# US 11,121,878 B2 · Authentication using key distribution through segmented quantum computing environments > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,121,878 B2 - Document ID: US11121878B2 - Status: Granted - Kind: B2 - Application number: 16/599,586 - Filed: 2019-10-11 - Published: 2021-04-15 - Granted: 2021-09-14 - Earliest claimed: 2019-10-11 - Assignees: Accenture Global Solutions Limited - Applicants: Accenture Global Solutions Limited - Inventors: Benjamin Glen McCarty; Ellie Marie Daw - Web page: https://patentgrep.com/patent/US11121878B2 ## CPC - H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 9/0852: {Quantum cryptography (transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03)} - H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying} - H04L 9/14: using a plurality of keys or algorithms - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 9/3271: {using challenge-response} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods, systems, and apparatus for authenticating and authorizing users using quantum key distribution through segmented quantum computing environments. In one aspect, a method includes receiving a first and second plaintext data input from a first party and from a second party, respectively; applying a quantum computation translation operation to the first and second plaintext data inputs to generate a corresponding first sequence of quantum computations and a second sequence of quantum computations; implementing the first and second sequence of quantum computations in a first and second segmented quantum computing environment, respectively, to obtain a first and second sequence of measurement results; generating a first and second encryption key using the first and second sequence of measurement results, respectively, and an encrypted authorization token using the second encryption key; and sending the first encryption key to the first party, and the encrypted authorization token to the second party. ## Claims ### Claim 1 A computer-implemented method comprising: receiving i) a first plaintext data input from a first party, and ii) a second plaintext data input from a second party; applying a quantum computation translation operation to i) the first plaintext data input to generate a corresponding first sequence of quantum computations, and ii) the second plaintext data input to generate a corresponding second sequence of quantum computations; implementing i) the first sequence of quantum computations in a first segmented quantum computing environment to obtain a first sequence of measurement results, and ii) the second sequence of quantum computations in a second segmented quantum computing environment to obtain a second sequence of measurement results; generating i) a first encryption key using the first sequence of measurement results, ii) a second encryption key using the second sequence of measurement results, and iii) an encrypted authorization token using the second encryption key; and sending i) the first encryption key to the first party, and ii) the encrypted authorization token to the second party. ### Claim 2 (depends on 1) The method of claim 1, wherein applying a quantum computation translation operation to i) the first plaintext data input to generate a corresponding first sequence of quantum computations, and ii) the second plaintext data input to generate a corresponding second sequence of quantum computations comprises independently: applying the quantum computation translation operation to the first plaintext data input using a first classical processor in the first segmented quantum computing environment; and applying the quantum computation translation operation to the second plaintext data input using a second classical processor in the second segmented quantum computing environment. ### Claim 3 (depends on 1) The method of claim 1, wherein implementing the first sequence of quantum computations in a first segmented quantum computing environment to obtain a first sequence of measurement results comprises, for each quantum computation in the first sequence of quantum computations: implementing the quantum computation on a first qubit included in the first segmented quantum computing environment; measuring the first qubit in the first segmented quantum computing environment; and providing a measurement result to classical hardware included in the first segmented quantum computing environment. ### Claim 4 (depends on 3) The method of claim 3, wherein the classical hardware is subjected to one or more of Network-Function-Virtualization or Software-Defined-Networking. ### Claim 5 (depends on 1) The method of claim 1, wherein implementing the second sequence of quantum computations in a second segmented quantum computing environment to obtain a second sequence of measurement results comprises, for each quantum computation in the second sequence of quantum computations: implementing the quantum computation on a second qubit included in the second segmented quantum computing environment; measuring the second qubit in the second segmented quantum computing environment; and providing a measurement result to classical hardware included in the second segmented quantum computing environment. ### Claim 6 (depends on 5) The method of claim 5, wherein the classical hardware is subjected to one or more of Network-Function-Virtualization or Software-Defined-Networking. ### Claim 7 (depends on 1) The method of claim 1, wherein the first segmented quantum computing environment comprises a first ephemeral segmented quantum computing environment and the second segmented quantum computing environment comprises a second ephemeral segmented quantum computing environment. ### Claim 8 (depends on 7) The method of claim 7, wherein the method further comprises: receiving, from a second party, an indication that a first party has requested access to data stored by the second party; and creating the first ephemeral segmented quantum computing environment and the second ephemeral segmented quantum computing environment. ### Claim 9 (depends on 1) The method of claim 1, wherein the first plaintext data input comprises a first response to an authentication challenge and the second plaintext data input comprises a second response to the authentication challenge, wherein the second response to the authentication challenge comprises an expected response to the authentication challenge. ### Claim 10 (depends on 9) The method of claim 9, wherein the authentication challenge comprises an authentication challenge sent to the first party from the second party in response to the second party receiving a request from the first party to access to data stored by the second party, the authentication challenge comprising an authentication challenge previously established between the first party and the second party during an enrollment process. ### Claim 11 (depends on 1) The method of claim 1, wherein the first plaintext data input is received via an Out-of-Band authenticator device. ### Claim 12 (depends on 1) The method of claim 1, further comprising sending, to the second party, an indication that the first plaintext data input has been received from the first party. ### Claim 13 (depends on 1) The method of claim 1, further comprising: destroying the first encryption key after sending the first encryption key to the first party; and destroying the first segmented quantum computing environment after destroying the first encryption key. ### Claim 14 (depends on 1) The method of claim 1, further comprising: destroying the second encryption key after generating the encrypted authorization token; and destroying the second segmented quantum computing environment after sending the encrypted authorization token to the second party. ### Claim 15 (depends on 1) The method of claim 1, wherein: in response to receiving the first encryption key, the first party provides the first encryption key to the second party; and the second party authorizes access to data requested by the first party when the first encryption key decrypts the encrypted authorization token. ### Claim 16 (depends on 1) The method of claim 1, wherein the first segmented quantum computing environment comprises a first qubit and the second segmented quantum computing environment comprises a second qubit. ### Claim 17 (depends on 16) The method of claim 16, wherein implementing i) the first sequence of quantum computations in a first segmented quantum computing environment to obtain a first sequence of measurement results, and ii) the second sequence of quantum computations in a second segmented quantum computing environment to obtain a second sequence of measurement results comprises, for an n-th quantum computation in the first sequence of quantum computations and in the second sequence of quantum computations: initializing the first qubit and the second qubit in a zero state; initializing a third qubit and a fourth qubit in a zero state; entangling the third qubit and the fourth qubit; applying a first swap quantum gate to the first qubit and the third qubit; applying a second swap quantum gate to the second qubit and the fourth qubit; applying the n-th quantum computation in the first sequence of quantum computations on the first qubit and measuring the first qubit to obtain a respective n-th measurement result in the first sequence of measurement results; and applying the n-th quantum computation in the second sequence of quantum computations on the second qubit and measuring the second qubit to obtain a respective n-th measurement result in the second sequence of measurement results. ### Claim 18 (depends on 17) The method of claim 17, wherein entangling the third qubit and the fourth qubit comprises applying a Hadamard gate to the third qubit and a CNOT operation to the third qubit and the fourth qubit, wherein the third qubit acts as a control for the CNOT operation. ### Claim 19 (depends on 1) The method of claim 1, wherein the quantum computation translation operation comprises an operation that maps each character in a plaintext data input to a respective quantum computation. ### Claim 20 A system comprising: one or more classical processors; and quantum computing hardware; wherein the system is configured to perform operations comprising: receiving i) a first plaintext data input from a first party, and ii) a second plaintext data input from a second party; applying a quantum computation translation operation to i) the first plaintext data input to generate a corresponding first sequence of quantum computations, and ii) the second plaintext data input to generate a corresponding second sequence of quantum computations; implementing i) the first sequence of quantum computations in a first segmented quantum computing environment to obtain a first sequence of measurement results, and ii) the second sequence of quantum computations in a second segmented quantum computing environment to obtain a second sequence of measurement results; generating i) a first encryption key using the first sequence of measurement results, ii) a second encryption key using the second sequence of measurement results, and iii) an encrypted authorization token using the second encryption key; and sending i) the first encryption key to the first party, and ii) the encrypted authorization token to the second party.