As is known, quantum key distribution (QKD) can provide information-theoretic security under some preconditions, one of which is that the identity of each participant has been authenticated. And quantum identity authentication (QIA) can achieve this precondition effectively. However, the adversary still can implement man-in-the-middle attacks on QKD protocols in some situations, such as the protocol in [Quant. Inf. Process, 18, 137 (2019)]. In the above paper, the authors claimed that, after their QIA protocol based on GV95 system (GV95-QIA protocol), the participants could perform GV95-QKD protocol to update and extend the authentication keys. However, this method is not secure in the sense that the adversary could wait for the participants to complete GV95-QIA protocol and then perform the man-in-the-middle attack on the QKD process. In this paper, we solve this problem by mixing GV95-QIA process and GV95-QKD process randomly. Specifically, two authenticated QKD protocols are proposed based on the above idea. The proposed protocols can be used to provide secure identity authentication to GV95-QKD protocol, and also can be used to extend the authentication keys for GV95-QIA protocol.
As is known, quantum key distribution (QKD) can provide information-theoretic security under some preconditions, one of which is that the identity of each participant has been authenticated. And quantum identity authentication (QIA) can achieve this precondition effectively. However, the adversary still can implement man-in-the-middle attacks on QKD protocols in some situations, such as the protocol in [Quant. Inf. Process, 18, 137 (2019)]. In the above paper, the authors claimed that, after their QIA protocol based on GV95 system (GV95-QIA protocol), the participants could perform GV95-QKD protocol to update and extend the authentication keys. However, this method is not secure in the sense that the adversary could wait for the participants to complete GV95-QIA protocol and then perform the man-in-the-middle attack on the QKD process. In this paper, we solve this problem by mixing GV95-QIA process and GV95-QKD process randomly. Specifically, two authenticated QKD protocols are proposed based on the above idea. The proposed protocols can be used to provide secure identity authentication to GV95-QKD protocol, and also can be used to extend the authentication keys for GV95-QIA protocol.
Unconditional security in Quantum Key Distribution (QKD) relies on authenticating the identities of users involved in key distribution. While classical identity authentication schemes were initially utilized in QKD implementations, concerns regarding their vulnerability have prompted the exploration of Quantum Identity Authentication (QIA) protocols. In this study, we introduce a new protocol for QIA, derived from the concept of controlled secure direct quantum communication. Our proposed scheme facilitates simultaneous authentication between two users, Alice and Bob, leveraging Bell states with the assistance of a third party, Charlie. Through rigorous security analysis, we demonstrate that the proposed protocol withstands various known attacks, including impersonation, intercept and resend and impersonated fraudulent attacks. Additionally, we establish the relevance of the proposed protocol by comparing it with the existing protocols of similar type.
In this paper, a quantum identity authentication protocol is presented based on the counterfactual quantum key distribution system. Utilizing the proposed protocol, two participants can verify each other's identity through the counterfactual quantum communication system. The security of the protocol is proved against individual attacks. Furthermore, according to the characteristics of the counterfactual quantum key distribution system, we propose an authenticated counterfactual quantum key distribution protocol based on a novel strategy of mixing the two types of quantum cryptographic protocols randomly. The authenticated quantum key distribution can also be used to update the extent of the authentication keys.
The absolute security of quantum communication protocols relies on a critical premise: all participating parties are legitimate users. Ensuring the legitimacy of participant identities is paramount in complex real-world communication environments. Quantum identity authentication (QIA), in which fundamental principles of quantum mechanics are used to achieve unilateral or mutual authentication between communicating parties, constitutes an indispensable core component for building a comprehensive quantum secure communication system. It holds significant research value in the field of quantum communication. This review employs a comparative classification method to systematically outline the research trajectory of QIA protocols. By categorizing protocols based on the required quantum resources and the types of quantum protocols employed, the advantages and disadvantages of various categories are analyzed in terms of efficiency, security, and practicality. Single-photon protocols require low resources, and they are easy to implement, and compatible with existing optical components, but require high-efficiency single-photon detectors and exhibit weak noise resistance. Entangled-state protocols offer high security and strong resistance to eavesdropping, particularly suitable for long-distance or multi-party authentication. However, they greatly depend on the preparation and maintenance of high-precision, stable multi-particle entanglement sources, resulting in high experimental complexity. Continuous-variable (CV) protocols achieve high transmission efficiency in short-distance metropolitan area networks and are compatible with classical optical communication equipment, making experiments relatively straightforward. Yet, they require high-precision modulation technology and are sensitive to channel loss. Hybrid protocols aim to balance resource efficiency and security while reducing reliance on a single quantum source, but their design is complex and may introduce new attack vectors. Quantum key distribution (QKD) framework protocols embed identity authentication in the key distribution process, making them suitable for scenarios requiring long-term secure key distribution, although they often depend on pre-shared keys or trusted third parties. Quantum secure direct communication (QSDC) framework protocols integrate authentication with secure direct information transmission, offering high efficiency for real-time communication, but requiring high channel quality. Measurement-device-independent QSDC (MDI-QSDC) represents a key development direction that can resist attacks on measurement devices. Quantum teleportation (QT) framework protocols achieves cross-node authentication and unconditional security, making it suitable for quantum relay networks despite its high experimental complexity. The entanglement swapping framework protocol can resist conspiracy attacks and is suitable for multi-party joint scenarios, but it consumes a lot of resources and relies on trusted third party. Ping-pong protocol framework supports dynamic key updates and exhibits strong resistance to eavesdropping, making it suitable for temporary authentication on mobile terminals, although it typically only supports unilateral authentication and requires a bidirectional channel. Subsequently, this review details the latest QIA protocols of our research group, including a multi-party synchronous identity authentication protocol based on Greenberger-Horne-Zeilinger (GHZ) states, and a tripartite QSDC protocol with identity authentication capabilities utilizing polarization-spatial super-coding. The GHZ-based multi-party synchronous authentication protocol leverages the strong correlations inherent in GHZ states to achieve simultaneous authentication among multiple parties. Through a carefully designed two-round decoy-state detection mechanism, it effectively resists both external eavesdropping and internal attacks originating from authenticated users, thereby enhancing the efficiency and security of identity management in large-scale quantum networks. The core innovation of the polarization-spatial super-coding tripartite QSDC protocol lies in its deep integration of the authentication process with information transmission by utilizing the spatial degrees of freedom of single photons. This design accomplishes the identity verification of two senders and the transmission of secret information within a single protocol run, ensuring end-to-end security through a three-stage security check. This “authentication-as-communication” paradigm significantly improves the overall efficiency and practicality of the protocol. Its successful implementation also relies on advancements in quantum memory technology. Finally, the review outlines future research directions for quantum identity authentication and explores its potential applications in quantum communication. The QIA research needs to focus on reducing resource dependency, exploring more efficient protocol designs, further enhancing protocol integration and robustness, prioritizing the development of protocols adaptable to real-world environments, and actively investigating integration with novel scenarios. This comprehensive review aims to provide theoretical research foundations and technical support for the practical development of future quantum identity authentication.
All Classical cryptographic methods used in our life based on mathematical ideas & computational assumption are actually unsafe, so quantum cryptography is proposed nowadays Quantum key distribution (QKD) promises secure key agreement by using quantum mechanical systems. QKD will be an important part of future cryptographic infrastructures. It can provide long-term confidentiality for encrypted information without reliance on computational assumptions. Although QKD still requires authentication to prevent man-in-the-middle attacks. Firstly, In this paper At quantum key distribution protocol process is introduced. Secondly, several improvements to the basic steps of two references are reviewed because of its defects, mainly about identity authentication in order to prevent communication partners' counterfeit, including errors removing, estimating Attacker's information, secrecy enhancement, etc. At last, based upon original improvements reserved selectively, the whole process of quantum key distribution protocol after improvement & then comparison is introduced in detail.
Quantum Key Distribution (QKD) offers theoretically unbreakable key exchange, but is vulnerable to man-in-the-middle attacks if the identities of the communicating parties are not rigorously verified. This paper proposes a novel QKD protocol integrating classical authentication to provide a layered security approach. The core concept involves utilizing a QKD system alongside a robust classical authentication mechanism. This layered approach significantly reduces the risk of successful attacks by ensuring that both parties are who they claim to be before key exchange occurs. The protocol's security relies on the assumption that the classical authentication system is itself secure. We detail the protocol's components, focusing on the integration of Bennett-Brassard (BB84) or a similar QKD scheme with a practical authentication protocol, and analyze its security properties. The proposed system is designed to mitigate the threats posed by adversaries who can intercept and manipulate the quantum key exchange without compromising the authentication process. The potential for improved security and resilience is demonstrated, representing a significant advancement in the practical application of QKD.
This study proposes a two-party quantum identity authentication protocol that does not require the participation of a third party. The protocol can verify the user’s identity without exposing the authentication key information, and it can be implemented with a single-photon state, which does not involve entanglement, enabling it to be combined with existing technologies. The shared key is protected by the protocol and hidden during communication, and the security of the authentication scheme is analyzed and verified under general attack. Further analysis results indicate that this protocol is secure and efficient.