KR20200008186A - Method, system and program of silent authentication based on fido - Google Patents

Abstract

The present invention relates to an authentication method based on fast identity online (FIDO) between an authentication requester requesting authentication and an authenticator responding to the authentication request. According to the present invention, an encrypted first message is generated from a first message for authentication in the authentication requester and transmitted to the authenticator, the encrypted first message is decrypted by the authenticator to generate a second message, and if the first message and the second message is the same or corresponding to each other, it is determined to be authenticated.

Description

FIDO-based implicit authentication method, system and program {METHOD, SYSTEM AND PROGRAM OF SILENT AUTHENTICATION BASED ON FIDO}

The present invention relates to a method, a system, and a program of FIDO (Fast Identity Online) based Silent Authentication, and more particularly, to a communication device (communication device) while eliminating (removing) a user's interaction request. FIDO method implicit (non-interaction) authentication method, system and program that maintains a high level of confidentiality.

In general, a security certification such as FIDO is often applied to low-power communication networks such as LoRa, NB-IoT, and SigFox, such as a low power wide area network (LPWAN).

For example, various authentications between devices of the IoT (Internet of Things) or security authentication between communication devices are very important for the safety of information exchanged and controlled devices. For example, when a new IoT camera needs to be connected to a user terminal, authentication of the new IoT camera is made, and then data received from the newly authenticated IoT camera can be trusted by the user terminal.

Hereinafter, devices that require authentication for connection such as IoT devices or communication devices may be referred to simply as 'devices', and may be referred to simply as 'authentication' through security authentication and various other authentications. For example, an authentication device (eg, a user terminal) that requests a device that challenges authentication may be referred to as an authenticator (eg, an IoT device) that responds to an authentication request. have.

Increasing the convenience and speed of the security certification, and increasing the stability or safety level may not be compatible with each other.

The technique of the following patent document is a method of authenticating an Internet of Things (IOT) device in a user terminal, the method comprising: generating device information including a key and an identifier of the IOT device; Signing the device information using a public certificate stored in a memory; Transmitting the signed device information and the authorized certificate to an authentication server; And transmitting the generated device information to the IOT device.

Here, the identifier may be in the form of a globally unique identifier (GUID), and the key may be one of a public key and a symmetric key. The signing of the device information may include using a private key corresponding to the public certificate. To sign.

Patent Publication 10-2016-0084680

In security authentication, it is not easy to maintain or enhance the stability and safety level of authentication while improving the convenience and speed of authentication. In particular, for high security in authentication, such as authentication using biometric information, user interaction such as fingerprint scan and verification may be required.

However, such user interference causes both convenience and speed of security authentication between devices. For example, in the case of a fingerprint scan, the user has to scan the fingerprint one by one, and time is required for the fingerprint scan. The same applies to the signature of an accredited certificate, for example. In the technology of the patent document, the signature is performed through an accredited certificate. As such, the user's interference is required for authentication and connection, thereby reducing convenience and speed.

In particular, in the case of IoT devices, a plurality of devices in the tens or tens of thousands units need to be pre-authenticated before operation, and authentication must be performed again even if a problem occurs after authentication due to hacking or failure during operation. Needs to be. In this situation, the authentication by the user's interference is not only very inconvenient, but also takes a long time, so there is a natural limit that the low speed, low efficiency. This results in a loss of operating time and performance of the device.

On the other hand, in the case of adopting a certificate without any interference from the user, convenience is increased because the user is not verified, such as a biometric or a public certificate signature, but the possibility of hacking, theft, and authentication error increases, resulting in increased stability of authentication. In addition, the safety level may be lowered.

The present invention has been made to solve the problems of the prior art, and if the authentication using the user's interference is impossible, unreasonable or inconvenient, the original performance of the device in the repeated authentication between the devices while eliminating (removing) the user's interference It is intended to provide a FIDO-based implicit authentication method, system, and program that can overcome the difficulties in commercialization of products and systems due to user interference, rather than increasing the speed and security (safety) level.

An authentication method according to FIDO based implicit authentication method according to an embodiment of the present invention for achieving the aforementioned problems is based on the FIDO between the authenticator in response to the authentication requester and the authentication request that requests authentication, the authentication challenge an encrypted first message from the first message for the authentication in the group has been created and transmitted groups the authentication, the encrypted first message wherein in the authenticator is decoded, and the second message is generated, wherein the first message and the second If the message is the same or corresponding, characterized in that the authentication is determined.

Here, it is preferable that the first message is encrypted by a first root key in the authentication requester, and the second message is decrypted by a second root key in the authenticator.

Preferably, the first root key is generated by decrypting the original root key encrypted by the authentication requester.

And in the authentication requester, together with the encrypted first message, an encrypted first hash value generated from a first hash value of the first root key and the first hash value using the first hash value. The encrypted first root key generated from is transmitted to the authenticator, and the second root key uses the decrypted second hash value formed by decrypting the encrypted first hash value in the authenticator. Preferably, it is generated by decrypting from the encrypted first root key.

Here, when the hashed second hash value generated from the second root key coincides with the decrypted second hash value, the second root key may be allowed to be used to decrypt the encrypted first message.

On the other hand, as the authentication system based on FIDO between FIDO based implicit authentication system according to an embodiment of the present invention, the authenticator in response to the authentication requester and the authentication request that requests authentication to achieve the above object, the group certificate request groups, and the first message encryption unit for generating a first message encrypted from the first message for authentication, and the encrypted first message comprises a transmission unit for transmitting to said authentication, wherein the authentication, And a first message decryption unit that decrypts the encrypted first message to generate a second message , and an authentication decision unit that determines an authentication when the first message and the second message are the same or correspondent. It is done.

On the other hand, FIDO based in accordance with one embodiment of the present invention for achieving the above-mentioned problems implicit authentication program, claims the FIDO between the authenticator in response to the authentication requester and the authentication request that requests authentication is based on 1 to claim 5, And a program stored in a recording medium recording a program for executing in the authentication requester and the authenticator comprising the information processing device.

According to the present invention, if authentication using the user's interference is impossible, unreasonable or inconvenient, while eliminating (removing) the user's interference, it does not deteriorate the original performance of the device in repeated authentication between devices, but rather speed and security (safety). FIDO-based implicit authentication methods, systems and programs are provided that can overcome the difficulty of commercializing products and systems due to user interference.

1 is a block diagram showing a data processing flow in an authentication requester (authenticator, challenger) and an authenticator (responser) of the implicit authentication method according to an embodiment of the present invention.
FIG. 2 illustrates a method of encrypting a hash value and using a root key introduced in a process of transmitting a message for authentication in an authentication requestor in an implicit authentication method according to an embodiment of the present invention. This is a block diagram for the description.
FIG. 3 is a diagram illustrating an implicit authentication method according to an embodiment of the present invention, in which a root key introduced in a process of receiving and verifying a message for authentication by an authenticator, decryption of a hash value, and processing of a received message are verified. This is a block diagram for explanation.
4 is a conceptual diagram for explaining a method of increasing the level of security by removing the interference of the user and introducing a root key proposed in the implicit authentication method according to an embodiment of the present invention.
FIG. 5 illustrates a case in which a device in which an implicit authentication method is implemented is connected to a low power communication network such as LoRa, NB-IoT, and SigFox, such as a low power wide area network (LPWAN) communication network according to an embodiment of the present invention. A conceptual diagram for this.
FIG. 6 is a conceptual diagram for explaining a conventional method of device authentication requiring user interference in a conventional FIDO technology.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Advantages and features of the present invention, and methods for achieving them will be apparent with reference to the embodiments described below in detail in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but can be embodied in various different forms, and only the embodiments are intended to complete the disclosure of the present invention and are common in the art to which the present invention pertains. It is provided to inform those skilled in the art to the fullest extent of the invention and the invention is defined only by the scope of the claims. Like reference numerals refer to like elements throughout.

Unless otherwise defined, all terms used in the present specification (including technical and scientific terms) may be used in a sense that can be commonly understood by those skilled in the art. In addition, the terms defined in the commonly used dictionary are not ideally or excessively interpreted unless they are specifically defined clearly.

In addition, the connection of one member or module to the front, rear, left, right, up and down of another member or module may include not only a direct connection but also a case where another third member or module is interposed and interposed therebetween. have. In addition, a member or module that performs a function may be implemented by dividing the function into two or more members or modules. On the contrary, two or more members or modules each having a function may be integrated into a single function. It can be implemented integrally in a member or module. And some electronic functional blocks may be implemented by execution of software, and may be implemented with the software implemented in hardware via an electric circuit.

<Implicit Authentication Method>

The FIDO-based implicit authentication method according to an embodiment of the present invention is an authentication method based on the FIDO between the authentication requester 10 and the authenticator 20 . The authentication requester 10 (authenticator, challenger) is a device for requesting authentication, and if the device passes the authentication, a device that will receive permission of authenticated communication, that is, a new device, and the authenticator 20 (responder) is authenticated. A device responding to the request, such as a device that has already passed authentication or a device that has authentication authority. Authentication is a process of determining whether a connection is possible between devices, for example, between devices of the IoT or between communication devices.

The method of the present invention consists of the steps of message encryption and delivery, message decryption and authentication decision.

The encryption and the transfer are performed in the authentication requester 10, for example, an encrypted first message 7 is generated from the first message 6 for authentication by an encryption unit (not shown), for example a transmission unit. The encrypted first message 7 is transmitted to the authenticator 20 (not shown). The first message 6 is stored in the authentication requester 10 in advance and is, for example, a Hello message. The encryption method of the message is predetermined.

The decryption and authentication determination is performed in the authenticator 20, for example, the encrypted first message 7 is decrypted by a decryption unit (not shown ) to generate a second message 6 ' , for example, authentication. If the first message 6 and the second message 6 'are the same or correspond to each other, the determination unit (not shown) determines the authentication. Since the encrypted first message 7 is received from the authentication requester 10 and the second message 6 'is generated by a decryption process, the first message 7 is provided in the authenticator 20 in advance. no. The decryption method of the encrypted message is predetermined in correspondence with the encryption method of the said message.

As such, in the FIDO-based implicit authentication method according to the present invention, user interference such as biometric authentication or public certificate signature, which is commonly required in FIDO, is not performed. Therefore, the user's request for physical activity or biometric information is eliminated. Therefore, the required 'silent' authentication between devices and high speed authentication between devices are implemented.

In order to increase the level of security in the IoT, in the implementation of the present invention, the root key 2 is introduced, and the message 6 is further encrypted and communicated and decrypted during authentication and registration of the device as in FIDO. An authentication decision is made to raise the level of security.

That is, the first message 6 is encrypted by the first root key 2 in the authentication requester 10, while the second message 6 ′ is the second route in the authenticator 20. It is to be decrypted by the key 2 ' . In this case, the first root key 2 and the second root key 2 'cannot be identical to each other unless the results of encryption and decryption are not the same. Therefore, in order to pass authentication, these first and second root keys 2 , 2 ') need to be identical to each other.

The root key (2, '2) referred to in the present invention is a device stored in the authentication requester 10, that is, a device that attempts to' challenge 'to access an external device or a FIDO system for authentication. It is not necessary for the device on the challenge side, that is, the authenticator 20, to have it in advance. However, even if the authenticator 20 is provided with the root key 2 'in advance, it does not depart from the scope of the present invention. On the contrary, even if the authenticator 20 is not provided in advance, the information received from the authentication requester 10 is provided. By using the root key 2 'may be configured to be generated. Using these root keys 2, 2 ', the message 6 for signing and authentication can be silently communicated between the device and the device-to-device.

In the present invention, after authentication using the root keys 2, 2 'is completed, subsequent encryption and decryption on the channel established between the device and the device thereafter uses the root keys 2, 2'. Because it can be implemented, it can be recognized as a secure connection line.

In particular, the first root key 2 is preferably configured to be generated by decrypting the original root key (1) encrypted in the authentication requester (10). To this end, the encrypted original root key 1 may be stored in advance in a secure storage device (not shown).

Since the original root key 1 is stored in a secure state in advance in the secure storage device, even if hacking is performed, the root key 1 is difficult to be exposed, and even if exposed, it is safe because it cannot be decrypted.

In addition, the second root key 2 'is not provided in the authenticator 20 in advance. The authentication requester 10 provides the authenticator 20 with the first root key 2. Information may be sent, and the authenticator 20 may be configured to extract a second root key 2 'which is the same as the first root key 2 from this information. As one such configuration, the information can be made up of encryption and hash processing results.

1 and 2, together with the encrypted first message 7 in the authenticator 20 in the authentication requester 10, the first hash value of the first root key 2 is used. that the encrypted first hash value (4) resulting from (3), the first encrypted by using a hash value (3) generated from the first root key (2), a first root key (5), Can be configured to be transmitted.

In this case, the hash processing of the first hash value 3 may be performed using a predetermined hash processing routine, for example, SHA-256 (an encryption value seed of a key of a random value and a root key 2). The encryption of the encrypted first hash value 4 may be performed using a predetermined encryption processing routine, for example, an Elliptic Curve Integrated Encrypt Scheme (ECIES). For example, the hash value 3 may be used to encrypt the encrypted first root key 5.

In this case, Fig. 1 and as shown in Figure 3, the second root key (2 ') in the authentication device 20, the encrypted is decoded from a first hash value (4) formed in decoding a second hash value ( 3 ' ), it is preferably configured to be decrypted and generated from the encrypted first root key (5).

Here, the decoding of the decoded second hash value 3 'may be performed to use ECIES.

Thus, even if the root key is not provided in the authenticator 20 in advance, the root key is obtained by using the encrypted first root key 5 and the encrypted first hash value 4 transmitted from the authentication requester 10. (2 ') can be generated, so that the data used for encryption / decryption and hash as well as the encryption and decryption method and hash method preset between the authentication requester 10 and the authenticator 20 can be verified. So that security is more thorough.

On the other hand, if the hashed second hash value 3 '' generated from the second root key 2 'matches the decrypted second hash value 3', the encrypted first message 7 Preferably, the second root key 2 'is allowed to be used for decryption.

According to this configuration, a very low coincidence condition that the result value 3 'by decryption of the encrypted hash value and the result value 3' 'by hash after decryption of the root key encrypted by another root coincide with each other. It is determined only if the second root key 2 'is satisfied, i.e., coincidence with the first root key 2, and the decryption of the message using the second root key 2' is performed. This further enhances security.

<FIDO-based Implicit Authentication System>

On the other hand, the FIDO-based implicit authentication system according to an embodiment of the present invention, an authentication system based on the FIDO between the authentication requester 10 requesting authentication and the authenticator 20 responding to the authentication request.

The authentication requester 10 may include a first message encryption unit (not shown ) for generating an encrypted first message 7 from the first message 6 for authentication, and the encrypted first message ( And a transmitter (not shown ) for transmitting 7) to the authenticator 20, wherein the authenticator 20 decrypts the encrypted first message 7 to a second message 6 '. A first message decryption unit (not shown ) for generating a) and an authentication decision unit (not shown) for determining an authentication when the first message 6 and the second message 6 'are the same or corresponding. Characterized in that configured.

<Program stored in recording medium>

In addition, the program stored in the recording medium according to an embodiment of the present invention is a program stored in the recording medium recording a program for executing the method in the authentication requester and the authenticator comprising an information processing device, the method, It is an implicit authentication method based on FIDO between an authentication requestor requesting authentication and an authenticator responding to an authentication request.

As shown in FIG. 5, the FIDO-based implicit authentication method, system, and program according to an embodiment of the present invention can be efficiently used for LPWAN communication devices frequently used in IoT, for example, by removing user interaction. .

Although the embodiments of the present invention have been described above with reference to the accompanying drawings, those skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing the technical spirit or essential features thereof. I can understand that. Therefore, it should be understood that the embodiments described above are exemplary in all respects and not restrictive.

The invention can be used in the industry of FIDO based implicit authentication methods, systems and programs.

1: original encrypted root key
2: decrypted first root key 2 ': decrypted second root key
3: first hash value 3 ', 3'': second hash value
4, 4 ': encrypted first hash value
5, 5 ': encrypted first root key
6: original first message 6 ': second decrypted message
7, 7 ': encrypted first message

Claims (7)

An authentication method based on FIDO between an authentication requester requesting authentication and an authenticator responding to an authentication request.
An encrypted first message is generated from the first message for authentication in the authentication requester and transmitted to the authenticator,
The encrypted first message is decrypted by the authenticator to generate a second message ,
If the first message and the second message is the same or corresponding to the authentication is determined
FIDO-based implicit authentication method characterized in that. The method according to claim 1,
The first message is encrypted by a first root key in the authentication requester,
The second message is decrypted by a second root key in the authenticator.
FIDO-based implicit authentication method characterized in that. The method according to claim 2,
The first root key is generated by decrypting the original root key encrypted by the authentication requester.
FIDO-based implicit authentication method characterized in that. The method according to claim 2,
In the authentication requester, together with the encrypted first message, an encrypted first hash value generated from a first hash value of the first root key and from the first root key using the first hash value. The generated encrypted first root key is sent to the authenticator,
The second root key is generated by decrypting from the encrypted first root key using the decrypted second hash value formed by decrypting from the encrypted first hash value in the authenticator.
FIDO-based implicit authentication method characterized in that. The method according to claim 4,
If the hashed second hash value generated from the second root key matches the decrypted second hash value, the second root key is allowed to be used to decrypt the encrypted first message.
FIDO-based implicit authentication method characterized in that. An authentication system based on FIDO between an authentication requester requesting authentication and an authenticator responding to an authentication request.
The authentication requester,
And the first message encryption unit for generating an encrypted first message from the first message for authentication,
Transmitter for transmitting the encrypted first message to the authenticator
It is configured to include,
The authenticator,
A first message decryption unit configured to decrypt the encrypted first message to generate a second message ;
An authentication decision unit which determines by authentication when the first message and the second message are the same or corresponding .
Configured to include
FIDO-based implicit authentication system characterized in that. Claim that the authentication based on the FIDO between the authenticator in response to the authentication requester and the authentication request to request 1 to claim 5 in including the authentication method for the information processing device according to any one from the authentication challenge group authenticator comprising A program stored in a recording medium that records a program for execution.

Images