WO2022060156A1

WO2022060156A1 - Method, apparatus, and program for updating firmware of authenticator

Info

Publication number: WO2022060156A1
Application number: PCT/KR2021/012778
Authority: WO
Inventors: 상근 오스티븐; 이진서
Original assignee: 상근 오스티븐; 이진서
Priority date: 2020-09-18
Filing date: 2021-09-17
Publication date: 2022-03-24
Also published as: KR102288444B1

Abstract

A method for updating firmware of an authenticator used for biometric authentication comprises: a firmware update request step for performing, by the authenticator, a firmware update request on a maker server, together with biometric information authentication using a biometric sensor; a security connection step for, when a firmware update is required, achieving a security connection state as the authenticator and the maker server are initially authenticated; a key transmission step for transmitting a new key generated by the authenticator to the maker server; a patch transmission step for transmitting a firmware update patch encoded by the new key from the maker server to the authenticator; and a firmware update step for, by the authenticator, decoding the firmware update patch with the new key and installing same.

Description

Firmware update method, device and program of authentication module

The present invention relates to a firmware update method, apparatus and program for an authentication module, and more particularly, for an authentication module used for biometric authentication, for reasons such as backdoor concerns and confusion due to deviation from standard specifications, etc., are prohibited in the FIDO specification. It relates to a firmware update method, an apparatus and a program for an authentication module that allow firmware updates to be performed under strict security confirmation and maintenance while maintaining FIDO core specifications as they are.

In general, a FIDO authentication module (Authenticator; hereinafter referred to as an 'authentication module') is known. This is a device used for authenticating that the current user of the authentication module is an originally registered user according to the confirmation of the biometric information without leakage of the biometric information. As biometric information, types such as fingerprints, glottis, iris, face, blood vessels, and brain waves are not discriminated against. The authentication module has advantages of being easy to use because phishing is impossible, it is inexpensive, it is portable, it is reliable, it does not require a battery, and it does not require typing.

In general, the authentication module is ready for use through the registration process, and is later used for personal authentication in the biometric authentication process as its original purpose.

In the registration process, as shown in FIG. 4, the original biometric information is stored in the memory ( 12), generate a key pair of a private key and a public key for this biometric information, store the private key inside, and the public key for the client 22 installed in the OS 21 of the information device 20 The preparation is completed by transmitting to the authentication server 40 through the

And, in the later biometric authentication process, instantaneous biometric information is input to the authentication module 10 in any biometric authentication process such as login, banking, shopping, etc., and it is compared with the stored original biometric information, and if the result matches The biometric matching signal based on the private key is sent to the authentication server 40 through communication means such as the browser 23, and the authentication server 40 confirms this biometric signal by the corresponding public key, the biometric authentication process It has a configuration to send an authentication confirmation signal to

On the other hand, firmware update of the authentication module 10 is strictly prohibited according to the FIDO policy. Therefore, even if a maker server (not shown) exists, it is not used to update the firmware of the authentication module 10 even if it is used for updating the client 22 .

In the following patent documents, 'as a lock system of a device using FIDO authentication, an input terminal into which a biometric FIDO authentication device registered in a relaying party on the cloud is inserted, and the biometric FIDO authentication device is connected to the input terminal When the biometric information of a user registered in the re-laying party is input to the biometric FIDO authentication device, an authentication message is received from the biometric FIDO authentication device to challenge the FIDO authentication to the re-laying party, and an authentication response is provided. Disclosed is a 'lock system using FIDO authentication, comprising an agent that generates a lock release signal when received, and an operation control unit that releases the lock so that the device can be operated when the lock release signal is received. .

[Prior art literature]

[Patent Literature]

(Patent Document 1) Patent Publication No. 10-2020-0067657

In the technology of the patent document, when biometric information is input to the biometric authentication FIDO authentication device (authentication module) inserted into the input terminal and confirmed as the person, the configuration is disclosed in which the relaying party (authentication server) makes an authentication response, there is.

However, in various cases, such as overseas consignment production of authentication modules, there is a possibility that a backdoor is secretly installed in the firmware, so the integrity is poor, and the firmware is not the latest version or has bugs due to a short development time. Nevertheless, in FIDO, individual users are not allowed to update firmware for security reasons. Therefore, when a problem occurs in the firmware of the authentication module, conventionally, there is a problem of waste and inconvenience in that all of them must be disposed of or collected in a factory for treatment.

In addition, there may be cases in which it is necessary to update the firmware of the authentication module according to changes in the unavoidable user, such as a change in the FIDO specification or the death of an individual owner. At this time, there is a need for a method capable of safely and reliably updating firmware without causing a problem in the security concerned by the FIDO specification.

In addition, since the password information stored in the authentication module cannot be leaked out of the authentication module according to the FIDO specification, a backup authentication module must be retained for account recovery. However, as the backup authentication module requires additional cost and management effort, it is necessary to enable recovery (extended Restricted Operation Environment (ROE)) of the password information stored in the authentication module without causing any security problems.

In addition, in the case of biometric information-based authentication modules such as fingerprints, when an unintentional biometric information registration occurs, the owner of the authentication module has the right to know whether biometric information has been registered or whether biometric information has been tampered with. Therefore, it is necessary to monitor the consistency of the biometric information template.

The present invention is to solve the above problem, and when a firmware update request occurs, the firmware update patch of the maker server is applied to the authentication module by the new key of the authentication module after secure communication of the maker server's zero-knowledge initial registration method is secured and the key is exchanged. An object of the present invention is to provide a method, apparatus and program for updating firmware of an authentication module to be installed.

The method of the present invention for achieving the above object is a method for updating the firmware of an authentication module used for biometric authentication. Firmware update request step; And, when a firmware update is required, the authentication module and the maker server are initially authenticated, a secure connection step to establish a secure connection state; and a key delivery step in which the new key generated by the authentication module is transmitted to the maker server; and a patch delivery step in which the firmware update patch encrypted with the new key is delivered from the maker server to the authentication module; and a firmware update step of decrypting and installing the firmware update patch by the new key in the authentication module; It is characterized in that it is further included.

On the other hand, the device of the present invention for achieving the above object is a device that updates the firmware of an authentication module used for biometric authentication, and allows a firmware update request to be made to a maker server together with biometric information authentication using a biosensor, , when firmware update is required, initial authentication with the maker server to establish a secure connection state, generate a new key to be transmitted to the maker server, receive a firmware update patch encrypted with the new key from the maker server, and an authentication module for decrypting and installing the firmware update patch using a new key; And, a firmware update request is received from the authentication module together with biometric information authentication, and when firmware update is required, a secure connection state is established through initial authentication with the authentication module, a new key generated by the authentication module is transmitted, and the authentication is performed. a maker server that delivers the firmware update patch encrypted with the new key to the module; It is characterized in that it is included.

On the other hand, the authentication module of the present invention for achieving the above object, as an authentication module used for biometric authentication, a memory for storing biometric information, certificate and firmware; And, as a program stored in the memory, biometric information authentication is performed using a biosensor, and a firmware update request is made to the maker server. The authentication module is initially authenticated to establish a secure connection state, a new key is generated and transmitted to the maker server, a firmware update patch encrypted with the new key is delivered from the maker server, and the new key Decrypt and install the firmware update patch, register biometric information inside the authentication module, and apply biometric information template to the authentication server firmware that transmits and registers the authentication module to the authentication server; It is characterized in that it is included.

On the other hand, the program of the present invention for achieving the above object is a program for an information device recorded in a storage medium readable by an information device, in which a program for an information device for executing each step of the method described above in the information device is recorded. am.

According to the present invention, when a firmware update request occurs, the firmware update patch of the maker server is installed in the authentication module by the new key of the authentication module after secure communication and key exchange of the zero knowledge initial registration method of the maker server. A firmware update method, apparatus and program are provided.

1 is a block diagram of an apparatus in which a firmware update method of an authentication module according to an embodiment of the present invention is implemented.

2 is a flowchart of the same method.

3 is a time chart of the same method.

4 is a block diagram of an apparatus in which a conventional method for updating firmware of an authentication module is implemented.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings. However, for members having the same function due to the same configuration, even if the drawings are different, by maintaining the same reference numerals, the detailed description thereof may be omitted.

In addition, the relationship in which other members are disposed or connected to the front, rear, left, right, and upper and lower sides of a member includes a case in which a separate member is inserted in the middle. Conversely, when a member is said to be 'just before,', left, and right of another member, it means that there is no separate member in the middle. And, when a part 'includes' other components, this means that other components may be further included, rather than excluding other components, unless otherwise stated.

And, the reason that the names of the components are divided into the first, the second, etc. is to classify them in the same relationship as the components, and the order is not necessarily limited thereto. In addition, terms such as 'unit', 'means', 'unit', 'member', and 'module' described in the specification mean a unit of a comprehensive configuration that performs at least one function or operation. And information processing devices such as terminals and servers described in the specification basically mean hard wiring that means hardware in which specific functions or operations are implemented, but should not be construed to be limited to specific hardware, and should not be construed as being limited to specific hardware. This does not exclude soft wiring, which consists of software running to cause a specific function or operation to be implemented. That is, the terminal or server may be any device or software installed on any device, such as an app.

And since the size and thickness of each component shown in the drawings are arbitrarily indicated for convenience of explanation, the present invention is not necessarily limited to the bar shown in the drawings, and in order to clearly express various parts and regions such as layers and regions In some cases, the thickness and the like are exaggerated and enlarged or reduced.

The method of the present invention is a method of updating the firmware of the authentication module 10 used for biometric authentication. The firmware update may be performed to improve the performance of the authentication module 10 , to solve problems found in security, to restore or change a user's account, and the like. Firmware update is prohibited in the FIDO specification, so no implementation can be found at this time. The reason for this ban is to prevent confusion due to backdoor concerns and deviations from standard specifications. Therefore, the present invention discloses a configuration that enables the authentication module 10 to perform firmware update in a state of checking and maintaining strict security while maintaining the FIDO core specification so as not to violate the prohibition reason. For reference, the firmware update technology of the authentication module 10 according to the present invention can be applied to all types of authentication modules regardless of the initial registration method for onboarding during distribution.

The firmware update method of the present invention comprises: a firmware update request step (S30); With, secure connection step (S40); And, the key transfer step (S50); And, the patch delivery step (S60); And, the firmware update step (S70); It is characterized in that it is included.

The firmware update request step ( S30 ) is a step in which a firmware update request is made to the maker server 30 together with biometric information authentication using the biometric sensor 11 in the authentication module 10 .

The maker server 30 is a server operated by the manufacturer that manufactured the authentication module 10 . The maker server 30 is the subject of zero-knowledge initial registration (ZKIE) that verifies whether the authentication module 10 to be initially authenticated is the authentication module manufactured by it.

The authentication of the biometric information in the authentication module 10 is matched by comparing the original biometric information stored inside the authentication module 10 and the instantaneous biometric information newly input at the time of authentication for this firmware update request This refers to the process of sending a biometric signal when it is determined that it is. The firmware update request may be directly transmitted from the authentication module 10 to the maker server 30 or may be transmitted through the client 22 .

The client 22 is software installed in the OS 21 of the information device 20 , and serves as a user interface of the authentication module 10 and relays communication between the authentication module 10 and the maker server 30 . can play a role

However, firmware that functions as the client 22 may be mounted in the authentication module 10 . In this case, when the authentication module 10 is connected to the information device 20, it is configured to be connected to the maker server 30 using the Internet communication function of the information device 20, such as a browser 21. can

Alternatively, firmware performing the Internet communication function and the function of the browser 21 may be mounted in the authentication module 10 . In this case, regardless of whether the authentication module 10 is connected to the information device 20, the authentication module 10 may be configured to be directly connected to the maker server 30 using an Internet communication function. there is.

In the secure connection step (S40) , when firmware update is required, the authentication module 10 and the maker server 30 are initially authenticated to establish a secure connection state.

The initial authentication is a step in which the authentication module 10 is pre-authenticated with the maker server 30 without relying on a certificate. The initial authentication and secure connection can be made by a zero-knowledge initial registration (ZKIE) method, and the zero-knowledge initial registration method allows the authentication module 10 and the maker server 30 to authenticate each other without any prior knowledge. How to make a secure connection.

In the example of FIG. 3 , it is assumed that SRP (Secure Remote Password) is described. Here, when the client 22 installed in the information device 20 requests the authentication module 10 for initial registration of zero knowledge, The authentication module 10 generates a salt, a verifier, and a new key, and transmits them to the maker server 30 . Then, the maker server 30 stores the verifier, and while authenticating the authentication module 10 , a key exchange is performed between the authentication module 10 and the maker server 30 . However, the present invention is not limited thereto, and it is obvious that any ZKIE method other than SRP may be used.

The key transmission step S50 is a step in which the new key generated by the authentication module 10 is transmitted to the maker server 30 .

Basically, the authentication module 10 and the maker server 30 have a public key. The public key is a key obtained by generating a key pair of a private key and a public key in the authentication module 10 and transmitting the public key to the maker server 30 .

The authentication module 10 further generates the new key during the secure connection step (S40) in addition to the public key. The new key is used to encrypt the firmware update patch in the patch delivery step (S60).

The patch delivery step (S60) is a step in which the firmware update patch encrypted with the new key is transmitted from the maker server 30 to the authentication module 10.

By the encryption and delivery, the risk of hacking is reduced.

The firmware update step S70 is a step in which the firmware update patch is decrypted and installed by the new key in the authentication module 10 .

A key pair of a public key and a private key is already stored in the authentication module 10 . The encryption and decryption may be performed according to known techniques. If the installation of the firmware update patch is OK, the authentication module 10 may be in a usable state after restarting.

As such, it is possible to update the firmware of a part necessary for security without damaging the core of the FIDO specification, so that it is possible to improve and maintain the function and security of the authentication module 10 , and to improve the authentication specification.

In addition, the present invention is based on a Zero-Trust Connection. The central role of the update is the maker server 30, but communication security is made based on zero knowledge initial authentication (ZKIE), and since the new key is issued by the authentication module 10, it is secured by a distributed design. The effect is greatly improved.

That is, the present invention generates the initial authentication using a zero-knowledge initial authentication (ZKIE) method. Therefore, very strong secure communication is achieved without relying on a pre-shared symmetric key such as a shared secret for authentication, and without relying on a built-in certificate that has expired or is likely to be tampered with.

In addition, the maker server 30 and the authentication server 40 may be configured in the form of a cloud. With this configuration, a strong and effective communication security state can be maintained, and the authentication module 10 can be managed to always maintain the latest updated firmware.

The authentication server 40 is a server that allows a user to process authentication using the authentication module 10 . The authentication server 40 issues a certificate and embeds it in the authentication module 10, and when a user who has registered biometric information in the authentication module 10 performs biometric authentication, biometric matching received from the authentication module 10 It is a server having a function of determining that authentication is performed by a true user by a signal, and confirming and proceeding with the authentication.

However, in the above example, an example has been described in which both authentication processing and post-authentication processing are performed in the authentication server 40, but the present invention is not limited thereto, and the authentication processing is performed in the authentication server 40, The post-authentication processing may be separately configured to be processed by a separate processing server (not shown) according to the authentication confirmation signal from the authentication server 40 .

For reference, as illustrated in FIGS. 2 and 3 , before the firmware update request step S30 , a firmware update check request step S10 and a check result output step S20 may be further provided. Accordingly, before the firmware update request step ( S30 ), it can be checked whether the firmware update is required. The firmware update check request or output of the check result may be transmitted directly from the authentication module 10 to the maker server 30 or may be transmitted through the client 22 .

As a result of the check, if it is not confirmed that the firmware update is necessary, the firmware update may be controlled not to proceed. Conversely, as a result of the above confirmation, even when it is confirmed that the firmware update is necessary, the firmware update may not necessarily be performed immediately. need to be controlled. However, it may be configured to be automatically checked, for example, from time to time without a request for checking the firmware update from the user, and may be configured to display an alarm when it is confirmed that the firmware update is necessary as a result of the check.

In addition, as illustrated in FIG. 3 , after the firmware update step ( S70 ), an update confirmation step (see FIG. 3 ) in which the maker server 30 can check the installation result may be further provided. Accordingly, if the confirmation result is OK, the authentication module 10 may be in a usable state after restarting.

On the other hand, the device of the present invention in which the method is implemented is a device that updates the firmware of the authentication module 10 used for biometric authentication. The device of the present invention, the authentication module (10); and, the maker server 30; It is characterized in that it is included.

The authentication module 10, along with biometric information authentication using the biometric sensor 11, allows a firmware update request to be made to the maker server 30, and when firmware update is required, it is initially authenticated with the maker server 30 A secure connection state is established, a new key is generated and transmitted to the maker server 30, a firmware update patch encrypted with the new key is transmitted from the maker server 30, and the firmware is updated by the new key A device that decrypts and installs patches.

The maker server 30 receives a firmware update request from the authentication module 10 together with biometric information authentication, and when firmware update is required, it is initially authenticated with the authentication module 10 to establish a secure connection state, and the authentication A server that receives the new key generated by the module 10 and delivers the firmware update patch encrypted with the new key to the authentication module 10 .

On the other hand, the authentication module of the present invention in which the method is implemented is the authentication module 10 used for biometric authentication. The authentication module of the present invention, the memory 12; Wow, firmware; It is characterized in that it is included.

The memory 12 is a means for storing biometric information, certificates, and firmware. In the memory 12, S/N, various keys, random numbers, etc. may be stored in addition to the above.

The firmware , as a program stored in the memory, performs biometric information authentication using the biometric sensor 11, makes a firmware update request to the maker server 30, and when firmware update is required, zero-knowledge initial By the registration method, the maker server 30 and the authentication module 10 are initially authenticated to establish a secure connection state, a new key is generated and transmitted to the maker server 30, and the maker server 30 ) receives the firmware update patch encrypted with the new key, decrypts and installs the firmware update patch with the new key, registers biometric information in the authentication module 10, and uses the biometric information template to the authentication server at 40 It is a means having a function of transmitting and registering the authentication module 10 to the authentication server 40 .

On the other hand, the program of the present invention is an information device program recorded in a storage medium readable by the information device 20, in which the information device program for executing each step of the method described above in the information device 20 is recorded. am.

Although preferred embodiments of the present invention have been described above, the present invention is not limited to the embodiments disclosed above, but is implemented with various modifications within the scope of the claims, the detailed description of the invention, and the accompanying drawings. It is natural for those skilled in the art that other embodiments that can be implemented and equivalent are possible, and that they also fall within the scope of the present invention. It is provided to fully inform those of ordinary skill in the art to which the scope of the invention belongs, and the present invention is only defined by the scope of the claims.

The present invention can be used in the industry of a firmware update method, apparatus, and program of an authentication module.

[Explanation of code]

10: authentication module

11: biosensor

12: memory

20: information device

21: OS (Operating System)

22: client

23: Browser

30: Maker Server

40: authentication server

Claims

A method for updating firmware of an authentication module used for biometric authentication, the method comprising:

a firmware update request step in which a firmware update request is made to a maker server along with biometric information authentication using a biometric sensor in the authentication module; Wow,

a secure connection step in which the authentication module and the maker server are initially authenticated to establish a secure connection state when firmware update is required; Wow,

a key delivery step in which the new key generated by the authentication module is transmitted to the maker server; Wow,

a patch delivery step in which the firmware update patch encrypted with the new key is delivered from the maker server to the authentication module; Wow,

a firmware update step of decrypting and installing the firmware update patch by the new key in the authentication module;

A firmware update method of the authentication module, characterized in that it is included.
A device for updating firmware of an authentication module used for biometric authentication, comprising:

Along with biometric information authentication using a biometric sensor, a firmware update request is made to the maker server. an authentication module for receiving the firmware update patch encrypted with the new key from the maker server, and decrypting and installing the firmware update patch with the new key; class,

Receives a firmware update request from the authentication module along with biometric information authentication, and when firmware update is required, is initially authenticated with the authentication module to establish a secure connection state, receives a new key generated by the authentication module, and sends the authentication module to the authentication module. a maker server that delivers the encrypted firmware update patch with the new key;

A firmware update device for the authentication module, characterized in that it is included.
As an authentication module used for biometric authentication,

a memory for storing biometric information, certificates, and firmware; Wow,

As a program stored in the memory, biometric information authentication is performed using a biosensor, a firmware update request is made to the maker server, and when firmware update is required, the authentication with the maker server is performed by the zero-knowledge initial registration method. The module is initially authenticated to establish a secure connection state, a new key is generated and transmitted to the maker server, a firmware update patch encrypted with the new key is transmitted from the maker server, and the firmware is updated by the new key Decrypt and install the patch, register the biometric information inside the authentication module, and transfer the biometric information template to the authentication server firmware that transmits and registers the authentication module to the authentication server;

Authentication module, characterized in that it is made by including.
A program for an information device recorded in a storage medium readable by an information device, in which a program for an information device for causing the information device to execute each step of the method according to claim 1 is recorded.