基于量子密钥分配的跨域认证与密钥协商协议  

Cross Domain Authentication and Key Agreement Protocol Based on Quantum Key Distribution

作　　者：罗俊 LUO Jun(China Telecom Quantum Information Technology Group Co.,Ltd.,Hefei Anhui 230088,China)

机构地区：[1]中电信量子信息科技集团有限公司,安徽合肥230088

出　　处：《通信技术》2025年第3期221-231,共11页Communications Technology

基　　金：国家科技创新2030-重大项目(2021ZD0301300)。

摘　　要：认证与密钥协商类协议在实际应用中面临一些安全威胁,而基于量子密钥分配的通信网络具备实现完美保密性的能力,因此可结合经典密码技术实现对认证与密钥协商类协议的安全增强。提出了基于量子密钥分配的跨域认证与密钥协商协议,通过具备无条件物理安全特性的量子密钥分配信道进行不同通信域之间的会话密钥的传输。使用SVO逻辑模型进行形式化分析,证明了该协议具备信息传输机密性、完整性和前向/后向保密等安全属性。Authentication and key agreement protocols face some security threats in practical applications,while communication networks based on quantum key distribution have the ability to achieve perfect confidentiality,so it can be combined with classical cryptographic techniques to enhance the security of authentication and key agreement protocols.A quantum key distribution based cross domain authentication and key agreement protocol is proposed,which carries out the transmission of session keys between different communication domains through quantum key distribution channels with unconditional physical security characteristics.Through formal analysis using the SVO logic model,the protocol are proved to have security attributes such as confidentiality,integrity,and forward/backward confidentiality for information transmission.

关 键 词：身份认证 密钥协商 量子密钥分配 形式化分析 

分 类 号：TN918[电子电信—通信与信息系统]