KR101955484B1 - Method for performing and requesting authentication based on quantum channel - Google Patents

Abstract

A method of performing a quantum channel based authentication includes the steps of (a) generating a non-quantum code by communicating with a quantum channel input through a quantum channel, (b) determining a quantum code rule based on the non-quantum code, ) Receiving a quantum stream from the quantum channel input through a quantum channel and (d) analyzing the quantum stream based on the quantum code rule to perform authentication on the quantum channel input.
A method of requesting an authentication based on a quantum channel includes the steps of: (a) generating a non-quantum code by communicating through a quantum channel output and a non-quantum channel, (b) determining a quantum code rule based on the non- ) Inserting a quantum code into the quantum stream based on the quantum code rule and transmitting the quantum code to the quantum channel output through a quantum channel.

Description

[0001] METHOD FOR PERFORMING AND REQUESTING AUTHENTICATION BASED ON QUANTUM CHANNEL [0002]

The present invention relates to authentication and requesting technology based on a quantum channel, and more particularly, to authentication and requesting technology based on a quantum channel, and more particularly, A quantum channel-based authentication performing method and an authentication requesting method enabling quantum cryptography communication.

Quantum communication corresponds to the quantum key distribution (QKD) of quantum cryptography using quantum mechanical properties for secure communication. Since quantum communication technology transmits quantum teleportation rather than physical particle transmission, the moment the attacker measures the quantum state for eavesdropping, the quantum state itself changes, and the receiver attempts to intercept the attempt by the attacker Able to know.

The conventional quantum communication technology utilizing the quantum key distribution has a disadvantage that it is vulnerable from the man-in-the-middle due to difficulty in authentication with respect to the communication counter party.

Korean Patent No. 10-1351012 (Apr. 21, 2014) provides a method and apparatus for performing a user on a quantum communication in quantum communication through N users. A method for authenticating a user in a multi-party quantum communication according to an embodiment of the present invention includes generating a first number of quantum entanglement states consisting of N particles among N users (where N is a natural number greater than 2) Transmitting to the users a first number of particles corresponding to each of the particles; Determining whether there is a false attacker among N users based on a first error rate computed using a second arbitrary number of particles and a pre-stored secret key among the particles possessed by each of the users; And controlling the quantum communication server to generate a new secret key using a third number of particles arbitrarily selected by the users, and to replace the generated secret key with a previously stored secret key.

Korean Patent No. 10-1314210 (2013.09.26) discloses that the BB84 quantum key distribution (QKD) protocol, which has vulnerability to man-in-the-middle attacks, The present invention is characterized by sharing a position having the same axis without disclosing Basis information using a secret key and verifying whether or not the position has the same measured value to authenticate the quantum channel.

1. Korean Patent No. 10-1351012 (2014.01.02) 2. Korean Patent No. 10-1314210 (2013.09.26)

An embodiment of the present invention provides a quantum channel-based authentication method capable of performing secure quantum cryptography communication from an intermediate attacker, by performing authentication or request for a communication counterpart in a secure manner in a quantum communication performed based on a quantum channel And an authentication request method.

An embodiment of the present invention provides a quantum channel-based authentication method capable of authenticating the authentication information inserted in a quantum stream received through a quantum channel according to a quantum code rule and performing authentication of a counterpart of the quantum communication in a secure manner And apparatus.

An embodiment of the present invention is to provide a method and an apparatus for performing a quantum channel-based authentication that can perform user authentication with an improved security level so that quantum communication that is safe from man-in-the-middle attacks proceeds.

In one embodiment of the present invention, before the authentication is requested through the quantum channel, the authentication of the quantum channel output terminal is first performed with respect to the possession of the pre-shared key, so that a secure authentication process is performed from the attacker without a separate server device And a method and apparatus for requesting authentication based on a quantum channel.

An embodiment of the present invention provides a quantum channel based authentication request method and apparatus capable of inserting authentication information according to a quantum code rule into a quantum stream to be transmitted through a quantum channel so that authentication about itself can be performed in a secure manner .

An embodiment of the present invention is to provide a quantum channel-based authentication request method and apparatus capable of requesting user authentication with an improved security level so that a quantum communication that is safe from a man-in-the-middle attack proceeds.

Among the embodiments, a method of performing quantum channel-based authentication includes the steps of (a) generating a non-quantum code by communicating with a quantum channel input through a non-quantum channel, (b) determining a quantum code rule based on the non- (C) receiving a quantum stream from the quantum channel input through a quantum channel, and (d) analyzing the quantum stream based on the quantum code rule to perform authentication on the quantum channel input stage .

The step (a) may include receiving a first non-quantum partial code that is encrypted based on the pre-shared key by the quantum channel input and used to generate the non-quantum code.

The step (a) may include decrypting the encrypted first non-quantum partial code based on the pre-shared key.

The step (a) may further comprise generating a second non-quantum partial code encrypted based on the pre-shared key and used to generate the non-quantum code and providing the second non-quantum partial code to the quantum channel input.

The step (b) may include generating a random number according to the first scheme using the non-quantum code and using the generated random number as an initial value for generating the quantum code rule.

The step (b) may include determining at least one quantum code sequence representing the position and value of the quantum stream as the quantum code rule by generating a random number according to the second scheme based on the initial value have.

The step (d) may include interpreting the quantum code rule to identify at least one specific quantum bit of the received quantum stream and generating a verification code based on the at least one specific quantum bit have.

The step (d) may include receiving the transmission method of the quantum stream from the quantum channel input terminal through the non-quantum channel and transmitting the reception method of the quantum stream through the non-quantum channel.

The step (d) may further include confirming whether the transmission scheme and the reception scheme for the quantum code according to the quantum code rule match with each other, and performing the authentication.

Among the embodiments, a quantum channel-based authentication request method includes the steps of (a) generating a non-quantum code by communicating with a quantum channel output through a non-quantum channel, (b) determining a quantum code rule based on the non- (C) inserting a quantum code into the quantum stream based on the quantum code rule and transmitting the quantum code to the quantum channel output through a quantum channel.

The step (a) may include generating a first non-quantum partial code, which is encrypted based on the pre-shared key and used to generate the non-quantum code, and providing the first non-quantum partial code to the quantum channel output.

The step (a) may include receiving a second non-quantum partial code that is encrypted based on the pre-shared key by the quantum channel output and used to generate the non-quantum code.

The step (a) may decrypt the encrypted second non-quantum partial code based on the pre-shared key to perform authentication on the quantum channel output terminal with respect to possession of the pre-shared key.

The step (b) may include generating a random number according to the first scheme using the non-quantum code and using the generated random number as an initial value for generating the quantum code rule.

The step (b) may include determining at least one quantum code sequence representing the position and value of the quantum stream as the quantum code rule by generating a random number according to the second scheme based on the initial value have.

The step (c) may include inserting the value information of the quantum code corresponding to the corresponding position of the quantum stream based on the information about the position and the value of the quantum stream in the quantum code rule.

Among the embodiments, the apparatus for performing quantum channel-based authentication includes a non-quantum code generation unit for generating a non-quantum code by communicating with a quantum channel input through a non-quantum channel, and a quantum code generation unit for determining a quantum code rule based on the non- A code rule determining unit, a quantum stream receiving unit for receiving a quantum stream from the quantum channel input end through a quantum channel, and an authentication performing unit for analyzing the quantum stream based on the quantum code rule to perform authentication on the quantum channel input end do.

Among the embodiments, a quantum channel-based authentication request apparatus includes a non-quantum code generation unit for generating a non-quantum code by communicating with a quantum channel output terminal through a non-quantum channel, a quantum code generation unit for determining a quantum code rule based on the non- And a quantum stream processing unit for inserting a quantum code into the quantum stream based on the code rule determining unit and the quantum code rule, and transmitting the quantum code to the quantum channel output through a quantum channel.

The disclosed technique may have the following effects. It is to be understood, however, that the scope of the disclosed technology is not to be construed as limited thereby, as it is not meant to imply that a particular embodiment should include all of the following effects or only the following effects.

The method and the authentication request method based on the quantum channel according to an embodiment of the present invention can perform authentication or request for the communication counter party in a secure manner in the quantum communication based on the quantum channel, Enabling encrypted communication.

A method and apparatus for performing a quantum channel-based authentication according to an embodiment of the present invention includes: verifying authentication information embedded in a quantum stream received through a quantum channel according to a quantum code rule; Can be performed.

The method and apparatus for performing a quantum channel-based authentication according to an embodiment of the present invention can perform user authentication with an improved security level so that quantum communication is safely performed against an attack from a man-in-the-middle.

A method and an apparatus for requesting authentication based on a quantum channel according to an embodiment of the present invention perform authentication of a quantum channel output terminal with respect to ownership of a pre-shared key before requesting authentication via a quantum channel, The authentication process can be performed securely from the attacker without the server device.

The method and apparatus for requesting authentication based on a quantum channel according to an embodiment of the present invention insert authentication information according to a quantum code rule into a quantum stream to be transmitted through a quantum channel, have.

The method and apparatus for requesting authentication based on a quantum channel according to an embodiment of the present invention can request user authentication with an improved security level so that a secure quantum communication can be performed from an attack on a man.

1 is a view for explaining a quantum channel-based authentication system according to an embodiment of the present invention.
FIG. 2 is a view for explaining a quantum channel-based authentication performing apparatus shown in FIG. 1. FIG.
FIG. 3 is a view for explaining a quantum channel-based authentication request apparatus in FIG.
FIG. 4 is a flowchart illustrating a process in which the apparatus for performing quantum channel-based authentication shown in FIG. 1 performs authentication with respect to a quantum channel input terminal by communicating with a quantum channel input terminal.
5 is a flowchart illustrating a process in which the quantum channel-based authentication requesting apparatus in FIG. 1 communicates with a quantum channel output terminal and performs authentication on a quantum channel output terminal.
FIG. 6 is a flowchart illustrating an embodiment of a process in which the apparatus for performing a quantum channel-based authentication shown in FIG. 1 and the apparatus for requesting authentication based on a quantum channel communicate with each other to perform mutual authentication.

The description of the present invention is merely an example for structural or functional explanation, and the scope of the present invention should not be construed as being limited by the embodiments described in the text. That is, the embodiments are to be construed as being variously embodied and having various forms, so that the scope of the present invention should be understood to include equivalents capable of realizing technical ideas. Also, the purpose or effect of the present invention should not be construed as limiting the scope of the present invention, since it does not mean that a specific embodiment should include all or only such effect.

Meanwhile, the meaning of the terms described in the present application should be understood as follows.

The terms "first "," second ", and the like are intended to distinguish one element from another, and the scope of the right should not be limited by these terms. For example, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component.

It is to be understood that when an element is referred to as being "connected" to another element, it may be directly connected to the other element, but there may be other elements in between. On the other hand, when an element is referred to as being "directly connected" to another element, it should be understood that there are no other elements in between. On the other hand, other expressions that describe the relationship between components, such as "between" and "between" or "neighboring to" and "directly adjacent to" should be interpreted as well.

It is to be understood that the singular " include " or "have" are to be construed as including the stated feature, number, step, operation, It is to be understood that the combination is intended to specify that it does not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

In each step, the identification code (e.g., a, b, c, etc.) is used for convenience of explanation, the identification code does not describe the order of each step, Unless otherwise stated, it may occur differently from the stated order. That is, each step may occur in the same order as described, may be performed substantially concurrently, or may be performed in reverse order.

The present invention can be embodied as computer-readable code on a computer-readable recording medium, and the computer-readable recording medium includes all kinds of recording devices for storing data that can be read by a computer system . Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise defined. Commonly used predefined terms should be interpreted to be consistent with the meanings in the context of the related art and can not be interpreted as having ideal or overly formal meaning unless explicitly defined in the present application.

1 is a view for explaining a quantum channel-based authentication system according to an embodiment of the present invention.

Referring to FIG. 1, a quantum channel-based authentication system 100 includes a quantum channel-based authentication execution unit 110 and a quantum channel-based authentication request unit 120.

The quantum channel-based authentication performing unit 110 may perform authentication on the other party by communicating with the quantum channel-based authentication requesting apparatus 120 through a quantum channel and a non-quantum channel Lt; / RTI > computing device. Here, the quantum channel is a channel for communicating by sending a signal to each photon, so that communication in a single direction is possible. For example, the BB84 Quantum Key Distribution (QKD) protocol can be used in a communication process have. A non-quantum channel is a public channel that utilizes an existing communication network, and can communicate in both directions. For example, a TCP / IP (Transmission Control Protocol / Internet Protocol) protocol can be used in a communication process . The quantum channel-based authentication performing unit 110 may receive a quantum signal from the quantum channel-based authentication request unit 120 of the quantum channel input terminal through the quantum channel in the process of performing the quantum channel-based authentication.

The quantum channel based authentication request device 120 corresponds to a computing device capable of requesting user authentication by communicating with a quantum channel based authentication performing device 110 through a quantum channel and a non-quantum channel. The authentication requesting apparatus 120 based on the quantum channel can transmit the quantum signal to the quantum channel-based authentication performing unit 110 of the quantum channel output terminal through the quantum channel in the process of requesting authentication based on the quantum channel.

Hereinafter, the quantum channel output terminal is assumed to correspond to the quantum channel-based authentication performing device 110 for convenience's sake, and the quantum channel input terminal may be referred to as a quantum channel-based authentication requesting device 120 .

FIG. 2 is a view for explaining a quantum channel-based authentication performing apparatus shown in FIG. 1. FIG.

2, the quantum channel-based authentication performing unit 110 includes a non-quantum code generating unit 210, a quantum code rule determining unit 220, a quantum stream receiving unit 230, an authentication performing unit 240, (250), which may be interconnected.

The non-quantum code generation unit 210 generates a non-quantum code by communicating with a quantum channel input terminal through a non-quantum channel. Here, the non-quantum code is generated in the process of communicating over the non-quantum channel and is used to determine the quantum code rule. More specifically, the non-quantum code generation unit 210 may receive the encrypted first non-quantum partial code from the quantum channel input through the non-quantum channel and generate an encrypted second non-quantum partial code, To provide a quantum channel input, and generate a non-quantum code based on the first and second non-quantum partial codes.

In one embodiment, the non-quantum code generation unit 210 receives a first non-quantum partial code, which is encrypted based on a pre-shared key (AK) by a quantum channel input and used to generate a non-quantum code . Here, the pre-shared key corresponds to a secret key previously shared between the quantum channel-based authentication performing unit 110 and the quantum channel input end. For example, the non-quantum code generator 210 may receive E _AK (R _A || "Alice") and Nonce values corresponding to the encrypted first non-quantum partial code from the quantum channel input have.

In one embodiment, the non-quantum code generation unit 210 may decode the first non-quantum partial code encrypted based on the pre-shared key. For example, the non-quantum code generation unit 210 decodes the received E _AK (R _A || "Alice") received as the encrypted first non-quantum partial code based on the pre-shared key, It is possible to obtain R _A corresponding to the quantum partial code. In one embodiment, the non-quantum code generation unit 210 may perform decoding on the first non-quantum partial code encrypted using the pre-shared key and the symmetric key encryption algorithm.

In one embodiment, the non-quantum code generation section 210 may generate a second non-quantum partial code, which is encrypted based on the pre-shared key and used to generate the non-quantum code, and provide it to the quantum channel input. More specifically, when the first non-quantum partial code R _A is obtained through decoding, the non-quantum code generation unit 210 generates a second non-quantum partial code R _B Encryption can be performed on the second non-quantum partial code using the nonce value received from the quantum channel input terminal and the pre-shared key and symmetric key encryption algorithm applied in the decryption process. For example, the non-quantum code generation unit 210 generates the second non-quantum partial code R _B Quot; Bob ") and performs encryption based on the pre-shared key to generate E _AK (Nonce | R _B || "Bob") as the encrypted second non-quantum partial code Can be provided to the quantum channel input terminal.

In one embodiment, the non-quantum code generation section 210 may generate a non-quantum code based on the first and second non-quantum partial codes. For example, the first non-quantum partial code R _A and the first non-quantum partial code R _B (R _A | R _B ) can be generated as a non-quantum code.

The quantum code rule determination unit 220 determines the quantum code rule based on the non-quantum code. In one embodiment, the quantum code rule may include an insertion rule for the quantum code inserted as authentication information on the quantum channel input into the quantum stream received from the quantum channel input.

In one embodiment, the quantum code rule determination unit 220 may generate a random number according to the first scheme with a non-quantum code. For example, the quantum code rule determination unit 220 generates a random number using a deterministic random bit generator (DRBG) based on a pre-shared key with respect to a non-quantum code (R _A | R _B ) . Here, the non-quantum code can be used as a seed of the random number generator.

In one embodiment, the quantum code rule determination unit 220 may use the generated random number as an initial value for generating a quantum code rule. For example, the quantum code rule determination unit 220 may generate a quantum code rule by generating a random number such as DRBG _AK (R _A | R _B ) based on a non-quantum code R _A || R _B Initial values (K _V , K _P , V ₀ , P ₀ ) can be generated. In one embodiment, the quantum code rule determination unit 220 may generate an initial value for generating a quantum code rule by performing a divide operation on the generated random number, for example, DRBG _AK (R _A || the result of the operation of the R _B) (it is possible to generate an initial value _{(K V, K P, V} 0, P 0) corresponding to the _{K V || K P || V 0} || P 0).

In one embodiment, the quantum code rule determination unit 220 may generate a random number according to the second scheme based on the initial value, and determine at least one quantum code sequence representing the position and value of the quantum stream, using a quantum code rule have. For example, the quantum code rule determination unit 220 may determine at least one predefined value K _V and V ₀ based on the initial values (K _V , K _P , V ₀ , P ₀ ) (For example, a hash operation or a modulo operation), performs at least one specific operation predefined with respect to the output result and K _P and P ₀ , and outputs the result to the pseudo-random number generator (P _N ), {V _N } (where N is a natural number equal to or greater than 1) by generating a random number using a pseudo random number generator (PRNG). Here, the initial value can be used as a seed of the pseudo-random number generator, {P _N } denotes the position of the quantum stream, and {V _N } denotes the value of the quantum stream.

In one embodiment, the quantum code rule determination unit 220 may generate a quantum code sequence based on an initial value and the following equation (1), and determine the quantum code rule as a quantum code rule.

[Equation 1]

V _{N +1} = DRBG _Kv (V _N ) mod 2 ^t

P _{N +1} = P _N + 1 + [DRBG _Kp (P _N ) mod m]

(Where DRBG denotes an operation for generating a random number by using an internal value as a seed of a deterministic random number generator, ^2t denotes a length interval between adjacent quantum codes, t denotes an interval between 1 and N M denotes a maximum value of the length interval, and mod denotes a modulo operation)

The quantum stream receiving unit 230 receives the quantum stream from the quantum channel input terminal through the quantum channel. Here, the quantum stream may comprise at least one photon signal transmitted and polarized by a quantum channel input. The quantum stream receiving unit 230 randomly selects at least one polarizing filter for measuring the quantum stream in the course of receiving the quantum stream, and determines a polarization state of each of at least one quantum bit of the quantum stream according to the selected at least one polarizing filter Can be measured and stored.

The authentication performing unit 240 analyzes the quantum stream based on the quantum code rule and performs authentication on the quantum channel input terminal.

In one embodiment, the authentication performing unit 240 can interpret the quantum code rule to identify at least one specific quantum bit of the received quantum stream, and generate a verification code based on the at least one specific quantum bit . For example, the authentication performing unit 240 obtains {P ₁ , P ₂ , P ₃ , ... , P _N }, and the value of the measured polarization state with respect to the specific quantum bits of the quantum stream at positions corresponding to each of {V ₁ , V ₂ , V ₃ , ..., P _N } , V _N }, it is possible to detect only specific quantum bits having the same value to generate a verification code.

In one embodiment, the authentication performing unit 240 may receive the transmission method of the quantum stream from the quantum channel input terminal and the transmission method of the quantum stream through the non-quantum channel from the quantum channel input terminal. More specifically, the authentication performing unit 240 can receive a quantum stream transmission scheme by a quantum channel input terminal from a quantum channel input terminal through a non-quantum channel. For example, Can be received. In addition, the authentication performing unit 240 can transmit the reception method of the quantum stream by the quantum stream receiving unit 230 through the non-quantum channel. For example, in order to measure the quantum stream in the process of receiving the quantum stream, The information on the polarizing filter selected by the stream receiving unit 230 can be transmitted to the quantum channel input terminal.

In one embodiment, the authentication performing unit 240 can perform authentication on the quantum channel input terminal by confirming whether or not the transmission scheme and the reception scheme related to the quantum code according to the quantum code rule match. More specifically, with respect to at least one specific quantum bit in which the transmission scheme and the reception scheme coincide among a plurality of specific quantum bits of a quantum stream corresponding to a specific position of the quantum code rule, Can be authenticated by checking whether or not it meets the quantum code rules. For example, the authentication performing unit 240 may obtain the position information of the quantum code rule {P ₁ , P ₂ , P ₃ , ...). , P _8} and both bits in the same polarization filter is a quantum bit used with each other in transmission and reception process of the two streams corresponding to _{{P 1, P 2, P} 3} = {1, 3, 6} positions and V ₁ , V ₂ , V ₃ } = {0, 1, 1} of the quantum code rules can be confirmed, , It can be determined that the authentication result of the quantum channel input terminal is successful, and if not, the authentication failure can be determined.

The control unit 250 can control the overall operation of the quantum channel based authentication performing unit 110 and includes a non-quantum code generating unit 210, a quantum code rule determining unit 220, a quantum stream receiving unit 230, The data flow between the execution units 240 can be controlled. In one embodiment, the controller 250 may be implemented as a central processing unit (CPU) of the quantum channel based authentication performing unit 110.

FIG. 3 is a view for explaining a quantum channel-based authentication request apparatus in FIG.

3, the quantum channel-based authentication request apparatus 120 includes a non-quantum code generation unit 310, a quantum code rule determination unit 320, a quantum stream processing unit 330, an authentication request unit 340, Lt; RTI ID = 0.0 > 350, < / RTI >

The non-quantum code generation unit 310 generates a non-quantum code by communicating with a quantum channel output terminal through a non-quantum channel. More specifically, the non-quantum code generation unit 310 may generate a first non-quantum partial code encrypted through a non-quantum channel and provide the first non-quantum partial code to the quantum channel output terminal, And may perform authentication with respect to the output of the quantum channel associated with the possession of the pre-shared key.

In one embodiment, the non-quantum code generation unit 310 may generate a first non-quantum partial code, which is encrypted based on the pre-shared key and used to generate the non-quantum code, and provide it to the quantum channel output stage. For example, the non-quantum code generation unit 310 generates a random number and a nonce value to generate a first non-quantum partial code R _A, and generates a first non-quantum partial code R _A using a pre-shared key and a symmetric key encryption algorithm, a is an encrypted by performing a first non-encrypted part of both the code on both the part code _{R a E AK (R a ||} "Alice") and the nonce value may be provided in both output channels.

In one embodiment, the non-quantum code generation unit 310 may receive a second non-quantum partial code, which is encrypted based on the pre-shared key by the quantum channel output and used to generate the non-quantum code. For example, the non-quantum code generation unit 310 generates E _AK (Nonce | R _B || "Bob") corresponding to the encrypted second non-quantum partial code from the quantum channel output terminal as a response to the first non- &Quot;)< / RTI >

In one embodiment, the non-quantum code generation unit 310 may decrypt the encrypted second non-quantum partial code based on the pre-shared key to perform authentication on the quantum channel output terminal as to whether the pre-shared key is possessed . For example, the non-quantum code generation unit 310 performs decryption based on the pre-shared key with respect to E _AK (Nonce R _B || Bob) received as the encrypted second non-quantum partial code The verification can be performed with respect to the nonce value that has been transmitted before, and when the verification is normally completed, the nonce value transmitted and the R _B corresponding to the second non-quantum partial code can be obtained. In one embodiment, the non-quantum code generation unit 310 may perform the above-described verification in the process of communicating over the non-quantum channel to check whether the quantum channel output terminal owns the pre-shared key, It is possible to control to transmit the quantum stream through the quantum channel at a later stage. In one embodiment, the non-quantum code generation unit 310 may generate a non-quantum code based on the first and second non-quantum partial codes.

The quantum code rule determination unit 320 determines the quantum code rule based on the non-quantum code. In one embodiment, the quantum code rule determination unit 320 may generate a random number according to the first scheme with a non-quantum code. In one embodiment, the quantum code rule determination unit 320 may use the generated random number as an initial value for generating the quantum code rule. The quantum code rule determination unit 320 may generate a random number according to the second scheme based on the initial value and determine at least one quantum code sequence representing the position and value of the quantum stream as a quantum code rule.

The quantum code rule determination unit 320 may perform the same function as the quantum code rule determination unit 220 of the quantum channel based authentication performing unit 110. [ The quantum code rule determining unit 320 may perform functions and embodiments described in the detailed description of the quantum code rule determining unit 220 of the quantum channel based authentication performing unit 110 .

The quantum stream processing unit 330 inserts the quantum code into the quantum stream based on the quantum code rule, and transmits the quantum code to the quantum channel output terminal through the quantum channel. In one embodiment, the quantum stream processing unit 330 may generate a bitstream having arbitrary bit information as a quantum stream for transmission over a quantum channel, and insert a quantum code into the quantum stream based on the quantum code rule . The quantum stream processing unit 330 can select any polarization filter to transmit a quantum stream in which a quantum code is inserted through a quantum channel, generate a polarization signal corresponding to the selected polarization filter, and transmit the generated polarization signal through the quantum channel A quantum stream can be transmitted to the quantum channel output terminal. In one embodiment, the quantum stream processing section 330 may insert the quantum code into the quantum stream in such a manner that the encoding of the position where insertion is determined according to the quantum code rule.

In one embodiment, the quantum stream processing unit 330 may insert the value information of the quantum code corresponding to the corresponding position of the quantum stream, based on the information about the position and value of the quantum stream in the quantum code rule. For example, the quantum stream processing unit 330 may generate quantum code streams ({P _N }, {V _N }) randomly generated by the quantum code rule determination unit 320 and indicating the positions and values of the quantum streams, The corresponding positions {P ₁ , P ₂ , P ₃ , ... , P _N }, the values of corresponding quantum codes {V ₁ , V ₂ , V ₃ , ... , V _N }, respectively.

When the transmission of the quantum stream through the quantum channel is completed, the authentication request unit 340 can request authentication of the quantum channel output terminal through the non-quantum channel. In one embodiment, the authentication request unit 340 can transmit the transmission method of the quantum stream by the quantum stream processing unit 330 to the quantum channel output terminal through the non-quantum channel. For example, in the transmission process of the quantum stream, It is possible to request authentication regarding itself by transmitting information about the selected polarizing filter.

The control unit 350 can control the entire operation of the quantum channel based authentication requesting apparatus 120 and includes a non-quantum code generating unit 310, a quantum code rule determining unit 320, a quantum stream processing unit 330, Requesting unit 340. [0050] FIG. In one embodiment, the control unit 350 may be implemented as a CPU of the quantum channel based authentication requesting apparatus 120.

FIG. 4 is a flowchart illustrating a process in which the apparatus for performing quantum channel-based authentication shown in FIG. 1 performs authentication with respect to a quantum channel input terminal by communicating with a quantum channel input terminal.

The non-quantum code generation unit 210 generates a non-quantum code by communicating with the quantum channel input through the non-quantum channel (step S410). In one embodiment, in one embodiment, the non-quantum code generation unit 210 receives the first non-quantum partial code encrypted based on the pre-shared key by the quantum channel input and outputs the encrypted first non- Shared key, and generate the encrypted second non-quantum partial code based on the pre-shared key and provide it to the quantum channel input.

The quantum code rule determination unit 220 determines the quantum code rule based on the non-quantum code (step S420). In one embodiment, the quantum code rule determination unit 220 may generate an initial value for generating a quantum code rule by generating a random number with a non-quantum code generated based on the first and second non-quantum portion codes , Generating a random number according to the second scheme based on the initial value, and determining at least one quantum code sequence representing the position and value of the quantum stream as a quantum code rule.

The quantum stream receiving unit 230 receives the quantum stream from the quantum channel input terminal through the quantum channel (step S430).

The authentication performing unit 240 analyzes the quantum stream based on the quantum code rule and performs authentication on the quantum channel input terminal (step S440). In one embodiment, the authentication performing unit 240 may receive the transmission method of the quantum stream from the quantum channel input through the non-quantum channel and the transmission method of the quantum stream through the non-quantum channel from the quantum channel input terminal, It is possible to perform authentication with respect to the quantum channel input terminal by confirming whether or not the transmission scheme and the reception scheme related to the quantum code according to the rule are matched.

According to an embodiment of the present invention, the quantum channel-based authentication performing unit 110 verifies the authentication information embedded in the quantum stream received through the quantum channel according to the quantum code rule, . ≪ / RTI >

According to an embodiment of the present invention, the quantum channel-based authentication performing unit 110 may perform user authentication with an enhanced security level so that quantum communication is safely performed against the meson attack.

5 is a flowchart illustrating a process in which the quantum channel-based authentication requesting apparatus in FIG. 1 communicates with a quantum channel output terminal and performs authentication on a quantum channel output terminal.

The non-quantum code generation unit 310 generates a non-quantum code by communicating with the quantum channel output terminal through the non-quantum channel (step S510). In one embodiment, the non-quantum code generation unit 310 may generate and provide an encrypted first non-quantum partial code based on the pre-shared key to the quantum channel output, And decrypts the second non-quantum partial code to perform authentication on the quantum channel output terminal whether the pre-shared key is owned or not.

The quantum code rule determination unit 320 determines the quantum code rule based on the non-quantum code (step S520).

The quantum stream processing unit 330 inserts the quantum code into the quantum stream based on the quantum code rule, and transmits the quantum code to the quantum channel output terminal through the quantum channel (step S530). In one embodiment, the quantum stream processing unit 330 may insert the value information of the quantum code corresponding to the corresponding position of the quantum stream, based on the information about the position and value of the quantum stream in the quantum code rule.

In one embodiment, when the step S530 is completed, the authentication request unit 340 may transmit the quantum stream transmission method by the quantum stream processing unit 330 to the quantum channel output terminal on the non-quantum channel.

According to an embodiment of the present invention, the quantum channel-based authentication requesting device 120 performs authentication on the quantum channel output terminal with respect to the possession of the pre-shared key before requesting authentication via the quantum channel, The secure authentication process can be performed from an attacker without a separate server device.

According to an embodiment of the present invention, the apparatus for requesting authentication based on a quantum channel 120 inserts authentication information according to a quantum code rule into a quantum stream to be transmitted through a quantum channel, can do.

According to an embodiment of the present invention, the quantum channel-based authentication request apparatus 120 may request user authentication with an improved security level so that the quantum communication secure from the meson attack proceeds.

FIG. 6 is a flowchart illustrating an embodiment of a process in which the apparatus for performing a quantum channel-based authentication shown in FIG. 1 and the apparatus for requesting authentication based on a quantum channel communicate with each other to perform mutual authentication. Here, it is assumed that the pre-shared key (AK) has been previously shared with each other.

The quantum channel based authentication request device 120 may generate a first non-quantum partial code R _A that is used to generate a non-quantum code (step S601).

The quantum channel-based authentication request apparatus 120 generates an encrypted first non-quantum partial code E _AK (R (R)) generated by performing encryption on the first non-quantum partial code R _A based on the pre-shared key and the symmetric key encryption algorithm _A "" Alice ") and a nonce value to the quantum channel-based authentication performing unit 110 via a non-quantum channel (step S602).

In step S602, the quantum channel-based authentication performing unit 110 receives a first non-quantum partial code E _AK (R _A || "Alice") and a nonce value from the quantum channel-based authentication request apparatus 120 And decrypts it based on the pre-shared key and the symmetric key encryption algorithm to obtain R _A corresponding to the first non-quantum partial code.

The quantum channel-based authentication performing unit 110 includes a second non-quantum partial code R _B (Step S603).

The quantum channel-based authentication performing unit 110 performs encryption based on the received nonce value, the second non-quantum partial code R _B , the pre-shared key, and the symmetric key cryptographic algorithm to generate the encrypted second non- Code E _AK (Nonce | R _B || "Bob") and transmit it to the quantum channel-based authentication requesting apparatus 120 through the non-quantum channel (step S 604).

The quantum channel based authentication request device 120 receives the encrypted second non-quantum partial code E _AK (Nonce R _B || "Bob") and, based on the pre-shared key and the symmetric key encryption algorithm Decoding can be performed to perform verification (step S605). The quantum channel-based authentication request apparatus 120 verifies whether or not the nonce value that was previously transmitted through the decryption is normally acquired, and determines whether or not the pre-shared key is owned before the authentication is requested through the quantum channel. And can perform authentication with respect to the execution device 110. The quantum channel-based authentication requesting apparatus 120 can obtain the nonce value transmitted in the case where the verification is normally completed and the R _B corresponding to the second non-quantum partial code.

Each of the quantum channel-based authentication performing unit 110 and the quantum channel-based requesting unit 120 performs a concatenation operation on the first and second non-quantum partial codes R _A and R _B , R _A | R _B ), and generate random numbers by using the generated non-quantum codes as a seed of a deterministic random number generator, and generate DRBG _AK (R _A | R _B ) The initial values K _V , K _P , V ₀ , and P ₀ may be generated so that the operation result corresponds to (K _V || K _P || V ₀ || P ₀ ) (step S606).

Each of the quantum channel based authentication performing unit 110 and the quantum channel based authentication requesting unit 120 uses the generated initial values K _V , K _P , V ₀ , and P ₀ as a seed of a pseudorandom number generator, The quantum code sequence ({P _N }, {V _N }) indicating the position and value of the stream can be determined by the quantum code rule (step S606).

In the step S601 ~ S606 in the case that quantum channel based authentication performing unit 110 and the quantum channel authentication request unit 120 of the base possess the same pre-shared key is mutually equal with the previous steps (R _A, R _B ) can be obtained and the same quantum code rules can be determined mutually.

The quantum channel-based authentication request apparatus 120 may insert a quantum code into the quantum stream according to a quantum code rule {P _N }, {V _N } (step S607). For example, the quantum channel-based authentication request apparatus 120 may generate an 8-bit quantized stream [0 0 1 0 1 1 0 1] arbitrarily prior to transmission of the quantum stream, and quantum code rules ({P ₁ , P ₂ , P ₃ , P ₄ }, {V ₁ , V ₂ , V ₃ , V ₄ } = ({2, 4, 6, 8}, {1, 0, 0, 1} can do. In this case, the quantum channel-based authentication requesting device 120 inserts the corresponding quantized stream into the quantum stream at a corresponding position of the quantum code according to the quantum code rule, and inserts the existing quantum stream [0 0 1 0 1 1 0 1] And a quantum stream [0 1 1 0 1 0 0 1].

]에 대응되는 편광 신호를 생성해 양자 채널을 통해 송신하고 송신 과정에서 사용된 축 정보를 저장할 수 있다.The quantum channel-based authentication requesting apparatus 120 can transmit the quantum stream to the quantum channel-based authentication performing apparatus 110 via the quantum channel (step S608). For example, the quantum channel-based authentication requesting device 120 may transmit the axis information of the polarization filter arbitrarily selected for transmission of the quantum stream on the basis of the BB84 quantum key distribution protocol [

To transmit through the quantum channel and store the used axis information in the transmission process.

]를 기초로 양자 채널을 통해 전송되는 편광 신호의 편광 상태를 측정하고 수신 과정에서 사용된 축 정보 및 측정 값을 저장할 수 있다.The quantum channel-based authentication performing unit 110 may receive the quantum stream from the quantum channel based authentication requesting apparatus 120 through the quantum channel (step S608). For example, the quantum channel-based authentication performing unit 110 may transmit the axis information of the polarization filter arbitrarily selected for reception of the quantum stream based on the BB84 quantum key distribution protocol [

], It is possible to measure the polarization state of the polarization signal transmitted through the quantum channel and to store the used axis information and measurement values in the receiving process.

The quantum channel-based authentication performing unit 110 may transmit the information on the polarization filter selected in the process of receiving the quantum stream to the quantum channel based authentication requesting apparatus 120 through the non-quantum channel (step S609). The quantum channel-based authentication requesting apparatus 120 may transmit the information on the polarization filter selected during the transmission of the quantum stream to the quantum channel-based authentication performing apparatus 110 through the non-quantum channel (step S610). The above steps S609 to S610 may be performed at the same time when one of them is transmitted first in response to the case, and the other one of them may transmit in response thereto.

The quantum channel-based authentication performing unit 110 may perform authentication on the quantum channel-based authentication requesting device 120 by confirming whether the transmission method and the receiving method related to the quantum code according to the quantum code rule match. For example, the quantum channel-based authentication performing unit 110 may analyze the quantum code rule when the value of the polarization state measured according to the polarization filter selected in the process of receiving the quantum stream is [0 0 1 0 1 0 1 1] (0, 0, 0, 1) at the 2, 4, 6, and 8 positions corresponding to the quantum code rules. (0, 1) at the 6th and 8th positions coinciding with each other have a value coinciding with the value information (0, 1) of the quantum code according to the quantum code rule, It is possible to authenticate the authentication server 120.

In one embodiment, each of the quantum channel based authentication performing unit 110 and the quantum channel based authentication requesting unit 120 generates a new first or second non-quantum partial code each time authentication is performed through the above steps Thereby improving security in the authentication process.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

100: Quantum channel based authentication system
110: Quantum channel-based authentication performing device
120: Quantum channel based authentication request device
210: non-quantum code generation unit 220: quantum code rule determination unit
230: Quantum stream receiving unit 240: Authentication performing unit
250:
310: Non-quantum code generation unit 320: Quantum code rule determination unit
330: Quantum stream processing unit 340: Authentication request unit
350:

Claims (18)

(a) performing communication with a quantum channel input stage through a non-quantum channel to generate a non-quantum code;
(b) determining a quantum code rule including a position and a value of a quantum stream based on the non-quantum code;
(c) receiving the quantum stream from the quantum channel input through a quantum channel; And
(d) analyzing the quantum stream based on the quantum code rule to perform authentication on the quantum channel input end,
The step (b)
Generating a random number according to the first scheme with the non-quantum code; And
And using the generated random number as an initial value for generating the quantum code rule.
The method of claim 1, wherein step (a)
And receiving a first non-quantum partial code encrypted based on the pre-shared key by the quantum channel input and used to generate the non-quantum code.
3. The method of claim 2, wherein step (a)
And decrypting the encrypted first non-quantum partial code based on the pre-shared key.
4. The method of claim 3, wherein step (a)
Generating a second non-quantum partial code that is encrypted based on the pre-shared key and used to generate the non-quantum code, and providing the generated second non-quantum partial code to the quantum channel input terminal .
delete 2. The method of claim 1, wherein step (b)
Generating a random number according to the second scheme based on the initial value and determining at least one quantum code sequence representing the position and value of the quantum stream as the quantum code rule, How to perform authentication of.
2. The method of claim 1, wherein step (d)
Interpreting the quantum code rule to identify at least one specific quantum bit of the received quantum stream; And
And generating a verification code based on the at least one specific quantum bit.
2. The method of claim 1, wherein step (d)
And performing transmission of the transmission method of the quantum stream from the quantum channel input terminal through the non-quantum channel and transmission of the reception method of the quantum stream through the non-quantum channel. How to do it.
9. The method of claim 8, wherein step (d)
Further comprising the step of checking whether the transmission scheme and the reception scheme of the quantum code according to the quantum code rule match with each other and performing the authentication.
(a) performing communication with a quantum channel output through a non-quantum channel to generate a non-quantum code;
(b) determining a quantum code rule including a position and a value of a quantum stream based on the non-quantum code; And
(c) inserting a quantum code into the quantum stream based on the quantum code rule and transmitting the quantum code to the quantum channel output through a quantum channel,
The step (b)
Generating a random number according to the first scheme with the non-quantum code; And
And using the generated random number as an initial value for generating the quantum code rule.
11. The method of claim 10, wherein step (a)
Generating a first non-quantum partial code that is encrypted based on the pre-shared key and used to generate the non-quantum code, and providing the first non-quantum partial code to the quantum channel output terminal.
12. The method of claim 11, wherein step (a)
And receiving a second non-quantum partial code encrypted based on the pre-shared key by the quantum channel output and used to generate the non-quantum code.
13. The method of claim 12, wherein step (a)
And decrypting the encrypted second non-quantum partial code based on the pre-shared key to perform authentication on the quantum channel output terminal as to whether the pre-shared key is possessed.
delete 11. The method of claim 10, wherein step (b)
Generating a random number according to the second scheme based on the initial value and determining at least one quantum code sequence representing the position and value of the quantum stream as the quantum code rule, Authentication request method.
11. The method of claim 10, wherein step (c)
And inserting value information of a quantum code corresponding to a corresponding position of the quantum stream on the basis of information on the position and value of the quantum stream in the quantum code rule. How to request.
A non-quantum code generation unit for performing communication with the quantum channel input stage through a non-quantum channel to generate a non-quantum code;
A quantum code rule determining unit for determining a quantum code rule including a position and a value of a quantum stream based on the non-quantum code;
A quantum stream receiving unit for receiving the quantum stream from the quantum channel input terminal through a quantum channel; And
And an authentication performing unit for analyzing the quantum stream based on the quantum code rule to perform authentication on the quantum channel input terminal,
The quantum code rule determination unit
Generates a random number according to the first scheme with the non-quantum code,
And the generated random number is used as an initial value for generating the quantum code rule.
A non-quantum code generator for generating a non-quantum code by performing communication with a quantum channel output through a non-quantum channel;
A quantum code rule determining unit for determining a quantum code rule including a position and a value of a quantum stream based on the non-quantum code; And
And a quantum stream processing unit for inserting a quantum code into the quantum stream based on the quantum code rule and transmitting the quantum code to the quantum channel output through a quantum channel,
The quantum code rule determination unit
Generates a random number according to the first scheme with the non-quantum code,
And the generated random number is used as an initial value for generating the quantum code rule.

Images