The advent of quantum key distribution (QKD) has revolutionized secure communication by providing unconditional security, unlike classical cryptographic methods. However, its effectiveness relies on robust identity authentication, as vulnerabilities in the authentication process can cause a compromise with the security of the entire communication system. Over the past three decades, numerous quantum identity authentication (QIA) protocols have been proposed. This thesis first presents a chronological review of these protocols, categorizing them based on quantum resources and computational tasks involved while analyzing their strengths and limitations. Subsequently, by recognizing inherent symmetries present in the existing protocols, we design novel QIA schemes based on secure computational and communication tasks. Specifically, this work introduces a set of new QIA protocols that utilize controlled secure direct quantum communication. The proposed scheme facilitates mutual authentication between two users, Alice and Bob, with assistance from a third party, Charlie, using Bell states. A comprehensive security analysis demonstrates its robustness against impersonation, intercept-resend, and fraudulent authentication attacks. The comparative evaluation highlights its advantages over existing schemes. Additionally, this thesis presents two novel QKD protocols that eliminate the need for entanglement or ideal single-photon sources, making them feasible with commercially available photon sources. These protocols are rigorously proven to be secure against various attacks, including intercept-resend and certain collective attacks. Key rate bounds are established, demonstrating that specific classical pre-processing enhances the tolerable error threshold. PHD THESIS
The advent of quantum key distribution (QKD) has revolutionized secure communication by providing unconditional security, unlike classical cryptographic methods. However, its effectiveness relies on robust identity authentication, as vulnerabilities in the authentication process can cause a compromise with the security of the entire communication system. Over the past three decades, numerous quantum identity authentication (QIA) protocols have been proposed. This thesis first presents a chronological review of these protocols, categorizing them based on quantum resources and computational tasks involved while analyzing their strengths and limitations. Subsequently, by recognizing inherent symmetries present in the existing protocols, we design novel QIA schemes based on secure computational and communication tasks. Specifically, this work introduces a set of new QIA protocols that utilize controlled secure direct quantum communication. The proposed scheme facilitates mutual authentication between two users, Alice and Bob, with assistance from a third party, Charlie, using Bell states. A comprehensive security analysis demonstrates its robustness against impersonation, intercept-resend, and fraudulent authentication attacks. The comparative evaluation highlights its advantages over existing schemes. Additionally, this thesis presents two novel QKD protocols that eliminate the need for entanglement or ideal single-photon sources, making them feasible with commercially available photon sources. These protocols are rigorously proven to be secure against various attacks, including intercept-resend and certain collective attacks. Key rate bounds are established, demonstrating that specific classical pre-processing enhances the tolerable error threshold. PHD THESIS
Unconditional security in Quantum Key Distribution (QKD) relies on authenticating the identities of users involved in key distribution. While classical identity authentication schemes were initially utilized in QKD implementations, concerns regarding their vulnerability have prompted the exploration of Quantum Identity Authentication (QIA) protocols. In this study, we introduce a new protocol for QIA, derived from the concept of controlled secure direct quantum communication. Our proposed scheme facilitates simultaneous authentication between two users, Alice and Bob, leveraging Bell states with the assistance of a third party, Charlie. Through rigorous security analysis, we demonstrate that the proposed protocol withstands various known attacks, including impersonation, intercept and resend and impersonated fraudulent attacks. Additionally, we establish the relevance of the proposed protocol by comparing it with the existing protocols of similar type.
The absolute security of quantum communication protocols relies on a critical premise: all participating parties are legitimate users. Ensuring the legitimacy of participant identities is paramount in complex real-world communication environments. Quantum identity authentication (QIA), in which fundamental principles of quantum mechanics are used to achieve unilateral or mutual authentication between communicating parties, constitutes an indispensable core component for building a comprehensive quantum secure communication system. It holds significant research value in the field of quantum communication. This review employs a comparative classification method to systematically outline the research trajectory of QIA protocols. By categorizing protocols based on the required quantum resources and the types of quantum protocols employed, the advantages and disadvantages of various categories are analyzed in terms of efficiency, security, and practicality. Single-photon protocols require low resources, and they are easy to implement, and compatible with existing optical components, but require high-efficiency single-photon detectors and exhibit weak noise resistance. Entangled-state protocols offer high security and strong resistance to eavesdropping, particularly suitable for long-distance or multi-party authentication. However, they greatly depend on the preparation and maintenance of high-precision, stable multi-particle entanglement sources, resulting in high experimental complexity. Continuous-variable (CV) protocols achieve high transmission efficiency in short-distance metropolitan area networks and are compatible with classical optical communication equipment, making experiments relatively straightforward. Yet, they require high-precision modulation technology and are sensitive to channel loss. Hybrid protocols aim to balance resource efficiency and security while reducing reliance on a single quantum source, but their design is complex and may introduce new attack vectors. Quantum key distribution (QKD) framework protocols embed identity authentication in the key distribution process, making them suitable for scenarios requiring long-term secure key distribution, although they often depend on pre-shared keys or trusted third parties. Quantum secure direct communication (QSDC) framework protocols integrate authentication with secure direct information transmission, offering high efficiency for real-time communication, but requiring high channel quality. Measurement-device-independent QSDC (MDI-QSDC) represents a key development direction that can resist attacks on measurement devices. Quantum teleportation (QT) framework protocols achieves cross-node authentication and unconditional security, making it suitable for quantum relay networks despite its high experimental complexity. The entanglement swapping framework protocol can resist conspiracy attacks and is suitable for multi-party joint scenarios, but it consumes a lot of resources and relies on trusted third party. Ping-pong protocol framework supports dynamic key updates and exhibits strong resistance to eavesdropping, making it suitable for temporary authentication on mobile terminals, although it typically only supports unilateral authentication and requires a bidirectional channel. Subsequently, this review details the latest QIA protocols of our research group, including a multi-party synchronous identity authentication protocol based on Greenberger-Horne-Zeilinger (GHZ) states, and a tripartite QSDC protocol with identity authentication capabilities utilizing polarization-spatial super-coding. The GHZ-based multi-party synchronous authentication protocol leverages the strong correlations inherent in GHZ states to achieve simultaneous authentication among multiple parties. Through a carefully designed two-round decoy-state detection mechanism, it effectively resists both external eavesdropping and internal attacks originating from authenticated users, thereby enhancing the efficiency and security of identity management in large-scale quantum networks. The core innovation of the polarization-spatial super-coding tripartite QSDC protocol lies in its deep integration of the authentication process with information transmission by utilizing the spatial degrees of freedom of single photons. This design accomplishes the identity verification of two senders and the transmission of secret information within a single protocol run, ensuring end-to-end security through a three-stage security check. This “authentication-as-communication” paradigm significantly improves the overall efficiency and practicality of the protocol. Its successful implementation also relies on advancements in quantum memory technology. Finally, the review outlines future research directions for quantum identity authentication and explores its potential applications in quantum communication. The QIA research needs to focus on reducing resource dependency, exploring more efficient protocol designs, further enhancing protocol integration and robustness, prioritizing the development of protocols adaptable to real-world environments, and actively investigating integration with novel scenarios. This comprehensive review aims to provide theoretical research foundations and technical support for the practical development of future quantum identity authentication.
Quantum Key Distribution (QKD) offers theoretically unbreakable key exchange, but is vulnerable to man-in-the-middle attacks if the identities of the communicating parties are not rigorously verified. This paper proposes a novel QKD protocol integrating classical authentication to provide a layered security approach. The core concept involves utilizing a QKD system alongside a robust classical authentication mechanism. This layered approach significantly reduces the risk of successful attacks by ensuring that both parties are who they claim to be before key exchange occurs. The protocol's security relies on the assumption that the classical authentication system is itself secure. We detail the protocol's components, focusing on the integration of Bennett-Brassard (BB84) or a similar QKD scheme with a practical authentication protocol, and analyze its security properties. The proposed system is designed to mitigate the threats posed by adversaries who can intercept and manipulate the quantum key exchange without compromising the authentication process. The potential for improved security and resilience is demonstrated, representing a significant advancement in the practical application of QKD.
A novel approach to secure data transmission, quantum communication draws on fundamental principles of quantum physics. It ensures that the transmitted information is private and accurate. To provide security, quantum networks implement physical constraints such as the no-cloning rule and quantum entanglement. In contrast, computational complexity is employed by classical networks. However, with the proliferation of multiuser quantum networks, identity verification has become more challenging. People with malicious intentions might easily disrupt services in long-distance quantum networks by impersonating legitimate nodes and sharing entangled resources and quantum channels. This highlights the absolute necessity of secure authentication systems tailored to quantum environments. Enhancements to recent quantum authentication systems have been made utilizing techniques that are resistant to quantum computing. Researchers are looking into quantum digital signatures, entanglement-assisted protocols, and quantum key distribution (QKD) authentication to make multi-party communications more secure. In order to prevent attacks where a user establishes a fraudulent identity or account, these strategies can be applied to quantum networks. This study takes a look at current quantum authentication systems and gives them the once-over, focusing on how well they could handle multiple users. The article delves into the evolution of authentication systems to accommodate the distributed model, where nodes can function as senders, receivers, or relays. We aim to strike a compromise between practicality and security in our lightweight, low-latency protocols. Additionally, the paper discusses quantum-specific issues, such as side-channel attacks and device malfunctions, and how authentication techniques can help prevent them. Finally, this study demonstrates that authentication is the critical component of secure quantum communication for multiple users. The most secure quantum key distribution methods are still vulnerable to attacks from inside or outside the system if proper authentication is not in place.
Based on mutual authentication and dense coding, a novel revised efficient quantum direct communication scheme is proposed. It is composed of two phases: the quantum state distribution process and the direct communication process. The purpose of the former is to authenticate Trent and users to each other, and let the two legitimate users (Alice and Bob) safely share the Bell states. While the latter aims to make direct communication to transmit a secret message between Alice and Bob. In order to prevent from Eve's eavesdropping as well as to authenticate each other simultaneously, a decoy photon checking technique is applied. Compared with other analogous protocols, the quantum state distribution process is more simple and feasible and the proposed scheme is more efficient; i.e., the total efficiency is almost 100%. Security analysis shows that the proposed scheme is secure against the eavesdropping attacks, the impersonation attacks, and some special Trent's attacks, including the attacks by using different initial states.
In response to the demand for identity authentication in quantum secure direct communication, this paper proposes a quantum secure direct communication scheme based on a mixture of single photon and Bell state, by combining the bidirectional identity authentication. Before communication begins, both parties share a series of secret information to prepare a series of single photon and Bell state particles. Encoding four single photons and four Bell states yields eight types of encoded information, followed by identity authentication. The first step in identity authentication is to use a single photon to verify the legitimacy of the receiver. If the error exceeds the given threshold, it indicates the presence of eavesdropping. Otherwise, the channel is safe. Then, Bell state particles are used to verify the legitimacy of the sender, and the threshold is also used to determine whether there is eavesdropping. The present method is the same as previous one. If the error rate is higher than the given threshold, it indicates the existence of third-party eavesdropping. Otherwise, it indicates that the channel is secure. As for the specific verification method, it will be explained in detail in the article. Afterwards, Bell state particles are mixed with a single photon as a transmission carrier, and eavesdropping detection particles are added whenever the quantum state is sent. However, once the eavesdropper intercepts the transmitted particles, owing to incomplete information obtained, the eavesdropper is unable to recover the original information, and the eavesdropping behavior will be immediately detected, thus terminating communication. In this scheme, single photon and Bell states are fully utilized, and hybrid communication can effectively improve transmission efficiency, encoding capability, and quantum bit utilization. Security analysis shows that this scheme can resist common external and internal attacks such as interception/measurement replay attacks, auxiliary particle attacks, and identity impersonation attacks. The analysis of efficiency and encoding capacity shows that the transmission efficiency of this scheme is 1, the encoding capacity is 3 bits per state, and the quantum bit utilization rate is 1. Compared with other schemes, this scheme has significant advantages because it uses different particles for bidirectional authentication, making it more difficult for attackers to crack, and thus it has higher security than traditional schemes.