Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Communications in Theoretical Physics

Cryptanalysis and improvement to the quantum private query protocol for enhancing database privacy

Zhengda Shen, Wenzhu Shao, Zhigang Li, Xiaoyu Peng, Nankun Mu, Mahabubur Rahman Miraj, Bin Liu

Published Nov 26, 2024• 0 citations
Publisher

Abstract

Abstract In order to protect the privacy of the query user and database, some QKD-based quantum private query (QPQ) protocols were proposed. One example is the protocol proposed by Zhou et al, in which the user makes initial quantum states and derives the key bit by comparing the initial quantum state and the outcome state returned from the database by ctrl or shift mode, instead of announcing two non-orthogonal qubits as others which may leak part secret information. To some extent, the security of the database and the privacy of the user are strengthened. Unfortunately, we find that in this protocol, the dishonest user could be obtained, utilizing unambiguous state discrimination, much more database information than that is analyzed in Zhou et al’s original research. To strengthen the database security, we improved the mentioned protocol by modifying the information returned by the database in various ways. The analysis indicates that the security of the improved protocols is greatly enhanced.

DOI
10.1088/1572-9494/ad9730

Related papers

A Quantum Private Query Protocol for Enhancing both User and Database Privacy*

Yi‐Hua Zhou, Xuewei Bai, Lei-Lei Li +2 more

Abstract In order to protect the privacy of query user and database, some QKD-based quantum private query (QPQ) protocols were proposed. Unfortunately some of them cannot resist internal attack from database perfectly; some others can ensure better user privacy but require a reduction of database privacy. In this paper, a novel two-way QPQ protocol is proposed to ensure the privacy of both sides of communication. In our protocol, user makes initial quantum states and derives the key bit by comparing initial quantum state and outcome state returned from database by ctrl or shift mode instead of announcing two non-orthogonal qubits as others which may leak part secret information. In this way, not only the privacy of database be ensured but also user privacy is strengthened. Furthermore, our protocol can also realize the security of loss-tolerance, cheat-sensitive, and resisting JM attack etc.

Communications in Theoretical Physics•Jan 1, 2018•8 citations

Improving User Privacy in Practical Quantum Private Query with Group Honesty Checking

Chun‐Yan Wei, Qingle Wang, Xiao‐Qiu Cai +1 more

Abstract Current cheat‐sensitive security level of user privacy in quantum private query (QPQ) is far from meeting its ideal requirement. Dishonest database trying to elicit user privacy can only be (delayedly) detected after the finish of the protocol with merely a nonzero probability. Worse yet, no estimation of (i.e., the success probability of dishonest database's cheating) has been given till now. Such estimation is quite necessary because a significant means frangible user privacy especially in the cheat‐sensitive security model. Here, of the first and best‐known quantum‐key‐distribution (QKD)‐based QPQ protocol proposed by Jakobi et al. is estimated, which shows that dishonest database can elicit user privacy with significant probability (e.g., as high as 42.8% for database size ) while such cheating can only be (delayedly) detected with probability 50 %. Common strategy to improve user privacy, i.e., adding honesty checking to detect malicious database may hurt the privacy of the other party, i.e. database security. To solve this problem, a new group honesty checking is proposed, which will not hurt database security and can reduce $ to a very small value (e.g. 0.26% for database size 10000), thus assuring high user privacy (note that = 0 means ideal user privacy).

Advanced Quantum Technologies•Feb 12, 2025•4 citations

Reexamination of the realtime protection for user privacy in practical quantum private query

Chun‐Yan Wei, Xiao‐Qiu Cai, Tian‐Yin Wang

Abstract Quantum private query (QPQ) is the quantum version for symmetrically private information retrieval. However, the user privacy in QPQ is generally guarded in the delayed and cheat-sensitive way. That is, the dishonest database holder Bob’s cheating to elicit user privacy can only be discovered after the protocol is finished (when the user finds some errors in the retrieved database item). Such delayed detection may cause very unpleasant results for the user Alice in real-life applications. Without the realtime conscious of privacy leaking, Alice may make faulty decisions according to the received faulty item and suffer great loss. Worse yet, it is difficult for Alice to accuse a dishonest database to any one else though she can detect the cheating. Current efforts to protect user privacy in realtime in existing QPQ protocols mainly use two techniques, i.e. adding an honesty checking on the database or allowing the user to reorder the qubits. We reexamine these two kinds of QPQ protocols and find neither of them can work very well. We give concrete cheating strategies for both participants and show that honesty checking of inner participant should be dealt more carefully in for example the choosing of checking qubits. Finally, we give an idea to realize realtime detection of dishonest database in QPQ of blocks (i.e. multi-bit database items).

arXiv:2407.19147•Physica Scripta•Nov 18, 2024•1 citation

Practical quantum private query based on Bell state

Tao Zheng, Shibin Zhang, Xiang Gao +1 more

Quantum private query (QPQ) is a cryptographic application that protects the privacy of both users and databases while querying the database secretly. In most existing QPQ protocols, the protection of user privacy can only be cheat-sensitive. Cheat-sensitive means that Bob will be found later with a certain probability if he tries to get the address queried by Alice. On the premise of cheat-sensitivity, although Alice can discover Bob’s malicious behavior after a query (transaction), the secret information of Alice was leaked in the completed query, which is likely to be a fatal blow to Alice. Or, to prevent Bob’s malicious behavior, Alice executes one or more additional queries to test Bob’s honesty. However, to bypass Alice’s honesty test, Bob can also provide several honest queries before performing dishonest queries. Therefore, cheat-sensitive should not be the ultimate goal of user privacy protection in QPQ. In this paper, we propose a practical QKD-based QPQ protocol with better user privacy protection than cheat-sensitivity based on order rearrangement of qubits. The proposed QPQ protocol can resist the Trojan horse attack even without wavelength filter and photon number splitter (PNS) equipped with auxiliary monitoring detectors.

Modern Physics Letters A•Jun 14, 2019•15 citations

Quantum Private Queries: Security Analysis

Vittorio Giovannetti, Seth Lloyd, Lorenzo Maccone

A security analysis of the recently introduced Quantum Private Query (QPQ) protocol is presented. The latter is a cheat sensitive quantum protocol to perform a private search on a classical database. It allows a user to retrieve an item from the database without revealing which item was retrieved, and at the same time it ensures data privacy of the database (the information that the user retrieves in a query is bounded). The security analysis is based on information-disturbance tradeoffs which show that whenever the provider tries to obtain information on the query, the query (encoded into a quantum system) is disturbed so that the person querying the database can detect the privacy violation. The security bounds are derived under the assumption that a unique answer corresponds to each query. To remove this assumption, some simple variants of the protocol are illustrated, and it is conjectured that analogous security bounds apply to them.

•Aug 1, 2009•51 citations

Quantum Private Queries: Security Analysis

Vittorio Giovannetti, Seth Lloyd, Lorenzo Maccone

A security analysis of the recently introduced Quantum Private Query (QPQ) protocol is presented. The latter is a cheat sensitive quantum protocol to perform a private search on a classical database. It allows a user to retrieve an item from the database without revealing which item was retrieved, and at the same time it ensures data privacy of the database (the information that the user retrieves in a query is bounded). The security analysis is based on information-disturbance tradeoffs which show that whenever the provider tries to obtain information on the query, the query (encoded into a quantum system) is disturbed so that the person querying the database can detect the privacy violation. The security bounds are derived under the assumption that a unique answer corresponds to each query. To remove this assumption, some simple variants of the protocol are illustrated, and it is conjectured that analogous security bounds apply to them.

arXiv:0809.1934•IEEE Transactions on Information Theory•Jun 23, 2010•83 citations
Abstract In order to protect the privacy of the query user and database, some QKD-based quantum private query (QPQ) protocols were proposed. One example is the protocol proposed by Zhou et al, in which the user makes initial quantum states and derives the key bit by comparing the initial quantum state and the outcome state returned from the database by ctrl or shift mode, instead of announcing two non-orthogonal qubits as others which may leak part secret information. To some extent, the security of the database and the privacy of the user are strengthened. Unfortunately, we find that in this protocol, the dishonest user could be obtained, utilizing unambiguous state discrimination, much more database information than that is analyzed in Zhou et al’s original research. To strengthen the database security, we improved the mentioned protocol by modifying the information returned by the database in various ways. The analysis indicates that the security of the improved protocols is greatly enhanced.
Abstract In order to protect the privacy of query user and database, some QKD-based quantum private query (QPQ) protocols were proposed. Unfortunately some of them cannot resist internal attack from database perfectly; some others can ensure better user privacy but require a reduction of database privacy. In this paper, a novel two-way QPQ protocol is proposed to ensure the privacy of both sides of communication. In our protocol, user makes initial quantum states and derives the key bit by comparing initial quantum state and outcome state returned from database by ctrl or shift mode instead of announcing two non-orthogonal qubits as others which may leak part secret information. In this way, not only the privacy of database be ensured but also user privacy is strengthened. Furthermore, our protocol can also realize the security of loss-tolerance, cheat-sensitive, and resisting JM attack etc.
Abstract Current cheat‐sensitive security level of user privacy in quantum private query (QPQ) is far from meeting its ideal requirement. Dishonest database trying to elicit user privacy can only be (delayedly) detected after the finish of the protocol with merely a nonzero probability. Worse yet, no estimation of (i.e., the success probability of dishonest database's cheating) has been given till now. Such estimation is quite necessary because a significant means frangible user privacy especially in the cheat‐sensitive security model. Here, of the first and best‐known quantum‐key‐distribution (QKD)‐based QPQ protocol proposed by Jakobi et al. is estimated, which shows that dishonest database can elicit user privacy with significant probability (e.g., as high as 42.8% for database size ) while such cheating can only be (delayedly) detected with probability 50 %. Common strategy to improve user privacy, i.e., adding honesty checking to detect malicious database may hurt the privacy of the other party, i.e. database security. To solve this problem, a new group honesty checking is proposed, which will not hurt database security and can reduce $ to a very small value (e.g. 0.26% for database size 10000), thus assuring high user privacy (note that = 0 means ideal user privacy).
Abstract Quantum private query (QPQ) is the quantum version for symmetrically private information retrieval. However, the user privacy in QPQ is generally guarded in the delayed and cheat-sensitive way. That is, the dishonest database holder Bob’s cheating to elicit user privacy can only be discovered after the protocol is finished (when the user finds some errors in the retrieved database item). Such delayed detection may cause very unpleasant results for the user Alice in real-life applications. Without the realtime conscious of privacy leaking, Alice may make faulty decisions according to the received faulty item and suffer great loss. Worse yet, it is difficult for Alice to accuse a dishonest database to any one else though she can detect the cheating. Current efforts to protect user privacy in realtime in existing QPQ protocols mainly use two techniques, i.e. adding an honesty checking on the database or allowing the user to reorder the qubits. We reexamine these two kinds of QPQ protocols and find neither of them can work very well. We give concrete cheating strategies for both participants and show that honesty checking of inner participant should be dealt more carefully in for example the choosing of checking qubits. Finally, we give an idea to realize realtime detection of dishonest database in QPQ of blocks (i.e. multi-bit database items).
Quantum private query (QPQ) is a cryptographic application that protects the privacy of both users and databases while querying the database secretly. In most existing QPQ protocols, the protection of user privacy can only be cheat-sensitive. Cheat-sensitive means that Bob will be found later with a certain probability if he tries to get the address queried by Alice. On the premise of cheat-sensitivity, although Alice can discover Bob’s malicious behavior after a query (transaction), the secret information of Alice was leaked in the completed query, which is likely to be a fatal blow to Alice. Or, to prevent Bob’s malicious behavior, Alice executes one or more additional queries to test Bob’s honesty. However, to bypass Alice’s honesty test, Bob can also provide several honest queries before performing dishonest queries. Therefore, cheat-sensitive should not be the ultimate goal of user privacy protection in QPQ. In this paper, we propose a practical QKD-based QPQ protocol with better user privacy protection than cheat-sensitivity based on order rearrangement of qubits. The proposed QPQ protocol can resist the Trojan horse attack even without wavelength filter and photon number splitter (PNS) equipped with auxiliary monitoring detectors.
A security analysis of the recently introduced Quantum Private Query (QPQ) protocol is presented. The latter is a cheat sensitive quantum protocol to perform a private search on a classical database. It allows a user to retrieve an item from the database without revealing which item was retrieved, and at the same time it ensures data privacy of the database (the information that the user retrieves in a query is bounded). The security analysis is based on information-disturbance tradeoffs which show that whenever the provider tries to obtain information on the query, the query (encoded into a quantum system) is disturbed so that the person querying the database can detect the privacy violation. The security bounds are derived under the assumption that a unique answer corresponds to each query. To remove this assumption, some simple variants of the protocol are illustrated, and it is conjectured that analogous security bounds apply to them.
A security analysis of the recently introduced Quantum Private Query (QPQ) protocol is presented. The latter is a cheat sensitive quantum protocol to perform a private search on a classical database. It allows a user to retrieve an item from the database without revealing which item was retrieved, and at the same time it ensures data privacy of the database (the information that the user retrieves in a query is bounded). The security analysis is based on information-disturbance tradeoffs which show that whenever the provider tries to obtain information on the query, the query (encoded into a quantum system) is disturbed so that the person querying the database can detect the privacy violation. The security bounds are derived under the assumption that a unique answer corresponds to each query. To remove this assumption, some simple variants of the protocol are illustrated, and it is conjectured that analogous security bounds apply to them.