KR20140052605A - Zero knowledge proof system and method based on ntru for the protection of nfc mobile payment information - Google Patents

Abstract

The present invention relates to an NTRU based zero knowledge proof system for protecting NFC mobile payment information, and a method thereof. The present invention may protect personal information by certifying the user without directly using settlement information of the user through a user registration step for certifying settlement information of the user between an NFC mobile terminal and a verification server through a network, and an identity certifying step for certifying settlement information of the user between the NFC mobile terminal and the verification server through the network. Although a value is exposed by an attacker through proof information optionally generated for every settlement, money disaster may be prevented. Since the proof information has stability in difficulty of solution of a polynomial mix system, stability of the same level is provided as compared with an existing public key scheme. Since only shift, multiplication, and addition operations are performed, an operation amount side is very efficient.

Description

TECHNICAL FIELD The present invention relates to an NTRU-based zero-knowledge proof system and method for protecting NFC mobile payment information, and more particularly,

The present invention relates to a system and a method for proving a zero knowledge, and more particularly, to a system and method for providing a zero-knowledge proof system and method, and more particularly, The present invention relates to an NTRU-based zero-knowledge proof system and method for protecting NFC mobile payment information, which verifies user payment information and payment verification information, which are arbitrarily generated for each communication through multiplication operations using a multiplication operation.

Recently, smart devices have evolved into means of providing various functions such as settlement, discount coupons, etc., and the market of mobile NFC (Near Field Communication) service where communication and finance are converged is expected to grow rapidly. Especially, as the mobile NFC payment service market is expected to be activated, the mobile NFC payment service has received wide attention both domestically and internationally.

However, unlike the activation of NFC service, research on NFC settlement technology that can be applied in NFC mobile settlement environment is insufficient. According to the report of 'NFC Personal Information Protection Measures Research' recently published by the Korea Internet Development Agency, there is a risk that the card number is exposed according to the credit card number output method when the credit card payment is performed in the commercialized NFC payment service environment, The problem is that the store or VAN (Value Added Network) collects and stores unnecessary personal information excessively. In addition, personal information leakage from Google's Google Wallet service is also the basis for this problem.

The Google Wallet service is an NFC smartphone-based payment service provided by Google, and trial service is currently being conducted in some parts of the US and some stores. Citi Bank participates in billing and collects various personal information about users from financial, credit card companies, mobile communication companies, and stores. Google claims that all credit card information is encrypted by NFC communication billing standard M / Chip 4 (Mobile MasterCard (R) PayPass ™ M / Chip 4) and is more secure than physical wallet However, it has not been verified. Recently, it has been repeated several times to expose personal information even on normal devices that have not been 'jailbroken', so the service is temporarily stopped -> patch -> restarted. Currently, PayPass's standard technology for Google Wallet services is a standard technology for credit cards, similar to the NFC-based mobile payment flow and the existing credit card payment flow itself. However, in the NFC - based payment environment where NFC and mobile converge, various types of services that can not be provided by existing credit card - based services can be provided, and new types of security technologies corresponding to the characteristics are expected to be additionally needed.

The zero knowledge proof scheme is an appropriate cryptographic technique to solve the above problems. The concept of Zero Knowledge Interactive Proof System (ZKIPs) is a proposed model to solve the safety problem of "is it really safe?" The spiritual knowledge interactive proof scheme implies that Verifier P and Verifier V transmit information about justification of a fact in a way that proves something through Interactive, so it does not expose any other information . In other words, it is a method that proves that only the confidential information is known to the verifier by transmitting other information than the confidential information without transmitting the confidential information known to the verifier directly to the verifier.

상에서

의 인수분해가 알려지지 않았을 때 제곱근을 알 수 없음에 근거한다. 본 방식은 스마트카드에서 요구되는 전체 연산수가 제일 작으나 인증절차 단계에서 t라운드가 수행되어야 하고 스마트카드의 메모리를 많이 필요로 하는 문제점을 가지고 있다. Guillou-Quisquater 인증 방식에서는 3 move 1라운드로 인증 절차를 구성하였으며, 메모리도 적게 소요된다. Guillou-Quisquater 인증 방식의 안전성은

의 인수 분해가 알려지지 않았을 때,

을 만족하는

를 계산할 수 없음에 근거한다. 그러나 계산량이 늘어난다는 단점을 가지고 있다.The Fiat-Shamir authentication scheme is a combination of a zero-knowledge proof scheme and an encryption scheme using ID information. The safety of the Fiat-Shamir authentication method is secondary surplus

On

Is based on unknown square root when factorization of unknown is unknown. This method has the problem that the total number of operations required in the smart card is the smallest but the t round has to be performed in the authentication procedure step and the smart card requires a lot of memory. In the Guillou-Quisquater authentication scheme, the authentication procedure is configured with 3 move 1 rounds and requires less memory. The safety of the Guillou-Quisquater authentication scheme

When the factorization of < RTI ID = 0.0 >

Satisfy

Can not be calculated. However, it has the disadvantage that the calculation amount is increased.

As described above, existing public key based cryptographic algorithms basically perform exponential multiplication, which is inefficient in terms of calculation amount. Various types of public key cryptosystems have been studied, not exponential operations, but NTRU (Grid Theory) is one such cryptosystem. NTRU, introduced by Jeffrey Hoffstein et al. At the Crypto lump session in 1996, is a public key cryptosystem based on a lattice problem. The basic operations are performed on polynomial rings. Currently, NTRU, which is considered as a public key cryptography standard based on the grid problem as IEEE135.1, provides the same safety as the existing public key cryptosystems RSA and ECC (Elliptic Curve Cryptography), and has a fast encryption / decryption speed . NTRU is a cryptographic system suitable for environments where the number of mobile communication users is increasing and services requiring high security such as electronic transaction and stock investment are required. However, it is only possible to perform simple encryption and decryption, and it is difficult to use it effectively in various application services, and various researches for application have been carried out, but the utilization of the application is very poor due to difficulties in the theory.

Korean Patent Publication No. 10-2012-0039133 (April 25, 2012)

SUMMARY OF THE INVENTION The present invention has been made in order to solve the problems of the prior art described above, and it is an object of the present invention to protect private information without directly using payment information of a user, It is also possible to prevent the occurrence of monetary damage even if the value is exposed. Also, the authentication information provides the same level of safety as compared with the existing public key method, and the NTRU- Proof system and method.

According to another aspect of the present invention, there is provided a system for registering and verifying user payment information between an NFC mobile terminal and a verification server through a network, The terminal includes: a cryptographic communication unit for transmitting payment information and a public key from a server and receiving a certificate; A verification information generation unit for generating verification information for a user's proof of payment information and performing operation of arbitrary information and verification information for a proof received from the verification server through a near field cryptographic communication unit in the NFC chip; A kit value and a certificate storage unit for securely storing the generated kit value and the certificate received from the verification server to verify the payment information in the verification information generation unit; And a local cryptographic communication unit for securely exchanging the payment information of the user and the arbitrary information and the approval information from the verification server to the store on the short-range wireless communication, wherein the verification information generating unit generates the verification information for user authentication, And the verification information is stored in a kit value and a certificate storage unit, and the user's payment information is verified by communicating with a verification server through a near field cryptographic communication unit.

Meanwhile, the NTRU-based zero-knowledge proof method for NFC mobile payment information protection of the present invention includes: a user registration step for verifying a user's payment information between an NFC mobile terminal and a verification server through a network; And an identity verification step for verifying the user's payment information between the NFC mobile terminal and the verification server through the network.

(A) generating a secret key, an inverse function, and a public key on a truncated polynomial basis for verifying user payment information in a verification server between a NFC mobile terminal and a verification server through a network, Storing the certificate in a certificate storage unit; And (b) verifying the user's information and storing the certificate issued by the verification server in the secure component field's kits and certificate store in the NFC mobile terminal, wherein the verification generated in step (b) Information can be updated and reissued at any time at the request of the user. At this time, the zero knowledge proof for the user billing information proof includes a multiplication operation for safety in the difficulty of solving the polynomial shuffling system.

를 선택한 후 추후 사용자 증명을 위해 사용되는 검증정보

를 계산하는 단계; (b) 검증 서버에서 공개된 서명 시스템을 통해 인증서

를 검증하고 임의의 다항식

을 선택하는 단계; (c) 사용자가 자신의 비밀키

와 상기 단계 (a)에서 생성한

그리고 은행으로부터 받은

를 통해 검증정보

를 계산하는 단계; 및 (d) 사용자로부터 받은 검증정보

를 검증 서버에서 검증하는 단계를 포함하는 것을 특징으로 한다.
As an identity verification step for a user's proof of settlement information between an NFC mobile terminal and a verification server through a network, it is required that (a)

And then use the verification information

; (b) through the signature system disclosed by the verification server,

Lt; RTI ID = 0.0 > polynomial <

; (c) When the user enters his / her secret key

And the step (a)

And from the bank

Verification via

; And (d) verification information received from the user

And verifying the verification result by the verification server.

As described above, according to the NTRU-based zero-knowledge proof system and method for protecting NFC mobile payment information according to the present invention, personal information can be protected by verifying the user without directly using the payment information of the user, It is possible to prevent the occurrence of monetary damages even if the value is exposed by the attacker through the randomly generated proof information.

Further, according to the present invention, since the proof information is secure against the difficulty of solving the polynomial shuffling system, it provides the same level of safety as compared with the existing public key method and performs only simple shift, multiply, and addition operations. to be.

1 is a network configuration diagram of an NTRU-based zero knowledge proof system according to an embodiment of the present invention.
2 is a configuration diagram of an NFC mobile terminal according to an embodiment of the present invention.
3 is a reference diagram for registering user payment information in a verification server through an NFC mobile terminal according to an exemplary embodiment of the present invention.
4 is a flowchart illustrating a method of registering user payment information in a verification server through an NFC mobile terminal according to an exemplary embodiment of the present invention.
FIG. 5 is a reference diagram showing the validity of user payment information through a NFC mobile terminal according to an exemplary embodiment of the present invention. Referring to FIG.
FIG. 6 is a flowchart illustrating the validity of user payment information to a verification server through an NFC mobile terminal according to an exemplary embodiment of the present invention. Referring to FIG.

Hereinafter, an NTRU-based zero knowledge proof system and method for protecting NFC mobile payment information according to the present invention will be described in detail with reference to the accompanying drawings.

First, the concept of the present invention will be briefly described.

The present invention relates to an NTRU-based zero-knowledge proof system for protecting NFC mobile payment information on a communication network composed of an NFC mobile terminal and a verification server. The method includes registering user payment information, The identity of the user.

The step of registering the user payment information may include calculating a secret key, an inverse function, and a public key on the truncated polynomial expression, and transmitting the public key and user financial information (credit information) together; And verifying user financial information, and generating and issuing a certificate to a user.

The step of verifying the identity of the user through the NFC terminal and the verification server may include generating the certification information 1 and transferring the certificate and the certification information 1; Generating and issuing a certificate verification and arbitrary verification information; Generating authentication information 2 through the user's private key and verification information; And verifying the verification information 2 received from the user in the verification server.

FIG. 1 is a network configuration diagram of a user billing information proof system in an NFC mobile terminal to which the present invention is applied, and FIG. 2 is a diagram illustrating a configuration of an NFC mobile terminal for user billing information generation and verification.

1, the user payment information registration and verification system according to the present invention includes an NFC mobile terminal 100 used by a user for financial transactions, A TSM (Trusted Service Manager) server 300 for issuing and updating a mobile card to and from an NFC mobile terminal 100 authenticated by the bank server 200; And a VAN 500 for performing a data exchange protocol between the shop 400 and the bank server 200. The VAN 500 stores the settlement information received from the bank server 200,

In the following description, the NFC mobile terminal 100 is referred to as a 'user or a verifier' for convenience of explanation, and the bank server 200 and the TSM 300 are referred to as 'a verification server or a bank'.

2, the NFC mobile terminal 100 according to the present invention includes a cryptographic communication unit 41 for communicating with a verification server, a verification information generation unit 42, a kit value and certificate storage unit 43, And a short range cipher communication unit 44 for short range wireless communication.

The cryptographic communication unit 41 exchanges user payment information, a public key, and a certificate through a secure key exchange protocol.

The verification information generating unit 42 generates verification information for the user's proof of settlement information and generates the verification information for the verification obtained from the verification server through the local cryptographic communication unit 44 in the NFC chipset .

The kit value and certificate storage unit 43 securely stores the generated kit value and the certificate received from the verification server to verify the payment information in the verification information generation unit 42. [

The short-range cryptographic communication unit 44 securely exchanges the payment information of the user and the arbitrary information and the approval information from the verification server to the shop 400 on the short-range wireless communication.

The NTRU-based zero knowledge proof method for protecting NFC mobile payment information according to the present invention using the system configured as described above will now be described.

FIG. 3 is a reference view illustrating a user registration step of registering user payment information in a verification server through an NFC mobile terminal according to an embodiment of the present invention. FIG. And a user registration step of registering the payment information in the verification server. FIG. 5 is a reference view illustrating an identity verification step in which a user verifies the validity of his / her payment information to a verification server through an NFC mobile terminal according to an embodiment of the present invention. FIG. A flowchart illustrating the identity verification step in which the user verifies the validity of his / her payment information to the verification server via the mobile terminal.

Before describing the embodiments of the present invention, the symbols used in the following description are defined as follows.

: 개체 (

: 증명자(User),

: 검증 서버(Bank))·

: Object (

: User,

: Verification Server (Bank)

: 잘려진 다항식 환

의 차수를 정하는 차원 파라미터 값(

)·

: Truncated polynomial expression

The dimension parameter value (

)

:

을 만족하는 큰 소수·

:

A large prime number satisfying

:

의 비밀키 다항식,

·

:

Secret key polynomial,

:

의

역함수·

:

of

Inverse function

:

의 공개키,

·

:

Of the public key,

: 잘려진 다항식 환

의 부분집합·

: Truncated polynomial expression

Subset of

: 컨볼루션 곱·

: Convolution product

: 사용자의 신원정보
·

: Your identity information

The present invention is broadly divided into a user registration step and an identity verification step.

First, the user registration step for implementing the present invention will be described with reference to FIG. 3 and FIG.

와

, 그리고

의 역함수

와

를 선택하고 사용자의 공개키

를 계산한다(S11).Initially, the user selects a secret key on a truncated polynomial expression as in Equation (1)

Wow

, And

Inverse function

Wow

Select the user's public key

(S11).

를 은행에 제출하고(S12), 은행은 사용자의 신원을 검증한다(S13).After the generation of the initial key value is completed, the user inputs user financial information

To the bank (S12), and the bank verifies the identity of the user (S13).

와

를 통해 공개키 기반 증명서

를 계산하여 사용자에게 발급한다(S14). 이후 은행은 사용자 금융정보를 보관한다(S15).The bank shall provide the identity information

Wow

Public key based certificate

And issues it to the user (S14). Thereafter, the bank stores user financial information (S15).

After performing all of the registration steps, the user owns a certificate for his or her identity and public key, and the bank owns a verifiable public key without the user's identity information and direct identity information at checkout.

After the registration is completed, the user performs the following proof of identity to prove that he / she has legitimate financial settlement information at the time of the financial transaction. The identity verification step for carrying out the present invention will be described with reference to Figs. 5 and 6. Fig.

를 선택한 후, 추후 사용자 증명을 위해 사용되는 증명정보1

를 계산하여(S21),

,

,

그리고

를 은행에 전송한다(S22).The user can select any of the polynomials < RTI ID = 0.0 >

, And then the proof information 1

(S21). Then,

,

,

And

To the bank (S22).

와 공개된 서명 시스템을 이용하여

,

의 타당성을 검증하고, 임의의 다항식

를 선택하여 사용자에게 전송한다(S23, S24).As shown in Equation (4)

And the public signature system

,

And verifying the validity of any polynomial

And transmits them to the user (S23, S24).

와 임의 다항식

그리고 은행으로부터 받은 임의 다항식

를 통해 도 6에서 증명정보2에 해당하는

를 계산하여 은행으로 전송한다(S25, S26).As shown in Equation (5)

And an arbitrary polynomial

And the arbitrary polynomial received from the bank

6 corresponding to the proof information 2

And transmits them to the bank (S25, S26).

가

인지를 검사하여 사용자를 인증한다(S27).The bank transmits the proof information 2 received from the user as in Equation (6)

end

And authenticates the user (S27).

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the invention.

The NTRU-based zero knowledge proof system for protecting NFC mobile payment information according to the present invention is useful for various authentication services that require protection of the user's main personal information.

41:
42: verification information generating unit
43: Kit value and certificate storage unit
44:

Claims (4)

As an NTRU-based zero-knowledge proof system for NFC mobile payment information protection that registers and verifies user payment information between NFC mobile terminals and a verification server through a network,
The NFC mobile terminal includes:
A cryptographic communication unit for transmitting the user payment information and the public key to the verification server and receiving the certificate from the verification server;
A verification information generating unit for generating verification information for the proof of the user payment information and performing an operation of verification information and arbitrary information for a proof received from the verification server through a local cryptographic communication unit in an NFC chipset;
A verification unit for verifying the user payment information generated by the verification information generation unit; And
And a short range cipher communication unit for exchanging the user payment information and the arbitrary information and approval information from the verification server on short range wireless communication,
NTRU for NFC mobile payment information protection that verifies user payment information randomly generated for each communication through multiplication operation that is safe to solve polynomial shuffling system without using personal information directly at the identity verification step using the above verification information Young Knowledge Proof System.
As an NTRU-based zero-knowledge proof method for protecting NFC mobile payment information that verifies user payment information between NFC mobile terminals and a verification server through a network,
(a) registering the identity information and the public key generated from the verified user financial information transmitted from the NFC mobile terminal to the verification server, receiving the identity information and the certificate issued through the public key, ;
(b) generating, by the NFC mobile terminal, authentication information 1 of a user corresponding to the selected polynomial, and transmitting the authentication information 1 and the certificate to a verification server;
(c) verifying the certificate, selecting and transmitting a specific polynomial to the NFC mobile terminal;
(d) generating the proof information 2 through the user's private key, the selected polynomial, the specific polynomial, and transmitting the proof information 2 to the verification server; And
(e) verifying the proof information 1 and the proof information 2 by the verification server.
3. The method of claim 2,
The step (a)
(a-1) generating a public key corresponding to the secret key selected on the polynomial ring of the NFC mobile terminal, and transmitting the user financial information and the public key to the verification server;
(a-2) the verification server verifies and stores the user financial information, and transmits the certificate issued from the user financial information to the NFC mobile terminal; And
(a-3) The NFC mobile terminal stores the certificate. The NTRU-based zero-knowledge proof method for NFC mobile payment information protection.
The method according to claim 2 or 3,
Wherein the zero proof proof for the proof of the user payment information is multiplication operation that is safe to solve the polynomial shuffling system.

Images