可实现身份认证的多方量子密钥分发协议

A Multi-party Quantum Key Distribution Protocol with Quantum Identity Authentication

量子密钥分发是一种重要的量子通信方式。为了提高量子密钥分发的可行性和安全性,文章提出一种可以实现多方量子身份认证的量子密钥分发协议。首先利用改进的GV95线路实现分发者和第一个参与者的双向身份认证;然后参与者通过酉操作进行多方量子身份认证,在此过程中分发者通过随机抽查的方式来检测参与者中是否有伪造身份的用户,同时可信设计器利用Hash函数的同态性保证了最终恢复的密钥的正确性。安全性分析表明,该协议既可抵抗伪造身份攻击、截获-重发攻击以及特洛伊木马攻击等外部攻击,也可抵抗内部攻击。

Quantum key distribution is an important way of quantum communication.In order to improve the feasibility and security of quantum key distribution,a quantum key distribution protocol which can realize multi-party quantum identity authentication is proposed in this paper.At first,the modified circuit of GV95 is used to realize the mutual authentication between the distributor and the first participant.Then the participants conduct multi-party quantum identity authentication through unitary operation.In this process,the distributor will check whether there are forged users in the participants through random detection.Furthermore,the trusted design combiner ensures the correctness of the recovered secret key by using the homomorphism of Hash function.The security analysis shows that this protocol can resist not only external attacks which include identity forgery attack,intercept-resend attack and Trojan horse attack,but also internal attacks.