基于离线仲裁的量子令牌认证理论研究

Quantum token authentication (QTA), which combines the access control with signing functions, makes the authorized signer have only one chance to authenticate her identity and the signed messages. As a significant application topic of quantum signature, the existing QTA protocols only focus on the achievement of the authentication function between the signer and receiver when the arbitrator is absent. It can be seen that the receiver’s forgery of the token signature and the modify of the quantum tokens in real time have not been discussed until now. In order to solve the problems above, a new offline arbitrated quantum token authentication (OffA-QTA) model will be presented in this project. Here we will propose some secure and valid QTA protocols when the honest delegator does not verify quantum token signature directly. Detailly, the project includes the following three directions: firstly, we will solve the problem that how to distribute and verify the keys among the dishonest participants; secondly, we will propose some encryption algorithms which generate the quantum token signature to prevent the participant attacks, and give some strategies to make the receiver can verify the token signature himself; finally, we will design the general methods to modify and repeal the authorized quantum tokens and analyze the prospect of OffA-QTA. In all, the achievement of this project will improve the security of the existing QTA protocols, promote the further development of QTA theory and give the positive efforts to the application of quantum signature.

量子令牌认证(QTA)结合了权限控制和签名功能，确保被授权的用户只能够完成一次身份和消息的认证。作为量子签名的重要应用，目前QTA的研究仅关注无仲裁下的两方认证功能实现方法，并没有分析签名接收者对于量子令牌签名的伪造，也没有考虑量子令牌权限的实时修改。为了解决这些问题，本项目拟提出基于离线仲裁的量子令牌认证(OffA-QTA)新模型，即在可信授权者不直接介入令牌签名验证的情况下，设计安全可用的QTA协议。具体内容包括：解决不诚实参与方之间的密钥分配和验证问题；给出抗参与者攻击的令牌签名生成算法，提出接收者可独立验证签名有效性的策略；研究量子令牌可修改和撤销的一般方法，分析OffA-QTA的应用前景。本项目的研究将提高现有量子令牌认证协议的安全性，推动后续量子令牌认证理论的发展，促进量子签名应用体系的完善。

量子令牌签名认证是量子签名研究的重要分支，为实现身份和消息的单向认证提供了理论工具，也为电子支付、电子投票等基于签名的应用场景提供了解决方案。本项目从离线仲裁的假设入手，系统地研究了实用型量子令牌签名认证协议设计中的关键问题。首先，项目组提出不诚实参与方之间的匿名纠缠分配、对称密钥协商、非对称不经意密钥分配、非受控量子安全通信协议。从量子信道和信息交互两个角度，设计不诚实参与方之间的确定性密钥分配策略，完成量子令牌签名认证初始化阶段的秘密信息交互功能。其次，项目组提出离线仲裁下的量子顺序签名、量子双签名的协议设计思想，解决了理论界的一系列公开问题。通过分析现有量子代理签名中存在的可用性和安全性问题、量子秘密共享和保密比较的秘密信息处理方法，设计首个功能完善的量子令牌签名认证协议，进一步给出代理方权限的动态调整策略。最后，项目组分析基于量子签名的支付和投票问题，结合非局域正交直积态和新型量子加密算法，探索量子令牌签名思想在商业、政务等领域中的应用。