is judged whether the bit error rate of the first quantum bit string is lower than the preset bit error rate threshold. For example, the preset bit error rate threshold is 6%, and the detected bit error rate of the first quantum bit string is 5%, then it is judged that the bit error rate of the first quantum bit string meets expectations, that is, the bit value measurement result meets expectations; in addition, the accuracy rate and other multiple dimensions can also be used to judge whether the bit value measurement result meets expectations, which will not be repeated here, and they are all within the scope of protection of this application.

In one embodiment provided in the present application, whether the bit string length measurement result meets expectations can be determined by comparing the bit string length measurement result with the first quantum bit string length. Because the first quantum bit string is generated based on the first quantum bit string length, the bit string length measurement result should not be greater than the first quantum bit string length. At the same time, considering the influence of light attenuation, the difference between the bit string length measurement result and the first quantum bit string length should not exceed a predetermined threshold. If the above judgment conditions are not met, it is considered that the bit string length measurement result does not meet expectations.

In one embodiment provided in the present application, the step of generating third dynamic interaction verification information according to the second dynamic interaction verification information includes:

The bit value measurement result and the quantum bit identifier of the quantum state used in the measurement are used as third dynamic interactive verification information.

In this way, the server can use the quantum state of the quantum state preparation basis corresponding to the quantum bit identifier to measure the first quantum bit string, and compare the bit value measurement result of the server with the bit value measurement result sent by the client. If it meets the preset judgment conditions, the client can be judged to be legal and the authentication is passed.

Still taking the above preferred specific embodiment as an example, after the client obtains the quantum bit strings q1 and q2 sent by the server using the quantum state preparation base, and the decimal first quantum bit strings Q1 and Q2 sent using the symmetric quantum key, the client randomly selects the quantum states in the quantum state preparation base corresponding to the quantum state preparation base identifiers 2 and 4 to measure the quantum bit strings q1 and q2 (this randomness means randomly selecting one of the two quantum states of the same group of orthogonal states. For example, for the quantum state preparation base with the quantum state preparation base identifier 2: {|0>,|1>}, in the process of randomly selecting the preparation base, the randomly selected quantum state may be |0> or |1>. In order to distinguish, the quantum state can be marked with a quantum bit, such as the quantum bit identifier of the quantum state |0> is 2.1, and the quantum bit identifier of the quantum state |1> is 2.2). For example, randomly selecting Select the quantum state with quantum bit identification 2.1 and the quantum state with quantum bit identification 4.2 to measure q1 and q2 respectively, and obtain a bit value measurement result of m. According to whether the bit value measurement result m meets the preset threshold condition, it is judged whether the bit value measurement result meets expectations; at the same time, the decimal first quantum bit strings Q1 and Q2 are converted into first quantum bit strings q1 and q2 according to the decimal conversion method, and the bit string length measurement results of the first quantum bit strings q1 and q2 are obtained by measurement. According to the difference between the length of q1 and q2 and the first quantum bit string length 3 and 6 in the first dynamic interactive verification information, it is judged whether the bit string length measurement result meets expectations; finally, according to whether the bit value measurement result m meets expectations and whether the bit string length measurement result meets expectations, it can be judged whether the server is legal. Afterwards, the bit value measurement result m and the quantum bit identifiers 2.1 and 4.2 of the quantum state used in the measurement are sent to the server. The server can then use the quantum states corresponding to the quantum bit identifiers 2.1 and 4.2 to measure the first quantum bit strings q1 and q2 of the server to obtain the second quantum bit value measurement result n. The second quantum bit value measurement result n of the server is compared with the bit value measurement result m of the client. Whether the client has passed the authentication can be determined based on whether the difference is as expected.

It should be noted that the above embodiments only use q1 and q2 as examples. This application does not limit the number and length of the quantum bit strings, as well as the specific measurement method, length judgment method and comparison method. Any specific implementation method that can realize the concept of the present invention is within the scope of protection of this application.

In the above embodiment, the bit value measurement result and the quantum bit identifier of the quantum state used in the measurement are used as the third dynamic interactive verification information for the server to perform measurement and comparison to complete the authentication of the client. In addition to the above method, the server's authentication of the client can also adopt the above-mentioned client-server authentication method. For example, in one embodiment provided in this application, the second dynamic interactive verification information also includes the code of the quantum state preparation basis selected by the server and the length of the second quantum bit string;

The step of generating third dynamic interaction verification information according to the second dynamic interaction verification information includes:

Querying the quantum state preparation base corresponding to the code of the quantum state preparation base selected by the server in the quantum state library;

generating a second qubit string using the quantum state preparation basis according to the length of the second qubit string;

Generate third dynamic interactive verification information including the second quantum bit string.

The second quantum bit string is sent to the server using the quantum state preparation basis.

In this way, the server uses the quantum state preparation basis selected by the server to measure the bit value of the second quantum bit string to obtain the second quantum bit value measurement result. Based on whether the bit value measurement result meets expectations, it can be determined whether the client has passed the authentication.

In one embodiment provided in the present application, the step of generating third dynamic interactive verification information according to the second dynamic interactive verification information further includes: converting the second quantum bit string according to a decimal conversion method to obtain a decimal second quantum bit string;

The step of generating third dynamic interactive verification information including the second quantum bit string comprises:

Generate third dynamic interactive verification information including the second quantum bit string and the decimal second quantum bit string.

The second quantum bit string is sent to the server end using the quantum state preparation basis, and the decimal second quantum bit string is encrypted using a symmetric quantum key and then sent to the server end.

In this way, the server then uses the quantum state preparation basis selected by the server to measure the bit value of the second quantum bit string to obtain a second quantum bit value measurement result, and judges whether the second quantum bit value measurement result meets expectations based on whether the second quantum bit value measurement result meets the preset threshold condition, and measures the length of the second quantum bit string to obtain a second quantum bit string length measurement result, and judges whether the second quantum bit string length measurement result meets expectations based on whether the difference between the second quantum bit string length measurement result and the length of the second quantum bit string meets the preset condition. Whether the client has passed the authentication can be determined based on whether the bit value measurement result meets expectations and whether the bit string length measurement result meets expectations.

Since the above-mentioned server-to-client authentication method is similar to the aforementioned client-to-server authentication method, please refer to the above description for the relevant details and will not be repeated here. It should be noted that this application does not limit the specific method of authentication. As long as the implementation method conforms to the inventive concept of this application, it is within the scope of protection of this application.

Step S104: If it is legal, the third dynamic interaction verification information is sent to the server, so that the server determines whether the client has passed the authentication based on the third dynamic interaction verification information.

Through step S105, whether the server is legal is determined based on the second dynamic interaction verification information, and third dynamic interaction verification information is generated based on the second dynamic interaction verification information. If it is legal, the third dynamic interaction verification information is sent to the server, so that the server can determine whether the client has passed the authentication based on the third dynamic interaction verification information.

Considering the security of data transmission, in one embodiment provided in this application, the client needs to encrypt part or all of the third dynamic interaction verification information before sending it, and can use the https encrypted transmission protocol for transmission. If the third dynamic interaction verification information is legal, the step of sending the third dynamic interaction verification information to the server includes:

If it is legal, all or part of the third dynamic interactive verification information is encrypted with a key and sent to the server.

Still taking the above preferred specific embodiment as an example, after the client authenticates the legitimacy of the server, it encrypts the bit value measurement result m and the quantum bit identifiers 2.1 and 4.2 of the quantum state used in the measurement with the symmetric quantum key Key_AB and sends them to the server. For example, the information sent is: {bit value measurement result m, quantum bit identifier 2.1, quantum bit identifier 4.2} _{Key_AB} .

At this point, through steps S101 to S105, the authentication process for the client is completed. The server can then determine whether the client has passed the authentication based on the third dynamic interactive verification information. Compared to traditional dynamic password authentication, this method realizes interactive authentication between the client and the server through interactive communication between the client and the server, which can prevent fake servers from deceiving legitimate users. At the same time, since both the client and the server dynamically use the other party's verification information to produce their own verification information and then send it to the other party for verification, it can resist man-in-the-middle attacks and decimal attacks. After the verification information is processed in a quantum state, the security of the verification information transmission and storage can be further improved.

In the above-mentioned embodiment, a client authentication method is provided. Accordingly, this application also provides a client authentication device. Please refer to Figure 2, which is a schematic diagram of an embodiment of a client authentication device provided by this application. Since the device embodiment is substantially similar to the method embodiment, the description is relatively brief. For relevant details, please refer to the description of the method embodiment. The device embodiment described below is merely illustrative.

This embodiment provides an authentication device for a client, including: a first dynamic interaction verification information generating unit 101, configured to generate first dynamic interaction verification information; a first dynamic interaction verification information sending unit 102, configured to send the first dynamic interaction verification information to a server; a second dynamic interaction verification information receiving unit 103, configured to receive second dynamic interaction verification information generated according to the first dynamic interaction verification information and sent by the server; a second dynamic interaction verification information verifying unit 104, configured to determine whether the server is legitimate according to the second dynamic interaction verification information, and to generate third dynamic interaction verification information according to the second dynamic interaction verification information; and a third dynamic interaction verification information sending unit 105, configured to send the third dynamic interaction verification information to the server if the server is legitimate, so that the server can determine whether the client has passed the authentication according to the third dynamic interaction verification information.

Optionally, the client and the server both pre-store corresponding or identical information processing methods, and a result of the client processing the dynamic interactive verification information according to the information processing method is corresponding or identical to a result of the server processing the dynamic interactive verification information;

The second dynamic interaction verification information verification unit 104 includes:

The processing and judging subunit is used to process the second dynamic interactive verification information according to a pre-stored information processing method, and judge whether the server is legal according to the processing result.

Optionally, the client and the server both pre-store multiple groups of corresponding or identical information processing methods, and each group of information processing methods has a corresponding or identical information processing method identifier on the client and the server;

The dynamic interactive verification information includes an information processing method identifier;

The processing and judging subunit includes:

a processing method query subunit, configured to query a corresponding pre-stored information processing method according to the information processing method identifier in the first dynamic interactive verification information;

The processing method processing subunit is used to process the second dynamic interactive verification information according to the information processing method, and determine whether the server is legal based on the processing result.

Optionally, the information processing method identifier is synchronized between the client and the server and is changed periodically.

Optionally, both the client and the server pre-store the same quantum state library containing a quantum state preparation base, the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, each quantum state preparation base has a corresponding quantum state preparation base identifier, and the first dynamic interactive verification information includes the quantum state preparation base identifier;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation basis on the server according to the quantum state preparation basis identifier, and generating a first quantum bit string through the quantum state preparation basis;

The second dynamic interaction verification information verification unit 104 includes:

a first quantum measurement subunit, configured to measure the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier to obtain a bit value measurement result;

The first quantum judgment subunit is used to judge whether the server is legal according to whether the bit value measurement result meets expectations.

Optionally, the first dynamic interaction verification information generating unit 101 includes:

A first preparation base selection subunit, configured to select at least one quantum state preparation base from a quantum state library;

A first identifier extraction subunit, configured to extract a quantum state preparation base identifier of the quantum state preparation base;

The first verification information generating subunit is used to generate first dynamic interactive verification information including the quantum state preparation base identifier.

Optionally, the at least one quantum state preparation base is selected from the quantum state library in a random selection manner, and the quantum state preparation base selected for each authentication is different.

Optionally, the first dynamic interactive verification information further includes the length of the first quantum bit string;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base on the server according to the quantum state preparation base identifier, and generating a first quantum bit string through the quantum state preparation base according to the length of the first quantum bit string, and the first quantum bit string is sent to the client through the quantum state preparation base.

Optionally, the second dynamic interactive verification information further includes a decimal first quantum bit string obtained by performing decimal conversion on the first quantum bit string;

The second dynamic interaction verification information verification unit 104 includes:

a second quantum measurement subunit, configured to measure the bit value of the first quantum bit string using the quantum state preparation basis corresponding to the quantum state preparation basis identifier to obtain a bit value measurement result;

A second conversion subunit, configured to convert the decimal first quantum bit string into a converted first quantum bit string according to a decimal conversion method;

A second length measurement subunit is used to measure the length of the first quantum bit string and obtain a bit string length measurement result;

The second judgment subunit is configured to judge whether the server is legal according to whether the bit value measurement result meets expectations and whether the bit string length measurement result meets expectations.

Optionally, the client and the server both pre-store the same quantum string length database, and the first dynamic interactive verification information further includes a first quantum bit string length code;

The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base in the quantum state library according to the quantum state preparation base identifier, querying the corresponding first quantum bit string length in the quantum string length database according to the first quantum bit string length code, and then generating a first quantum bit string through the quantum state preparation base according to the first quantum bit string length, and the first quantum bit string is sent to the client through the quantum state preparation base.

Optionally, the first quantum measurement subunit includes:

A first quantum query subunit is configured to search a quantum state preparation base corresponding to the quantum state preparation base identifier in a quantum state library;

The first random measurement subunit is used to randomly select the quantum state of the quantum state preparation basis to measure the bit value of the first quantum bit string.

Optionally, the second dynamic interaction verification information verification unit 104 includes:

The third dynamic verification information generating subunit is configured to use the bit value measurement result and the quantum bit identifier of the quantum state used in the measurement as the third dynamic interactive verification information.

Optionally, the second dynamic interactive verification information further includes a quantum state preparation basis identifier and a second quantum bit string length selected by the server;

The second dynamic interaction verification information verification unit 104 includes:

A second quantum query subunit is used to query the quantum state preparation base corresponding to the quantum state preparation base identifier selected by the server in the quantum state library;

A second quantum preparation subunit, configured to generate a second quantum bit string using the quantum state preparation basis according to the length of the second quantum bit string;

The third information generation subunit is used to generate third dynamic interactive verification information containing the second quantum bit string.

Optionally, the second dynamic interaction verification information verification unit 104 further includes:

a decimal conversion subunit, configured to convert the second quantum bit string according to a decimal conversion method to obtain a decimal second quantum bit string;

The third information generating subunit includes:

The decimal third information generation subunit is used to generate third dynamic interactive verification information including the second quantum bit string and the decimal second quantum bit string.

Optionally, the third dynamic interaction verification information sending unit 105 includes:

The third dynamic interactive verification information quantum sending subunit is used to send the second quantum bit string to the server using the quantum state preparation basis if it is legal.

Optionally, the quantum state library of the client is synchronized with the quantum state library of the server and is changed regularly according to predetermined rules.

Optionally, the first dynamic interaction verification information includes an identity identifier of the client, and the identity identifier is used by the server to perform preliminary authentication on the client.

Optionally, the client's identity includes a user identification code and an identity certificate of the client.

Optionally, the first dynamic interaction verification information sending unit 102 includes:

A first dynamic interaction verification information encryption subunit is configured to encrypt all or part of the first dynamic interaction verification information using a key and then send the encrypted information to the server;

The third dynamic interaction verification information sending unit 105 includes:

The third dynamic interaction verification information encryption subunit is configured to encrypt all or part of the third dynamic interaction verification information with a key and then send the encrypted information to the server if the information is legitimate.

Optionally, the key and the key used for decryption on the server are symmetric quantum keys of each other, or are public-private keys of each other.

Optionally, the second dynamic interaction verification information receiving unit 103 includes:

an encrypted second dynamic interaction verification information receiving subunit, configured to receive second dynamic interaction verification information generated based on the first dynamic interaction verification information and at least part of which is encrypted and sent by the server;

The second dynamic interactive verification information decryption subunit is used to decrypt the encrypted part of the information using a decryption key corresponding to the key used for encryption by the server.

Optionally, the decryption key and the key used for encryption on the server are symmetric quantum keys of each other, or are public-private keys of each other.

The above is an embodiment of an authentication device for a client provided by this application.

The present application also provides an authentication method for a server. Please refer to FIG3 , which is a flow chart of an embodiment of an authentication method for a server provided by the present application. The execution subject of this method is the server. This method is implemented in conjunction with the aforementioned authentication method for a client. Some contents will not be repeated here. Please refer to the aforementioned embodiment of the authentication method for a client for understanding. The method includes the following steps:

Step S201: receiving first dynamic interaction verification information sent by a client.

In this step, first, first dynamic interaction verification information sent by the client is received.

Among them, the first dynamic interaction verification information is generated by the client, and is used by the server to generate second dynamic interaction verification information based on the first dynamic interaction verification information after receiving the first dynamic interaction verification information. In this way, after receiving the second dynamic interaction verification information sent by the server, the client can identify whether the server is legitimate based on the correlation between the second dynamic interaction verification information and the first dynamic interaction verification information, thereby realizing the client's authentication of the server and effectively resisting fake servers and man-in-the-middle attacks.

To improve the security of information transmission, in one embodiment provided in the present application, the step of receiving the first dynamic interaction verification information sent by the client includes:

Receiving first dynamic interaction verification information sent by a client, at least part of which is encrypted;

The encrypted portion of information is decrypted using a decryption key corresponding to the key used for encryption on the client.

The decryption key and the key used for encryption on the client are symmetric quantum keys of each other, or public-private keys of each other.

In order to avoid fake clients maliciously attacking the server, or forging clients for authentication, or illegal users accessing, in one embodiment provided in the present application, while receiving the first dynamic interactive verification information sent by the client, it is also necessary to receive the client's identity for preliminary authentication. The client's identity includes the client's user identification code and identity certificate. If it is determined that the client's identity is illegal, the authentication process is terminated.

Step S202: Generate second dynamic interaction verification information according to the first dynamic interaction verification information.

Through step S201 , the first dynamic interaction verification information sent by the client has been received, and then the second dynamic interaction verification information is generated according to the first dynamic interaction verification information.

In one embodiment provided in the present application, the server and the client both pre-store corresponding or identical information processing methods, and the result of the server processing the dynamic interactive verification information according to the information processing method is corresponding or identical to the result of the client processing the dynamic interactive verification information;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

The first dynamic interaction verification information is processed using the information processing method to generate second dynamic interaction verification information.

In one embodiment provided in the present application, the server and the client both pre-store multiple groups of corresponding or identical information processing methods, and each group of the information processing methods has a corresponding or identical information processing method identifier on the server and the client;

The dynamic interactive verification information includes an information processing method identifier;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

searching for a corresponding information processing method according to the information processing method identifier in the first dynamic interactive verification information;

The first dynamic interaction verification information is processed using the information processing method to generate second dynamic interaction verification information.

In one embodiment provided in the present application, the information processing method identifier is synchronized and periodically changed between the server and the client.

In a preferred embodiment provided in the present application, the server and the client both pre-store the same quantum state library containing a quantum state preparation base, wherein the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, and each of the quantum state preparation bases has a corresponding quantum state preparation base identifier;

The first dynamic interactive verification information includes a quantum state preparation base identifier of at least one quantum state preparation base selected by the client;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

Searching for a corresponding quantum state preparation base in a quantum state library according to the quantum state preparation base identifier;

Generating a first quantum bit string using the quantum state preparation basis;

Second dynamic interactive verification information including the first quantum bit string is generated.

In a preferred embodiment provided in the present application, the server and the client both pre-store the same quantum state library containing a quantum state preparation base, wherein the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, and each quantum state preparation base has a corresponding quantum state preparation base identifier; the first dynamic interactive verification information also includes the length of the first quantum bit string;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

Searching for a corresponding quantum state preparation base in a quantum state library according to the quantum state preparation base identifier;

Generate a first quantum bit string using the quantum state preparation basis according to the length of the first quantum bit string;

Converting the first quantum bit string into a decimal first quantum bit string according to a decimal conversion method;

Second dynamic interactive verification information including the first quantum bit string and the decimal first quantum bit string is generated.

As a variation of the above embodiment, in one embodiment provided in the present application, the server and the client both pre-store the same quantum string length database, and the first dynamic interactive verification information further includes a first quantum bit string length code;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

Searching for a corresponding quantum state preparation base in a quantum state library according to the quantum state preparation base identifier; and

searching the quantum string length database for a corresponding first quantum bit string length according to the first quantum bit string length code;

Generate a first quantum bit string using the quantum state preparation basis according to the length of the first quantum bit string;

Converting the first quantum bit string into a decimal first quantum bit string according to a decimal conversion method;

Second dynamic interactive verification information including the first quantum bit string and the decimal first quantum bit string is generated.

In one embodiment provided in the present application, the quantum state library of the server is synchronized with the quantum state library of the client and is changed regularly according to a predetermined rule.

Step S203: Send the second dynamic interaction verification information to the client.

Through step S202, second dynamic interaction verification information is generated according to the first dynamic interaction verification information. Next, the second dynamic interaction verification information is sent to the client.

To ensure the security of information transmission, in one embodiment provided in this application, the step of sending the second dynamic interaction verification information to the client includes:

All or part of the second dynamic interaction verification information is encrypted with a key and sent to the server.

The key and the key used for decryption by the client are symmetric quantum keys of each other, or public-private keys of each other.

In one embodiment provided in the present application, the server and the client both pre-store the same quantum state library containing a quantum state preparation base, wherein the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, and each quantum state preparation base has a corresponding quantum state preparation base identifier;

The first dynamic interactive verification information includes a quantum state preparation base identifier of at least one quantum state preparation base selected by the client;

The step of generating second dynamic interaction verification information according to the first dynamic interaction verification information includes:

Searching for a corresponding quantum state preparation base in a quantum state library according to the quantum state preparation base identifier;

Generating a first quantum bit string using the quantum state preparation basis;

generating second dynamic interactive verification information including the first quantum bit string;

The step of sending the second dynamic interaction verification information to the client includes:

The first quantum bit string is sent to the client using the quantum state preparation basis.

Step S204: receiving third dynamic interaction verification information generated according to the second dynamic interaction verification information and sent by the client.

In step S203 , the second dynamic interaction verification information is sent to the client. Next, third dynamic interaction verification information generated according to the second dynamic interaction verification information and sent by the client is received.

After receiving the second dynamic interaction verification information, the client determines whether the server is legitimate based on the second dynamic interaction verification information and generates third dynamic interaction verification information based on the second dynamic interaction verification information. If the server is determined to be legitimate, the client sends the third dynamic interaction verification information to the server for authentication, and the server determines whether the client has passed the authentication.

In one embodiment provided in the present application, the third dynamic interactive verification information includes a quantum bit identifier and a bit value measurement result of the quantum state used by the client when measuring the second dynamic interactive verification information.

In one embodiment provided in the present application, the second dynamic interactive verification information further includes a quantum state preparation base identifier of the quantum state preparation base selected by the server and a length of the second quantum bit string;

The third dynamic interactive verification information includes the second quantum bit string generated by the client according to the quantum state preparation basis identifier and the second quantum bit string length selected by the server.

To improve the security of information transmission, in one embodiment provided in the present application, the step of receiving third dynamic interaction verification information generated according to the second dynamic interaction verification information and sent by the client includes:

receiving third dynamic interaction verification information sent by the client, at least part of which is encrypted and generated based on the second dynamic interaction verification information;

The encrypted portion of information is decrypted using a decryption key corresponding to the key used for encryption on the client.

The decryption key and the key used for encryption on the client are symmetric quantum keys of each other, or public-private keys of each other.

Step S205: Determine whether the client has passed the authentication according to the third dynamic interaction verification information.

Through step S204, the third dynamic interaction verification information generated according to the second dynamic interaction verification information and sent by the client has been received. Next, it is determined whether the client has passed the authentication according to the third dynamic interaction verification information.

In one embodiment provided in the present application, the server and the client both pre-store corresponding or identical information processing methods, and the result of the server processing the dynamic interactive verification information according to the information processing method is corresponding or identical to the result of the client processing the dynamic interactive verification information;

The step of determining whether the client has passed authentication according to the third dynamic interaction verification information includes:

The third dynamic interaction verification information is processed using an information processing method corresponding to or the same as that of the client, and whether the client has passed the authentication is determined based on whether the processing result meets expectations.

In one embodiment provided in the present application, the information processing method identifier is synchronized and periodically changed between the server and the client.

In one embodiment provided in the present application, the third dynamic interactive verification information includes a quantum bit identifier and a bit value measurement result of a quantum state used by the client when measuring the second dynamic interactive verification information;

The step of determining whether the client has passed authentication according to the third dynamic interaction verification information includes:

Measuring the bit value of the first qubit string using the quantum state corresponding to the qubit identifier to obtain a server-side bit value measurement result;

The bit value measurement result is compared with the bit value measurement result of the server, and whether the client passes the authentication is determined based on whether the comparison result meets a preset judgment condition.

In one embodiment provided in the present application, the second dynamic interactive verification information further includes a quantum state preparation base identifier of the quantum state preparation base selected by the server and a length of the second quantum bit string;

The third dynamic interactive verification information includes the second quantum bit string generated by the client according to the quantum state preparation base identifier and the second quantum bit string length selected by the server;

The step of determining whether the client has passed authentication according to the third dynamic interaction verification information includes:

Measuring the bit value of the second quantum bit string using the quantum state preparation basis selected by the server to obtain a second quantum bit value measurement result;

Whether the client has passed the authentication is determined based on whether the second quantum bit value measurement result meets expectations.

In one embodiment provided in the present application, the second dynamic interactive verification information further includes a quantum state preparation base identifier of the quantum state preparation base selected by the server and a length of the second quantum bit string;

The third dynamic interactive verification information includes a second quantum bit string generated by the client according to the quantum state preparation basis identifier and the length of the second quantum bit string selected by the server, and a decimal second quantum bit string obtained by performing decimal conversion on the second quantum bit string;

The step of determining whether the client has passed authentication according to the third dynamic interaction verification information includes:

Measuring the bit value of the second quantum bit string using the quantum state preparation basis selected by the server to obtain a second quantum bit value measurement result;

Converting the decimal second quantum bit string into a converted second quantum bit string according to a decimal conversion method;

Measuring the length of the second quantum bit string to obtain a second quantum bit string length measurement result;

Whether the server has passed the authentication is determined based on whether the second quantum bit value measurement result meets expectations and whether the second quantum bit string length measurement result meets expectations.

In one embodiment provided in the present application, the quantum state library of the server is synchronized with the quantum state library of the client and is changed regularly according to a predetermined rule.

At this point, through step S201 to step S205, the authentication process for the server is completed.

In the above-mentioned embodiment, a server-side authentication method is provided. Accordingly, the present application also provides a server-side authentication device. Please refer to Figure 4, which is a schematic diagram of an embodiment of a server-side authentication device provided by the present application. Because the device embodiment is substantially similar to the method embodiment, the description is relatively brief. For relevant details, please refer to the description of the method embodiment. The device embodiment described below is merely illustrative.

An authentication device for a client in this embodiment includes: a first dynamic interaction verification information receiving unit 201, configured to receive first dynamic interaction verification information sent by a client; a second dynamic interaction verification information generating unit 202, configured to generate second dynamic interaction verification information based on the first dynamic interaction verification information; a second dynamic interaction verification information sending unit 203, configured to send the second dynamic interaction verification information to the client; a second dynamic interaction verification information sending unit 204, configured to receive third dynamic interaction verification information sent by the client and generated based on the second dynamic interaction verification information; and a third dynamic interaction verification information judging unit 205, configured to judge whether the client has passed authentication based on the third dynamic interaction verification information.

Optionally, the server and the client both pre-store corresponding or identical information processing methods, and a result of the server processing the dynamic interactive verification information according to the information processing method is corresponding or identical to a result of the client processing the dynamic interactive verification information;

The third dynamic interaction verification information judgment unit 205 includes:

The third dynamic interactive verification information processing subunit is configured to process the third dynamic interactive verification information using an information processing method corresponding to or the same as that of the client, and determine whether the client has passed the authentication based on whether the processing result meets expectations.

Optionally, the server and the client both pre-store multiple groups of corresponding or identical information processing methods, and each group of information processing methods has a corresponding or identical information processing method identifier on the server and the client;

The dynamic interactive verification information includes an information processing method identifier;

The second dynamic interaction verification information generating unit 202 includes:

a processing method query subunit, configured to search for a corresponding information processing method according to the information processing method identifier in the first dynamic interactive verification information;

The first information processing sub-unit is configured to process the first dynamic interaction verification information using the information processing method to generate second dynamic interaction verification information.

Optionally, the information processing method identifier is synchronized between the server and the client and is changed periodically.

Optionally, the server and the client both pre-store the same quantum state library containing a quantum state preparation base, where the quantum state preparation base is used to prepare a quantum bit string or measure a quantum bit string, and each quantum state preparation base has a corresponding quantum state preparation base identifier;

The first dynamic interactive verification information includes a quantum state preparation base identifier of at least one quantum state preparation base selected by the client;

The second dynamic interaction verification information generating unit 202 includes:

A first server-side quantum query subunit is configured to search for a corresponding quantum state preparation basis in a quantum state library according to the quantum state preparation basis identifier;

A first server-side bit string generation subunit, configured to generate a first quantum bit string using the quantum state preparation basis;

The first server-side verification information generation subunit is used to generate second dynamic interactive verification information containing the first quantum bit string.

Optionally, the second dynamic interaction verification information sending unit 203 includes:

The first quantum bit string sending subunit is used to send the first quantum bit string to the client using the quantum state preparation basis.

Optionally, the first dynamic interactive verification information further includes the length of the first quantum bit string;

The second dynamic interaction verification information generating unit 202 includes:

A second server-side quantum query subunit is configured to search for a corresponding quantum state preparation basis in a quantum state library according to the quantum state preparation basis identifier;

A second server-side bit string generation subunit is configured to generate a first quantum bit string using the quantum state preparation basis according to the length of the first quantum bit string;

A second decimal conversion subunit, configured to convert the first quantum bit string into a decimal first quantum bit string according to a decimal conversion method;

The second server-side verification information generation subunit is used to generate second dynamic interactive verification information including the first quantum bit string and the decimal first quantum bit string.

Optionally, the server and the client both pre-store the same quantum string length database, and the first dynamic interactive verification information further includes a first quantum bit string length code;

The second dynamic interaction verification information generating unit 202 includes:

A third server-side quantum query subunit searches for a corresponding quantum state preparation basis in a quantum state library according to the quantum state preparation basis identifier;

a third server-side length query subunit, searching the quantum string length database for a corresponding first quantum bit string length according to the first quantum bit string length code;

A third server-side bit string generation subunit is configured to generate a first quantum bit string using the quantum state preparation basis according to the length of the first quantum bit string;

A third decimal conversion subunit, configured to convert the first quantum bit string into a decimal first quantum bit string according to a decimal conversion method;

The third server-side verification information generation subunit is used to generate second dynamic interactive verification information including the first quantum bit string and the decimal first quantum bit string.

Optionally, the third dynamic interactive verification information includes a quantum bit identifier and a bit value measurement result of the quantum state used by the client when measuring the second dynamic interactive verification information;

The third dynamic interaction verification information judgment unit 205 includes:

A server-side first quantum string measurement subunit, configured to measure the bit value of the first quantum bit string using the quantum state corresponding to the quantum bit identifier to obtain a server-side bit value measurement result;

The server-side measurement comparison subunit is configured to compare the bit value measurement result with the server-side bit value measurement result, and determine whether the client has passed the authentication based on whether the comparison result meets a preset judgment condition.

Optionally, the second dynamic interactive verification information further includes a quantum state preparation base identifier of the quantum state preparation base selected by the server and a length of the second quantum bit string;

The third dynamic interactive verification information includes the second quantum bit string generated by the client according to the quantum state preparation base identifier and the second quantum bit string length selected by the server;

The third dynamic interaction verification information judgment unit 205 includes:

A first server-side bit string measurement subunit is configured to measure the bit value of the second quantum bit string using the quantum state preparation basis selected by the server to obtain a second quantum bit value measurement result;

The first server-side measurement and judgment subunit is used to determine whether the client has passed the authentication based on whether the second quantum bit value measurement result meets expectations.

Optionally, the second dynamic interactive verification information further includes a quantum state preparation base identifier of the quantum state preparation base selected by the server and a length of the second quantum bit string;

The third dynamic interactive verification information includes a second quantum bit string generated by the client according to the quantum state preparation basis identifier and the length of the second quantum bit string selected by the server, and a decimal second quantum bit string obtained by performing decimal conversion on the second quantum bit string;

The third dynamic interaction verification information judgment unit 205 includes:

A second server-side bit string measurement subunit is configured to measure the bit value of the second quantum bit string using the quantum state preparation basis selected by the server to obtain a second quantum bit value measurement result;

A second server-side decimal conversion subunit is configured to convert the decimal second quantum bit string into a converted second quantum bit string according to a decimal conversion method;

The second server-side length determination subunit is configured to measure the length of the second quantum bit string and obtain a second quantum bit string length measurement result;

The second server-side measurement and judgment subunit is used to judge whether the server has passed the authentication based on whether the second quantum bit value measurement result meets expectations and whether the second quantum bit string length measurement result meets expectations.

Optionally, the quantum state library of the server is synchronized with the quantum state library of the client and is changed regularly according to a predetermined rule.

Optionally, the first dynamic interaction verification information includes an identity identifier of the client;

The second dynamic interaction verification information generating unit 202 includes:

A preliminary authentication subunit, configured to perform preliminary authentication on the client according to the identity identifier of the client;

The second dynamic interaction verification information generating subunit is configured to generate second dynamic interaction verification information according to the first dynamic interaction verification information if the preliminary authentication is passed.

Optionally, the client's identity includes a user identification code and an identity certificate of the client.

Optionally, the second dynamic interaction verification information sending unit 203 includes:

The encrypted second dynamic interaction verification information sending subunit is configured to encrypt all or part of the second dynamic interaction verification information with a key and then send the encrypted information to the server.

Optionally, the key and the key used for decryption by the client are symmetric quantum keys of each other, or are public-private keys of each other.

Optionally, the first dynamic interaction verification information receiving unit 201 includes:

The encrypted first dynamic interaction verification information receiving subunit is configured to receive the first dynamic interaction verification information sent by the client, at least part of which is encrypted;

A first dynamic interactive authentication information decryption subunit, configured to decrypt the encrypted portion of information using a decryption key corresponding to the key used for encryption by the client;

The second dynamic interaction verification information sending unit 204 includes:

an encrypted third dynamic interaction verification information receiving subunit, configured to receive third dynamic interaction verification information generated based on the second dynamic interaction verification information, at least part of which is encrypted and sent by the client;

The third dynamic interactive verification information decryption subunit is used to decrypt the encrypted part of the information using a decryption key corresponding to the key used for encryption by the client.

Optionally, the decryption key and the key used for encryption on the client are symmetric quantum keys of each other, or are public-private keys of each other.

The above is an embodiment of an authentication device for a server provided by this application.

This application also provides an authentication terminal device for a client, including:

CPU;

Input and output units;

Memory;

The memory stores the authentication method for the client provided in this application; and can run according to the above method after startup.

Since the authentication terminal device for the client uses the above-mentioned authentication method for the client, relevant details can be found in the description of the embodiment of the above-mentioned authentication method for the client, which will not be repeated here.

This application also provides an authentication terminal device for a server, including:

CPU;

Input and output units;

Memory;

The memory stores the authentication method for the server provided in this application; and can run according to the above method after startup.

Since the authentication terminal device for the server uses the above-mentioned authentication method for the server, please refer to the embodiment description of the above-mentioned authentication method for the server for related matters, which will not be repeated here.

The present application also provides a system for user authentication, including a client and a server, wherein the client is configured with the authentication device for the client provided in the present application, and the server is configured with the authentication device for the server provided in the present application.

Since the client of this system is configured with the authentication device for the client provided in this application, and the server is configured with the authentication device for the server provided in this application, for relevant matters, please refer to the above-mentioned embodiment description of the authentication device for the client and the embodiment description of the authentication device for the server, which will not be repeated here.

Although the present application is disclosed as above with the preferred embodiments, it is not intended to limit the present application. Any person skilled in the art may make possible changes and modifications without departing from the spirit and scope of the present application. Therefore, the scope of protection of the present application shall be based on the scope defined by the claims of the present application.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and/or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

1. Computer-readable media includes permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include non-transitory media such as modulated data signals and carrier waves.

2. Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Furthermore, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

Claims (81)

1. An authentication method for a client, characterized in that it includes: Generate the first dynamic interactive verification information; Send the first dynamic interactive verification information to the server; Receive the second dynamic interaction verification information generated by the server based on the first dynamic interaction verification information; The server is judged to be legitimate based on the second dynamic interaction verification information, and a third dynamic interaction verification information is generated based on the second dynamic interaction verification information. If valid, the third dynamic interaction verification information is sent to the server so that the server can determine whether the client has passed authentication based on the third dynamic interaction verification information. The first, second, and third dynamic interactive verification information are processed using quantum state methods. The first dynamic interactive verification information includes a quantum preparation base identifier and a first qubit string length. The second dynamic interactive verification information includes a first qubit string generated by querying a quantum state preparation base in a quantum state library based on the first qubit string length and the quantum state preparation base identifier. The third dynamic interactive verification information includes a bit value measurement result obtained by randomly selecting a quantum state of the quantum state preparation base to measure the bit value of the first qubit string. 2. The authentication method for a client according to claim 1, characterized in that both the client and the server pre-store corresponding or identical information processing methods, and the processing result of the client on the dynamic interactive verification information according to the information processing method is corresponding or identical to the processing result of the server on the dynamic interactive verification information; The step of determining whether the server is legitimate based on the second dynamic interactive verification information includes: The second dynamic interactive verification information is processed according to a pre-stored information processing method, and the legitimacy of the server is determined based on whether the processing result meets expectations. 3. The authentication method for a client according to claim 2, characterized in that multiple sets of corresponding or identical information processing methods are pre-stored on both the client and the server, and each set of information processing methods has a corresponding or identical information processing method identifier on both the client and the server; The dynamic interactive verification information includes an information processing method identifier; The step of processing the second dynamic interactive verification information according to a pre-stored information processing method and determining whether the server is legitimate based on the processing result includes: Query the corresponding pre-stored information processing method based on the information processing method identifier in the first dynamic interactive verification information; The second dynamic interactive verification information is processed according to the information processing method, and the legitimacy of the server is determined based on whether the processing result meets expectations. 4. The authentication method for a client according to claim 3, wherein the information processing method identifier is synchronized between the client and the server and is changed periodically. 5. The authentication method for a client according to claim 1, characterized in that both the client and the server pre-store the same quantum state library containing quantum state preparation bases, wherein the quantum state preparation bases are used to prepare or measure quantum bit strings, and each quantum state preparation base has a corresponding quantum state preparation base identifier. The step of determining whether the server is legitimate based on the second dynamic interactive verification information includes: The bit values of the first qubit string are measured using the quantum state preparation base corresponding to the quantum state preparation base identifier to obtain the bit value measurement results; the legitimacy of the server is determined based on whether the bit value measurement results meet expectations. 6. The authentication method for a client according to claim 5, wherein the step of generating the first dynamic interactive verification information includes: Prepare a basis by selecting at least one quantum state from the quantum state library; Extract the quantum state preparation basis identifier of the quantum state preparation basis; Generate first dynamic interactive verification information containing the quantum state preparation basis identifier. 7. The authentication method for a client according to claim 6, wherein the selection of at least one quantum state preparation basis from the quantum state library is carried out in a random manner, and the quantum state preparation basis selected for each authentication is different. 8. The authentication method for a client according to claim 5, wherein the first quantum bit string is sent to the client via the quantum state preparation basis. 9. The authentication method for a client according to claim 7, wherein the second dynamic interactive verification information further includes a decimal first qubit string obtained by converting the first qubit string into decimal; The step of determining whether the server is legitimate based on the second dynamic interactive verification information includes: The bit value of the first qubit string is measured using the quantum state preparation base corresponding to the quantum state preparation base identifier to obtain the bit value measurement result; The decimal first quantum bit string is converted into a converted first quantum bit string using a decimal conversion method; The length of the first qubit string is measured to obtain the bit string length measurement result, wherein the length of the first qubit string is generated based on the length of the first qubit string. The legitimacy of the server is determined based on whether the bit value measurement result and the bit string length measurement result meet expectations. 10. The authentication method for a client according to claim 5, characterized in that both the client and the server pre-store the same quantum string length database, and the first dynamic interactive verification information... It also includes the code for the length of the first quantum bit string; The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base in the quantum state library according to the quantum state preparation base identifier, querying the corresponding first quantum bit string length in the quantum string length database according to the first quantum bit string length code, and then generating the first quantum bit string through the quantum state preparation base according to the first quantum bit string length, and sending the first quantum bit string to the client through the quantum state preparation base. 11. The authentication method for a client according to claim 5, characterized in that the step of measuring the bit value of the first qubit string using a quantum state preparation basis corresponding to the quantum state preparation basis identifier includes: Search the quantum state preparation base in the quantum state library for the quantum state preparation base identifier; The bit value of the first qubit string is measured by randomly selecting a quantum state of the quantum state preparation basis. 12. The authentication method for a client according to claim 5, wherein the second dynamic interactive verification information further includes the code of the quantum state preparation basis selected by the server and the length of the second quantum bit string; The step of generating third dynamic interaction verification information based on the second dynamic interaction verification information includes: Search the quantum state library for the quantum state preparation base corresponding to the code of the quantum state preparation base selected by the server; Based on the length of the second qubit string, a second qubit string is generated using the quantum state preparation basis; Generate third dynamic interactive verification information containing the second qubit string. 13. The authentication method for a client according to claim 12, wherein the step of generating third dynamic interactive verification information based on the second dynamic interactive verification information further includes: converting the second quantum bit string according to a decimal conversion method to obtain a decimal second quantum bit string; The step of generating third dynamic interactive verification information containing the second qubit string includes: Generate third dynamic interactive verification information containing the second qubit string and the decimal second qubit string. 14. The authentication method for a client according to claim 12 or 13, characterized in that the step of sending the third dynamic interactive verification information to the server if valid includes: If valid, the second qubit string is sent to the server using the quantum state preparation basis. 15. The authentication method for a client according to claim 5, wherein the quantum state library of the client is synchronized with the quantum state library of the server and is changed periodically according to a predetermined rule. 16. The authentication method for a client according to claim 1, wherein the first dynamic interactive verification information includes the client's identity identifier, and the identity identifier is used by the server to perform preliminary authentication of the client. 17. The authentication method for a client according to claim 16, wherein the client's identity identifier includes the client's user identification code and identity certificate. 18. The authentication method for a client according to claim 1, wherein the step of sending the first dynamic interactive verification information to the server includes: All or part of the first dynamic interactive verification information is encrypted with a key and then sent to the server. If the verification is valid, the step of sending the third dynamic interactive verification information to the server includes: If valid, all or part of the third dynamic interactive verification information will be encrypted with a key and sent to the server. 19. The authentication method for a client according to claim 18, wherein the key and the key used for decryption by the server are symmetric quantum keys or public-private keys. 20. The authentication method for a client according to claim 1, wherein the step of receiving the second dynamic interaction verification information generated based on the first dynamic interaction verification information sent by the server includes: Receive at least partially encrypted second dynamic interaction verification information generated based on the first dynamic interaction verification information sent by the server; The encrypted information is decrypted using a decryption key corresponding to the key used for encryption on the server. 21. The authentication method for a client according to claim 20, wherein the decryption key and the encryption key used by the server are symmetric quantum keys or public-private keys. 22. An authentication device for a client, characterized in that it comprises: The first dynamic interactive verification information generation unit is used to generate first dynamic interactive verification information, which includes: quantum preparation base identifier and first quantum bit string length; The first dynamic interactive verification information sending unit is used to send the first dynamic interactive verification information to the server. The second dynamic interactive verification information receiving unit is used to receive the second dynamic interactive verification information generated by the server based on the first dynamic interactive verification information. The second dynamic interactive verification information includes: the first quantum bit string generated by querying the quantum state preparation base in the quantum state library according to the length of the first quantum bit string through the quantum state preparation base identifier. The second dynamic interactive verification information verification unit is used to determine whether the server is legitimate based on the second dynamic interactive verification information, and to generate third dynamic interactive verification information based on the second dynamic interactive verification information. The third dynamic interactive verification information includes: bit value measurement results obtained by randomly selecting the quantum state of the quantum state preparation basis to measure the bit value of the first quantum bit string. The third dynamic interaction verification information sending unit is used to send the third dynamic interaction verification information to the server if it is valid, so that the server can determine whether the client has passed the authentication based on the third dynamic interaction verification information. 23. The authentication device for a client according to claim 22, wherein both the client and the server pre-store corresponding or identical information processing methods, and the processing result of the client on the dynamic interactive verification information according to the information processing method is corresponding or identical to the processing result of the server on the dynamic interactive verification information; The second dynamic interactive verification information verification unit includes: The processing and judgment subunit is used to process the second dynamic interactive verification information according to the pre-stored information processing method, and to determine whether the server is legitimate based on the processing result. 24. The authentication device for a client according to claim 23, wherein both the client and the server pre-store multiple sets of corresponding or identical information processing methods, and each set of information processing methods has a corresponding or identical information processing method identifier on both the client and the server; The dynamic interactive verification information includes an information processing method identifier; The processing and judgment subunit includes: The processing method query subunit is used to query the corresponding pre-stored information processing method based on the information processing method identifier in the first dynamic interactive verification information. The processing method processing subunit is used to process the second dynamic interactive verification information according to the information processing method, and to determine whether the server is legitimate based on the processing result. 25. The authentication device for a client according to claim 24, wherein the information processing method identifier is synchronized between the client and the server and is changed periodically. 26. The authentication device for a client according to claim 22, characterized in that both the client and the server pre-store the same quantum state library containing quantum state preparation bases, the quantum state preparation bases being used to prepare or measure quantum bit strings, and each quantum state preparation base having a corresponding quantum state preparation base identifier. The second dynamic interactive verification information verification unit includes: The first quantum measurement subunit is used to measure the bit value of the first quantum bit string using a quantum state preparation base corresponding to the quantum state preparation base identifier, and obtain the bit value measurement result; The first quantum judgment subunit is used to determine whether the server is legitimate based on whether the bit value measurement result meets expectations. 27. The authentication device for a client according to claim 26, wherein the first dynamic interactive verification information generation unit comprises: The first preparation basis selector is used to select at least one quantum state preparation basis from the quantum state library; The first identifier extraction subunit is used to extract the quantum state preparation base identifier of the quantum state preparation base; The first dynamic interactive verification information generation subunit is used to generate first dynamic interactive verification information containing the quantum state preparation base identifier. 28. The authentication device for a client according to claim 27, wherein the selection of at least one quantum state preparation base from the quantum state library is carried out in a random manner, and the quantum state preparation base selected for each authentication is different. 29. The authentication device for a client according to claim 26, characterized in that, The first qubit string is sent to the client via the quantum state preparation basis. 30. The authentication device for a client according to claim 29, wherein the second dynamic interactive verification information further includes a decimal first qubit string obtained by converting the first qubit string into decimal; The second dynamic interactive verification information verification unit includes: The second quantum measurement subunit is used to measure the bit value of the first quantum bit string using a quantum state preparation base corresponding to the quantum state preparation base identifier, and obtain the bit value measurement result; The second conversion subunit is used to convert the decimal first quantum bit string into a converted first quantum bit string according to the decimal conversion method; The second length measurement subunit is used to measure the length of the first qubit string and obtain the bit string length measurement result, wherein the length of the first qubit string is generated based on the length of the first qubit string. The second judgment subunit is used to determine whether the server is legitimate based on whether the bit value measurement result meets expectations and whether the bit string length measurement result meets expectations. 31. The authentication device for a client according to claim 26, wherein the client and the server both have the same quantum string length database pre-stored, and the first dynamic interactive verification information further includes a first quantum bit string length code; The second dynamic interactive verification information includes the server querying the corresponding quantum state preparation base in the quantum state library according to the quantum state preparation base identifier, querying the corresponding first quantum bit string length in the quantum string length database according to the first quantum bit string length code, and then generating the first quantum bit string through the quantum state preparation base according to the first quantum bit string length, and sending the first quantum bit string to the client through the quantum state preparation base. 32. The authentication device for a client according to claim 26, wherein the first quantum measurement subunit comprises: The first quantum query subunit is used to search for the quantum state preparation base corresponding to the quantum state preparation base identifier in the quantum state library; The first random measurement subunit is used to randomly select the quantum state of the quantum state preparation basis to measure the bit value of the first quantum bit string. 33. The authentication device for a client according to claim 26, wherein the second dynamic interactive verification information further includes the quantum state preparation base identifier selected by the server and the second quantum bit string length; The second dynamic interactive verification information verification unit includes: The second quantum query subunit is used to query the quantum state library for a quantum state preparation base corresponding to the quantum state preparation base identifier selected by the server. The second quantum preparation subunit is used to generate the second quantum bit string according to the length of the second quantum bit string through the quantum state preparation basis; The third information generation subunit is used to generate third dynamic interactive verification information containing the second qubit string. 34. The authentication device for a client according to claim 33, wherein the second dynamic interactive verification information verification unit further comprises: The decimal conversion subunit is used to convert the second quantum bit string according to the decimal conversion method to obtain the decimal second quantum bit string; The third information generation subunit includes: The decimal third information generation subunit is used to generate third dynamic interactive verification information containing the second qubit string and the decimal second qubit string. 35. The authentication device for a client according to claim 33 or 34, characterized in that the third dynamic interactive verification information sending unit comprises: The third dynamic interactive verification information quantum transmission subunit is used to send the second quantum bit string to the server using the quantum state preparation basis if it is valid. 36. The authentication device for a client according to claim 26, wherein the quantum state library of the client is synchronized with the quantum state library of the server and is changed periodically according to a predetermined rule. 37. The authentication device for a client according to claim 22, wherein the first dynamic interactive verification information includes the client's identity identifier, the identity identifier being used by the server to perform preliminary authentication of the client. 38. The authentication device for a client according to claim 37, wherein the client's identity identifier includes the client's user identification code and identity certificate. 39. The authentication device for a client according to claim 22, wherein the first dynamic interactive verification information sending unit comprises: The first dynamic interactive verification information encryption subunit is used to encrypt all or part of the first dynamic interactive verification information with a key and then send it to the server. The third dynamic interactive verification information sending unit includes: The third dynamic interactive verification information encryption subunit is used to send all or part of the third dynamic interactive verification information to the server after encryption with a key if it is valid. 40. The authentication device for a client according to claim 39, wherein the key and the key used for decryption by the server are symmetric quantum keys or public-private keys. 41. The authentication device for a client according to claim 22, wherein the second dynamic interactive verification information receiving unit comprises: An encrypted second dynamic interaction verification information receiving subunit is used to receive second dynamic interaction verification information generated based on the first dynamic interaction verification information, which is at least partially encrypted by the server. The second dynamic interactive verification information decryption subunit is used to decrypt the encrypted information using a decryption key corresponding to the key used for encryption by the server. 42. The authentication device for a client according to claim 41, wherein the decryption key and the key used for encryption by the server are symmetric quantum keys or public-private keys. 43. An authentication method for a server, characterized in that it includes: Receive the first dynamic interactive verification information sent by the client; Generate second dynamic interaction verification information based on the first dynamic interaction verification information; Send the second dynamic interactive verification information to the client; Receive the third dynamic interaction verification information generated based on the second dynamic interaction verification information sent by the client; The client is determined to be authenticated based on the third dynamic interactive verification information. The first, second, and third dynamic interactive verification information are processed using quantum state methods. The first dynamic interactive verification information includes a quantum preparation base identifier and a first qubit string length. The second dynamic interactive verification information includes a first qubit string generated by querying a quantum state preparation base in a quantum state library based on the first qubit string length and the quantum state preparation base identifier. The third dynamic interactive verification information includes a bit value measurement result obtained by randomly selecting a quantum state of the quantum state preparation base to measure the bit value of the first qubit string. 44. The authentication method for a server according to claim 43, characterized in that both the server and the client pre-store corresponding or identical information processing methods, and the processing result of the dynamic interactive verification information by the server according to the information processing method is corresponding or identical to the processing result of the dynamic interactive verification information by the client. The step of determining whether the client has passed authentication based on the third dynamic interactive verification information includes: The third dynamic interactive verification information is processed using an information processing method corresponding to or the same as that used for the client, and the client is judged to have passed authentication based on whether the processing result meets expectations. 45. The authentication method for a server according to claim 44, wherein both the server and the client pre-store multiple sets of corresponding or identical information processing methods, and each set of information processing methods has a corresponding or identical information processing method identifier on both the server and the client; The dynamic interactive verification information includes an information processing method identifier; The step of generating second dynamic interaction verification information based on the first dynamic interaction verification information includes: Find the corresponding information processing method based on the information processing method identifier in the first dynamic interactive verification information; The first dynamic interactive verification information is processed using the aforementioned information processing method to generate the second dynamic interactive verification information. 46. The authentication method for a server according to claim 45, wherein the information processing method identifier is synchronized between the server and the client and is changed periodically. 47. The authentication method for a server according to claim 43, characterized in that both the server and the client pre-store the same quantum state library containing quantum state preparation bases, wherein the quantum state preparation bases are used to prepare qubit strings or measure qubit strings, and each quantum state preparation base has a corresponding quantum state preparation base identifier. 48. The authentication method for a server according to claim 47, wherein the step of sending the second dynamic interactive verification information to the client includes: The first qubit string is prepared using the quantum state and sent to the client. 49. The authentication method for a server according to claim 47, characterized in that the first quantum bit string is converted into a decimal first quantum bit string according to a decimal conversion method; Generate second dynamic interactive verification information containing the first qubit string and the decimal first qubit string. 50. The authentication method for a server according to claim 47, wherein the server and the client both have the same quantum string length database pre-stored, and the first dynamic interactive verification information further includes a first quantum bit string length code; The step of generating second dynamic interaction verification information based on the first dynamic interaction verification information includes: Search for the corresponding quantum state preparation base in the quantum state library based on the quantum state preparation base identifier; and The corresponding first qubit string length is searched in the quantum string length database according to the first qubit string length code; The first qubit string is generated using the quantum state preparation basis according to the length of the first qubit string; Convert the first qubit string into a decimal first qubit string using a decimal conversion method; Generate second dynamic interactive verification information containing the first qubit string and the decimal first qubit string. 51. The authentication method for a server according to claim 47, characterized in that, The step of determining whether the client has passed authentication based on the third dynamic interactive verification information includes: The bit value of the first qubit string is measured using the quantum state corresponding to the qubit identifier to obtain the server bit value measurement result; The bit value measurement result is compared with the server bit value measurement result, and the client is judged to be authenticated based on whether the comparison result meets the preset judgment conditions. 52. The authentication method for a server according to claim 47, wherein the second dynamic interactive verification information further includes the quantum state preparation base identifier of the quantum state preparation base selected by the server and the second quantum bit string length; The third dynamic interactive verification information includes the second quantum bit string generated by the client based on the quantum state preparation base identifier and the second quantum bit string length selected by the server; The step of determining whether the client has passed authentication based on the third dynamic interactive verification information includes: The bit value of the second qubit string is measured using the quantum state preparation basis selected by the server to obtain the measurement result of the second qubit value; The client's authentication is determined based on whether the measurement result of the second quantum bit value matches the expectation. 53. The authentication method for a server according to claim 47, wherein the second dynamic interactive verification information further includes the quantum state preparation base identifier of the quantum state preparation base selected by the server and the length of the second quantum bit string; The third dynamic interactive verification information includes the second quantum bit string generated by the client based on the quantum state preparation base identifier and the length of the second quantum bit string selected by the server, and the decimal second quantum bit string obtained by converting the second quantum bit string into decimal. The step of determining whether the client has passed authentication based on the third dynamic interactive verification information includes: The bit value of the second qubit string is measured using the quantum state preparation basis selected by the server to obtain the measurement result of the second qubit value; The decimal second qubit string is converted into a converted second qubit string using a decimal conversion method; Measure the length of the second qubit string to obtain the measurement result of the second qubit string length; The server is deemed to have passed authentication based on whether the measurement results of the second qubit value and the second qubit string length meet expectations. 54. The authentication method for a server according to claim 47, wherein the quantum state library of the server is synchronized with the quantum state library of the client and is changed periodically according to a predetermined rule. 55. The authentication method for a server according to claim 43, wherein the first dynamic interactive verification information includes the client's identity identifier; The step of generating second dynamic interaction verification information based on the first dynamic interaction verification information includes: The client is initially authenticated based on its identity identifier; If the initial authentication is successful, then the second dynamic interaction verification information is generated based on the first dynamic interaction verification information. 56. The authentication method for a server according to claim 55, wherein the client's identity identifier includes the client's user identification code and identity certificate. 57. The authentication method for a server according to claim 43, wherein the step of sending the second dynamic interactive verification information to the client includes: All or part of the second dynamic interactive verification information is encrypted with a key and then sent to the server. 58. The authentication method for a server according to claim 57, wherein the key and the key used by the client for decryption are symmetric quantum keys or public-private keys. 59. The authentication method for a server according to claim 43, wherein the step of receiving the first dynamic interactive verification information sent by the client includes: Receive first dynamic interactive verification information sent by the client, at least part of which is encrypted; The encrypted information is decrypted using a decryption key corresponding to the key used for encryption by the client. The step of receiving the third dynamic interaction verification information generated based on the second dynamic interaction verification information sent by the client includes: Receive at least partially encrypted third dynamic interaction verification information generated based on the second dynamic interaction verification information sent by the client; The encrypted information is decrypted using a decryption key corresponding to the key used for encryption by the client. 60. The authentication method for a server according to claim 59, wherein the decryption key and the key used for encryption by the client are symmetric quantum keys or public-private keys. 61. An authentication device for a server, characterized in that it comprises: The first dynamic interactive verification information receiving unit is used to receive the first dynamic interactive verification information sent by the client. The first dynamic interactive verification information includes: quantum preparation base identifier and first quantum bit string length. The second dynamic interactive verification information generation unit is used to generate second dynamic interactive verification information based on the first dynamic interactive verification information. The second dynamic interactive verification information includes: a first quantum bit string generated based on the length of the first quantum bit string and a quantum state preparation base queried in the quantum state library through the quantum state preparation base identifier. The second dynamic interactive verification information sending unit is used to send the second dynamic interactive verification information to the client; The third dynamic interactive verification information receiving unit is used to receive the third dynamic interactive verification information generated based on the second dynamic interactive verification information sent by the client. The third dynamic interactive verification information includes: the bit value measurement result obtained by randomly selecting the quantum state of the quantum state preparation base to measure the bit value of the first quantum bit string. The third dynamic interaction verification information judgment unit is used to determine whether the client has passed authentication based on the third dynamic interaction verification information. 62. The authentication device for a server according to claim 61, characterized in that both the server and the client have pre-stored corresponding or identical information processing methods, and the processing result of the dynamic interactive verification information by the server according to the information processing method is corresponding or identical to the processing result of the dynamic interactive verification information by the client. The third dynamic interactive verification information judgment unit includes: The third dynamic interactive verification information processing subunit is used to process the third dynamic interactive verification information using the same or corresponding information processing method as the client, and to determine whether the client has passed authentication based on whether the processing result meets expectations. 63. The authentication device for a server according to claim 62, wherein both the server and the client pre-store multiple sets of corresponding or identical information processing methods, and each set of information processing methods has a corresponding or identical information processing method identifier on both the server and the client; The dynamic interactive verification information includes an information processing method identifier; The second dynamic interactive verification information generation unit includes: The processing method query subunit is used to find the corresponding information processing method based on the information processing method identifier in the first dynamic interactive verification information. The first information processing subunit is used to process the first dynamic interactive verification information using the information processing method to generate the second dynamic interactive verification information. 64. The authentication device for a server according to claim 63, wherein the information processing method identifier is synchronized between the server and the client and is changed periodically. 65. The authentication device for a server according to claim 61, characterized in that both the server and the client pre-store the same quantum state library containing quantum state preparation bases, the quantum state preparation bases being used to prepare qubit strings or measure qubit strings, and each quantum state preparation base having a corresponding quantum state preparation base identifier. 66. The authentication device for a server according to claim 65, wherein the second dynamic interactive verification information sending unit comprises: The first quantum bit string transmitting subunit is used to transmit the first quantum bit string to the client using the quantum state preparation basis. 67. The authentication device for a server according to claim 65, characterized in that, The second dynamic interactive verification information generation unit includes: The 20th decimal conversion subunit is used to convert the first quantum bit string into a decimal first quantum bit string according to the decimal conversion method; The second server-side dynamic interactive verification information generation subunit is used to generate second dynamic interactive verification information containing the first qubit string and the decimal first qubit string. 68. The authentication device for a server according to claim 65, wherein the server and the client both have the same quantum string length database pre-stored, and the first dynamic interactive verification information further includes a first quantum bit string length code; The second dynamic interactive verification information generation unit includes: The third server-side quantum query subunit searches for the corresponding quantum state preparation base in the quantum state library based on the quantum state preparation base identifier. The third server-side length query subunit searches for the corresponding first quantum bit string length in the quantum string length database according to the first quantum bit string length code. The third server bit string generation subunit is used to generate the first bit string using the quantum state preparation basis according to the length of the first bit string; The 30th decimal conversion subunit is used to convert the first quantum bit string into a decimal first quantum bit string according to the decimal conversion method; The third server-side dynamic interactive verification information generation subunit is used to generate second dynamic interactive verification information containing the first qubit string and the decimal first qubit string. 69. The authentication device for a server according to claim 65, characterized in that, The third dynamic interactive verification information judgment unit includes: The server-side first quantum string measurement subunit is used to measure the bit value of the first quantum bit string using the quantum state corresponding to the quantum bit identifier, and obtain the server-side bit value measurement result; The server-side measurement comparison subunit is used to compare the bit value measurement result with the server-side bit value measurement result, and determine whether the client has passed authentication based on whether the comparison result meets the preset judgment conditions. 70. The authentication device for a server according to claim 65, wherein the second dynamic interactive verification information further includes the quantum state preparation base identifier of the quantum state preparation base selected by the server and the second quantum bit string length; The third dynamic interactive verification information includes the second quantum bit string generated by the client based on the quantum state preparation base identifier and the second quantum bit string length selected by the server; The third dynamic interactive verification information judgment unit includes: The first server-side bit string measurement subunit is used to measure the bit value of the second qubit string using the quantum state preparation basis selected by the server, and obtain the second qubit value measurement result; the first server-side measurement judgment subunit is used to judge whether the client has passed authentication based on whether the second qubit value measurement result meets expectations. 71. The authentication device for a server according to claim 65, wherein the second dynamic interactive verification information further includes the quantum state preparation base identifier of the quantum state preparation base selected by the server and the second quantum bit string length; The third dynamic interactive verification information includes the second quantum bit string generated by the client based on the quantum state preparation base identifier and the length of the second quantum bit string selected by the server, and the decimal second quantum bit string obtained by converting the second quantum bit string into decimal. The third dynamic interactive verification information judgment unit includes: The second server bit string measurement subunit is used to measure the bit value of the second qubit string using the quantum state preparation basis selected by the server, and obtain the measurement result of the second qubit value; The second server-side decimal conversion subunit is used to convert the decimal second quantum bit string into a converted second quantum bit string according to the decimal conversion method; The second server length determination subunit is used to measure the length of the second quantum bit string and obtain the length measurement result of the second quantum bit string. The second server measurement and judgment subunit is used to determine whether the server has passed authentication based on whether the measurement result of the second qubit value meets expectations and whether the measurement result of the second qubit string length meets expectations. 72. The authentication device for a server according to claim 65, wherein the quantum state library of the server is synchronized with the quantum state library of the client and is changed periodically according to a predetermined rule. 73. The authentication device for a server according to claim 61, wherein the first dynamic interactive verification information includes the client's identity identifier; The second dynamic interactive verification information generation unit includes: The preliminary authentication subunit is used to perform preliminary authentication on the client based on the client's identity identifier; The second dynamic interactive verification information generation subunit is used to generate second dynamic interactive verification information based on the first dynamic interactive verification information if the initial authentication is successful. 74. The authentication device for a server according to claim 73, wherein the client's identity identifier includes the client's user identification code and identity certificate. 75. The authentication device for a server according to claim 61, wherein the second dynamic interactive verification information sending unit comprises: The encrypted second dynamic interaction verification information sending subunit is used to encrypt all or part of the second dynamic interaction verification information with a key and then send it to the server. 76. The authentication device for a server according to claim 75, wherein the key and the key used by the client for decryption are symmetric quantum keys or public-private keys. 77. The authentication device for a server according to claim 61, wherein the first dynamic interactive verification information receiving unit comprises: The encrypted first dynamic interaction verification information receiving subunit is used to receive first dynamic interaction verification information sent by the client, in which at least part of the information is encrypted. The first dynamic interactive verification information decryption subunit is used to decrypt the encrypted information using a decryption key corresponding to the key used by the client for encryption. The third dynamic interactive verification information receiving unit includes: The encrypted third dynamic interaction verification information receiving subunit is used to receive the third dynamic interaction verification information generated based on the second dynamic interaction verification information, which is at least partially encrypted by the information sent by the client. The third dynamic interactive verification information decryption subunit is used to decrypt the encrypted information using a decryption key corresponding to the key used by the client for encryption. 78. The authentication device for a server according to claim 77, wherein the decryption key and the key used for encryption by the client are symmetric quantum keys or public-private keys. 79. An authentication terminal device for a client, characterized in that it comprises: CPU; Input/output unit; Memory; The memory stores a program for any of the authentication methods for clients as described in claims 1 to 21; and is able to run according to the program of the above method after startup. 80. An authentication terminal device for a server, characterized in that it comprises: CPU; Input/output unit; Memory; The memory stores a program for any of the authentication methods for a server as described in claims 43 to 60; and is able to run according to the program of the above method after startup. 81. A system for user authentication, comprising a client and a server, characterized in that the client is configured with any of the authentication devices for the client as described in claims 22 to 42, and the server is configured with any of the authentication devices for the server as described in claims 61 to 78.