JP2022190213A - Method and device for multi-factor authentication - Google Patents

Abstract

To enhance safety of user authentication in multi-factor authentication.SOLUTION: A method to be executed by a user terminal is provided. The method includes the steps of: acquiring a user ID and user factor information for performing a single sign-on to a plurality of cloud services to transmit them to a first authentication server; transmitting a first common encryption key of a user terminal allocated uniquely to the user terminal to the first authentication server together with a subscriber ID of the user in the case that the first authentication server determines that a combination of the user ID and the user factor information is correct, and starting communication with a plurality of cloud services in the case of receiving a notification that the first common encryption key of the user terminal matches a second common encryption key of a second authentication server authenticating the user terminal and being the second encryption key associated with the subscriber ID from the first authentication server.SELECTED DRAWING: Figure 5

Description

The present disclosure relates to methods and apparatus for multi-factor authentication. More particularly, the present disclosure relates to methods and apparatus for multi-factor authentication in cloud-based identity management services.

With the spread of smart devices that can use various application software, the number of companies and individuals using cloud services is increasing. For this reason, data is managed in a distributed manner, such as by locally managing part of company and personal data, while part of other data is migrated to the cloud, making it difficult to centrally manage data. Moreover, if ID/password authentication is performed for each cloud service, the end user must memorize the combination of ID and password for each cloud service, which is not user-friendly.

In recent years, a cloud-type ID management service (IDaaS: Identity as a Service) has appeared. IDaaS is a mechanism that can centrally manage each ID and password authentication of different cloud services. IDaaS can realize single sign-on (authentication with one unified ID and password).

However, in authentication that relies on passwords, once the password is leaked, there is a problem that other services that set the same password as the leaked password can be illegally used. Furthermore, password-based authentication has the problem that users with low security awareness tend to set simple character strings, leaving the strength of security up to the user. To overcome this password security vulnerability, IDaaS employs a multi-factor authentication scheme. The multi-factor authentication method is authentication that combines three factors of knowledge information/possession information/biometric information. Authentication based on "knowledge information" includes authentication based on information that only the user can know, such as a password. Authentication based on "possession information" includes authentication based on MAC addresses, etc., and authentication based on "biometric information" includes authentication based on fingerprints.

One of the objects of the present invention is to improve safety and reliability of user authentication in multi-factor authentication.

Another object of the present invention is to facilitate user authentication processing in multi-factor authentication.

A characteristic configuration of a method for achieving the above object is a method executed in a user terminal, acquiring a user ID and user element information for single sign-on to a plurality of cloud services, performing first authentication a step of transmitting to a server; and if the first authentication server determines that the combination of the user ID and the user element information is correct, the first authentication information of the user terminal uniquely assigned to the user terminal; sending a common cryptographic key together with a subscriber ID of a user to the first authentication server, wherein the first common cryptographic key of the user terminal and a second authentication server authenticating the user terminal; and the second common encryption key associated with the subscriber ID is received from the first authentication server, communication with the plurality of cloud services at a point, including the step of initiating

A feature configuration for achieving the above object is a method executed in a device, comprising a step of acquiring a user ID and user element information for single sign-on to a plurality of cloud services from a user terminal; a step of obtaining a first common encryption key from an authentication server based on a subscriber ID associated with the user ID, when determining that the combination of the user ID and the user element information is correct, the authentication server comprising: is authenticating the user terminal; obtaining from the user terminal a second common encryption key associated with the subscriber ID; and the authentication server and the step of notifying the user terminal that the first common encryption key from the user terminal matches the second common encryption key from the user terminal.

A feature of an apparatus for carrying out the above objects is an apparatus comprising: at least one processor; and a memory storing instructions which, when executed by the at least one processor, cause the apparatus to generate instructions for a user terminal. obtaining a user ID and user element information for single sign-on to a plurality of cloud services from a subscription associated with the user ID if the combination of the user ID and the user element information is correct; obtaining a first common encryption key from an authentication server based on a user ID, wherein the authentication server authenticates the user terminal; obtaining the first common encryption key; obtaining from a terminal a second common encryption key associated with the subscriber ID; and matching the first common encryption key from the authentication server with the second common encryption key from the user terminal. and a memory storing a command for executing a step of notifying the user terminal of a match between the two.

The present invention provides an apparatus and method for increasing the security and reliability of user authentication in multi-factor authentication.

1 illustrates a system for providing a cloud-based multi-factor authentication management service according to an embodiment of the present disclosure; 1 shows a hardware configuration diagram of a user terminal according to an embodiment of the present disclosure; FIG. 1 shows a hardware configuration diagram of a multi-factor authentication server according to an embodiment of the present disclosure; FIG. 2 is a block diagram showing an example of functional configurations of a user terminal, a multi-factor authentication server, and an authentication server shown in FIG. 1; FIG. 4 shows an example of processing executed in the system according to the first embodiment of the present disclosure; 4 shows an example of processing executed in a system according to a second embodiment of the present disclosure; 4 is an example data structure of a subscriber file according to an embodiment of the present disclosure; 4 is an example data structure of a user management file according to an embodiment of the present disclosure; 4 is an example data structure of a common encryption key file according to an embodiment of the present disclosure;

[Description of the embodiment of the present invention]
First, the contents of the embodiments of the present invention will be listed and explained. One embodiment of the present invention has the following configuration.

[Configuration 1] A characteristic configuration of a method according to the present invention is a method executed in a user terminal, in which a user ID and user element information for single sign-on to a plurality of cloud services are acquired, and a first a step of transmitting to an authentication server (multi-factor authentication server 200); transmitting a first common encryption key of the user terminal to the first authentication server together with a subscriber ID of the user, wherein the first common encryption key of the user terminal and the user terminal are authenticated a second common encryption key of a second authentication server (authentication server 300), which is the second authentication server (authentication server 300), and a second common encryption key associated with the subscriber ID; upon receiving from a server, initiating communication with said plurality of cloud services.

[Arrangement 2] Another characteristic arrangement of the method according to the present invention is that, prior to the step of sending the user ID and the user element information to the first authentication server, the user terminal performs the second authentication performing AKA authentication with a server, and sharing a common encryption key between the user terminal and the second authentication server.

[Configuration 3] Another characteristic configuration of the method according to the present invention is that the first common encryption key is held in the SIM of the user terminal.

[Configuration 4] Another characteristic configuration of the method according to the present invention is that the first common encryption key and the second common encryption key are CK (CipherKey) and IK (IntegrityKey) generated by AKA authentication. There is, at the point.

[Configuration 5] Another characteristic configuration of the method according to the present invention is that the first common encryption key is encrypted and transmitted to the first authentication server.

[Configuration 6] Another characteristic configuration of the method according to the present invention is that the user element information includes at least one of the user's knowledge information and the user's biometric information.

[Structure 7] Another characteristic structure of the method according to the present invention is that the second authentication server is a server provided by a communication carrier.

[Configuration 8] Another characteristic configuration of the method according to the present invention is that the first authentication server and the user terminal are connected to each other via the Internet, and the first authentication server and the second authentication The server is connected to each other via a communication carrier network.

[Configuration 9] A characteristic configuration of the method according to the present invention is a method executed in a device, which is a step of acquiring a user ID and user element information for single sign-on to a plurality of cloud services from a user terminal. and, if it is determined that the combination of the user ID and the user element information is correct, a step of acquiring a first common encryption key from an authentication server based on the subscriber ID associated with the user ID, obtaining a first common cryptographic key, wherein the authentication server authenticates the user terminal; obtaining a second common cryptographic key associated with the subscriber ID from the user terminal; and, when the first common encryption key from the authentication server and the second common encryption key from the user terminal match, notifying the user terminal of the match between the two. be.

[Arrangement 10] Another characteristic arrangement of the method according to the present invention is that it further comprises the step of obtaining the subscriber ID associated with the user ID.

[Configuration 11] Another characteristic configuration of the method according to the present invention is that the second common encryption key is obtained by executing an application program for obtaining the common encryption key stored in the user terminal. is, at the point.

[Arrangement 12] A feature arrangement of an apparatus according to the present invention is an apparatus comprising: at least one processor; and a memory storing instructions which, when executed by the at least one processor, provide a acquiring a user ID and user element information for single sign-on to a plurality of cloud services from a terminal; obtaining a first common encryption key from an authentication server based on a subscriber ID, said authentication server authenticating said user terminal; obtaining a second common encryption key associated with the subscriber ID from the user terminal; obtaining the first common encryption key from the authentication server; and the second common encryption key from the user terminal. and a memory storing a command for executing a step of notifying the user terminal of the match when the two match.

[Details of the embodiment of the present invention]
BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described with reference to the drawings. It should be noted that the present disclosure is not limited to these examples, but is indicated by the scope of the claims, and is intended to include all modifications within the meaning and scope of equivalents to the scope of the claims. be. In the following description, the same reference numerals are given to the same elements in the description of the drawings, and redundant description will not be repeated.

FIG. 1 illustrates a system 10 for providing cloud-based multi-factor authentication services according to one embodiment of the present disclosure. The system 10 includes a user terminal (UE) 100, a multi-factor authentication server 200 as a device that provides multi-factor authentication services, and an authentication server 300. FIG. The system 10 is a system that authenticates a user by combining element information such as knowledge information input by the user and information specific to the user terminal 100 as possession information held by the user terminal 100 . Element information input by a user in the present disclosure includes at least one of user's knowledge information and user's biometric information. According to the present disclosure, once the user operating the user terminal 100 passes authentication with the multi-factor authentication server 200 , authentication to various cloud services 4 is not required, and single sign-on to various cloud services 4 is possible. The user's knowledge information is information that only the user can know, such as a password, a secret question, a PIN code, and the like. The user's biometric information includes the user's fingerprint, iris, veins, voiceprint, facial information, and the like.

In the example of FIG. 1, user terminal 100 is communicatively connected to multi-factor authentication server 200 via network 6(1), and multi-factor authentication server 200 communicates with authentication server 300 via network 6(2). Connected for communication. Also, the user terminal 100 and the multi-factor authentication server 200 can be communicably connected to the cloud service 4 via a network (not shown). Although there may be a plurality of user terminals 100, only one user terminal is shown in FIG.

The network 6(1) includes the Internet and various wireless communication systems constructed by wireless base stations (not shown). Examples of this wireless communication system include so-called 3G, 4G, 5G mobile communication networks, LTE (Long Term Evolution), and wireless networks (e.g., Wi-Fi (registered trademark)) that can be connected to the Internet through predetermined access points. etc.

Network 6(2) is a telecommunications carrier network managed by a telecommunications carrier. Authentication server 300 is a server on the communication carrier network side, and is configured to prevent intrusion from the outside. Note that the network 6(2), which is a communication carrier network, is not limited to one, and may be two or more. If there are two or more communication carrier networks, there may be a plurality of carrier networks connected to multi-factor authentication server 200 and authentication server 300 .

(User terminal 100)
The user terminal 100 is a terminal that receives input of elemental information from a user who uses the single sign-on service to the cloud service 4 of the present disclosure. The user terminal 100 is configured to be able to access the multi-factor authentication server 200 using a browser, for example. In this embodiment, as an example, an example in which the user terminal 100 is implemented as a smart phone will be described, but the user terminal 100 is not limited to a smart phone. The user terminal 100 only needs to have a SIM, and may be implemented as, for example, a PDA (Personal Digital Assistant), a tablet computer, a laptop computer (so-called notebook computer), or the like.

The user terminal 100 can access multiple cloud services 4 when authenticated by the multi-factor authentication server 200 . The cloud service 4 includes, for example, an e-mail service and a schedule management service that operate on a web browser.

The user terminal 100 also holds a SIM card that stores various information that can be used when authenticating the user terminal 100 . In the present disclosure, this various information includes a common encryption key that is possessed information unique to the user terminal 100 . The common encryption key is an encryption key shared between the user terminal 100 permitted to be authenticated and the authentication server 300 . If one user concludes multiple contracts, a different shared encryption key is shared with the authentication server 300 for each contract. Also, when there are a plurality of user terminals 100 , a common encryption key different for each user terminal 100 is shared with the authentication server 300 .

For example, the common encryption key is a CK (Cipher Key) and an IK calculated by AKA authentication (Authentication and Key Agreement) exchanged between the SIM card of the user terminal 100 and the communication carrier network (authentication server 300). (Integrity Key). This common encryption key is not assigned to the user terminal 100 when the user terminal 100 is manufactured and shipped, and cannot be changed or updated by the user's operation of the user terminal 100 . CK stands for decryption key and IK for integrity key. When authentication by AKA authentication is performed, the user terminal 100 for which authentication is permitted is registered in the authentication server 300 . The common encryption key may be CK and IK calculated by AKA' authentication.

(Multi-factor authentication server 200)
The multi-factor authentication server 200 operates as a cloud-type server device and is a device operated by a so-called IDaaS service provider. The multi-factor authentication server 200 implements single sign-on based on the request received from the user terminal 100. FIG. IDaaS service providers include telecommunications carriers and the like.

The multi-factor authentication server 200 stores a user ID for identifying a user who uses the single sign-on service to the cloud service 4 and element information possessed only by the user with that user ID, such as a password corresponding to the user ID. Registered combination. After acquiring the user ID and element information from the user terminal 100, the multi-factor authentication server 200 determines whether the combination of the acquired user ID and element information is correct. Furthermore, the multi-factor authentication server 200 uses the common encryption key (encryption key 1) held by the authentication server 300 and the common encryption key (encryption key 2) as possession information held by the user terminal 100 to authenticate the user terminal. Authenticate 100.

When the common encryption key is CK calculated by AKA authentication and IK, the multi-factor authentication server 200 authenticates the user by combining CK/IK as user's possession information and element information such as a password.

(Authentication server 300)
The authentication server 300 is operated by a telecommunications carrier and shares a common encryption key with the user terminal 100 . For example, the authentication server 300 performs AKA authentication with the user terminal 100 , registers the user terminal 100 for which authentication is permitted, and shares a common encryption key with the user terminal 100 . The authentication server 300 may function as a RADIUS (Remote Authentication Dial In User Service) server.

FIG. 2 is a hardware configuration diagram of the user terminal 100 according to one embodiment of the present disclosure, and FIG. 3 is a hardware configuration diagram of the multi-factor authentication server 200 according to one embodiment of the present disclosure.

(User terminal 100)
User terminal 100, as shown in FIG. can be done. These components of user terminal 100 are electrically connected to each other by bus 114 . User terminal 100 may include a display (not shown). The hardware configuration of the user terminal 100 may be configured to include one or more of each device shown in the figure, or may be configured without some of the devices.

The SIM (subscriber identity module) 112 is a chip that records various information that can be used when authenticating the user terminal 100 as described above. The SIM 112 may be a card (so-called SIM card) that needs to be replaced in order to change the communication service, or an eSIM (embedded SIM) that can change the communication service online.

(Multi-factor authentication server 200)
Multi-factor authentication server 200 can be implemented as a computer device comprising processor 202, memory 204, storage 206, and communication interface (IF) 208, as shown in FIG. These components of multi-factor authentication server 200 are electrically connected to each other by bus 214 . The hardware configuration of the multi-factor authentication server 200 may be configured to include one or more of each device shown in the figure, or may be configured without some of the devices.

(Authentication server 300)
The authentication server 300 shown in FIG. 1 is configured in the same manner as the multi-factor authentication server 200, and illustration of the hardware configuration of the authentication server 300 is omitted here. Authentication server 300 may be implemented as a computing device comprising processor 302 , memory 304 , storage 306 and communication interface (IF) 308 . These components of authentication server 300 are electrically connected to each other by bus 314 .

Next, a hardware configuration common to the user terminal 100, the multi-factor authentication server 200, and the authentication server 300 will be described.

Processors 102, 202, 302 control the overall operation of user terminal 100, multi-factor authentication server 200, and authentication server 300, respectively. The processors 102, 202, 302 may include CPUs (Central Processing Units), MPUs (Micro Processing Units), and GPUs (Graphics Processing Units). The processors 102, 202, 302 respectively read programs from storages 106, 206, 306, which will be described later. The processors 102, 202, and 302 develop the read programs in memories 104, 204, and 304, respectively, which will be described later. Processors 102, 202, 302 execute the expanded program. As an example, processor 102 executes a series of instructions contained in a program developed in memory 104 based on a signal given to user terminal 100 or based on the establishment of a predetermined condition. Like the processor 102, the processors 202 and 302 also execute a series of instructions included in the program developed in memory.

Memories 104, 204, 304 are main storage devices. The memories 104, 204, and 304 are composed of storage devices such as ROM (Read Only Memory) and RAM (Random Access Memory). As an example, the memory 104 provides a work area for the processor 102 by temporarily storing programs and various data read by the processor 102 from a storage 106 described later. Similar to the memory 104, the memories 204 and 304 also temporarily store programs and various data read from the storages 206 and 306, thereby providing work areas to the processors. Memory 104, 204, 304 stores at least an operating system. The operating system is a computer program for controlling the overall operations of the user terminal 100, the multi-factor authentication server 200, and the authentication server 300.

Storages 106, 206, 306 are auxiliary storage devices. Storage 106, 206, 306 persistently holds programs and data. The storages 106, 206, and 306 are implemented as nonvolatile storage devices such as nonvolatile semiconductor memories, hard disk devices, and flash memories, for example. The storages 106, 206, and 306 store, for example, programs for realizing communication with other computers and terminals.

Communication IFs 108, 208, and 308 control transmission and reception of various data in user terminal 100, multi-factor authentication server 200, and authentication server 300, respectively. Communication IFs 108 and 208 control wireless communication using Internet communication via a wireless LAN, wireless WAN, and mobile phone network. Further, the communication IF 108 may control communication with the multi-factor authentication server 200 via IP (Internet Protocol) such as LAN (Local Area Network) and WAN. Communication IF 308 controls communication via a communication carrier network. Communication IF 308 is configured to transmit and receive data between multi-factor authentication server 200 and authentication server 300 according to a predetermined communication protocol.

An input/output interface (IF) 110 is an interface for the user terminal 100 to receive input of data and output data. The input/output IF 110 may input/output data via a USB (Universal Serial Bus) or the like. Input devices connected to the input/output IF 110 may include physical buttons, cameras, microphones, mice, keyboards, sticks, levers, touch panels, fingerprint reading sensors, vein sensors, and the like. Output devices connected to the input/output IF 110 may include displays, speakers, and the like.

FIG. 4 is a block diagram showing an example of functional configurations of the user terminal 100, the multi-factor authentication server 200, and the authentication server 300 included in the system 10 of FIG.

(User terminal 100)
The user terminal 100 has a function of receiving input of element information by a user, a function of acquiring a common encryption key, and a function of transmitting and receiving information to and from various servers. The user terminal 100 includes a control unit 130 and a storage unit 150 as main components. The control unit 130 executes a series of commands included in a program (not shown) stored in the storage unit 150 based on a signal given to the user terminal 100 or based on the establishment of a predetermined condition. to run. User terminal 100 functions as control unit 130 and storage unit 150 through cooperation of processor 102, memory 104, storage 106, communication IF 108 (FIG. 2), and the like.

The control unit 130 functions as an operation reception unit 131, an acquisition/transmission unit 132, and a progression unit 133 according to the description of the program. Control unit 130 can also function as other functional blocks (not shown) according to the nature of the application to be executed.

The operation accepting unit 131 accepts a user's operation input according to various application screens displayed on a display (not shown). The operation reception unit 131 receives input of a user ID and element information for single sign-on by the user. In the case of a password, the elemental information is input using physical buttons, a keyboard, a touch panel, or the like of the user terminal 100 . The element information is input by the fingerprint reading sensor of the user terminal 100 in the case of fingerprint information, input by the microphone of the user terminal 100 in the case of voiceprint information, and input by the camera of the user terminal 100 in the case of face information.

Acquisition/transmission unit 132 acquires a common encryption key on user terminal 100 side based on various data (eg, subscriber ID) received from multi-factor authentication server 200 and transmits it to multi-factor authentication server 200 .

A subscriber ID is an ID unique to a subscriber, and is used to connect to the network of a telecommunications carrier. The subscriber ID is, for example, IMSI (International Mobile Subscriber Identity). The IMSI is used for authentication to connect to the telecommunications carrier's network. The first three digits of the IMSI are the country code (MCC), "440" for Japan, the next two to three digits are the carrier number (MNC), and the remaining 10 digits are the subscriber identification code (MSIN). The subscriber ID may be MSISDN (Mobile Subscriber Integrated Service Digital Network Number) or ICCID (Integrated Circuit Card ID). At least one subscriber ID is associated with one user ID.

The progress unit 133 controls the overall operation of the user terminal 100 . When the user terminal 100 is authenticated by the authentication server 300 (for example, AKA authentication), the progress unit 133 stores a common encryption key shared with the authentication server 300 in the storage unit 150 in advance. Further, when the multi-factor authentication server 200 permits single sign-on authentication to the cloud service 4 ( FIG. 1 ), the progress unit 133 enables communication with various cloud services 4 .

(Multi-factor authentication server 200)
The multi-factor authentication server 200 has a function of determining whether the combination of the element information received from the user terminal 100 and the user ID for single sign-on of the user is correct, the common encryption key received from the user terminal 100, It also has a function of collating with the common encryption key received from the authentication server 300 . Element information received from the user terminal 100 includes at least one of knowledge information such as a password, biometric information such as a user's fingerprint, vein information, voiceprint, and face.

The multi-factor authentication server 200 includes a control unit 230 and a storage unit 250 as main components. Control unit 230 executes a series of steps included in a program (not shown) stored in storage unit 250 based on a signal given to multi-factor authentication server 200 or based on the establishment of a predetermined condition. execute the instructions of Multi-factor authentication server 200 functions as control unit 230 and storage unit 250 through cooperation of processor 202, memory 204, storage 206, communication IF 208, input/output IF 210, and the like.

The control unit 230 functions as a determining unit 231, a requesting unit 232, a linking unit 233, and a matching unit 235 according to program descriptions. Control unit 430 can also function as other functional blocks (not shown) according to the nature of the application to be executed.

The determination unit 231 determines whether the combination of the element information acquired from the user terminal 100 and the user ID is correct. Also, the determination unit 231 extracts from the user management file 251 the subscriber ID corresponding to the user ID obtained from the user terminal 100 . Details of the user management file 251 will be described later.

The request unit 232 requests the common encryption key from the user terminal 100 or the authentication server 300 based on the extracted subscriber ID. The request unit 232 also acquires various types of information such as the common encryption key acquired from the user terminal 100 or the authentication server 300 and stores the information in the storage unit 250 .

The linking unit 233 acquires the common encryption key held by the authentication server 300 and associates it with the subscriber ID. Alternatively, the linking unit 233 acquires the common encryption key held by the user terminal 100 and associates it with the subscriber ID.

The collation unit 234 collates the common encryption key held by the user terminal 100 and the common encryption key held by the authentication server 300, and if the two are the same, notifies the user terminal 100 that authentication has been completed. Send to terminal 100 .

(Authentication server 300)
Authentication server 300 has a function of transmitting a common encryption key held by authentication server 300 to multi-factor authentication server 200 in response to a request from multi-factor authentication server 200 . The authentication server 300 shares a common encryption key in advance with the user terminal 100 authenticated by AKA authentication or the like.

The authentication server 300 includes a control unit 330 and a storage unit 350 as main components. Control unit 330 executes a series of commands contained in a program (not shown) stored in storage unit 350 based on a signal given to authentication server 300 or based on the establishment of a predetermined condition. to run. Authentication server 300 functions as control unit 330 and storage unit 350 through cooperation of processor 302, memory 304, storage 306, communication IF 308, and the like.

The control unit 330 functions as an acquisition/transmission unit 331 according to the description of the program. Control unit 330 can also function as other functional blocks (not shown) according to the nature of the application to be executed.

In response to a request for a common encryption key from the multi-factor authentication server 200, the obtaining/sending unit 331 retrieves the authentication server 300 corresponding to the subscriber ID from the common encryption key file 351 stored in the storage unit 350 of the authentication server 300. , and transmits it to the multi-factor authentication server 200 . Details of the common encryption key file 351 will be described later.

(Data stored in the storage unit of each device)
4 shows an example of data files stored in the storage units of the user terminal 100, the multi-factor authentication server 200, and the authentication server 300. As shown in FIG.

(storage unit 150)
The storage unit 150 stores an encryption key acquisition application program 151 (hereinafter referred to as "encryption key acquisition application") for acquiring a common encryption key, and a subscriber file 152 stored in the SIM 112 of the user terminal. FIG. 7 is an example of the data structure of the subscriber file 152. As shown in FIG. Subscriber file 152 includes user IDs for single sign-on account identification and associated user information. User information includes at least a subscriber ID and a common encryption key. User information may include user management information (user name, address, phone number, etc.). Subscriber file 152 may store authentication algorithms such as AKA authentication. The subscriber file 152 includes the common encryption key shared with the authentication server 300 after the encryption key acquisition application 151 acquires the common encryption key.

A user ID is an ID that identifies a single sign-on account for each user by the multi-factor authentication server 200 . A user ID is assigned by a service provider that provides single sign-on.

A subscriber ID is a unique ID for each subscriber (SIM card) and is used to connect to the network of a communication carrier. When one user concludes a plurality of contracts, a separate subscriber ID is assigned to each contract by the communication carrier.

The encryption key acquisition application 151 is activated in response to a push notification from the multi-factor authentication server 200 or input of a user ID by the user. The encryption key acquisition application 151 can be configured not to provide an interface for accepting direct input from the user.

(storage unit 250)
The storage unit 250 stores a user management file 251. FIG. FIG. 8 is an example of the data structure of the user management file 251. As shown in FIG. The user management file 251 is managed by the IDaaS service provider, and stores user IDs for single sign-on, element information such as associated user passwords, and subscriber IDs. As illustrated, the element information is not limited to the password, and may be the user's voiceprint information, fingerprint information, or the like. The multi-factor authentication server 200 uses the user management file 251 to link the user ID that identifies the single sign-on account used by the user and the subscriber ID. In the example of FIG. 8, one piece of element information is associated with one user ID, but a plurality of pieces of element information may be associated.

(storage unit 350)
Storage unit 350 stores common encryption key file 351 . FIG. 9 shows an example of the data structure of the common encryption key file 351. As shown in FIG. The common cryptographic key file 351 is managed by the communication carrier and stores subscriber IDs of user terminals whose authentication is permitted and unique common cryptographic keys corresponding to the subscriber IDs.

(First embodiment)
FIG. 5 illustrates an example of processing performed in system 10 according to one embodiment of the present disclosure. Prior to the process, it is assumed that the user terminal 100 has been authenticated by the authentication server 300 (for example, AKA authentication) between the user terminal 100 and the authentication server 300, and the user terminal 100 has been registered with the authentication server 300. . It is also assumed that the user terminal 100 and the authentication server 300 share a common encryption key (for example, CK/IK).

In step S502, the user terminal 100 (operation reception unit 131) receives input of the user's ID and the user's element information. Elemental information of the user includes a password and biometric authentication information of the user. The user terminal 100 (operation reception unit 131 ) transmits the input user ID and user element information to the multi-factor authentication server 200 . User element information is not limited to a password, and may be biometric information such as a user's fingerprint, face, or voiceprint.

In step S504, the multi-factor authentication server 200 (determination unit 231) acquires the element information and the user ID, refers to the user management file 251 registered in advance in the storage unit 250, and determines whether the combination of these is correct. judge. If the combination is correct, refer to the user management file 251 and acquire the subscriber ID corresponding to the acquired user ID.

In step S506, the multi-factor authentication server 200 (request unit 232) inquires of the authentication server 300 about the common encryption key based on the subscriber ID acquired in step S504.

Next, in step S508, authentication server 300 (acquisition/sending unit 331) obtains the common encryption key (encryption key 1) corresponding to the acquired subscriber ID from common encryption key file 351 stored in storage unit 350. , and transmits it to the multi-factor authentication server 200 . Note that the authentication server 300 may encrypt the common encryption key using the HASH function or the like and transmit it to the multi-factor authentication server 200 .

Next, in step S510, the multi-factor authentication server 200 (associating unit 233) associates the subscriber ID obtained in step S504 with the common encryption key (encryption key 1) obtained from the authentication server 300, 250. When the common encryption key is encrypted, the multi-factor authentication server 200 (associating unit 233) associates the subscriber ID and the common encryption key after decrypting the common encryption key. In addition, the multi-factor authentication server 200 (associating unit 233) sends a push notification requesting the common encryption key to the user terminal 100 corresponding to the subscriber ID associated with the common encryption key of the authentication server 300. FIG.

Next, in step S<b>512 , upon receiving the push notification from the multi-factor authentication server 200 , the user terminal 100 (acquisition/transmission unit 132 ) activates the encryption key acquisition application 151 stored in the storage unit 150 . When the encryption key acquisition application 151 is executed, it acquires the common encryption key (encryption key 2) stored in advance in the subscriber file 152 of the storage unit 150 of the user terminal 100, and sends it to the multi-factor authentication server 200 together with the subscriber ID. Send to Note that the user terminal 100 may encrypt the common encryption key using the HASH function or the like and transmit it to the multi-factor authentication server 200 .

In the present disclosure, push notifications from the multi-factor authentication server 200 may not be displayed on the display of the user terminal 100. Even if the user does not operate the user terminal 100 to acquire the common encryption key, the user terminal 100 (encryption key acquisition application 151) acquires the common encryption key of the user terminal 100, and acquires the acquired common encryption key (encryption key 2). ) to the multi-factor authentication server 200 . Since the user terminal 100 automatically transmits the common encryption key, the user is conscious of receiving a request for the encryption key, activating the encryption key acquisition application 151, and transmitting the common encryption key. You don't have to.

Next, in step S514, multi-factor authentication server 200 (verification unit 234) converts the common encryption key (encryption key 2) received from the user terminal and the common encryption key (encryption key 1) received from authentication server 300 to match. When the common encryption key (encryption key 2) from the user terminal 100 is encrypted, the multi-factor authentication server 200 (linking unit 233) decrypts this common encryption key (encryption key 2), and then performs authentication. It is collated with the common encryption key (encryption key 1) from the server 300 . If both match, it is determined that the connected user terminal 100 is correct, and the multi-factor authentication server 200 sends a notification that both match to the user terminal 100 .

According to the present disclosure, not only the user's elemental information but also the terminal itself used for this authentication is authenticated by possession information. In other words, authentication using the common encryption key, which is information possessed by the user terminal 100, and authentication using other element information are performed at the same time. This makes it possible to improve the safety of user authentication as compared to authentication of single element information.

Further, according to the present disclosure, a common encryption key (for example, CK/IK) as possessed information is automatically acquired from user terminal 100 and authentication server 300 without user operation, and multi-factor authentication server 200 Match or match. Therefore, by inputting only one piece of element information (knowledge information, biometric information), the user can perform two-factor authentication including possession information in addition to the input element information. As a result, the process for authentication can be simplified for the user. The user does not need to be aware of managing and updating the common encryption key.

Also, according to the present disclosure, CK/IK obtained by AKA authentication can be used for authentication of the user terminal 100 . Since this CK/IK is highly confidential and cannot be changed on the user terminal side, strong security can be established by using CK/IK for user authentication.

Next, in step S516, the user terminal 100 (progression unit 133) receives from the multi-factor authentication server 200 a notification that the common encryption key matches. Upon receiving the notification, the user terminal 100 can access various cloud services 4 as the user terminal 100 that has been authenticated by the multi-factor authentication server 200 .

Specifically, upon receiving a notification that the user terminal 100 has accessed the cloud service 4, the multi-factor authentication server 200 notifies the cloud service 4 that the user terminal 100 has been authenticated. As a result, the user can use the cloud service 4 without entering a different ID and password for each cloud service.

Alternatively, upon receiving a notification that the user terminal 100 has accessed the cloud service 4, the multi-factor authentication server 200 sends the ID of the cloud service 4 corresponding to the user ID and the password of the cloud service 4 instead of the user terminal 100. , and these may be input to the cloud service 4. In this case, the multi-factor authentication server 200 manages IDs and passwords of various cloud services 4 used by users in advance in cooperation with single sign-on user IDs used by users.

Note that the processing shown in FIG. 5 is merely exemplary, and the order thereof may be changed, and processing may be added.

(Second embodiment)
FIG. 6 shows an example of processing performed in the system according to the second embodiment of the present disclosure. 6 differs from FIG. 5 in that the common encryption key is obtained from the user terminal 100 before the authentication server 300 obtains the common encryption key. Hereinafter, the flow of processing in the system 10 according to the second embodiment of the present disclosure will be described using FIG. It is assumed that, prior to processing, authentication (for example, AKA authentication) has been performed between the user terminal 100 and the authentication server 300, and a common encryption key is shared between them. User terminals 100 whose authentication is permitted by the authentication server 300 are registered in the authentication server 300 .

Step S602 is the same processing as the above-mentioned step S502, and duplicate explanation is omitted. Further, in step S<b>602 , the user terminal 100 (operation accepting unit 131 ) activates the encryption key acquisition application 151 stored in the storage unit 150 upon accepting the user's input of the user ID and element information.

In step S604, the multi-factor authentication server 200 (determining unit 231) acquires the element information and the user ID, refers to the user management file 251 registered in advance in the storage unit 250, and confirms that the combination of the element information and the user ID is If it is determined to be correct, it transmits the determination result to the user terminal 100 .

In step S606, upon receiving the determination result that the combination of the element information and the user ID is correct, the encryption key acquisition application 151 obtains the common encryption key ( Obtain the encryption key 2). The user terminal 100 (acquisition/sending unit 132) acquires the subscriber ID corresponding to the user ID from the subscriber file 152, and sends the common encryption key (encryption key 2) acquired by the encryption key acquisition application 151 to the subscriber ID. to the multi-factor authentication server 200. Note that the user terminal 100 may encrypt the common encryption key using the HASH function or the like and transmit it to the multi-factor authentication server 200 .

Next, in step S608, the multi-factor authentication server 200 (linking unit 233) associates the subscriber ID obtained from the user terminal 100 in step S602 with the common encryption key (encryption key 2) obtained from the user terminal 100. , is stored in the storage unit 250 .

Next, in step S610, the multi-factor authentication server 200 (request unit 232) inquires of the authentication server 300 about the common encryption key based on the subscriber ID acquired in step S608.

Next, in step S612, authentication server 300 (acquisition/sending unit 331) obtains the common encryption key (encryption key 1) corresponding to the acquired subscriber ID from common encryption key file 351 stored in storage unit 350. , and transmits it to the multi-factor authentication server 200 . Note that the authentication server 300 may encrypt the common encryption key using the HASH function or the like and transmit it to the multi-factor authentication server 200 .

Next, in step S614, multi-factor authentication server 200 (verification unit 234) converts the common encryption key (encryption key 2) received from the user terminal and the common encryption key (encryption key 1) received from authentication server 300 to match. If both match, it is determined that the connected user terminal 100 is correct, and the multi-factor authentication server 200 sends a notification that both match to the user terminal 100 .

Next, in step S616, when the user terminal 100 (progression unit 133) receives the notification that the common encryption key matches from the multi-factor authentication server 200, the user terminal 100 is authenticated by the multi-factor authentication server 200, and various cloud services are performed. 4 can be accessed.

Further, in another embodiment of the present disclosure, when logging into a service for single sign-on, a combination of a user ID and element information such as a fingerprint is generated on the user terminal 100 side, not on the multi-factor authentication server 200 side. You can judge whether it is correct. The user terminal 100 stores in advance in the subscriber file 152 a user ID and a correct combination of elemental information such as a fingerprint. The user terminal 100 (operation reception unit 131) receives input of a user ID and element information, determines whether the combination of the user ID and the element information is correct, and sends the user ID determined as the correct combination to the multi-factor authentication server. 200. Next, the multi-factor authentication server 200 acquires the subscriber ID corresponding to the user ID from the user management file 251 registered in the storage unit 250 in advance. The multi-factor authentication server 200 side does not judge whether or not the combination of the element information and the user ID is correct. The subsequent steps are the same as those up to step S516 following step S506 in FIG.

While embodiments of the disclosure have been described, it should be understood that they are exemplary only and do not limit the scope of the disclosure. It should be understood that modifications, additions, improvements, etc., can be made to the embodiments from time to time without departing from the spirit and scope of this disclosure. The scope of the present disclosure should not be limited by any of the above-described embodiments, but should be defined only by the claims and their equivalents.

4... Cloud service 6... Network 10... System 100... User terminal 200... Multi-factor authentication server 300... Authentication server

Claims (12)

A method executed at a user terminal, comprising:
obtaining a user ID and user element information for single sign-on to a plurality of cloud services, and sending the information to a first authentication server;
When the first authentication server determines that the combination of the user ID and the user element information is correct, the first common encryption key of the user terminal uniquely assigned to the user terminal is sending to the first authentication server together with a subscriber ID,
A first common encryption key of the user terminal and a second common encryption key of a second authentication server that authenticates the user terminal, the second common encryption being associated with the subscriber ID initiating communication with the plurality of cloud services upon receipt of a key match notification from the first authentication server;
A method, including Before the step of transmitting the user ID and the user element information to the first authentication server, the user terminal performs AKA authentication with the second authentication server, and the user terminal and the first authentication server perform AKA authentication. and sharing a common encryption key with two authentication servers. 3. A method according to claim 1 or 2, wherein said first common cryptographic key is held in the SIM of said user terminal. The first common encryption key and the second common encryption key according to any one of claims 1 to 3, wherein the CK (Cipher Key) and the IK (Integrity Key) generated by AKA authentication. the method of. 5. The method according to any one of claims 1 to 4, wherein said first common encryption key is encrypted and sent to said first authentication server. 6. A method according to any preceding claim, wherein said user element information comprises at least one of said user's knowledge information and said user's biometric information. 7. The method according to any one of claims 1 to 6, wherein said second authentication server is a server provided by a telecommunications carrier operator. wherein said first authentication server and said user terminal are connected to each other via the Internet, and said first authentication server and said second authentication server are connected to each other via a communication carrier network; Item 8. The method according to any one of Items 1 to 7. A method performed in an apparatus comprising:
obtaining a user ID and user element information for single sign-on to a plurality of cloud services from a user terminal;
When determining that the combination of the user ID and the user element information is correct,
obtaining a first common cryptographic key from an authentication server based on a subscriber ID associated with said user ID, said authentication server authenticating said user terminal; and obtaining
obtaining from the user terminal a second common encryption key associated with the subscriber ID;
and, if the first common encryption key from the authentication server and the second common encryption key from the user terminal match, notifying the user terminal of the match. 10. The method of claim 9, further comprising obtaining the subscriber ID associated with the user ID. 10. The method according to claim 9, wherein said second common encryption key is obtained by executing an application program for obtaining a common encryption key stored in said user terminal. a device,
at least one processor;
obtaining a user ID and user element information for single sign-on to multiple cloud services from a user terminal. When,
When the combination of the user ID and the user element information is correct,
obtaining a first common cryptographic key from an authentication server based on a subscriber ID associated with said user ID, said authentication server authenticating said user terminal; and obtaining
obtaining from the user terminal a second common encryption key associated with the subscriber ID;
a step of notifying the user terminal of the match when the first common encryption key from the authentication server and the second common encryption key from the user terminal match; A device comprising a memory.

Images