With advances in wireless communication and growing spectrum scarcity, Spectrum Access Systems (SASs) offer an opportunistic solution but face significant security challenges. Regulations require disclosure of location coordinates and transmission details, exposing user privacy and anonymity during spectrum queries, while the database operations themselves permit Denial-of-Service (DoS) attacks. As location-based services, SAS is also vulnerable to compromised or malicious users conducting spoofing attacks. These threats are further amplified given the advances in quantum computing. Thus, we propose QPADL, the first post-quantum (PQ) secure framework that simultaneously ensures privacy, anonymity, location verification, and DoS resilience while maintaining efficiency for large-scale spectrum access systems. QPADL introduces SAS-tailored private information retrieval for location privacy, a PQ-variant of Tor for anonymity, and employs advanced signature constructions for location verification alongside client puzzle protocols and rate-limiting technique for DoS defense. We formally assess its security and conduct a comprehensive performance evaluation, incorporating GPU parallelization and optimization strategies to demonstrate practicality and scalability.

翻译：随着无线通信技术的进步及频谱资源日益稀缺，频谱接入系统提供了一种机会式解决方案，但面临严峻的安全挑战。现有法规要求披露位置坐标与传输细节，在频谱查询过程中暴露用户隐私与匿名性，同时数据库操作本身易遭受拒绝服务攻击。作为基于位置的服务，频谱接入系统还面临被攻陷或恶意用户实施欺骗攻击的风险。考虑到量子计算的发展，这些威胁将进一步加剧。为此，我们提出QPADL——首个后量子安全框架，能在大规模频谱接入系统中同时保障隐私、匿名性、位置验证与抗拒绝服务能力，并保持高效性。QPADL采用针对频谱接入系统定制的私有信息检索技术保护位置隐私，使用后量子版本的Tor协议实现匿名性，通过高级签名方案完成位置验证，并利用客户端谜题协议与速率限制技术防御拒绝服务攻击。我们对其安全性进行了形式化评估，并通过融入GPU并行化与优化策略开展全面性能分析，验证了其实用性与可扩展性。