A quantum key distribution protocol based on BB84 protocol and a challenge-response mechanism was proposed. Through a secure channel, Alice and Bob have pre-shared three different Hash functions (denoted by H1, H2 and H3) and a random bit string SAB0. Every time, Alice first generates two random bit strings SAr (challenge) and SAk (key), then prepares a photon sequence SAp based on BB84 protocol using SBr,SBk,SAB0 and H1. Alice sends SAr and SAp to Bob and Bob receives the corresponding SBr and SBp. Bob measures SBp according to BB84 protocol and gets corresponding SBk. In the ideal case, SAk should be the same as SBk. Bob uses SBr,SBk,SAB0 and H2 to generate SB2 (response). At last, Alice and Bob use their own sequences and H3 to generate S~A0 and S~B0 respectively, then they update their own SAB0. In the proposed protocol, the utilization rate of photons is 100%. The security of the protocol is similar as that of the BB84 protocol. Furthermore, it is a one-way identification authentication protocol.