The quantum privacy query (QPQ) is the quantum version of private query, which refers to that a user (Alice) to purchase data from a database owner (Bob) under the condition of ensuring the privacy of both parties. Specifically, Alice should not access data other than those she bought, and Bob cannot know what data Alice has obtained. The existing QPQ protocols focus on privacy protection and ignore other attacks from outside attackers, such as impersonation, man-in-the-middle and tampering. Undoubtedly, these attacks can destroy the QPQ process. In this paper, we present a secure QPQ protocol that can resist external active attacks. By designing an identity authentication mechanism and integrating it into the existing quantum key distribution-based QPQ protocol, the proposed protocol implements mutual identity authentication in the oblivious key agreement phase to resist impersonation and “man-in-the-middle” attacks. Besides, the mutual authentication process also generates a shared key between Alice and Bob to achieve the data source authentication and integrity protection against tampering attack in the data retrieval phase. The security analysis demonstrates that the proposed protocol not only retains the privacy protection strength of the original QPQ protocol, but also has strong resistance to external attacks.

量子隐私查询（QPQ）是私有查询的量子版本，它表示用户（Alice）在确保双方隐私的条件下从数据库所有者（Bob）购买数据。具体来说，爱丽丝不应该访问她购买的数据以外的数据，而鲍勃不能知道爱丽丝获得了什么数据。现有的QPQ协议专注于隐私保护，并忽略来自外部攻击者的其他攻击，例如冒名顶替，中间人攻击和篡改。毫无疑问，这些攻击会破坏QPQ流程。在本文中，我们提出了一种可以抵抗外部主动攻击的安全QPQ协议。通过设计身份认证机制并将其集成到现有的基于量子密钥分发的QPQ协议中，所提出的协议在遗忘密钥协议阶段实现了相互身份认证，以抵抗假冒和“中间人”攻击。此外，相互认证过程还会在Alice和Bob之间生成一个共享密钥，以在数据检索阶段实现数据源认证和完整性保护，防止篡改攻击。安全性分析表明，该协议不仅保留了原有QPQ协议的隐私保护强度，而且还具有较强的抗外部攻击能力。