KR102011043B1 - Method for digital signature based on quantum key distribution and system performing the same - Google Patents

Abstract

The present invention provides a communication system, comprising: a first communication device for generating a signature pair based on a public parameter corresponding to a random number; Receive a public parameter and a signature pair from the first communication device, generate a signature using a verification parameter generated based on the public parameter, and generate the signature and the signature pair received from the first communication device. A second communication device for verifying whether a constituent signature matches; And a third communication device receiving the disclosure parameter from the second communication unit, generating a verification parameter based on the disclosure parameter, and transmitting the verification parameter to the second communication unit.

Description

Digital signature method based on quantum key distribution and system for performing the same {METHOD FOR DIGITAL SIGNATURE BASED ON QUANTUM KEY DISTRIBUTION AND SYSTEM PERFORMING THE SAME}

The present invention relates to digital signature technology, and more particularly, to quantum key distribution that can securely provide an electronic signature without a trusted third party based on quantum cryptographic secret symmetric keys distributed through quantum key distribution. A digital signature method and a system for performing the same.

Recently, quantum computer technology, which is showing rapid progress, is expected to solve various problems in science and technology field. At the same time, however, in the field of modern cryptography where mathematical complexity is the basis of safety, it is a serious threat in terms of safety. Currently widely used digital signatures are public key schemes based on factorization and discrete algebraic problems. It has been found that Sho's algorithm, a representative quantum algorithm, can solve this scheme efficiently.

Therefore, it is an urgent time to research a secure signature scheme that can replace the digital signature implemented by the public key method. In order to exclude the risk of public key scheme, we can propose a digital signature scheme based on symmetric keys. However, until now, related studies are inadequate, for two reasons. First, there is no method for securely distributing symmetric keys in real time in communication, and second, there is little discussion about how to extract the public parameters necessary for securely processing digital signatures. Because.

Korean Patent Registration No. 10-1298562 Korean Patent Registration No. 10-0599159

SUMMARY OF THE INVENTION An object of the present invention is to provide a quantum key distribution based digital signature system and method for extracting a public parameter corresponding to a true random number through quantum key distribution and digitally signing using the extracted public parameter.

An object of the present invention is to provide a quantum key distribution based digital signature system and method for securely digitally signing using a quantum cryptography secret symmetric key without a trusted third party using a shift index technique. .

A first aspect of the present invention for achieving the above object is a digital signature method performed in a first communication device of a communication system comprising a first communication device, a second communication device, and a third communication device, (a Generating a public parameter corresponding to a random number; (b) generating a signature key using the public parameter; (c) generating a signature pair using the signature key and a message to be transmitted through the signature; And (d) sending the signature pair and the disclosure parameter to the second communication device.

Preferably, the step (b) comprises: extracting a key index from the quantum cryptographic secret symmetric key shared with the third communication device using the public parameter; And generating a signature key from the quantum cryptography secret symmetric key shared with the second communication device using the key index.

Preferably, the key index may be extracted using a shift index technique in which the public parameter is used as index information, and the signature key may be extracted using a shift index technique in which the key index is used as index information.

Preferably, step (c) comprises: generating a signature by applying a shift index technique in which the signature key is used as index information to the message; And generating a signature pair consisting of the signature and the message.

A second aspect of the present invention for achieving the above object is a digital signature method performed in a second communication device of a communication system comprising a first communication device, a second communication device, and a third communication device, (a Receiving a signature pair and a disclosure parameter from the first communication device; (b) transmitting the disclosure parameter to the third communication device and receiving a verification parameter generated based on the disclosure parameter from the third communication device; (c) generating a signature key using the verification parameter; And (d) generating a signature using a message constituting the signature key and a signature pair received from the first communication device.

Preferably, the third communication device extracts a key index from the quantum cryptography secret symmetric key shared with the first communication device using the public parameter, and uses the quantum cryptography secret symmetric key shared with the second communication device. From the verification parameters to obtain the extracted key index can be generated.

Preferably, step (c) comprises: extracting a key index from a quantum cryptographic secret symmetric key shared with the third communication device using the verification parameter; And generating a signature key from the quantum cryptography secret symmetric key shared with the first communication device using the key index.

Preferably, the key index may be extracted using a shift index technique in which the verification parameter is used as index information, and the signature key may be extracted using a shift index technique in which the key index is used as index information.

Preferably, step (d) may include generating a signature by applying a shift index technique in which the signature key is used as index information to the message.

Preferably, the method may further include verifying whether the generated signature matches a signature constituting a signature pair received from the first communication device.

A third aspect of the present invention for achieving the above object is a communication system comprising: a first communication device for generating a signature pair based on a public parameter corresponding to a random number; Receive a public parameter and a signature pair from the first communication device, generate a signature using a verification parameter generated based on the public parameter, and generate the signature and the signature pair received from the first communication device. A second communication device for verifying whether a constituent signature matches; And a third communication device receiving the disclosure parameter from the second communication unit, generating a verification parameter based on the disclosure parameter, and transmitting the verification parameter to the second communication unit.

As described above, according to the present invention, a digital signature is implemented based on a signature key generated by generating a public parameter corresponding to a true random number and using a shift index technique.

In addition, on the basis of the quantum cryptography symmetric key, there is an effect that can safely provide the function of the digital signature without the presence of a trusted third party.

1 is a block diagram of a communication system according to a preferred embodiment of the present invention.
2 is a flowchart illustrating a quantum key distribution based digital signature method according to an embodiment.
3A to 3D are exemplary views for explaining a digital signature method.
4 is an exemplary diagram for explaining a shift index technique.

Advantages and features of the present invention, and a method of achieving them will be apparent from the following detailed description with reference to the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but will be implemented in various forms, and only the present embodiments are intended to complete the disclosure of the present invention, and the general knowledge in the art to which the present invention pertains. It is provided to fully convey the scope of the invention to those skilled in the art, and the present invention is defined only by the scope of the claims. Like reference numerals refer to like elements throughout. “And / or” includes each and all combinations of one or more of the items mentioned.

Although the first, second, etc. are used to describe various elements, components and / or sections, these elements, components and / or sections are of course not limited by these terms. These terms are only used to distinguish one element, component or section from another element, component or section. Therefore, the first device, the first component, or the first section mentioned below may be a second device, a second component, or a second section within the technical spirit of the present invention.

In addition, in each step, an identification code (eg, a, b, c, etc.) is used for convenience of description, and the identification code does not describe the order of the steps, and each step is clearly specified in context. Unless stated in order, it may occur differently from the stated order. That is, each step may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the reverse order.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. In this specification, the singular also includes the plural unless specifically stated otherwise in the phrase. As used herein, “comprises” and / or “comprising” refers to the presence of one or more other components, steps, operations and / or elements. Or does not exclude additions.

Unless otherwise defined, all terms (including technical and scientific terms) used in the present specification may be used in a sense that can be commonly understood by those skilled in the art. In addition, the terms defined in the commonly used dictionaries are not ideally or excessively interpreted unless they are specifically defined clearly.

In describing the embodiments of the present invention, when it is determined that a detailed description of a known function or configuration may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the embodiments of the present invention, which may vary according to intentions or customs of users and operators. Therefore, the definition should be made based on the contents throughout the specification.

1 is a block diagram of a communication system according to a preferred embodiment of the present invention.

Referring to FIG. 1, the communication system 100 includes a first communication device 110, a second communication device 120, and a third communication device 130.

Here, the first communication device 110 is so-called Alice, the second communication device 120 is so-called Bob, and the third communication device 130 is so-called Charlie. Preferably, each of the first communication device 110, the second communication device 120, and the third communication device is a communication device for performing quantum key distribution, which is easily performed by a person skilled in the art. The implementation manner may be variously modified. In addition, various methods may be applied to distributing quantum keys, for example, the BB84 protocol may be applied. Each of the first, second, and third communication devices 110, 120, and 130 has all the basic components for performing quantum key distribution, and the components for performing quantum key distribution and quantum key distribution. Assuming that various conventional techniques can be applied to the process, here, the quantum key distribution based digital signature performed through the control unit and the control unit further provided for performing the quantum key distribution based digital signature method according to the present invention. The explanation focuses on the method.

Preferably, the first communication device 110 and the second communication device 120, the first communication device 110 and the third communication device 130, and the second communication device 120 and the third communication device 130. ), The quantum cryptography secret symmetric keys distributed through quantum key distribution can be shared with each other, and the digital signature method is performed using the shared quantum cryptography secret symmetric key. Here, the first, second, and third communication devices 110, 120, and 130 are connected to each other by a quantum channel and a communication cable, so that quantum key distribution is performed through a quantum channel, and digital The signature method may be performed through a communication cable.

Preferably, the first communication device 110 generates the public parameter to generate a signature pair, and the second communication device 120 receives the signature pair and the public parameter generated from the first communication device 110 to generate a third signature. When the verification parameter is requested to the communication device 130, and the verification parameter is generated from the third communication device 130 and transmitted to the second communication device 120, the second communication device 120 signs using the verification parameter. After generating the, it may be verified whether the generated signature and the signature of the signature pair received from the first communication device 110 match. Hereinafter, a digital signature method performed through the first, second, and third communication devices 110, 120, and 130 will be described in more detail.

2 is a flowchart illustrating a quantum key distribution based digital signature method according to an embodiment, and FIGS. 3A to 3D are exemplary diagrams for describing a digital signature method. Hereinafter, a digital signature method will be described with reference to FIGS. 2 and 3A to 3D.

First, the first communication device 110, the second communication device 120, and the third communication device 130 each share a quantum password secret symmetric key by performing quantum key distribution with each other (step S201). Preferably, referring to FIG. 3A, the first communication device 110 and the second communication device 120 share a quantum cryptography secret symmetric key QK _AB , and the first communication device 110 and the third communication device. The 130 shares a quantum cryptography secret symmetric key (QK _AC ), and the second communication device 110 and the third communication device 130 share a quantum cryptography secret symmetric key (QK _BC ). Here, in order to share the quantum code secret symmetric key, the BB84 protocol can be used, and a quantum channel to which the principle of uncertainty, the principle of non-replicability of quantum states, etc. can be used. In addition, the quantum code secret symmetric key obtained through the BB84 protocol using the quantum channel is secured in the quantum computer environment and enables confidential communication to ensure the security of the digital signature performed in subsequent steps.

The open parameter generation module (not shown) of the control unit of the first communication device 110 generates the open parameters (step S202). Preferably, the public parameter P _A may be a true random number obtained through a random number generator, wherein the true random number may be obtained by a quantum random number generator, but the scheme is not limited thereto. Do not.

The signature key generation module (not shown) of the control unit of the first communication device 110 generates the signature key using the public parameter (step S203). Preferably, referring to FIG. 3B, the first communication device 110 uses a public parameter P _A to generate a key index (QK _AC ) from the quantum cryptographic secret symmetric key QK _AC shared with the third communication device 130. key index, I _AC ), and a signature key K _sign is generated from the quantum cryptographic secret symmetric key QK _AB shared with the second communication device 120 using the key index I _AC . have.

More specifically, the first communication device 110 shares the quantum code secret symmetry shared with the third communication device 130 by using a shift indexing technique in which the public parameter P _A is index information (ie, an index sequence). key to extract the key index (I _AC) from (QK _AC), and the key index (I _AC) can be expressed as equation 1 below.

[Equation 1]

는 시프트 인덱스(sift index) 기법을 표현하는 함수이며, 시프트 인덱스 기법에 대한 구체적인 내용은 이하 도 4를 참조하여 설명한다. 그 다음, 제1 통신장치(110)는 추출된 키인덱스(I_AC)를 인덱스 정보로 하는 시프트 인덱스 기법을 이용하여 제2 통신장치(120)와 공유하고 있는 양자암호 비밀 대칭키(QK_AB)로부터 서명키(K_sign)를 생성하고, 서명키(K_sign)는 아래의 [식 2]와 같이 표현될 수 있다.From here,

Is a function representing a shift index technique, and a detailed description of the shift index technique will be described below with reference to FIG. 4. Next, the first communication device 110 shares the quantum cryptography secret symmetric key QK _AB shared with the second communication device 120 using a shift indexing technique using the extracted key index I _AC as index information. from generating a signature key (K _sign), and a signature key (K _sign) it can be expressed by [expression 2] below.

[Equation 2]

The signature pair generation module (not shown) of the control unit of the first communication device 110 generates a signature pair using the signature key and the message to be transmitted through the signature (step S204). To this end, the first communication device 110 may first generate a message M to be transmitted through a signature. Preferably, the first communication device 110 may generate a signature using the signature key K _sign and the message M, and generate a signature pair consisting of the signature and the message. Here, the signature may be expressed as [Equation 3], and the signature pair may be expressed as [Equation 4].

[Equation 3]

[Equation 4]

)이 전송되는 것이다.The transmission module (not shown) of the control unit of the first communication device 110 transmits the public parameter generated in step S202 and the signature pair generated in step S204 to the second communication device 120 (step S205). . That is, referring to FIG. 3B, a signature pair consisting of a public parameter P _A , a signature and a message from the first communication device 110 to the second communication device 120,

) Is sent.

The second communication device 120 receives the public parameter and the signature pair from the first communication device 110, and the transmission module (not shown) of the control unit of the second communication device 120 transmits the public parameter to the third parameter. The verification parameter is requested while transmitting to the communication device 130 (step S206).

The verification parameter generation module (not shown) of the control unit of the third communication device 130 generates the verification parameter using the public parameter received from the second communication device 120 (step S207). Preferably, referring to FIG. 3C, the third communication device 130 uses a public parameter P _A to generate a key index (QK _AC ) from the quantum cryptographic secret symmetric key QK _AC shared with the first communication device 110. I ' _AC ) can be extracted. More specifically, the third communication device 130 applies the indexing technique using the public parameter P _A as index information, and then applies the key from the quantum cipher secret symmetric key QK _AC shared with the first communication device 110. The index I ' _AC is extracted, and the key index I' _AC may be expressed as in Equation 5 below.

[Equation 5]

The third communication device 130 then verifies the key index I _BC (= I ' _AC ) from the quantum cryptographic secret symmetric key QK _BC shared with the second communication device 120. (V _BC ) can be generated. Here, the key index I _BC obtained from the quantum cryptography secret symmetric key QK _BC shared with the second communication device 120 and the quantum cryptography secret symmetric key shared with the first communication device 110 ( The key index I ' _AC extracted from QK _AC ) is the same. That is, the third communication device 130 applies the shift index technique to the same key index (I ' _AC ) as the key index I' _AC from the quantum cryptography secret symmetric key QK _BC shared with the second communication device 120. When I _BC ) is extracted, a verification parameter V _BC to be used as index information is generated.

The transmission module (not shown in the figure) of the control unit of the third communication device 130 transmits the generated verification parameters to the second communication device 120 (step S208).

The second communication device 120 receives the verification parameter from the third communication device 130, and the signature key generation module (not shown) of the controller of the second communication device 120 signs using the verification parameter. A key is generated (step S209). Preferably, referring to FIG. 3D, the second communication device 120 uses the verification parameter V _BC to generate a key index (QK _BC ) from the quantum cryptographic secret symmetric key QK _{BC that} is shared with the third communication device 130. I ' _BC ) can be extracted. More specifically, the second communication device 120 uses a shift index technique using the verification parameter V _BC as index information from the quantum code secret symmetric key QK _BC shared with the third communication device 130. The key index I ' _BC is extracted, and the key index I' _BC may be expressed as in Equation 6 below.

[Equation 6]

Next, the second communication device 120 uses the key index I ' _BC to obtain a signature key K' _sign from the quantum cryptography secret symmetric key QK _AB shared with the first communication device 110. Can be generated. More specifically, the second communication device 120 is a quantum cryptography secret symmetric key (QK _AB ) shared with the first communication device 110 by using a shift index technique using the key index I ' _BC as index information. A signature key K ' _sign is generated from the signature key K' _sign , which can be expressed as shown in Equation 7 below.

[Equation 7]

The signature generation module (not shown) of the control unit of the second communication device 120 generates a signature using the generated signature key and a message constituting the signature pair received from the first communication device 110 in step S205. To generate (step S211). Preferably, the second communication device 120 may generate a signature using the signature key K ' _sign and the message M. FIG. The same method as described in steps S203 and S204 may be applied to the method for generating the signature key and the signature, and the signature generated in step S211 may be expressed as in Equation 8 below.

[Equation 8]

”과 제1 통신장치(110)가 전송한 서명 “

”이 일치하는지 여부를 검증하는 것이다. 바람직하게, 서명 검증 모듈을 통하여 “

”과 “

”이 일치하는 것으로 판단되면, 무결성, 인증, 부인방지 등의 이상이 없는 것인바 제1 통신장치(110)에서 생성한 서명쌍(

)은 받아들여지고, 서명 검증 모듈을 통하여 “

”과 “

”이 일치하지 않는 것으로 판단되면, 무결성, 인증, 부인방지 등에 문제가 발생한 것인바 제1 통신장치(110)에서 생성한 서명쌍(

)은 받아들여 지지 않는다.The signature verification module (not shown) of the controller of the second communication device 120 matches the signature generated through step S211 with the signature constituting the signature pair received from the first communication device 110 in step S205. Is verified (step S211). That is, the second communication device 120 generates the generated signature “

”And the signature sent by the first communication device 110”

Is to verify whether or not " Preferably, through the signature verification module,

”And“

Is determined to match, there is no abnormality such as integrity, authentication, nonrepudiation, etc. The signature pairs generated by the first communication device 110 (

) Is accepted, and through the signature verification module,

”And“

”Is not matched, the integrity, authentication, non-repudiation, etc. problem occurred bar signature pair generated by the first communication device 110 (

) Is not accepted.

4 is an exemplary diagram for explaining a shift index technique.

Referring to FIG. 4, the shift index technique used in steps S203, S207, and S210 of the digital signature method shown in FIG. 2 will be described.

에서 n 개의 인덱스 시퀀스(index sequence)

를 이용하여 m 개의 비트 시퀀스

를 획득하는 기법이다. 여기에서, 인덱스 시퀀스

는 난수이고, 만약 i_j가 0이면 O_j를 선택하지 않고, 만약 i_j가 1이면 O_j를 선택하고, 선택된 O_j가 비트 시퀀스 R의 데이터베이스에 저장된다. 즉, 비트 시퀀스 R은 선택된 O_j로 구성된 것으로서, 비트 시퀀스 R의 크기 M은 인덱스 시퀀스 I의 1의 개수와 동일하다. 또한, 상기 설명에서 인덱스 정보로 이용한다는 것이 바로 인덱스 시퀀스로 이용하는 것을 말하는 것이다. 예를 들어, 도 4를 참조하면, 비트 시퀀스 O=(0100110100011101)이고, 인덱스 시퀀스 I=(1011100010100011)인 경우, 비트 시퀀스 R=(00010001)이 될 수 있다.First of all, the shift index technique means n bit sequences.

Index sequences in

M bit sequences using

Is a technique to obtain. Where index sequence

Is a random number, if i _j is 0, do not select O _j , if i _j is 1, select O _j , and the selected O _j is stored in the database of bit sequence R. That is, the bit sequence R is composed of the selected O _j, and the size M of the bit sequence R is equal to the number of 1s of the index sequence I. In addition, using the index information in the above description refers to using the index sequence. For example, referring to FIG. 4, when bit sequence O = (0100110100011101) and index sequence I = (1011100010100011), bit sequence R = (00010001).

Preferably, the shift index technique may be expressed as in Equation 9 below.

[Equation 9]

을 2진수로 나타냈을 때

는 선택 값을 나타내고,

는 선택 비트를 나타내고, I_j가 0일 경우, O_j 값에 상관없이 해당 비트는 사용되지 않는다. 따라서 시프트 인덱스 기법에서는 I_j가 0인 비트의 정보가 제거되므로 인덱스 시퀀스 I와 비트 시퀀스 R을 가지고 비트 시퀀스 O가 복원될 수 없다. From here,

When expressed as a binary number

Indicates an optional value,

Represents a selection bit, and if I _j is 0, that bit is not used regardless of the value of O _j . Therefore, in the shift index technique, since the information of the bit having I _j is 0 is removed, the bit sequence O cannot be restored with the index sequence I and the bit sequence R.

In one embodiment, when the number n _I of the index sequences I is less than the number n _O of the bit sequences O (n _I <n _O ), corresponding to a part of the bit sequence O The shift index technique may be applied using only a bit sequence up to n _I digits. For example, 10 bit sequences O = (o ₁ , o ₂ , o ₃ ,…, o ₁₀ ) and 5 index sequences I = (i ₁ , i ₂ , i ₃ , …, I ₅ ) is applied, five index sequences I = (i1, i2, i3,…, i5 using only _five bit sequences O = (o ₁ , o ₂ , o ₃ ,…, o ₅ ) Can be obtained so that the bit sequence R is obtained.

As a result, according to the quantum key distribution-based digital signature method according to the present invention, all the quantum cipher secret symmetric keys shared by the first to third communication apparatuses 110, 120, and 130 are all quantum key distribution (QKD). Can be securely shared, and the signature key is generated based on the bit sequence R generated by applying the shift index technique using the quantum code secret symmetric key as the bit sequence O. have. In addition, to know the signing key K _sign , the key index I _AC and the quantum cryptography secret symmetric key QK _AB are known, or the public parameter P _A , the quantum cryptography secret symmetric key QK _AC , and both must know the password secret symmetric key (QK _AB), and the signature key (K _'sign) in order to know the key index (I _BC) with known or both passwords secret symmetric key (QK _AB), validation parameters (V _BC), The quantum cryptography secret symmetric key (QK _BC ), and the quantum cryptography secret symmetric key (QK _AB ) must be known. That is, only the first communication device 110 has information for making a signing key K _sign , and the signing key K ' _sign is the second communication device 120 or the third communication device 130 alone. Since it can not be made, there is an effect that the security of the signature key (K _sign ) generated in the first communication device 110 can be secured.

In addition, since the shift index technique used to generate the signature pair is a one-way function, safety is ensured, and even if the third communication device 130 has the public parameter P _A , there is no quantum password secret symmetric key QK _AB . Since only the key index (I _AC ) can be generated and the signing key (K _sign ) cannot be generated, the signature pair, which cannot be forged, can be secured.

In addition, even if the second communication device 120 receives the public parameter P _A through the first communication device 110, the second communication device 120 may not generate a signature key K ′ _sign . 2 The communication device 120 is said to have received data from the first communication device 110 to the third communication device 130 and must transmit a public parameter (P _A ), and the verification parameter (V) from the third communication device 130. _BC ). Therefore, through this process, the second communication device 120 cannot deny that the signature has been received from the first communication device 110, and the second communication device 120 sets the public parameter P _A to the third communication device ( Since the protocol is transmitted to the 130, the signature of the first communication device 110 by the third communication device 130 can be prevented, thereby preventing the non-repudiation effect.

Although the above-described preferred embodiments of the quantum key distribution based digital signature method and the system for performing the same according to the present invention have been described, the present invention is not limited thereto, but the claims and the detailed description of the invention and the scope of the accompanying drawings. Various modifications can be made therein and this also belongs to the present invention.

100: communication system
110: first communication device
120: second communication device
130: third communication device

Claims (11)

A digital signature method performed in a first communication device of a communication system including a first communication device, a second communication device, and a third communication device,
(a) generating a public parameter corresponding to a random number;
(b) generating a signature key using the public parameter;
(c) generating a signature pair using the signature key and a message to be transmitted through the signature; And
(d) sending the signature pair and the disclosure parameter to the second communication device,
Step (b) is
Extracting a key index from the quantum cryptography secret symmetric key shared with the third communication device using the public parameter; And
And generating a signature key from the quantum cryptography secret symmetric key shared with the second communication device using the key index.
delete The method of claim 1,
The key index is extracted using a shift index technique in which the public parameter is used as index information, and the signature key is extracted using a shift index technique in which the key index is used as index information. .
The method of claim 1, wherein step (c)
Generating a signature by applying a shift index technique in which the signature key is used as index information to the message; And
Generating a signature pair consisting of the signature and the message.
A digital signature method performed in a second communication device of a communication system including a first communication device, a second communication device, and a third communication device,
(a) receiving a signature pair and a disclosure parameter from the first communication device;
(b) transmitting the disclosure parameter to the third communication device and receiving a verification parameter generated based on the disclosure parameter from the third communication device;
(c) generating a signature key using the verification parameter; And
(d) generating a signature using the signature key and a message constituting a signature pair received from the first communication device,
The third communication device
Extracting a key index from the quantum cryptography secret symmetric key shared with the first communication device using the public parameter, and allowing the extracted key index to be obtained from the quantum cryptography secret symmetric key shared with the second communication device Digital signature method for generating verification parameters.
delete The method of claim 5, wherein step (c)
Extracting a key index from the quantum cryptography secret symmetric key shared with the third communication device using the verification parameter; And
And generating a signature key from the quantum cryptographic secret symmetric key shared with the first communication device using the key index.
The method of claim 7, wherein
The key index is extracted using a shift index technique in which the verification parameter is used as index information, and the signature key is extracted using a shift index technique in which the key index is used as index information. .
The method of claim 5, wherein step (d)
And applying a shift index technique in which the signature key is used as index information to the message to generate a signature.
The method of claim 5,
And verifying whether the generated signature matches a signature constituting a signature pair received from the first communication device.
A first communication device for generating a signature pair based on a public parameter corresponding to a random number;
Receive a public parameter and a signature pair from the first communication device, generate a signature using a verification parameter generated based on the public parameter, and generate the signature and the signature pair received from the first communication device. A second communication device for verifying whether a constituent signature matches; And
A third communication device receiving the disclosure parameter from the second communication device, generating a verification parameter based on the disclosure parameter, and transmitting the verification parameter to the second communication device,
The third communication device,
Extracting a key index from the quantum cryptography secret symmetric key shared with the first communication device using the public parameter, and allowing the extracted key index to be obtained from the quantum cryptography secret symmetric key shared with the second communication device A communication system for generating verification parameters.

Images