KR100447623B1 - Authentication and payment based on ticket in wireless Internet - Google Patents

Abstract

The present invention provides an authentication and payment protocol using a ticket for value-added services in the wireless Internet, and a method for confirming whether a user pays a fee without communicating with an online TTP, and anonymity for using a service based on a ticket. The present invention relates to a ticket-based authentication and payment method for guaranteeing wireless Internet. VASP can verify whether a user can pay without communicating with the user's online TTP by using a ticket for value-added service in the third-generation mobile communication system UMTS. The VASP only confirms the validity of the ticket and that the user is the owner of the ticket, and the protocol is superior in computational and communication costs compared to the AIP protocol involving the online TTP and also ensures that the user's anonymity for service usage is ensured. It works.

Description

{Authentication and payment based on ticket in wireless Internet}

The present invention relates to a ticket-based authentication and payment method in the wireless Internet, and more particularly, to present an authentication and payment protocol using a ticket for a value-added service in the wireless Internet. The presented ticket-based authentication and payment protocol is a method of verifying whether a user pays without communicating with an online TTP, and the ticket-based authentication protocol over the wireless Internet, which guarantees anonymity for the mobile user's use of the service based on the ticket-based protocol. It is about a payment method.

Conventional authentication and payment protocols for value-added services (VAS) have had on-line TTP technology that serves as the user's certificate authority.

The above-described TTP technology has a problem that the authentication and payment method based on the online TTP is not practical considering numerous service providers, various kinds of services, and a wide user layer in the wireless Internet.

In addition, in the wireless Internet environment based on the Universal Mobile Telecommunications System (UMTS) and the next generation mobile communication system, there are tens of thousands of value-added services (VAS) that users can receive by paying through the network. The UMTS service provider provided mobile users with a credential to pay for the service and an electronic payment by issuing a certificate.

In the conventional wireless Internet technology, if the user does not complete the payment for the use of his service, the certificate is revoked and is not reissued. One of the important points in the wireless Internet is the service use and payment of the user.

Therefore, before the user can use the service, the value-added service provider (VASP) needs to be sure of the payability of the user's use of the service, and Advanced Security for Personal Communication Technologies (ASPCTC) authenticates between the user and VASP in UMTS. It presents AIP (Authentication and Initialization of Payment) protocol.

In the AIP protocol, VASP verifies whether the user wants to use the service by revoking the user's online Trusted Third Party (TTP) to confirm payment of the user's expenses.

However, there is a problem that relying on online TTP to confirm whether a user revokes a certificate has a problem of performing an authentication protocol at a long distance and consequently consumption. Also, this method has a foreign domain with VASP and a home domain of a user with TTP. Requires a trust relationship with

In an environment where few service providers exist, it is possible to perform authentication and payment protocols based on online TTP by a mobility contract, but it is an inefficient method in an environment where many service providers and various services exist, such as in the future wireless Internet.

In addition, the present invention has been accomplished based on the advantages of the ticket, and the access technology using the ticket is studied by the service access technology using the ticket, and the ticket is data representing the right of the user to use the service.

Explaining the advantages of the ticket below, the first user is provided with a ticket for the desired service and pays accordingly. When the user wants to use a specific service, the VASP submits a ticket, and the ticket is a basic communication service (wireless and wired). It can also be used when using value-added services (such as video on demand).

And because the ticket has the information the service provider needs to determine whether to provide the service to the user, there is no need to perform an authentication protocol over a long distance with the online TTP to check the user's certificate revocation. In a mobile communication environment with contact with a service provider located in an external domain (at a distance), ticket-based service access can be useful, and the ticket-based mechanism can be used by a trusted authority that issues tickets and pays for them. Anonymity about the use of the service can be guaranteed and the service provider has the advantage of not being able to obtain the user's personal information through the ticket.

And the second advantage is that by purchasing the appropriate ticket of the user can be provided with a service suitable for their needs, the user can select the desired service and there is no need to make a long-term contract with the service provider.

Hereinafter, a ticket based service access mechanism to achieve the present invention is as follows.

As it deals with restrictions on access to resources, safety must be ensured for users and service providers, and users need to verify that they are obtained from an accredited agency when obtaining a ticket, and users are also guilty of illegal tickets by attackers. It should be assured that it has not been modified or forged.

In addition, VASP must ensure that the ticket is original, not counterfeit, before providing the service, and the problem of double use of the ticket must also be addressed.

Accordingly, an object of the present invention is to provide a ticket-based authentication and payment protocol using a public key cryptography system for value-added service in wireless Internet, and to provide a service in the protocol. By eliminating the process of accessing the online TTP to verify the likelihood of payment, VASP simply verifies the ticket and verifies that the user is the owner of the proper ticket.

Another object of the present invention is that communication with the online TTP is not required during the authentication and payment protocol in the present invention, and the ticket is used to improve the communication and calculation costs compared to the existing AIP protocol, and the ticket is anonymous to the mobile user. To ensure the use of guaranteed services.

In order to achieve the object of the present invention, the picket acquisition protocol can be used to set a private key for signature and public key for verification and a session key with VASP that can be used temporarily by the ticket server for use with the user and VASP and anonymous service. By obtaining public and private keys, we achieved a ticket-based authentication and payment method over the wireless Internet.

1 is a block diagram of a ticket based authentication and payment method in the wireless Internet of a preferred embodiment of the present invention;

2 is a ticket structure diagram of a preferred embodiment of the present invention;

3 is a structural diagram of a first ticket acquisition protocol of the present invention;

4 is a structural diagram of a second ticket acquisition protocol of the present invention;

5 is a block diagram of a ticket-based authentication and payment protocol in a preferred embodiment of the present invention.

* Explanation of symbols for the main parts of the drawings *

1: Mobile user 2: Value added service provider

3: ticket server

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Figure 1 illustrates the relationship between each participant in the ticket-based authentication and payment model diagram of the preferred embodiment based on the authentication and payment model. Participants in ticket-based service use and payment are the mobile user 1 (hereinafter referred to as the user). And VASP (2), Value-Added Service Provider, and Ticket Server (3).

The ticket server 3 is a special TTP acting as a kind of certification authority, and the authentication and payment mechanism with the service provider 2 using the ticket is divided into two stages, and each user is considered to be registered with the ticket server 3. do.

The user 1 obtains a ticket by performing a ticket acquisition protocol with the ticket server 3, and the ticket acquisition step is a service selection and ticket acquisition between the user 1 and the ticket server 3, and the ticket acquisition step In the user, the user pays for the ticket obtained in the ticket server 3.

In the ticket use step performed after the ticket acquisition process, the mobile user 1 transmits a ticket obtained in the ticket acquisition process from the VASP 2 to the VASP 2, and the VASP 2 checks whether the ticket is illegally modified and forged. A verification process is performed to verify and verify that the mobile user 1 is the legitimate owner of the ticket.

If the ticket validation is successful, the service is provided to the user according to the conditions of the ticket.

The ticket used is stored in the VASP 2 and later submitted by the ticket server, and the ticket server 3 pays for providing the service to the VASP 2 that submitted the ticket.

Figure 2 illustrates the ticket structure of the preferred embodiment, where the ticket is a special certificate used by the mobile user to use the service and the ticket is a serial number sn, the public key g ^u for the user's key setting, and the user's signature can be verified. Which has data for the verification public key PK _U , the ticket server's timestamp TT indicating the time the ticket was issued, and other information, the parameters being processed by the hash function h and the signature of the ticket server.

g ^u is the public key that will be used to establish the session key with VASP and is included in the ticket. Like the secret key u, the user is sent from the ticket server during the ticket acquisition protocol execution phase. The signature secret key SK _U to be used is generated and sent to the user, and the corresponding signature verification public key PK _U is included in the ticket and sent to the user.

Figure 3 illustrates a first ticket acquisition protocol of the preferred embodiment, wherein the user and the ticket server are represented by U and T and assume that U and T own the secret session key L before performing the proposed ticket acquisition protocol. The timestamp is represented by idT and TT.

The user generates a random number r, encrypts it using a secret session key L with T as his identity idU, and sends it to T.

T receives the message from U and decrypts it to obtain the identity and random number r of U requesting the ticket.

After identifying U's identity, T knows whether U's certificate has been revoked, and if the certificate has not been revoked, T generates a new random number u to be used for establishing the session key in communication with VASP and the corresponding public key g for key establishment. Create ^u

In addition, U calculates a ticket by generating a secret signature key SK _U and a corresponding signature verification key PK _U to be used for the signature to be sent to VASP.

T encrypts the ticket, its identity idT, random number r, time stamp TT, and secret keys u and SK _U with secret session key L and sends them to U.

After U receives the message from T, decrypts it and obtains a ticket, U pays T, and U obtains the key pair u and g ^{u, which} are key pairs used to establish the session key with VASP.

In addition, SK _U and PK _{U, which} are temporary signing key pairs to be used for signing, are used for later communication with VASP.

FIG. 4 illustrates a second ticket acquisition protocol of the preferred embodiment, where U assumes that T owns a punblic key agreement key g ^t of T before performing the ticket acquisition protocol and the ticket acquisition protocol is described in FIG. 4. As shown.

First, user U randomly generates his own public key agreement key g ^w and U generates a secret session key L = (g ^t ) ^w using T's public key agreement key g ^t and his public key agreement key g ^w . do.

The user generates a random number r, encrypts it using a secret session key L with T as his identity idU, and sends it to T.

T receives a message from U and generates a secret session key L = (g ^w ) ^t in a similar manner.

T decrypts and obtains the identity of U requesting the ticket and a random number r. Having identified U's identity, T determines whether U's certificate has been revoked. If the certificate has not been revoked, T generates a new random number u to be used for session key establishment in communication with VASP and a corresponding public key g ^u for key establishment. In addition, U generates a secret signature key SK _U to be used for the signature to be sent to VASP and a corresponding signature verification key PK _U to calculate the ticket.

T encrypts the ticket, its identity idT, random number r, time stamp TT, and secret keys u and SK _U with secret session key L and sends them to U.

U receives a message from T, decrypts it, obtains a ticket, verifies the signature of T, obtains U, pays T, and U is a key pair for establishing a key for the session key with VASP. And g ^u are obtained. In addition, SK _U and PK _{U, which} are temporary signing key pairs to be used for signing, are obtained for later communication with VASP.

5 is a ticket based authentication and payment protocol configuration of the preferred embodiment, in the present invention, the protocol does not access the user's online TTP to check whether the service is payable for use of the service, but VASP is merely a ticket justification and You can verify that you own the ticket and use the ticket to guarantee the use of the anonymous service.

In the protocol shown in FIG. 5, U is a user, V is VASP, cert V is the identity of V, TV is the timestamp generated by V, ch_data is information related to payments that V sends to U, and h is a hash function. do.

Before starting the protocol in the present invention, the following conditions are reproduced.

Condition 1: U owns a valid Ticket granted by T.

Condition 2: V has a certificate for the public key for key agreement assigned by T.

Condition 3: U has T's public signature verification key.

When the protocol is started under the same conditions as in the U sends a Ticket obtained from the ticket acquisition protocol to V and V is by using the g ^u and a secret key v for their key seoljeo obtained from Ticket session key K = h (g ^uv ∥ r is calculated, and V generates a random number r, which treats session key K and its identity idV with the hash function h, and tells U to certV for r, the time stamp TV, and g ^v , its key-setting public key. send.

After receiving the second message, U calculates the same session key K = h (g ^vu ∥r) as V using certV, checks the hash value, and confirms that V actually owns the session key K. Done.

Also, U takes the Ticket ∥g ^v ∥r ∥idV ∥ch_data ∥ take the hash function h on the TV and digitally sign the generated value and send it to V.

After receiving the last third message, V decrypts the message received using session key K, verifies the user's signature, and if successful, starts serving the U and V submits the U's signature on the ticket server. You will be paid for the services you provide.

The present invention has a problem with the ticket, that is, illegal modification, forgery, duplication and re-commercial use, but since the signature cannot be generated from the ticket usage protocol, the use of the ticket can be prevented and participants other than the ticket server can be prevented. Modification and forgery of tickets from the site is not possible.

The reason is that the user or the use of an invalid ticket cannot generate the ticket server's signature. If the user reuses the ticket, the ticket server will duplicate the user's signature (third message in the proposed protocol) for the same ticket. Will receive.

Therefore, the ticket server can determine whether the ticket reuse of the user can be detected ticket reuse.

According to the present invention, the ticket-based protocol does not require the involvement of an online TTP to check the user's payment possibility, and the ticket sent to V does not have U's identity information and U is newly created for service use during the protocol execution. Since the signature is performed using the secret signing key, the anonymity of the service usage is guaranteed.

U's digital signature, including the last message ticket and the identity id V of V, the random number r, and Timestamp TV, prevents the denial of service use of the ticket.

The session key K is created from a random number r generated from V, which prevents the old session key K from being reused, which provides a new key for both U and V, like the newly generated random number u.

The technique of the present invention requires an additional step of ticket acquisition, but in most cases the ticket acquisition protocol can be performed when the mobile is idle and considering the limited capabilities of the mobile terminal, n-times tickets (up to n times) Available tickets) or subscriptions (tickets that can continue to be used for a given period of time) can be very useful.

The user is basically pre-paid because the ticket server obtains and pays for the ticket. However, the ticket may be transformed into a post-paid method that includes a payment initialization parameter and the like, and performs a small payment technique during actual service use.

As described above, an efficient authentication and payment protocol using a ticket for a value-added service in UMTS, the third-generation mobile communication system, is a protocol of the present invention without using a ticket to communicate with a user's online TTP. The VASP can verify whether the user can pay and the VASP only confirms the validity of the ticket and the user is the owner of the ticket, and the protocol of the present invention is superior in computation and communication costs compared to the AIP protocol involving online TTP. In addition, there is an excellent effect of ensuring the anonymity of the user to use the service is a very useful invention in the wireless Internet industry.

Claims (3)

Encrypting the random number r generated by the user and the secret session key L together with the means, such as their identity idU, to the T; The ticket server T decrypts the message from U and obtains the identity of the U requesting the ticket and a random number r; After identifying the identity of U, T is a certificate verification step of U; Generating, by the ticket server T, a random number u for use in establishing a session key and a public key g ^u for key establishment in communication with the VASP for U for which the certificate is not revoked; The ticket server T generates a secret signature key SK _U and a signature verification key PK _U to be used for the signature that U will send to the VASP and calculates a ticket; The ticket server T encrypts the ticket and its identity idT, the random number r, the time stamp TT, and the secret keys u and SK _U using the secret session key L and transmits them to U; U receives and decrypts the message from the ticket server T to obtain the ticket and verify signature; The U having obtained the ticket comprises obtaining u and g ^{u which} are key pairs for key setting for performing payment to T and establishing a session key with the VASP. The method of claim 1, wherein the ticket server U generates a secret session key L = (g ^t ) ^w using the public key agreement key g ^t of the ticket server T and its public key agreement key g ^w . Ticket-based authentication and payment method over wireless Internet. The method of claim 1, wherein u and g ^{u, which} are key pairs for setting a session key with the VASP, are used for VASP communication.