Abstract: Aiming at the needs of high-efficiency, two-way and synchronization in Quantum Identity Authentication (QIA), a two-party quantum identity authentication protocol based on single python was proposed. First, a new type of single-photon two-way measurement base coding method was used in the protocol. Then an authentication process based on quantum tickets was proposed by combining with the idea of Kerberos classic cryptographic protocol. On this basis, the strategy of two-way and synchronous authentication was adopted in the authentication process. Finally, the probability calculation and security analysis of various attack methods in quantum communication and authentication were carried out, and at the same time, the protocol was tried to expand from two parties to multiple parties. Compared with the preparation-measurement based quantum identity authentication protocol with new coding strategy, in the research result, a complete two-way synchronous identity authentication protocol which can prevent user repudiation was proposed, and the reference principles for expanding the protocol to multi-party communication were given. In conclusion, the proposed method improves the efficiency of quantum authentication theory, supports the new possibility of the combination and reference of quantum communication protocol and classic protocol, and realizes the theoretically undeniable synchronous authentication process of two parties.

Key words: quantum communication, single photon, identity authentication, two-way authentication, communication network

摘要： 针对量子身份认证（QIA）存在的高效、双向、同步的需求，提出一种基于单光子的两方量子身份认证协议。首先于协议中采用了一种新型的单光子双向测量基编码方式，其次结合了Kerberos经典密码协议思想提出一种根据量子票据发起建立的认证流程。在此基础上，于认证过程中采用双向同步认证的策略。最后对量子通信和认证中存在的多种攻击方式进行概率计算和安全性分析，并同时试图将协议由两方推及到多方。研究结果与新型编码策略的基于制备-测量的量子身份认证相比，提出了一个完整的、防止用户抵赖的双向同步身份认证协议，并给出了将协议扩展到多方通信的参考原则。从结论上来看，所提方法提高了量子认证理论的高效性，支持了量子通信协议与经典协议的结合和借鉴的新的可能，实现了理论上不可抵赖的双方同步认证流程。

关键词: 量子通信, 单光子, 身份认证, 双向认证, 通信网络