KR100901384B1 - System and method for wireless authentication based on distance estimation using ultrasonic communication - Google Patents

Abstract

A distance-based wireless authentication system and a method thereof using ultrasonic communication for confirming whether to authenticate an authentication token within a valid distance are provided to supply an authentication unit by using integration authentication through distance information by using time difference between transmission and reception of ultrasonic signal. A communication unit(110) transmits random value challenge generated in an operating unit(120) to radio signal. The communications unit receives a user ID in an authentication token. The operation unit produces the random value challenge. The operation unit confirms the user ID in the authentication list of a storage unit(130). The storage stores the key information or the shared authentication list information. An external Interface(140) informs a computer about the success of authentication.

Description

Distance-based wireless authentication system using ultrasonic communication and its method {SYSTEM AND METHOD FOR WIRELESS AUTHENTICATION BASED ON DISTANCE ESTIMATION USING ULTRASONIC COMMUNICATION}

The present invention relates to an authentication protocol using radio communication and ultrasonic communication, and in particular, by measuring the time difference between the transmission and reception of ultrasonic waves and using the time difference, the authentication apparatus confirms whether the authentication token is within a distance limit and shares it in advance. The authentication value is generated by using the generated key value, transmitted by ultrasound, and compared and authenticated.

In the use of computers, KIOSK terminals, ATMs, etc., there is a password authentication method that is used in the traditional method to prove a user's identity. The authentication method using a password is a method of storing a user-specified password in a computer and inputting a password if the user wants to authenticate himself. Then, the computer checks whether the values match and authenticates the user, and the user connects to the computer.

The moment the user enters the password, the attacker can easily find the password simply by peeking over his shoulder. In addition, the authentication method using a password has been devised because the user may not be able to authenticate because the user does not remember the password. For example, biometrics are a way of verifying identity using a person's unique biological characteristics. It is difficult to leak the password due to duplication or peeking of the user's password because it uses the inherent biological characteristics of the individual.

As a result, a method of using a physical token that allows the user to carry and authenticate the user and allow access to the system is used. In general, smart token, which is an extension of memory token by adding one or more ICs to the memory token, is used.In order for the smart token to work, the smart token must be inserted into a specific slot of a computer or terminal and a password or PIN number must be entered. do.

However, this method may feel a lot of inconveniences for users who have difficulty using electronic products, especially those with disabilities or the elderly. Therefore, there is an authentication method that utilizes wireless communication as a form that can be easily used and secured when authenticating from the user's point of view. Wireless communication has various forms such as using radio signals, using Bluetooth, and using infrared rays, and there is an advantage in that the other party can be authenticated even if it is not far or in direct contact with each other. If present, inappropriate authentication may be performed due to interference between terminals, and there is a disadvantage that attack by tapping and modulation of a signal is possible. In addition, the wireless signal has a disadvantage in that the user cannot be authenticated through the distance when the signal is transmitted with different signal strengths.

The present invention is a method proposed to solve the above problems of the existing proposed method, in addition to the information shared in advance between the authentication device and the authentication token to measure the time difference between the transmission and reception of the ultrasonic signal and use the time difference By calculating the distance between authentication devices. In addition, data is transmitted using an ultrasonic signal so that the distance cannot be deceived using the strength of the signal. Therefore, only authentication tokens within the distance limit can be authenticated, which prevents false authentication from being performed by interference between adjacent computers or terminals. Failure to provide a more secure means of authentication.

The authentication system according to an embodiment of the present invention measures the time difference between the transmission and reception of the ultrasonic signal, calculates the distance and checks whether the calculated value is within a specified distance limit value, and the authentication device first authenticates the authentication token. The authentication value may be secondly authenticated by generating an authentication value using a pre-shared key value and transmitting the comparison value by ultrasonic waves.

The authentication system according to an embodiment of the present invention is a communication unit for transmitting and receiving a wireless signal and an operation unit for performing an operation, a storage unit for storing a pre-shared key or authentication information, transmitting and receiving data and supplying power. It may include an external interface that can be received.

Preferably, the communication unit may transmit or receive a radio signal or an ultrasonic signal.

Preferably, the operation unit may perform an operation using the information received from the communication unit or generate a data value to be transmitted from the communication unit.

Preferably, according to one side of the present invention, the storage unit stores the shared key or authentication information between each other to be used for encrypting the data value in the calculation unit.

Preferably, according to one side of the present invention, the external interface transmits and receives data and is powered by wire.

The present invention provides an authentication system and method for authenticating an authentication token and confirming whether the authentication token is within a distance limit through communication using an ultrasonic signal, and inserting the password or PIN number into a specific slot of a computer or a terminal. Compared to the input method, a user who feels difficulty in using an electronic product can provide an authentication means that can be used conveniently and safely. You can also manipulate the signal strength to block attacks that deceive your distance.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings and the contents described in the accompanying drawings, but the present invention is not limited or limited to the embodiments.

1 is a view showing an overview of the authentication system and method according to an embodiment of the present invention. Looking at the configuration in the authentication device shown in Figure 1, it can be divided into a communication unit 110, a calculation unit 120, a storage unit 130, an external interface 140. The communication unit 110 transmits the random value challenge generated by the operation unit 120 as a radio signal and receives a user ID transmitted by the authentication token as a radio signal. In addition, the random value generated by the operation unit 120 is transmitted as a radio signal and measure the time T1 at this time. In addition, the authentication value X 'transmitted by the ultrasonic signal from the authentication token is received and the time T2 at this time is measured. The difference between T1 and T2 is used by the calculation unit 120 to calculate the distance between the authentication device and the authentication token. The calculating unit 120 generates a random value challenge to be transmitted by the communication unit 110 as a radio signal and checks the user ID received by the communication unit 110 as a radio signal in the authentication list of the storage unit 130. In addition, the user ID is added to the challenge to generate an encrypted response value R using the key information of the storage 130. In addition, random value Nonce is generated, and Xnce operation of Nonce and response value R generates X, which is the expected value of the authentication value. X is compared with X 'received by the ultrasonic signal from the communication unit 110, and if the result is X ≠ X' authentication fails to use the computer. In addition, the distance is calculated using the time difference between T1 and T2 measured by the communication unit 110, and if this value is larger than the distance limit, authentication also fails to use the computer. The storage unit 130 stores key information or authentication list information shared between the authentication device and the authentication token. The external interface 140 transmits and receives data and receives power through a wire, and informs the computer whether the authentication is successful so that the computer can determine whether to allow the owner of the authentication token to access the computer. The communication unit 110 may provide a communication means using a radio signal and an ultrasonic signal, or may provide a communication means using only an ultrasonic signal.

2 is a view showing an overview of the authentication system and method according to an embodiment of the present invention. Looking at the configuration in the authentication token shown in Figure 2, it can be divided into a communication unit 210, a calculation unit 220, a storage unit 230, an external interface 240. The communication unit 210 receives the challenge transmitted by the radio signal from the communication unit 110 of the authentication device and transmits the authentication information User ID in the storage unit 230 as the radio signal. In addition, the communication unit 110 of the authentication device receives a nonce transmitted as a radio signal and transmits the authentication value X 'generated by the calculation unit 230 as an ultrasonic signal. The calculator 220 adds the user ID to the challenge received by the communicator 210 and generates an encrypted response value R 'using the key information of the storage 230, and receives the nonce received as a radio signal from the communicator 210. And the response value R 'to XOR operation to generate X', the authentication value. The storage unit 230 stores key information and authentication information User ID shared between the authentication device and the authentication token. The external interface 240 receives power and receives User ID and key information from the outside during initial setup. The communication unit 210 may provide a communication means using a radio signal and an ultrasonic signal, or may provide a communication means using only an ultrasonic signal.

3 is a flowchart illustrating a method of authenticating an authentication token using an authentication apparatus. As shown in FIG. 3, the method of authenticating the authentication token starts from step S301. In step S301, the authentication apparatus generates a random value challenge in the calculating unit 120 and transmits a radio signal from the communication unit 110. In operation S401, the authentication token receives a challenge as a radio signal from the communication unit 210. In step S402, the authentication token adds the User ID in the storage unit 230 to the challenge in the operation unit 220 and generates an encrypted value R 'using the key in the storage unit 230. In step S403, the authentication token transmits a user ID through a radio signal from the communication unit 210. In step S302, the authentication device receives the user ID as a radio signal from the communication unit 110, and compares with the authentication list in the storage unit 130 to determine whether the authentication target. In step S303, the authentication apparatus generates a value R encrypted by using the key in the storage unit 130 by adding the user ID to the challenge in the operation unit 120. In step S304, the authentication apparatus generates a random value Nonnce in the operation unit 120. In operation S305, the authentication apparatus generates an X value, which is an XOR operation of Nonce and R, in the operation unit 120. In step S306, the authentication apparatus transmits a random value Nonce in the communication unit 110 as a radio signal and measures the time T1 at this time. In operation S404, the authentication token receives a nonce as a radio signal from the communication unit 210. In step S405, the authentication token generates an X 'value which is an XOR operation of Nonce and R' in the calculator 220. In step S406, the authentication token transmits an X 'value as an ultrasonic signal in the communication unit 210. In step S307, the authentication device receives the X 'value as the ultrasonic signal from the communication unit 110 and measures the time T2. In step S308, the authentication device calculates the distance by using the time difference between T1 and T2 in the calculation unit 120 and verifies whether it is within a distance limit value which is a distance set by the authentication device. In step S309, the authentication apparatus authenticates by comparing the X value and the X 'value in the operation unit 120. The authentication device and the authentication token may provide a communication means using a radio signal and an ultrasonic signal, or may provide a communication means using only an ultrasonic signal.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

1 is a view showing a state of an authentication apparatus system according to an embodiment of the present invention.

2 is a view showing a state of the authentication token system according to a temporary embodiment of the present invention.

3 is an operation flowchart showing a step of authenticating the authentication token by the authentication apparatus.

<Description of the symbols for the main parts of the drawings>

100: system of authentication device

110: communication unit

120: calculator

130: storage unit

140: external interface

200: authentication token system

210: communication unit

220: calculator

230: storage unit

240: external interface

Claims (4)

In the authentication system, The authentication system is composed of an authentication device and an authentication token, Perform authentication using a key shared between the authentication device and the authentication token, calculate a distance between the authentication device and the authentication token by using a difference in arrival time of an ultrasonic signal, The authentication device and the authentication token are each (1) a communication unit; (2) a computing unit; (3) storage; And (4) an external interface, The communication unit, the distance-based wireless authentication system using the ultrasonic communication, characterized in that for transmitting and receiving radio signals and ultrasonic signals. The method of claim 1, The communication unit, the distance-based wireless authentication system using the ultrasonic communication, characterized in that for transmitting and receiving data values using the ultrasonic signal. delete A distance-based wireless authentication method using ultrasonic communication that performs authentication by comparing a value received when a response is received after sending a challenge and a nonce to an authentication token from an authentication device and an expected value calculated in the authentication device. The authentication device includes a communication unit capable of transmitting and receiving radio signals and ultrasonic signals, The distance-based wireless authentication method using the ultrasonic communication, (1) generating and sending random and challenged endowments; (2) calculating a distance between the authentication device and the authentication token using the time difference when the nonce is transmitted and the time when the response is received; And (3) comparing the received response with the expected value calculated in the authentication device Distance-based wireless authentication method using an ultrasonic communication comprising a.

Images