Systems and methods for quantum session authentication
Systems, apparatuses, methods, and computer program products are disclosed for session authentication. In an exemplary embodiment, a session authentication system encodes and decodes a set of quantum bits using different quantum bases in order to generate a random number used to generate a session key or a random seed (e.g., a set of bits that is randomized due to quantum effects such as the principle of quantum uncertainty) for pseudorandom number generation used to establish a secure session. An example system includes decoding circuitry configured to receive, over a quantum line, a set of qbits generated based on a first set of quantum bases not received by the decoding circuitry, and decode, based on a second set of quantum bases, the set of qbits to generate a decoded set of bits; and session authentication circuitry configured to generate a session key based on the decoded set of bits.
1. A system for session authentication, the system comprising:
decoding circuitry configured to
receive, over a quantum line, a set of qbits generated based on a first set of quantum bases, wherein the first set of quantum bases is not received by the decoding circuitry,
determine a second set of quantum bases, and
decode, based on the second set of quantum bases, the set of qbits to generate a decoded set of bits, wherein the decoded set of bits comprises a wildcard bit, wherein the wildcard bit has a first probability of being correct and a second probability of being incorrect; and
session authentication circuitry configured to
generate a session key based on the wildcard bit.
2. The system of claim 1 , wherein the session authentication circuitry is configured to transmit the session key to a client device for use in session authentication by causing quantum key distribution circuitry to perform a quantum key distribution process that transmits the generated session key to the client device.
3. The system of claim 1 , wherein the decoding circuitry is configured to decode at least one qbit of the set of qbits using a quantum basis that is different from a quantum basis used to generate the at least one qbit.
4. The system of claim 1 , further comprising quantum basis determination circuitry configured to determine the second set of quantum bases using a pseudo-random selection method.
5. The system of claim 1 , wherein the quantum line comprises an optical fiber, an optical waveguide, free space, or a combination thereof.
6. The system of claim 1 ,
wherein the first set of quantum bases comprises a first pair of orthogonal photonic polarization states, and
wherein the second set of quantum bases comprises a second pair of orthogonal photonic polarization states different from the first pair of orthogonal photonic polarization states.
7. The system of claim 6 , wherein the first pair of orthogonal photonic polarization states and the second pair of orthogonal photonic polarization states are selected at least partially from the group consisting of a pair of rectilinear photonic polarization states, a pair of diagonal photonic polarization states, and a pair of circular photonic polarization states.
8. The system of claim 1 , wherein the first set of first quantum bases or the second set of quantum bases comprises a plurality of quantum bases.
9. The system of claim 1 , further comprising:
random number generation circuitry configured to generate a number based on the decoded set of bits,
wherein the session authentication circuitry is configured to generate the session key by setting the session key equal to the generated number, or using the generated number as a seed in a pseudo-random number generation procedure, wherein an output of the pseudo-random number generation procedure comprises the session key.
10. The system of claim 1 , wherein the decoding circuitry is further configured to:
receive a control signal indicative of an instruction to decode the set of qbits based on the second set of quantum bases; and
in response to receiving the control signal, decode the set of qbits based on the second set of quantum bases.
11. The system of claim 1 , wherein the decoding circuitry is further configured to not transmit second electronic information indicative of the second set of quantum bases.
12. The system of claim 1 ,
wherein the set of qbits is encoded based on a time-dependent qbit encoding schedule comprising a first plurality of quantum bases respectively corresponding to a first plurality of time periods, and
wherein the decoding circuitry is further configured to decode the set of qbits based on a time-dependent qbit decoding schedule comprising a second plurality of quantum bases respectively corresponding to a second plurality of time periods.
13. The system of claim 1 , wherein the decoded set of bits comprises at least one wildcard bit, and wherein the session key is generated based at least in part on the at least one wildcard bit.
14. The system of claim 1 , wherein a qbit decoder comprises the decoding circuitry, and wherein a separate session authentication system comprises the session authentication circuitry.
15. The system of claim 14 , wherein the separate session authentication system comprises pseudo-random number generation circuitry configured to:
generate a seed for pseudo-random number generation based on a generated number; and generate a pseudo-random number based on the seed,
wherein the session authentication circuitry is configured to generate the session key based on the pseudo-random number.
16. The system of claim 14 , wherein the separate session authentication system comprises random number generation circuitry configured to:
generate a number based on the decoded set of bits,
wherein the session authentication circuitry is configured to generate the session key with a value equal to the generated number.
17. A method for session authentication, the method comprising:
receiving, by decoding circuitry and over a quantum line, a set of qbits generated based on a first set of quantum bases, wherein the first set of quantum bases is not received by the decoding circuitry;
determining, by the decoding circuitry, a second set of quantum bases;
decoding, by the decoding circuitry and based on the second set of quantum bases, the set of qbits to generate a decoded set of bits, wherein the decoded set of bits comprises a wildcard bit, wherein the wildcard bit has a first probability of being correct and a second probability of being incorrect; and
generating, by session authentication circuitry, a session key based on the wildcard bit.
18. A computer program product for session authentication, the computer program product comprising at least one non-transitory computer-readable storage medium storing program instructions that, when executed, cause an apparatus to:
receive, over a quantum line, a set of qbits generated based on a first set of quantum bases, wherein the first set of quantum bases is not received by the apparatus;
determine a second set of quantum bases;
decode, based on the second set of quantum bases, the set of qbits to generate a decoded set of bits, wherein the decoded set of bits comprises a wildcard bit, wherein the wildcard bit has a first probability of being correct and a second probability of being incorrect; and
generate a session key based on the wildcard bit.
19. The system of claim 1 , wherein:
the first set of quantum bases are determined using at least one of a time-dependent qbit encoding schedule corresponding to a first plurality of time periods or a unit-dependent quantum encoding schedule; and
the second set of quantum bases are determined using at least one of a time-dependent qbit decoding schedule corresponding to a second plurality of time periods or a unit-dependent quantum decoding schedule.
20. The system of claim 1 , wherein quantum bases included in the first set of quantum bases differ from quantum bases included in the second set of quantum bases.