KR20020056372A - Security authentication system using mobile phone - Google Patents

Abstract

PURPOSE: A security certification system is provided to use a Bluetooth method and a mobile terminal without an extra ID(Identification) card. CONSTITUTION: A security certification system roughly comprises a security certification apparatus(102) and a mobile terminal(104). The security certification apparatus(102) further includes a security data base(106) internally outputting a pin code(PIN) and a device address(BD_ADDR) of the mobile terminal(104) by receiving a random number(AU_RAND) made of 128bits generated from the mobile terminal(104), an initial key generation part(108) supplying an initial key formed by the pin code(PIN) and the random number(AU_RAND) to a certification code generation part(110), and the certification code generation part(110) generating encoded certification code(SRES'). The mobile terminal(104) further includes another initial key generation part(108), and another certification code generation part(114) decide a certification by comparing the encoded certification code(SRES') with self-generated certification code(SRES).

Description

Security authentication system using mobile phone

The present invention relates to a mobile communication terminal, and more particularly, to a security authentication system using a mobile communication terminal.

The security authentication system is a device for restricting access to a specific area to maintain security or restricting access to the system to only authorized persons for protecting the system. A representative example is opening and closing of a door in a specific area. The device is configured to open a door by checking a unique authentication code assigned to a user.

Conventionally, smart cards are used to implement a security authentication system. The smart card has a chip internally. This chip contains information about the user and proves that he is an authorized person to pass through the security system. After the card is recognized by the security system to confirm that the user is an authenticated user, the user can enter or use a specific area.

In the conventional security authentication system using such a smart card, a user must carry a separate ID card having a smart card function. Therefore, be careful not to forget this ID card, and there is a high risk of loss.

In order to solve this problem, a security authentication system using infrared communication can be considered. The method using this infrared communication has many problems as follows.

A disadvantage of the infrared communication method is that it can be used only within a limited range first, and can generally be used only within a radius of 1 to 2 m. Secondly, it is sensitive to direction and requires a direct line of sight. Therefore, it should be used very close to the security authentication system. In addition, the infrared communication method has a fatal disadvantage that can be used only in two devices in principle.

Security authentication system using a Bluetooth wireless communication technology and a mobile communication terminal according to the present invention, by using a communication method using a Bluetooth (bluetooth) technology, using the mobile communication terminal as a communication means security authentication system without a separate ID card The goal is to enable implementation of.

Security authentication system using a Bluetooth wireless communication technology and a mobile communication terminal according to the present invention for this purpose comprises a security authentication device and a mobile communication terminal.

The security authentication device generates a first initial key using an irregular number and a pin code received from the mobile communication terminal, and generates an encrypted first authentication code using the device address, the first initial key and the irregular number of the mobile communication terminal. It generates and transmits wirelessly.

The mobile communication terminal receives the first authentication code, generates a second initial key using the irregular number, the device address, and the pin code, and performs the security authentication device using the second initial key, the random number, and the device address. A second authentication code is generated by performing the same operation as that of the same process, and the first authentication code and the second authentication code are compared with each other to indicate that they are authenticated.

In addition, the security authentication method using a mobile communication terminal according to the present invention comprises the following steps.

The security authentication device receives the irregular number transmitted from the mobile communication terminal and outputs a unique pin code and device address assigned to the mobile communication terminal. The secure authentication device generates the first initial key using the pin code and the device address and random number. The security authentication device generates the first authentication code using the device address, the initial key, and the random number. The mobile terminal generates a second initial key using the pin code, the device address and the random number. The mobile communication terminal generates a second authentication code using the second initial key, the device address and the random number. When the mobile communication terminal compares the first authentication code and the second authentication code, it indicates that the mobile communication terminal is authenticated.

1 is a block diagram showing the configuration of a security authentication system using a Bluetooth wireless communication technology and a mobile communication terminal according to the present invention.

2 is a flowchart illustrating the operation of a security authentication system using a Bluetooth wireless communication technology and a mobile communication terminal according to the present invention.

Explanation of symbols on the main parts of the drawings

102: security authentication device

104: mobile communication terminal

106: security database

108, 112: initial key generation unit

110, 114: authentication code generation unit

PIN: pin code

BD_ADDR: device address

AU_RAND: irregular number

Kinit: initial key

SRES: Verification Code

With the rapid spread of mobile phones around the world over the years, mobile computing, which uses e-mail to send and receive e-mails, is also being actively carried out. In most cases, cables are used to connect notebook PCs and mobile phones. Doing.

In general, the air interface technology is divided into IrDA and Bluetooth, but Bluetooth is in a much better position for now. Bluetooth is an open standard that can transmit and receive data at high speed by using radio frequency without physical cable for communication of various electromagnetic periods. When Bluetooth becomes commercially available, data communication between devices is wireless, and devices with Bluetooth function do not need cable connection.

Bluetooth technology is based on a 9x9mm microchip, based on a low-cost, short-range wireless link that makes it easy to implement secure ad hoc connectivity for stationary and mobile environments. In addition to relieving the positional limitations of each device by replacing cables, Bluetooth wireless technology allows the formation of small private ad hoc groups of connected devices away from existing data networks, peripheral interfaces, and fixed networks.

To design to operate in a noisy radio frequency environment, Bluetooth radios have enhanced the link using fast authentication and frequency hopping (FH). Bluetooth's wireless module avoids interference from other signals by hopping to new frequencies after sending or receiving packets. Compared to other systems operating in the same frequency band, Bluetooth wireless is more powerful than other systems. Short packages and fast hopping can minimize the effects from noise. In addition, the use of forward error correction (FEC) also minimizes the effects of irregular noise on long-range links. Bluetooth's radio frequency band operates in the 2.4GHz ISM band that does not require a license. Frequency hopping transceivers are used to overcome interference and fading. To minimize the complexity of the hopping transceivers, a binary frequency modulation scheme is employed. Time-division duplexing is used to implement full-duplex delivery.

Bluetooth's baseband protocol is a hybrid of circuit and packet switching. Slots are reserved for synchronization packets. Each packet is delivered at a different hopping frequency. Packets usually cover one slot, but can be expanded to cover up to five slots. Bluetooth can support a single asynchronous data channel, up to three voice channels simultaneously, and can support asynchronous data and synchronous voice simultaneously. Each voice channel supports 64 Kbps synchronous link. Asynchronous channels can support asymmetric links that allow up to 721 Kbps in one direction and 56.7 Kbps in the reverse direction, or can support symmetric links of 432.6 Kbps.

A preferred embodiment of the security authentication system according to the present invention using the Bluetooth technology and the mobile communication terminal will be described with reference to FIGS. 1 and 2 as follows. 1 is a block diagram showing the configuration of a security authentication system using a Bluetooth wireless communication technology and a mobile communication terminal according to the present invention.

As shown in FIG. 1, the security authentication system using the Bluetooth wireless communication technology and the mobile communication terminal according to the present invention includes a security authentication device 102 and a mobile communication terminal 104. First, the security authentication device 102 is composed of a security database 106, the initial key generation unit 108, the authentication code generation unit 110.

When a 128-bit random number (AU_RAND) is generated in the mobile communication terminal 104 and wirelessly transmitted to the security authentication device 102, the security database 106 receives it and pins of the mobile communication terminal 104. The code PIN and the device address BD_ADDR are internally output.

The initial key generation unit 108 uses an initial key Kinit 'using a pin code PIN output from the security database 106 and an irregular number AU_RAND transmitted from the mobile communication terminal 104. To generate and output to the authentication code generation unit (110). The PIN code PIN is a kind of password required for communication between the security authentication device 102 and the mobile communication terminal 104, and is composed of up to 16 alphanumeric characters (UTF-8). This pin code PIN has the same in both the security authentication device 102 and the mobile communication terminal 104. The registration of the PIN code PIN may be directly input by the security manager to both the security authentication device 102 and the mobile communication terminal 104, or a unique one registered by the manufacturer of the mobile communication terminal 104 may be used. If the PIN code PIN of the mobile communication terminal is not registered in the security authentication device 102, the security authentication device 102 requests the user of the mobile communication terminal 104 to input a pin code PIN.

The authentication code generator 110 encrypts the authentication using the device address BD_ADDR, the initial key Kinit ', and the random number AU_RAND transmitted from the mobile communication terminal 104 output from the security database 106. A code SRES 'is generated and wirelessly transmitted to the mobile communication terminal.

The mobile communication terminal 104 uses the random number AU_RAND initially transmitted to the security authentication device 102 and its own device address BD_ADDR to go through the same operation as that performed in the security authentication device 102. Generate an authentication code (SRES). The mobile communication terminal 104 compares the authentication code SRES generated by itself and the authentication code SRES 'transmitted from the security authentication device 102 to determine whether the authentication is possible. If (SRES ') (SRES) is the same as each other, it is a case of authentication from the security authentication device 102, on the contrary, if the two authentication codes (SRES') (SRES) are different from each other, it is a case of not being authenticated from the security authentication device (102). .

The operation of the security authentication system using the mobile communication terminal according to the present invention will be described with reference to FIG. 2 is a flowchart illustrating the operation of a security authentication system using a Bluetooth wireless communication technology and a mobile communication terminal according to the present invention.

As shown in FIG. 2, the security authentication device 102 first receives an irregular number (AU_RAND) transmitted from the mobile communication terminal 104 (202), and assigns a unique pin code assigned to the mobile communication terminal 102 ( The PIN and the device address BD_ADDR are output (204). The security authentication device 102 generates a first initial key Kinit 'using the pin code PIN, the device address BD_ADDR, and the irregular number AU_RAND (206). The security authentication device 102 generates a first authentication code SRES 'using the device address BD_ADDR, the first initial key Kinit', and the irregular number AU_RAND (208). The mobile communication terminal 104 generates a second initial key Kinit using the pin code PIN, the device address BD_ADDR, and the irregular number AU_RAND (210). The mobile communication terminal 102 generates the second authentication code SRES using the second initial key Kinit, the device address BD_ADDR, and the irregular number AU_RAND (212). When the mobile communication terminal 102 compares the first authentication code SRES 'and the second authentication code SRES, the mobile communication terminal 102 indicates that the mobile communication terminal 102 is authenticated (216).

As described above, in order to perform the two-way communication between the security authentication device 102 and the mobile communication terminal 104, the device address BD_ADDR of the counterpart is acquired and an authentication process using a pin code PIN is required. For this reason, even when a large number of users are located in the vicinity of the security authentication apparatus 102, communication by a terminal owned by another person does not occur. Upon authentication from the security authentication device 102, the security device is released so that a user can freely enter or use a specific system.

Security authentication system using a Bluetooth wireless communication technology and a mobile communication terminal according to the present invention, by using a communication method using a Bluetooth (bluetooth) technology, by using a mobile communication terminal as a communication means of the security authentication system without a separate ID card This has the effect of enabling implementation.

Claims (4)

Generate a first initial key using an irregular number and a pin code received from the mobile communication terminal, and generate a first authentication code encrypted using the device address of the mobile communication terminal, the first initial key and the random number. A security authentication device that transmits wirelessly; Receiving the first authentication code, generating a second initial key using the irregular number and the device address and the pin code, and using the second initial key, the random number and the device address to authenticate the security A mobile communication terminal including a mobile communication terminal for generating a second authentication code by performing the same operation as that performed in the device, and comparing the first authentication code with the second authentication code to indicate that the authentication is successful. Security authentication system using. The method of claim 1, wherein the security authentication device, A security database for outputting a unique pin code and device address assigned to the mobile communication terminal; A first initial key generation unit generating the first initial key using the pin code, the device address, and the irregular number; And a first authentication code generation unit generating the first authentication code by using the device address, the initial key, and the irregular number. The method of claim 1, wherein the mobile communication terminal, A second initial key generator configured to generate the second initial key using the pin code, the device address, and the irregular number; And a second authentication code generation unit generating the second authentication code by using the second initial key, the device address, and the irregular number. Receiving, by the security authentication apparatus, an irregular number transmitted from the mobile communication terminal and outputting a unique pin code and device address assigned to the mobile communication terminal; Generating, by the security authentication device, a first initial key using the pin code, the device address, and the irregular number; Generating, by the security authentication apparatus, a first authentication code using the device address, the initial key, and the irregular number; Generating, by the mobile communication terminal, a second initial key using the pin code, the device address, and the irregular number; Generating, by the mobile communication terminal, a second authentication code using the second initial key, the device address and the irregular number; And comparing the first authentication code with the second authentication code and indicating that the mobile communication terminal is authenticated if they are identical to each other.