Problem statement: Traditional user authentication system uses passwords for their secured accessibility in a central server, which is prone to attack by adversaries.The adversaries gain access to the contents of the user in attack prone servers.To overcome this problem, the multi-server systems were being proposed in which the user communicate in parallel with several or all of the servers for the purpose of authentication.Such system requires a large communication bandwidth and needs for synchronization at the user.Approach: Present an efficient two server user password authentication and reduce the usage of communication traffic and bandwidth consumption between the servers.Integration of quantum and classical key exchange model is deployed to safeguard user access security in large networks.The proposed work presented, a two server system, front end service server interacts directly to the user and the back end control server visible to the service server.The performance measure of the user password made for the transformed two long secrets held by both service and control server.Further the proposal applied quantum key distribution model along with classical key exchange in the two server authentication.Three-party Quantum key distribution used in this model, one with implicit user authentication and other with explicit mutual authentication, deployed for ecommerce buyer authentication in internet peer servers.Results: Effect of online and offline dictionary attacks prevailing in the single and multi-server systems are analyzed.The performance efficiency test carried out in terms success rate of authenticity for two server shows 35% better than single server.The performance of integrated Quantum Key Distribution (QKD) systems and classical public key model have shown experimentally better performance in terms of computational efficiency and security rounds (11% improvement) than traditional cryptic security model.Conclusion: With the results obtained it is concluded that intricate security principle of quantum theory and traditional public key model integration provides an improved security model for password authentication between the password exchanges of two servers.
Problem statement: Traditional user authentication system uses passwords for their secured accessibility in a central server, which is prone to attack by adversaries.The adversaries gain access to the contents of the user in attack prone servers.To overcome this problem, the multi-server systems were being proposed in which the user communicate in parallel with several or all of the servers for the purpose of authentication.Such system requires a large communication bandwidth and needs for synchronization at the user.Approach: Present an efficient two server user password authentication and reduce the usage of communication traffic and bandwidth consumption between the servers.Integration of quantum and classical key exchange model is deployed to safeguard user access security in large networks.The proposed work presented, a two server system, front end service server interacts directly to the user and the back end control server visible to the service server.The performance measure of the user password made for the transformed two long secrets held by both service and control server.Further the proposal applied quantum key distribution model along with classical key exchange in the two server authentication.Three-party Quantum key distribution used in this model, one with implicit user authentication and other with explicit mutual authentication, deployed for ecommerce buyer authentication in internet peer servers.Results: Effect of online and offline dictionary attacks prevailing in the single and multi-server systems are analyzed.The performance efficiency test carried out in terms success rate of authenticity for two server shows 35% better than single server.The performance of integrated Quantum Key Distribution (QKD) systems and classical public key model have shown experimentally better performance in terms of computational efficiency and security rounds (11% improvement) than traditional cryptic security model.Conclusion: With the results obtained it is concluded that intricate security principle of quantum theory and traditional public key model integration provides an improved security model for password authentication between the password exchanges of two servers.
The security of quantum cryptography relies on the foundations of quantum mechanics, in contrast to traditional public key cryptography which relies on the computational difficulty of certain mathematical functions, and cannot provide any indication of eavesdropping or guarantee of key security. The proposal present in this work develops a quantum key distribution model to safeguard security in large networks, in the directions of classical cryptography and quantum cryptography. Two three-party Quantum key distribution are used in this model, one with implicit user authentication and the other with explicit mutual authentication, are proposed to demonstrate the merits of the new combination. The performance of Quantum Key Distribution (QKD) systems have notably progressed since the early experimental demonstrations. The current evolutions in QKD research indicate that the pace of this progression is very likely to be maintained, if not increased, in the future years. In parallel to these improvements of QKD techniques, commercial products are also being developed, making QKD deployment a feasible alternative for securing real data networks. Deployment of a real QKD network is however far from being straightforward. It requires development of a network architecture connecting multiple users that may possibly be very far away from each other. Considering the fact that the existing QKD links are only point-to-point, and intrinsically limited in distance, deployment of a practical QKD network structure is a nontrivial problem. The proposed work describes the proposed architecture for a QKD network specify the requirements relevant to the network design, protocols, and services. The objective of this specification is to define the major components and their main features The proposal provides security against such attacks as man-in-the-middle, eavesdropping and replay. It also improves the efficiency of the quantum key distribution which contains the fewest number of communication rounds among existing Quantum key distributions. In this model two parties can share and use a long-term secret (repeatedly). To prove the security of the proposed schemes, this proposed model provides a primitive called the Unbiased-Chosen Basis (UCB) assumption with the quantum key in angular positions.
In the existing study of third party authentication, for message transformation has less security against attacks such as man-in-the-middle, efficiency and so on. In this approach, we at hand give a Quantum Key Distribution Protocol (QKDP) to safeguard the security in larger networks, which uses the combination of merits of classical cryptography and quantum cryptography. Two three-party QKDPs, one implemented with implicit user authentication and the other with explicit mutual authentication, which include the following: 1. Security against such attacks as the man-in-themiddle, eavesdropping and replay. 2. Efficiency is improved as the proposed protocols contain the fewest number of communication rounds among the existing QKDPs. 3. Two parties can share and use a long-term secret (repeatedly). To prove the security of the proposed schemes, this work also presents a new primitive called the Unbiased-Chosen Basis (UCB) assumption.
This paper proposes a novel protocol for authenticated quantum key distribution (QKD) that addresses the inherent vulnerabilities of traditional, centralized key management systems. The core concept leverages the security of QKD to establish a shared secret key, then integrates this key with a classical authentication protocol to verify the identities of the communicating parties. The protocol, denoted as AQKD, aims to enhance overall communication security by combining the unique properties of quantum key distribution with robust classical authentication mechanisms. The design incorporates a multi-round key exchange utilizing Bennett-May-Crabtree (BMC) protocol and incorporates a challenge-response mechanism for authentication. The proposed protocol mitigates risks associated with compromised central servers and provides a more resilient security posture. The primary contribution lies in the synergistic integration of these two established cryptographic paradigms, resulting in a more secure and adaptable communication system. The protocol's security is analyzed, considering potential attacks and demonstrating its resilience. The simulation results highlight the effectiveness of AQKD in establishing secure communication channels, particularly against eavesdropping and identity forgery attempts.
Quantum Cryptography (QC) is the emerging field of the current world and the potential player of the future. Quantum Key Distribution (QKD) is the matured discipline of QC and available in the market to establish a secret key between parties. In order to achieve in multiparty, basically quantum entanglement has been applied over a theoretical settings. However, due to practical limitation, entanglement based research has a feasible difficulty with current technology. The thesis principal goal is to propose a framework for quantum protocol layer for secure key management without entanglement over multiparty environment. In the secret key management, conference key or Multiparty QKD (MQKD) and joint-venture key or Public Shared Secret Quantum Key (PSSQK) protocols acted as a top layer and quantum user authentication scheme as a middle layer and the standard QKD operation as a bottom layer. The proposed secrete key management protocols are based on secret key between parties using QKD, modified error correction code and linear independent matrix. These protocols require only classical communication and yield higher secret key rate regardless of distance and noise. The security analysis using guessing entropy has applied and results shows only negligible amount information can be extracted during eavesdropping. The challenge-challenge response technique has been applied to proposed quantum user authentication scheme for verification of quantum user. This is a bidirectional authentication scheme and requires both quantum and classical channel to execute and has two modes of operation, i.e., initial and session authentication.Due to deterministic key distribution orientation, the efficiency of protocol reaches up to 100% in terms of reduction of photon wastage during communication. Further, this scheme is resilient to various quantum security attacks However, this scheme requires noiseless quantum channel in order to detect the insider and outsider attacks during authentication. A GUI based discrete event simulation has developed using OptiSystem™ in order to test the practical feasibility of proposed quantum cryptography protocol layer. The polarized based discrete variable QKD protocols have been designed and analyzed. Due to lack of real receiver setup, the results have showed lower quantum bit error rate. Further, we analyzed the impact of polarization structure of qubit due to noise, loss and distance over fiber optics and free space. A multiparty QKD setuphas been designed based on frequency division multiplexing (FDM) centralized quantum channel server. This approach reduces the requirement of total quantum channel from N*(N-1)/2 to N and each party requires one quantum channel to communicate with all other parties. The bit commitment protocol and message authentication in the layer has considered for the future research direction.
In this paper, we design an ID-based M-server quantum password-authenticated key exchange scheme, where the client computes a strong key from its password and splits the key into m portions, and then encrypts them and sends them to m servers to be used as the basis for encryption and decryption in the subsequent key exchange process. The adoption of multiple servers can effectively prevent third-party attacks on the server and ensure the security of the key information, which is just like a complex secret sharing mechanism in traditional computational cryptography, for example, secret sharing (m, n) threshold scheme, but our new quantum fusion technology to realise the secret sharing mechanism is more efficient and simpler. Finally, through analysis, our scheme can meet most of the security requirements and perform well. It is feasible to implement the protocol under the existing quantum technology.
In this paper, we design an ID-based M-server quantum password-authenticated key exchange scheme, where the client computes a strong key from its password and splits the key into m portions, and then encrypts them and sends them to m servers to be used as the basis for encryption and decryption in the subsequent key exchange process. The adoption of multiple servers can effectively prevent third-party attacks on the server and ensure the security of the key information, which is just like a complex secret sharing mechanism in traditional computational cryptography, for example, secret sharing (m, n) threshold scheme, but our new quantum fusion technology to realise the secret sharing mechanism is more efficient and simpler. Finally, through analysis, our scheme can meet most of the security requirements and perform well. It is feasible to implement the protocol under the existing quantum technology.