DE102015108543A1 - A method of authenticating a computer system to a server, protected peripheral device, and using a protected peripheral device - Google Patents

Abstract

The invention relates to a method for authenticating a computer system (11) to a server (12). In this case, the method comprises requesting a first certificate (19) from a protected peripheral device (10) via a connection. The method further comprises creating the requested first certificate (19) by the protected peripheral device (10) based on a second certificate (19 ') stored in the protected peripheral device (10). Following this, the created first certificate (19) is provided via the connection to the computer system (11). The provided first certificate (19) is now sent by the computer system (11) to the server (12), which checks the first certificate (19) by means of a third certificate (19 ''). If the test was successful, the server (12) provides data. The second certificate (19 ') and the third certificate (19' ') are based on a main certificate (24). The invention further relates to a protected peripheral device (10) with a connector (13) and a memory (14), as well as the use of a protected peripheral device (10).

Description

The invention relates to a method of identifying a computer system to a server, a protected peripheral device having a port and a memory, and the use of a protected peripheral device.

As a service or assistance in the use of peripherals, and in particular protected peripherals, certain programs and software may be offered to users. Another service is to provide so-called Software Developer Kits (SDK), which allow users to program their own and specialized software that fits the peripheral device. It is in the manufacturer's interest that people who use these SDKs also have a peripheral device. Various authentication methods are known. These are expensive either for the manufacturer or for the user.

The object of the invention is to provide methods and devices which enable an advantageous, in particular a simple and secure, authentication of a computer system.

According to a first aspect of the invention, the object is achieved by a method for authenticating a computer system to a server. In a first step, a first certificate is requested from a protected peripheral via a connection.

The requested first certificate is created by the protected peripheral device based on a second certificate stored in the protected peripheral device. The created first certificate is provided via the connection to the computer system. The computer system sends the provided first certificate to the server. The server checks the sent first certificate by means of a third certificate and provides data on the server if a result of the check was successful. In this case, the second certificate and the third certificate are based on a main certificate.

The second certificate is stored in the protected peripheral device. Thus, each owner of the protected peripheral device can issue a first certificate. By linking the second and third certificates to the master certificate, the server and the protected peripheral share a secret that can be used to authenticate the computer system to the server.

According to an advantageous embodiment, the first certificate has restriction information, wherein the server provides the provided data in a restricted manner, depending on the restriction information.

Due to the restriction, especially a time limit, the server may provide a download for a limited time.

According to a further advantageous embodiment, the requesting step comprises transmitting user data to the protected peripheral device. In this case, the first certificate is based on at least part of this user data and / or comprises at least part of this user data.

If user data is stored in the certificate, then not only is it possible to assign the user to the user, but it is also possible to restrict downloads on the server to specific users.

According to a further advantageous embodiment, the first certificate comprises device information of the protected peripheral device.

Individual protected peripherals may be manufactured for specific user groups or groups of persons such as companies or private end users. Because the first certificate includes the device information, different protected peripherals that have been manufactured for a particular user group can be assigned different rights.

According to a further advantageous embodiment, the provided data is encrypted on the server. The encrypted data is decryptable after being downloaded from the protected peripheral device.

This ensures that the data downloaded from the server can also be used by only the user using the protected peripheral device that created the first certificate.

According to a further advantageous embodiment, the encrypted data requires a decryption by the protected peripheral device before use, wherein the decrypted data can be used independently of the protected peripheral device.

If the encrypted data is decrypted in the peripheral device, then it can be used freely. This is useful, for example, in companies where a team works with the downloaded data. In this case, different computer systems can be used for working, so there is no need to use a secure peripheral device at each workstation.

According to a further advantageous embodiment, the data provided for use requires decryption and / or authentication by the protected peripheral device. In addition, the provided data requires an active connection to the protected peripheral device or can only be performed on the protected peripheral device.

A use of the provided data can be limited to one platform.

According to a further advantageous embodiment, access to a secure area on the protected peripheral device requires authentication with the first certificate.

If an administrator can create the first certificate, he can ensure that only persons who have the first certificate or have been legitimized by the administrator have access to the protected peripheral device or secure areas of the protected peripheral device.

According to a further advantageous embodiment, the server also checks location information, in particular an IP address, in addition to the first certificate. The data is provided by the server only if a result of the first certificate check and the location information was successful.

Checking the location information also provides more security against illegal downloads.

According to a second aspect of the invention, the object is achieved by a supported peripheral device with a connection and a memory. The memory stores a second certificate based on a master certificate. The protected peripheral device is configured, upon request, to create a second certificate based on the second certificate and to provide it via a connection established via the connection.

The protected peripheral device can be used to enable authentication to a server with a third certificate dependent on a master certificate.

According to an advantageous embodiment, the protected peripheral device is further configured to decrypt encrypted data with a third certificate, wherein the third certificate is based on the main certificate.

A user can decrypt encrypted data with the third certificate without having to purchase additional hardware.

According to a third aspect of the invention, the object is achieved by the use of a protected peripheral device with a memory, wherein a second certificate based on a main certificate is stored in the memory. The protected peripheral device is hereby used to create a first certificate for authenticating a computer system to a server with a third certificate based on the main certificate.

An access control to the server can thus be regulated by issuing a certificate through the protected peripheral device.

The invention will be described in more detail below with reference to embodiments and figures.

In the figures show:

1 a schematic representation of a protected peripheral device together with a computer system and a server;

2 an overview of certificates; and

3 a flowchart for a method according to an embodiment of the invention.

1 shows a schematic representation of a protected peripheral device 10 , a computer system 11 and a server 12 , In the embodiment, the protected peripheral device 10 a terminal for executing financial transactions that a user must authenticate to, for example, a PalmSecure ID Match with a Fujitsu palm vein scanner. The user uses the protected peripheral device 10 Here, for example, to enter personal data. In other embodiments, the protected peripheral device is 10 a computer system for checking access controls, an automatic teller machine, vehicle on-board computers or, in general, a computer system that stores and / or processes security-relevant data.

The protected peripheral device 10 has a connection 13 which is used to connect the protected peripheral device 10 with the computer system 11 , for example via an SSH connection, is set up. In the exemplary embodiment, the connection is 13 a LAN socket, in other embodiments, however, it can also be a USB interface, a WLAN Port or other ports to transfer data. In other embodiments, the connection is between the protected peripheral device 10 and the computer system 11 to an internet connection or another data connection.

The protected peripheral device 10 also has a memory 14 in which a device certificate 22 as a second certificate 19 ' is stored (a hierarchical overview of the described certificates is in 2 shown). The device certificate 22 is used in the production of the protected peripheral device 10 stored in the memory. From the device certificate 22 A user, especially an administrator, can become a user certificate 21 as the first certificate 19 let create. The user certificate 21 can both download data from the server 12 as well as to restrict access to the protected peripheral device 10 be used. For example, access to administrator settings is only after the user certificate has been sent 21 to the protected peripheral device 10 possible. In another embodiment, one or more user-specific device certificates 22 ' during the production of the protected peripheral device 10 in the protected peripheral device 10 saved. For example, a company will have several different protected peripherals 10 with identical user-specific device certificates 22 ' sold.

In another embodiment, several different protected peripherals are used 10 with different user-specific device certificates 22 ' offered, all share a common feature, so that an assignment to a user, or a company is guaranteed. These user-specific device certificates 22 ' A corresponding identifier can also be sent to a specific user certificate 21 ' pass on. The computer system 11 can deal with this specific user certificate 21 ' on the user-specific device certificates 22 ' with the user ID based on the server 12 authenticate and identify as a company computer. This specific user certificate 21 ' a special download right is granted.

The computer system 11 In the exemplary embodiment, a desktop computer provided by a software company for programming software applications for the protected peripheral device 10 is used.

Of course, it can be in the computer system 11 in other embodiments, it may also be other computer systems that may, for example, establish a data network connection.

The server 12 in the exemplary embodiment is a download server, via the manufacturer of the protected peripheral device 10 Data, in particular software products such as a so-called Software Developer Kitt (SDK) are provided.

The computer system 11 has a connection 15 and a data network connection 16 on. The computer system 11 is about the connection 15 with the connection 13 the protected peripheral device 10 connected. Via the data network connection 16 is the computer system 11 connected to the internet. The server has a data network connection 17 on, who also with the Internet and thus with the computer system 11 connected is. In other embodiments, the server 12 and the computer system 11 connected directly or via another network.

The server 12 has a memory 18 on. In the store 18 is a server certificate 23 as the third certificate 19 '' saved. The server certificate 23 and the device certificate 22 Both go directly to a single main certificate 24 back.

In a production of the protected peripheral device 10 become the device certificate 22 and the user-specific device certificate 22 ' from the main certificate 24 created. In the exemplary embodiment, the certificates with an OpenSSL method from the main certificate 24 created, so that a hierarchical chain of trust (English: chain of trust) is formed.

3 shows a flowchart 30 a working method according to an embodiment of the invention.

In step 31 is through the computer system 11 from a user of the protected peripheral device 10 the user certificate 21 to authenticate the computer system 11 opposite the server 12 requested. This is the requirement of the computer system 11 over the connection 15 to the connection 13 the protected peripheral device 10 Posted. For example, a web service is used to request access to the protected peripheral device 10 accesses.

In this case, the user transmits personal data, such as name or address, in addition to the request. The web service contains a form for entering personal data. In alternative embodiments, further personal data or no personal data may be transmitted.

In step 32 becomes the user certificate 21 through the protected peripheral device 10 created. For this the user certificate becomes 21 based on the device certificate 22 created. In addition, the user certificate contains 21 the in step 31 transmitted personal data of the user.

The user certificate 21 contains in further embodiments device information of the protected peripheral device 10 , This device information includes, for example, a serial number, a manufacturing date or a manufacturing country.

When the certificate is created, information is collected in predefined fields. The predefined fields may have content adapted to different devices and / or customers. In the exemplary embodiment, this information includes personal data or device information in the predefined fields.

In further embodiments, the user certificate becomes 21 based on the device certificate and personal data and / or device information. The personal data and the device information are not readable in the user certificate in this embodiment 21 contained, for example by a test value.

The user certificate 21 can be requested by the user several times, for example, to different computer systems 11 to be able to use. In another embodiment, the user certificate 21 be created only once. This increases the security of the protected peripheral device 10 , Should this be another user certificate 21 The user must contact a customer service who provides the user with the protected peripheral device 10 can unlock again. For this customer service can use the protected peripheral device 10 Reset to factory settings.

In step 33 provides the protected peripheral device 10 the created user certificate 21 the computer system 11 over the connection 13 ready. The user certificate 21 is in the web browser on the computer system 11 imported.

The user certificate 21 that the computer system 11 is provided in step 34 from the computer system 11 over the data network connection 16 and an https connection from the web browser to the server 12 Posted. For this the computer system saves 11 the user certificate 21 in an in 1 not shown memory. The saved user certificate 21 is read out for sending.

In step 35 is like the server 12 the received user certificate 21 with that in the store 18 deposited server certificate 23 from. The comparison is based on an https standard. This will be the server certificate 23 and the user certificate 21 considered to match if the match results in the server certificate 23 and the user certificate 21 directly or indirectly on the main certificate 24 based.

In an alternative embodiment, corresponding comparison values are based on the main certificate 24 stored in a hash table. In this case, the server checks 12 the user certificate 21 via a stored hash value in the hash value table.

The server 12 logs the access to the download area with the provided data. This will be certificate information and a device number of the protected peripheral device 10 saved.

Shows the test in step 35 a match, so does the server 12 the computer system 11 in step 36 Data ready. The computer system 11 can now see the data provided by the server 12 Download. In the exemplary embodiment, the computer system loads 11 an SDK from the server 12 down.

The server 12 gives the user depending on the user certificate 21 Access to different software products, such as different versions of firmware. In the user certificate 21 here are information about the software and device status of the protected peripheral device 10 saved. The transmitted device information is from the server 12 from the user certificate 21 read.

In the described embodiment, the user certificate comprises 21 a timestamp. Based on the timestamp, the server can 12 recognize when the user certificate 21 was issued. The server 12 now places the data for a predetermined period of time, for example one week from the date of issuance of the user certificate 21 , ready.

In an alternative embodiment, the server provides 12 the data ready from a request time for a predetermined period.

In a further alternative or additional embodiment, the server provides 12 the data only to the computer system 11 ready. For this the server saves 12 an identifier, such as a MAC address, of the computer system 11 , Subsequent downloads can be done by the computer system 11 be carried out without the user certificate 21 to convey.

In the described embodiment, the server encrypts 12 the data. The data is here with the server certificate 23 encrypted. In another embodiment, the data is from the server 12 with a server certificate 23 Encrypted key encrypted.

Decrypting is with the user certificate 21 possible. This requires the protected peripheral device 10 with the computer system 11 or be connected to a computer system on which the encrypted data is stored. In another embodiment, the protected peripheral device must 10 not with the computer system 11 be connected. In this embodiment, decryption is with the stored user certificate 21 from the computer system 11 out possible.

In the described embodiment, the protected peripheral device 10 to work with the downloaded data permanently with the computer system 11 be connected.

In a further embodiment, the protected peripheral device switches 10 By decrypting the downloaded data, the data is free so that it can be used on any computer system even without a connection to a protected peripheral device 10 are usable. This deletes the protected peripheral device 10 an information in the files that use without a to the computer system 11 connected protected peripheral device 10 impossible.

Shows the test in step 35 no match, so does the server 12 the computer system 11 no data ready. The procedure ends in step 37 for example, interrupting the data network connection between the computer system 11 and the server 12 through the server 12 ,

LIST OF REFERENCE NUMBERS

10

 protected peripheral device

11

 computer system

12

 server

13, 15

 connection

16, 17

 Data Networking

14, 18

 Storage

19

 first certificate

19 '

 second certificate

19 ''

 third certificate

21, 21 '

 user certificate

22, 22 '

 device certificate

23

 server certificate

24

 main certificate

30

 flow chart

31-37

 steps

Claims (12)

Method for authenticating a computer system ( 11 ) against a server ( 12 ), comprising the steps: - requesting a first certificate ( 19 ) from a protected peripheral device ( 10 ) via a connection; - Create the requested first certificate ( 19 ) through the protected peripheral device ( 10 ) based on a second certificate ( 19 ' ) stored in the protected peripheral device ( 19 ) is deposited; - Provision of the created first certificate ( 19 ) via the connection to the computer system ( 11 ); - sending the provided first certificate ( 19 ) by the computer system ( 11 ) to the server ( 12 ); - checking the sent first certificate ( 19 ) through the server ( 12 ) by means of a third certificate ( 19 '' ); and - providing data on the server ( 12 ), if a result of the test was successful, the second certificate ( 19 ' ) and the third certificate ( 19 '' ) on a main certificate ( 24 ). The method of claim 1, wherein the first certificate ( 19 ) has constraint information and the server ( 12 ), depending on the restriction information, provides the data provided limited. Method according to one of claims 1 or 2, wherein the step of requesting a transmission of user data to the protected peripheral device ( 10 ) and wherein the first certificate ( 19 ) is based on at least part of this user data and / or comprises at least part of this user data. Method according to one of claims 1 to 3, wherein the first certificate ( 19 ) Device information of the protected peripheral device ( 10 ). Method according to one of claims 1 to 4, wherein the data provided on the server ( 10 ) and the encrypted data after downloading from the protected peripheral device ( 10 ) are decipherable. The method of claim 5, wherein the encrypted data before decryption by the protected peripheral device ( 10 ) and where the decrypted data is independent of the protected peripheral device ( 10 ) are usable. Method according to one of claims 1 to 5, wherein the provided data for use, a decryption and / or authentication by the protected peripheral device ( 10 ) and an active compound to the protected Peripheral device ( 10 ) or only on the protected peripheral device ( 10 ) can be performed. Method according to one of claims 1 to 7, wherein access to a secure area on the protected peripheral device ( 10 ) authentication with the first certificate ( 19 ) requires. Method according to one of claims 1 to 8, wherein the server in addition to the first certificate ( 19 ) also checks location information, in particular an IP address, and provides the data only if a result of the check of the first certificate ( 19 ) and the location information was successful. Protected peripheral device ( 10 ) with a connection ( 13 ) and a memory ( 14 ), with a second certificate ( 19 ' ) on a main certificate ( 24 ) and in the memory ( 14 ) and the protected peripheral device ( 10 ) is set up, upon request, on the second certificate ( 19 ' ) based first certificate ( 19 ) and via one via the port ( 13 ) provide a compound. Protected peripheral device ( 10 ) according to claim 10, wherein the protected peripheral device ( 10 ) is further equipped with a third certificate ( 19 '' ) decrypt encrypted data, the third certificate ( 19 '' ) on the main certificate ( 24 ). Use of a protected peripheral device ( 10 ) with a memory ( 14 ), one on one main certificate ( 24 ) second certificate ( 19 ' ) in the memory ( 14 ) to create a first certificate ( 19 ) for authenticating a computer system ( 11 ) against a server ( 12 ) with a third certificate ( 19 '') on the main certificate ( 24 ).

Images