QIAP: A Quantum-Inspired Authentication Protocol with BB84-Based Channel Monitoring
Abstract
Authentication in quantum-aware communication settings requires mechanisms that verify user legitimacy while also assessing whether the communication channel exhibits excessive disturbance. This paper presents QIAP, a stateful hybrid framework that combines classical commitment-based challenge-response authentication with BB84-based quantum-channel monitoring. QIAP uses a dual-branch verification structure inspired by rectilinear and diagonal basis selection. In the rectilinear branch, the prover opens a hash-based commitment and the verifier checks consistency with the registered round token. In the diagonal branch, the prover returns an HMAC tag bound to the verifier nonce, round identifier, and submitted commitment without disclosing the round-specific sub-secret. Under the stated hash, HMAC, freshness, secure-registration, protected-storage, and high-entropy-secret assumptions, QIAP provides computational resistance to the modeled wrong-secret and replay attempts and protects the long-term master secret from direct recovery. After successful authentication, the BB84 module estimates the quantum bit error rate (QBER) and aborts the session when the measured value reaches or exceeds the configured threshold. In the reported simulation, no successful authentication was observed among 1,000 tested wrong-secret attempts per branch. The baseline and full intercept-resend conditions produced mean QBER values of approximately 0.02 and 0.25, respectively. The classical authentication stage required approximately 0.6 ms, and the implemented authentication messages required approximately 113 bytes per round. These results indicate that QIAP can provide a lightweight hybrid framework for combining secret-based identity verification with QBER-based channel-disturbance assessment under the stated threat model.
Related
- Quantum identity authentication protocol via perturbed probability amplitudes
- Distinct Feedback-Strength Requirements for Quantum-State Ensemble Preparation under Channel-Equivalent Monitoring
- Measuring the entanglement-breaking index of a qubit collision channel on a quantum processor: protocol and worked example
- Hybrid Authentication Protocols for Advanced Quantum Networks
- Unconditional authentication in quantum key distribution via hybrid entangled physical unclonable functions
BibTeX
@misc{siddiqui2026qiap,
title = {{QIAP: A Quantum-Inspired Authentication Protocol with BB84-Based Channel Monitoring}},
author = {Owais Ishtiaq Siddiqui and Nouhaila Innan and Hira Zaheer and Muhammad Shafique},
howpublished = {arXiv},
year = {2026},
month = oct,
doi = {10.48550/arxiv.2610.16124},
eprint = {2610.16124},
archivePrefix = {arXiv},
url = {https://arxiv.org/abs/2610.16124},
note = {CC BY 4.0},
}
RIS
TY - UNPB
TI - QIAP: A Quantum-Inspired Authentication Protocol with BB84-Based Channel Monitoring
AU - Owais Ishtiaq Siddiqui
AU - Nouhaila Innan
AU - Hira Zaheer
AU - Muhammad Shafique
PY - 2026
DA - 2026/10/12
PB - arXiv
DO - 10.48550/arxiv.2610.16124
UR - https://arxiv.org/abs/2610.16124
AB - Authentication in quantum-aware communication settings requires mechanisms that verify user legitimacy while also assessing whether the communication channel exhibits excessive disturbance. This paper presents QIAP, a stateful hybrid framework that combines classical commitment-based challenge-response authentication with BB84-based quantum-channel monitoring. QIAP uses a dual-branch verification structure inspired by rectilinear and diagonal basis selection. In the rectilinear branch, the prover opens a hash-based commitment and the verifier checks consistency with the registered round token. In the diagonal branch, the prover returns an HMAC tag bound to the verifier nonce, round identifier, and submitted commitment without disclosing the round-specific sub-secret. Under the stated hash, HMAC, freshness, secure-registration, protected-storage, and high-entropy-secret assumptions, QIAP provides computational resistance to the modeled wrong-secret and replay attempts and protects the long-term master secret from direct recovery. After successful authentication, the BB84 module estimates the quantum bit error rate (QBER) and aborts the session when the measured value reaches or exceeds the configured threshold. In the reported simulation, no successful authentication was observed among 1,000 tested wrong-secret attempts per branch. The baseline and full intercept-resend conditions produced mean QBER values of approximately 0.02 and 0.25, respectively. The classical authentication stage required approximately 0.6 ms, and the implemented authentication messages required approximately 113 bytes per round. These results indicate that QIAP can provide a lightweight hybrid framework for combining secret-based identity verification with QBER-based channel-disturbance assessment under the stated threat model.
ER -