Quantum zero-knowledge protocol for identity authentication
Marta Irene García Cid, Dileepsai Bodanapu, Rodrigo Martín Sánchez-Ledesma, Laura Ortiz Martín, Vicente Martín Ayuso, Marco Brunero, Alberto Gatto, Paolo Martelli
This work presents a new scheme based on a quantum zero-knowledge proof for identity authentication. The novelty of this research is the migration of the classical concept Zero-knowledge into the quantum cryptographic framework that, to the best of our knowledge, has never been explored. This approach allows us to take advantage of the principles of quantum mechanics to build a protocol, which is secure against quantum computer attacks, for authenticating several users having access to the same network node. The protocol has been designed, its security analysed and implemented in modified Quantum Key Distribution devices. Two scenarios have been analysed experimentally, the first being both the prover and the verifier honest players, and the second case being the prover a malicious player, the latter demonstrating a notable increase in the quantum bit error rate that prevents a fraudulent authentication.
This work presents a new scheme based on a quantum zero-knowledge proof for identity authentication. The novelty of this research is the migration of the classical concept Zero-knowledge into the quantum cryptographic framework that, to the best of our knowledge, has never been explored. This approach allows us to take advantage of the principles of quantum mechanics to build a protocol, which is secure against quantum computer attacks, for authenticating several users having access to the same network node. The protocol has been designed, its security analysed and implemented in modified Quantum Key Distribution devices. Two scenarios have been analysed experimentally, the first being both the prover and the verifier honest players, and the second case being the prover a malicious player, the latter demonstrating a notable increase in the quantum bit error rate that prevents a fraudulent authentication.
With the rapid development of quantum computers, proofs of quantumness have recently become an interesting research direction. However, in current schemes for proofs of quantumness, quantum provers face the risk of being maliciously exploited by classical verifiers. Through malicious strategies in interaction with quantum provers, classical verifiers could solve some instances of hard problems that arise from the specific scheme in use. This is due to the lack of formalization that prevents malicious verifiers from extracting useful information in proofs of quantumness. To address this issue, we formalize zero-knowledge proofs of quantumness. Intuitively, the zero-knowledge property necessitates that the information gained by the classical verifier from interactions with the quantum prover should not surpass what can be simulated using a simulated classical prover interacting with the same verifier. As a result, the new zero-knowledge notion can prevent a malicious verifier from exploiting quantum advantage. We find that the classical zero-knowledge proof is sufficient to compile some existing proofs of quantumness schemes into zero-knowledge proofs of quantumness schemes. It appears to be more general to require zero-knowledge proof on the verifier side instead of the prover side. This helps to regulate the verifier's behavior from malicious to be honest-but-curious. As a result, both parties will play not only one role in the proofs of quantumness but also the dual role in the classical zero-knowledge proof. Specifically, Shor's factoring-based scheme and the learning with errors-based scheme in [Brakerski et al., FOCS, 2018] can be transformed into zero-knowledge proofs of quantumness by requiring an extractable non-interactive zero-knowledge argument on the verifier side. Zero-knowledge proofs of quantumness can thus be viewed as an enhanced security notion for proofs of quantumness.
A new interactive quantum zero-knowledge protocol for identity authentication implementable in currently available quantum cryptographic devices is proposed and demonstrated. The protocol design involves a verifier and a prover knowing a pre-shared secret, and the acceptance or rejection of the proof is determined by the quantum bit error rate. It has been implemented in modified Quantum Key Distribution devices executing two fundamental cases. In the first case, all players are honest, while in the second case, one of the users is a malicious player. We demonstrate an increase of the quantum bit error rate around 25% in the latter case compared to the case of honesty. The protocol has also been validated for distances from a back-to-back setup to more than 60 km between verifier and prover. The security and robustness of the protocol has been analysed, demonstrating its completeness, soundness and zero-knowledge properties.
In the rapidly evolving landscape of cloud computing, ensuring secure user authentication and protection against cyber-attacks has become increasingly critical. This research proposes a novel security framework for cloud systems based on the Quantum Zero-Knowledge Proof (ZKP) technique, aiming to provide a privacy-preserving and quantum-resilient authentication mechanism. The core of the proposed model lies in leveraging photon polarization at specific quantum angles to implement secure and non-disclosive verification, effectively allowing users (provers) to prove their identity without revealing any sensitive credentials. The system's architecture integrates a Zero Knowledge Proof Engine (ZKE), which forms the backbone of the security protocol, enhancing resilience against Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) attacks. The quantum properties of photons enable a high level of randomness and unpredictability, significantly improving the robustness of the system. A Python-based simulation environment has been developed to model the proposed engine and conduct experimental validations. Furthermore, a web-based application interface has been designed to facilitate seamless interaction between cloud users and the authentication system, demonstrating real-time threat detection and response. Experimental results, visualized through performance metrics and interface output, confirm the effectiveness and practicality of the proposed model. This approach not only enhances security but also offers a scalable and user-friendly solution for modern cloud environments, marking a significant step toward integrating quantum principles into mainstream cybersecurity infrastructures.
A Zero-Knowledge Proof basically is a protocol between two parties, the Prover and the Verifier, that allows the Prover to convince the Verifier about the truthness of a non trivial statement without revealing any additional information. Zero Knowledge Proofs have found a lot of practical applications covering most of the protocols concerning about data privacy and protocol verification. Examples of that are anonymous cash or electronic voting. The possibility to have real quantum computers with a reasonable size in a near future is forcing the cryptographic community to devise new methods to provide security that resist quantum attacks. Most of the zero-knowledge protocols used nowadays are based on computational problems like the discrete logarithm problem that can no longer be considered hard, since there are known efficient ways to solve them with quantum algorithms. Cryptographic research about the quantum security of zero knowledge proofs started nearly 20 years ago in a very theoretical approach, but not many papers on that topic appeared since then. The goal of this thesis is writing a survey including the main concepts about quantum secure zero-knowledge protocols, the state-of-the-art both from the theoretical and practical approaches, and an exploration of their potential application areas. The survey will be a good starting document for further students willing to do research in this topic.
Zero knowledge protocol is a basic method of cryptography,which means that the certifier owns a secret,and it doesn′t reveal any other useful information about the secret to verifier when authenticated.The advantage is to keep its identity recognized without being substituted and useful information not revealed.However,the presently known typical zero knowledge proof is based on computing complexity.According to the basic thought of classical zero knowledge protocol,a scheme for quantum zero knowledge protocol in a group using a mode of quantum secure communication is designed.
Identity verification is the process of confirming an individual's claimed identity, which is essential in sectors like finance, healthcare, and online services to ensure security and prevent fraud. However, current password/PIN-based identity solutions are susceptible to phishing or skimming attacks, where malicious intermediaries attempt to steal credentials using fake identification portals. Alikhani et al. [Nature, 2021] began exploring identity verification through graph coloring-based relativistic zero-knowledge proofs (RZKPs), a key cryptographic primitive that enables a prover to demonstrate knowledge of secret credentials to a verifier without disclosing any information about the secret. Our work advances this field and addresses unresolved issues: From an engineering perspective, we relax further the relativistic constraints from 60m to 30m, and significantly enhance the stability and scalability of the experimental demonstration of the 2-prover graph coloring-based RZKP protocol for near-term use cases. At the same time, for long-term security against entangled malicious provers, we propose a modified protocol with comparable computation and communication costs, we establish an upper bound on the soundness parameter for this modified protocol. On the other hand, we extend the two-prover, two-verifier setup to a three-prover configuration, demonstrating the security of such relativistic protocols against entangled malicious provers.