KR20210083992A - Method of authenticating entity for lightweight device and apparatuses performing the same - Google Patents

Abstract

Disclosed are a dedicated entity authentication method for a lightweight device and a device for performing the same. According to an embodiment of the present invention, the dedicated entity authentication method for the lightweight device includes the steps of: authenticating, by a first electronic device, an object authentication server; transmitting, by the first electronic device, an ID of a second electronic device to be accessed by the first electronic device to the entity authentication server in response to successful authentication with respect to the entity authentication server; and authenticating, by the first electronic device, the second electronic device based on an authentication result of the entity authentication server with respect to the second electronic device.

Description

Lightweight device-only object authentication method and devices for performing the same {METHOD OF AUTHENTICATING ENTITY FOR LIGHTWEIGHT DEVICE AND APPARATUSES PERFORMING THE SAME}

The following embodiments relate to a method for authenticating an object dedicated to a lightweight device and apparatuses for performing the same.

Recently, the lightweight device market is expanding. For example, recently, many people and devices may be connected through a smart device and/or a light-weight device that is a terminal such as a sensor. A lightweight device may have the characteristics of being very small, low power and low cost.

However, it may be difficult to apply a conventional encryption algorithm, a message authentication protocol, and/or an entity authentication protocol that requires a large amount of computation to a lightweight device.

In recent years, security issues such as authentication of users for lightweight devices and data, information integrity, hacking, invasion of privacy and/or reliability verification, etc. are emerging due to the expansion of the lightweight device startup. For example, in recent years, there is a demand for a new reliable security platform with lightweight features suitable for lightweight devices.

The reliability of the conventional security system implemented in software may be characterized in that it is proportional to the amount of computation of the algorithm. Therefore, the conventional security system is weak in that it relies on algorithmic operation.

In the conventional security system, when a key is shared between a client and a server, the key must be stored in a memory in a lightweight device. The conventional security system has a disadvantage in that it contains a risk of hacking due to storage of a shared key in a lightweight device. The conventional security system has a disadvantage in that it is difficult to cryptographically analyze and/or prove the reliability.

Embodiments may provide a technology for performing object authentication for an electronic device through a security chip, which is hardware based on TRNG PUF and CRP PUF, and an object authentication server.

An object authentication method according to an embodiment includes: authenticating, by a first electronic device, an object authentication server; and a second electronic device to which the first electronic device accesses in response to successful authentication with respect to the object authentication server by the first electronic device. transmitting the device ID to the entity authentication server; and authenticating, by the first electronic device, the second electronic device based on an authentication result of the entity authentication server for the second electronic device.

The authenticating of the entity authentication server includes generating a random number through a first physical unclonable function (PUF) circuit included in the first electronic device, and using the random number as a challenge signal for authenticating the entity authentication server. Transmitting to an entity authentication server; inputting the challenge signal to a second PUF circuit included in the first electronic device to output a response signal; and ciphertext generated by using the challenge signal from the entity authentication server It may include the steps of receiving, decrypting the ciphertext using the response signal, and authenticating the entity authentication server by comparing the decryption value obtained by decrypting the ciphertext with the challenge signal.

The step of authenticating the object authentication server by comparing the decryption value obtained by decrypting the ciphertext with the challenge signal is a step of determining that the authentication of the object authentication server is successful when the decryption value and the challenge signal are the same, or the decryption If the value and the challenge signal are not the same, determining that the authentication of the entity authentication server fails.

The object authentication method may further include the step of performing, by the first electronic device, access to the second electronic device through the object authentication server in response to successful authentication with respect to the object authentication server and the second electronic device. have.

The entity authentication method may further include generating, by the entity authentication server, the ciphertext in response to the challenge signal, and transmitting, by the entity authentication server, the ciphertext to the first electronic device.

The generating of the cipher text includes extracting a response signal corresponding to the challenge signal from a CRP list (challenge to response pairs list) in response to the challenge signal, and encrypting the challenge signal using the extracted response signal. , generating the ciphertext.

The object authentication method includes: authenticating, by the object authentication server, the second electronic device in response to the ID of the second electronic device; The method may further include transmitting to a device, and transmitting, by the entity authentication server, a request for access to the second electronic device of the first electronic device to the second electronic device.

In the step of authenticating the second electronic device in response to the ID of the second electronic device by the entity authentication server, a random number is generated and the random number is transmitted to the second electronic device as a challenge signal for authenticating the second electronic device. transmitting, extracting a response signal corresponding to the challenge signal from a CRP list corresponding to the second electronic device, and receiving a ciphertext generated using the challenge signal from the second electronic device; , decrypting the ciphertext using the extracted response signal, and authenticating the second electronic device by comparing a decryption value obtained by decrypting the ciphertext with the challenge signal.

An electronic device according to an embodiment includes a transceiver communicating with an entity authentication server, authenticating the entity authentication server, and the different electronic devices based on authentication results for different electronic devices to which the electronic device of the entity authentication server will access. It contains a security chip that authenticates the device.

The security chip generates a random number, a first PUF circuit that outputs the random number as a first challenge signal for authenticating the entity authentication server, and a second PUF circuit that outputs a first response signal in response to the first challenge signal a PUF circuit, a decrypter that receives a first cipher text generated by using the first challenge signal from the entity authentication server, and decrypts the first cipher text using the first response signal, and decrypts the first cipher text an authenticator for authenticating the entity authentication server by comparing a first decryption value with the first challenge signal, and authenticating the different electronic device in response to successful authentication of the entity authentication server for the different electronic device have.

In the security chip, the second PUF circuit encrypts the second challenge signal using a second response signal output by the entity authentication server in response to a second challenge signal for authenticating the electronic device, whereby a second ciphertext The device may further include an encryptor that generates a ciphertext, wherein the second ciphertext may be transmitted to the object authentication server in order for the object authentication server to authenticate the electronic device.

The transceiver may transmit the ID of the different electronic device to the entity authentication server in response to successful authentication with respect to the entity authentication server.

The electronic device may perform access to the different electronic device through the entity authentication server in response to successful authentication of the entity authentication server and the different electronic device.

1 shows an example for explaining an entity authentication method.
2 shows an example for explaining a physically non-replicable function for generating a random number.
3 shows an example for explaining a physically non-replicable function for generating a challenge-response pair.
4 is a schematic block diagram of an entity authentication system according to an embodiment.
FIG. 5 is a schematic block diagram of the first electronic device shown in FIG. 4 .
FIG. 6 is a schematic block diagram of the entity authentication server shown in FIG. 4 .
7A illustrates an example for describing an object authentication operation between electronic devices and an object authentication server.
7B illustrates another example for describing an object authentication operation between electronic devices and an object authentication server.
8 is a flowchart illustrating entity authentication for authenticating a second electronic device to be accessed by the first electronic device illustrated in FIG. 4 .

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. However, since various changes may be made to the embodiments, the scope of the patent application is not limited or limited by these embodiments. It should be understood that all modifications, equivalents and substitutes for the embodiments are included in the scope of the rights.

Terms used in the examples are used for the purpose of description only, and should not be construed as limiting. The singular expression includes the plural expression unless the context clearly dictates otherwise. In the present specification, terms such as “comprise” or “have” are intended to designate that a feature, number, step, operation, component, part, or combination thereof described in the specification exists, but one or more other features It should be understood that this does not preclude the existence or addition of numbers, steps, operations, components, parts, or combinations thereof.

Terms such as first or second may be used to describe various elements, but the elements should not be limited by the terms. The terms are used only for the purpose of distinguishing one element from another element, for example, without departing from the scope of rights according to the concept of the embodiment, a first element may be named as a second element, and similarly The second component may also be referred to as the first component.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which the embodiment belongs. Terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related art, and should not be interpreted in an ideal or excessively formal meaning unless explicitly defined in the present application. does not

In addition, in the description with reference to the accompanying drawings, the same components are given the same reference numerals regardless of the reference numerals, and the overlapping description thereof will be omitted. In the description of the embodiment, if it is determined that a detailed description of a related known technology may unnecessarily obscure the gist of the embodiment, the detailed description thereof will be omitted.

1 shows an example for explaining an entity authentication method.

Entity authentication is a process in which one entity (or one electronic device) authenticates (or verifies) the identity of another entity (or different electronic device) having the correct key. Entity authentication authenticates an asserter, an entity that asserts entity authentication, and enables communication between devices on which entity authentication has been performed. In this case, the entire communication and authentication between devices is maintained for one session.

Existing entity authentication methods perform entity authentication through various methods such as a challenge-response method, password, bit commitment, and zero-knowledge proof.

For example, as shown in FIG. 1 , the existing object authentication method performs object authentication between a first device (alice) and a second device (bob) through an object authentication protocol. In this case, the entity authentication protocol may be a protocol based on a pseudo-random number generator, an encryption algorithm, a decryption algorithm, and a shared key.

)를 분배 및 공유하는 절차가 이미 수행되어 있을 수 있다.Specifically, the first device (alice) and the second device (bob) perform entity authentication through the existing entity authentication method. A first alice is a claimant claiming entity authentication. The second device (bob) is a verifier that proves the entity authentication. The first device (alice) and the second device (bob) are pre-keyed through a secure channel.

) may already have been distributed and shared.

)를 생성한다. 제2 기기(bob)은 제1 난수(

)를 여러 개체들 중에서 제1 기기(alice)에 전송한다.First, the second device (bob) uses a pseudo-random number generator to perform entity authentication for the first device (alice) with a first random number (

) is created. The second device (bob) is the first random number (

) to the first device (alice) among several entities.

)를 수신하고, 제2 기기(bob)와 사전에 공유된 사전 공유 키(

) 및/또는 사전에 약속된 암호화 알고리즘을 이용하여 제1 난수(

)를 암호화한다.Thereafter, the first device (alice) transmits the first random number (

), and a pre-shared key previously shared with the second device (bob) (

) and/or a first random number (

) is encrypted.

)가 암호화된 암호문(E)을 생성하고, 생성된 암호문(E)을 제2 기기(bob)에 전송한다. 암호문(E)은

,

를 포함할 수 있다.The first device (alice) uses the first random number (

) generates an encrypted cipher text (E), and transmits the generated cipher text (E) to the second device (bob). The ciphertext (E) is

,

may include.

)를 이용하여 수신된 암호문(E)을 복호화한다.Finally, the second device (bob) receives the ciphertext (E) transmitted from the first device (alice), the pre-shared key (

) to decrypt the received ciphertext (E).

)를 생성한다.The second device (bob) is a second random number (E) decrypted through the decryption process

) is created.

)와 제2 난수(

)를 비교하는 과정을 통해 제1 기기(alice) 및 제2 기기(bob) 간의 개체 인증, 즉 제1 기기(alice)를 인증한다. 제1 난수(

)와 제2 난수(

)가 일치하는 경우, 제2 기기(bob)는 제1 기기(alice)에 대한 인증을 성공으로 결정하여 제1 기기(alice)를 인증한다.The second device (bob) is the first random number (

) and the second random number (

), the entity authentication between the first device (alice) and the second device (bob), that is, the first device (alice) is authenticated through the process of comparing. first random number (

) and the second random number (

), the second device (bob) determines that the authentication for the first device (alice) is successful and authenticates the first device (alice).

FIG. 2 shows an example for explaining a physically non-replicable function for generating a random number, and FIG. 3 shows an example for explaining a physically non-replicable function for generating a challenge-response pair.

The physically unclonable function (PUF) system may be a system based on a complementary metal-oxide semiconductor (CMOS) process. The CMOS process may be a process having advantages of high integration and low cost.

A physical unclonable function (PUF) system can rapidly and randomly generate a unique value based on a specific input. A particular input may be a challenge. The unique value is a value corresponding to an input and may be an ID or a response. When a physically non-replicable chip using CMOS is produced, a unique value may be generated due to a process mismatch even when different chips having the same structure (or the same layout) are produced.

The fact that the physically non-replicable function has the same physical value corresponding to the input by the same input regardless of changes in the external environment can be expressed as a probabilistic property of reproducibility and/or stability. The probabilistic property may be one of the important performance indicators of the physically non-replicable function. The fact that the physically non-replicable function has different physical values for different inputs can be expressed as uniqueness, randomness, or identity.

Referring to FIG. 2 , a true random number generator physical unclonable function (TRNG PUF) for generating random numbers may generate a random random number value according to a specific signal (response generation start signal). A random random number value may be determined by a process inconsistency.

The TRNG PUF may generate a different random number value for each chip even if the chips have the same structure. A random number value generated by one chip may have a completely different random number value when it is regenerated.

Referring to FIG. 3 , a challenge to response pairs physical unclonable function (CRP PUF) may generate a unique random response to a specific challenge input. A challenge-response pair (CRP) may be a pair between a particular challenge and a response corresponding to the challenge. The challenge-response pair list (CRP List) may be a list of challenge-response pairs.

Even if the CRP PUF is a chip having the same structure, there may be a feature of having a different challenge-response pair for each chip. However, the CRP PUF should generate the same response to the same challenge input within one chip. CRP PUFs must generate different responses for different challenge inputs.

4 is a schematic block diagram of an entity authentication system according to an embodiment.

The object authentication system 10 may be an object authentication system dedicated to lightweight devices that replaces the existing object authentication system. The entity authentication system 10 may perform entity authentication using the entity authentication technique based on the physically impossible function described with reference to FIGS. 2 and 3 .

The object authentication system 10 includes a first electronic device 100 , an object authentication server 300 , and a second electronic device 500 .

The first electronic device 100 and the second electronic device 500 may be lightweight devices having the same structure. The first electronic device 100 and the second electronic device 500 may be electronic devices in which a processor (or a microprocessor), a memory, and a software-based CRP and random number generator are difficult to be installed (or embedded, mounted).

The electronic devices 100 and 500 may be various devices such as IoT devices or portable electronic devices that do not require a large amount of computation. Portable electronic devices include a laptop computer, a mobile phone, a smart phone, a tablet PC, a mobile internet device (MID), a personal digital assistant (PDA), and an enterprise digital assistant (EDA). ), digital still camera, digital video camera, PMP (portable multimedia player), PND (personal navigation device or portable navigation device), handheld game console, e-book (e-book) may be implemented as a smart device. In this case, the smart device may be implemented as a smart watch or a smart band.

The first electronic device 100 and the second electronic device 500 transmit a CRP list (challenge to response pairs list, or CRP table) corresponding to each electronic device through a secure channel to the entity authentication server 300 . can be shared with For example, the entity authentication server 300 may store a first CRP list corresponding to the first electronic device 100 and a second CRP list corresponding to the second electronic device 500 in a database. The first CRP list is a CRP list in which a pair of a challenge signal and a response signal that can be input and output by the first electronic device 100 is sorted, and the second CRP list can be input and output by the second electronic device 500 The challenge signal and the response signal pair may be an ordered CRP list.

The first electronic device 100 and the second electronic device 500 may perform object authentication for each other through the object authentication server 300 in order to access and communicate with each other. For example, the first electronic device 100 pre-authenticates the object authentication server 300 in order to access the second electronic device 500 and perform communication, and the second electronic device 100 through the authenticated object authentication server 300 . The electronic device 500 may be authenticated. The second electronic device 500 also pre-authenticates the object authentication server 300 in order to access the first electronic device 100 and perform communication, and the first electronic device 100 through the authenticated object authentication server 300 . ) can be verified.

The first electronic device 100 and the second electronic device 500 may perform entity authentication through a security chip that is hardware including a TRNG PUF and a CRP PUF. The security chip included in each of the first electronic device 100 and the second electronic device 500 may be a semiconductor chip based on a TRNG PUF and a CRP PUF.

The electronic devices 100 and 500 may perform entity authentication without a processor (or microprocessor), memory, software-based CRP, and random number generator. That is, the electronic devices 100 and 500 do not generate a cryptographically secure random number through an operation based on an existing software algorithm, but perform object authentication using hardware that is a PUF-based semiconductor that relies on natural laws. .

Because object authentication through the electronic devices 100 and 500 does not require storing the shared key in the internal memory, security and reliability can be efficiently improved, and the existing object requiring a large amount of computation difficult to utilize in a light-weight device. The authentication method can be substituted.

In addition, object authentication through the security chip and object authentication server 300 can solve the vulnerability problem of the existing object authentication method (or the existing object authentication flatbom, the existing security platform) that is dependent on algorithm operation through software, and , Low Cost, Low Power, High Efficiency authentication system can be used in various fields where it is difficult to apply a security system using software.

As described above, the first electronic device 100 and the second electronic device 500 may perform the object authentication by performing the same object authentication operation. Since the structures and object authentication operations of the first electronic device 100 and the second electronic device 500 are the same, hereinafter, for convenience of explanation, the first electronic device 100 connects to the second electronic device 500 . Assuming it is, explain it. All contents of the first electronic device 100 may be applied to the second electronic device 500 , and all contents of the second electronic device 500 may be applied to the first electronic device 100 .

FIG. 5 is a schematic block diagram of the first electronic device shown in FIG. 4 .

The first electronic device 100 may include a transceiver 110 and a security chip 130 .

The transceiver 110 may communicate with the entity authentication server 300 . Also, the transceiver 110 may communicate with the second electronic device 500 through the entity authentication server 300 .

As shown in FIG. 5 , the transceiver 110 is implemented to be distinct from the security chip 130 , but is not limited thereto. For example, the transceiver 110 may be implemented in the security chip 130 .

The object authentication-related operations performed by the security chip 130 , for example, an ID transmission operation of the second electronic device 500 , an authentication result reception operation for the second electronic device 500 , and an ciphertext transmission operation are performed by the transceiver 110 . ) can be done through The transceiver 110 may perform a communication operation in conjunction with the security chip 130 .

The security chip 130 performs the object authentication of the first electronic device 100 when the first electronic device 100 performs object authentication on the second electronic device 500 and the second electronic device 500 performs object authentication on the first electronic device 100 . When performing, you can perform the necessary entity authentication-related actions.

The security chip 130 may include a first PUF circuit 131 , a second PUF circuit 133 , a decrypter 135 , an encryptor 137 , and an authenticator 139 . The security chip 130 may be implemented as a printed circuit board (PCB) such as a motherboard, an integrated circuit (IC), and/or a system on chip (SoC).

The first PUF circuit 131 may be used for object authentication of the first electronic device 100 with respect to the second electronic device 500 . The first PUF circuit 131 may be a TRNG PUF-based circuit. The first PUF circuit 131 may generate a random number. The first PUF circuit 131 may output the generated random number to the entity authentication server 300 and the second PUF circuit 133 as a challenge signal for authenticating the entity authentication server 300 .

When the challenge signal output from the first PUF circuit 131 is transmitted to the entity authentication server 300 , the ID (or identifier) of the first electronic device 100 is also transmitted to the entity authentication server 300 together with the challenge signal. can be The ID of the first electronic device 100 may be transmitted as included in the challenge signal, transmitted independently, or may be packetized together with the challenge signal and transmitted as one packet. The packet may include a challenge signal and an ID of the first electronic device 100 .

The second PUF circuit 133 is to be used for object authentication for the second electronic device 500 of the first electronic device 100 and object authentication for the first electronic device 100 of the second electronic device 500 . can The second PUF circuit 133 may be a CRP PUF-based circuit. The second PUF circuit 133 may output a response signal in response to an input signal.

For example, the second PUF circuit 133 may output a response signal used for object authentication for the second electronic device 500 of the first electronic device 100 . For example, the second PUF circuit 133 may output a response signal in response to a challenge signal for authenticating the entity authentication server 300 . The challenge signal output from the first PUF circuit 131 may be input to the second PUF circuit 133 as an input signal, and the second PUF circuit 133 may output a response signal as an output signal.

As another example, the second PUF circuit 133 may output a response signal used for object authentication of the first electronic device 100 of the second electronic device 500 . For example, the second PUF circuit 133 may generate a response signal in response to a challenge signal generated by the entity authentication server 300 to authenticate the first electronic device 100 . The challenge signal generated by the entity authentication server 300 may be input to the second PUF circuit 133 as an input signal, and the second PUF circuit 133 may output a response signal as an output signal.

The decryptor 135 may be used for object authentication of the first electronic device 100 with respect to the second electronic device 500 . For example, the decryptor 135 may receive the encrypted text generated by using the challenge signal output by the first PUF circuit 131 from the entity authentication server 300 . The cipher text may be a cipher text generated by the object authentication server 300 . The decryptor 135 may decrypt the encrypted text generated by the entity authentication server 300 using a response signal corresponding to the challenge signal output by the first PUF circuit 131 .

The encryptor 137 may be used for object authentication of the second electronic device 500 with respect to the first electronic device 100 . The encryptor 137 may generate a ciphertext so that the first electronic device 100 is authenticated by the entity authentication server 300 and the second electronic device 500 . For example, the encryptor 137 may generate a ciphertext by encrypting the challenge signal generated by the entity authentication server 300 using a response signal corresponding to the challenge signal generated by the entity authentication server 300 . . The encryptor 137 may transmit the encrypted text generated by the encryptor 137 to the entity authentication server 300 through the transceiver 110 .

The authenticator 139 may be used for object authentication of the first electronic device 100 with respect to the second electronic device 500 . The authenticator 139 may authenticate the entity authentication server 300 by comparing the decryption value obtained by decrypting the ciphertext generated by the entity authentication server 300 with the challenge signal output by the first PUF circuit 131 . When the decrypted value and the challenge signal output from the first PUF circuit 131 are the same, the authenticator 139 may determine that the authentication of the entity authentication server 300 is successful. When the decryption value and the challenge signal output by the first PUF circuit 131 are not the same, the authenticator 139 may determine that the authentication of the entity authentication server 300 is failed.

The authenticator 139 may authenticate the second electronic device 500 in response to the authentication success of the object authentication server 300 for the second electronic device 500 . When the entity authentication server 300 authenticates the second electronic device 500 , the authenticator 139 may determine the authentication of the second electronic device 500 as success. When the entity authentication server 300 does not authenticate the second electronic device 500 , the authenticator 139 may determine that authentication of the second electronic device 500 fails.

The first electronic device 100 responds to the authentication success of the object authentication server 300 and the second electronic device 500 performed by the authenticator 139 through the object authentication server 300 to the second electronic device ( 500) to connect. When the object authentication server 300 and the second electronic device 500 are authenticated, the first electronic device 100 accesses the second electronic device 500 through the object authentication server 300 to access the second electronic device ( 500) and can communicate. When the object authentication server 300 and the second electronic device 500 are not authenticated, the first electronic device 100 does not connect to the second electronic device 500 through the object authentication server 300 and Communication with the electronic device 500 may not be performed.

For convenience of description, an object authentication operation for authenticating the second electronic device 500 to which the first electronic device 100 will access will be described below. The object authentication operation for authenticating the first electronic device 100 to which the second electronic device 500 will access may be the same as the object authentication operation for authenticating the second electronic device 500 to which the first electronic device 100 will access. can

FIG. 6 is a schematic block diagram of the entity authentication server shown in FIG. 4 .

In FIG. 6 , an object authentication operation performed by the object authentication server 300 to authenticate the second electronic device 500 to which the first electronic device 100 will access will be described. This is substantially the same as the object authentication operation performed by the object authentication server 300 to authenticate the first electronic device 100 to which the second electronic device 500 will access.

The entity authentication server 300 may include a memory 310 and a processor 330 .

The memory 310 may store instructions (or programs) executable by the processor 330 . For example, the instructions may include instructions for executing an operation of the processor 330 and/or an operation of each component of the processor 330 .

The processor 330 may process data stored in the memory 310 . The processor 330 may execute computer readable code (eg, software) stored in the memory 310 and instructions induced by the processor 330 .

The processor 330 may be a hardware-implemented data processing device having a circuit having a physical structure for executing desired operations. For example, desired operations may include code or instructions included in a program.

For example, a data processing device implemented as hardware includes a microprocessor, a central processing unit, a processor core, a multi-core processor, and a multiprocessor. , an Application-Specific Integrated Circuit (ASIC), and a Field Programmable Gate Array (FPGA).

The processor 330 may control the overall operation of the entity authentication server 300 . For example, the processor 330 may control the operation of the memory 310 .

The processor 330 may generate a cipher text in response to the challenge signal transmitted from the first electronic device 100 , and transmit the generated cipher text to the first electronic device 100 .

For example, the processor 330 based on the ID of the first electronic device 100 transmitted together with the challenge signal transmitted from the first electronic device 100, the first CRP of the first CRP list and the second CRP list You can get (or extract) a list. The processor 330 may extract a response signal corresponding to the challenge signal transmitted from the first electronic device 100 from the first CRP list in response to the challenge signal transmitted from the first electronic device 100 . The processor 330 may generate a ciphertext by encrypting the challenge signal transmitted from the first electronic device 100 using the extracted response signal.

The processor 330 may authenticate the second electronic device 500 in response to the ID of the second electronic device 500 transmitted from the first electronic device 100 .

For example, the processor 330 may generate a random number based on the TRNG PUF in response to the ID of the second electronic device 500 . The processor 330 may transmit the generated random number to the second electronic device 500 as a challenge signal for authenticating the second electronic device 500 .

The processor 330 may extract a response signal corresponding to the challenge signal generated by the processor 330 from the second CRP list.

The processor 330 may receive a ciphertext generated by using the challenge signal generated by the processor 330 from the second electronic device 500 that has received the challenge signal generated by the processor 330 . In this case, the encrypted text may be an encrypted text generated by the second electronic device 500 .

The processor 330 may decrypt the encrypted text generated by the second electronic device 500 using the extracted response signal.

The processor 330 may authenticate the second electronic device 500 by comparing the decryption value obtained by decrypting the ciphertext generated by the second electronic device 500 with the challenge signal generated by the processor 330 . When the decryption value and the challenge signal generated by the processor 330 are the same, the processor 330 may determine the authentication of the second electronic device 500 as success. When the decryption value and the challenge signal generated by the processor 330 are not the same, the processor 330 may determine the authentication of the second electronic device 500 as failure.

The processor 330 may transmit an authentication result for the second electronic device 500 to the first electronic device 100 .

The processor 330 transmits to the second electronic device 500 an access request for the second electronic device 500 of the first electronic device 100 in response to the authentication success for the second electronic device 500 to the second electronic device 500 . The first electronic device 100 and the second electronic device 500 may be connected.

7A illustrates an example for describing an object authentication operation between electronic devices and an object authentication server, and FIG. 7B illustrates another example for describing an object authentication operation between electronic devices and an object authentication server.

Referring to FIG. 7A , the individual electronic device is a lightweight device and does not include a memory for storing a shared key, but a TRNG PUF circuit and a CRP PUF circuit may be built-in. In the TRNG PUF, a random number distribution map and an autocorrelation function graph may be performance indicators of authentication randomness. In the CRP PUF, a Hamming distance and a bit error rate may be performance indicators of authentication identification and authentication stability.

Even if the electronic devices are designed to have the same structure, since the input/output pair of the physically non-replicable function is different for each electronic device, any electronic device cannot find out or store the secret key of another electronic device.

Accordingly, object authentication cannot be directly performed by an individual electronic device, but may be performed through a trusted object authentication server 300 that knows the PUF input/output value of each electronic device.

Referring to FIG. 7B , the entity authentication server 300 may perform entity authentication between the second to fourth electronic devices 500 , 700 , and 900 based on the first electronic device 100 .

As described above, the entity authentication server 300 performs entity authentication between the second electronic device 500 , 700 , and 900 based on the first electronic device 100 , but is not limited thereto. . For example, the object authentication server 300 may include the first to fourth electronic devices 100 and 500, based on any one of the second to fourth electronic devices 500 , 700 , and 900 . 700 and 900), entity authentication may be performed between the other electronic devices except for any one electronic device.

That is, entity authentication between the electronic devices 100 , 500 , 700 , and 900 is performed through an entity authentication process based on a physically non-replicable function, and thus may be applicable and effective to the entity authentication server 300 and the lightweight device.

Accordingly, the most efficient method of object authentication may be a case in which object authentication is performed between the electronic devices 100 , 500 , 700 and 900 through the object authentication server 300 . In the object authentication through the object authentication server 300, the secret key is not stored inside the lightweight device, and object authentication is performed whenever necessary through a generation process based on a physically impossible function, so security and hardware (HW) ) may have an advantage. Entity authentication through the entity authentication server 300 can overcome the problem that the existing entity authentication method is difficult to be employed in lightweight devices, and can lower the risk of hacking.

8 is a flowchart illustrating entity authentication for authenticating a second electronic device to be accessed by the first electronic device illustrated in FIG. 4 .

The first electronic device 100 may share the first CRP list corresponding to the first electronic device 100 with the entity authentication server 300 through a secure channel. The second electronic device 500 may share the second CRP list corresponding to the second electronic device 500 with the entity authentication server 300 through a secure channel.

The first electronic device 100 may authenticate the entity authentication server 300 to access the second electronic device 500 .

For example, the first electronic device 100 generates a random number based on the TRNG PUF through the first PUF circuit 131 included in the first electronic device 100 and authenticates the generated random number as a first challenge signal. It can be transmitted to the server 300 (811). In this case, the first electronic device 100 may transmit the ID of the first electronic device 100 together with the first challenge signal to the entity authentication server 300 .

The first electronic device 100 inputs a first challenge signal to the second PUF circuit 133 included in the first electronic device 100 so that the second PUF circuit 133 receives a first response corresponding to the first challenge signal. A response signal can be output.

The entity authentication server 300 may receive the first challenge signal and the ID of the first electronic device 100 transmitted from the first electronic device 100 ( S831 ).

The entity authentication server 300 may extract a first CRP list corresponding to the first electronic device 100 from among the stored CRP lists using the ID of the first electronic device 100 .

The entity authentication server 300 may extract a response signal corresponding to the first challenge signal from the first CRP list.

The entity authentication server 300 may generate the first encrypted text by encrypting the first challenge signal using the extracted response signal. The extracted response signal may be an encryption key for encrypting the first challenge signal. The first cipher text may be a cipher text in which the first challenge signal is encrypted.

The entity authentication server 300 may transmit the first encrypted text to the first electronic device 100 (832).

The first electronic device 100 may receive the first cipher text transmitted from the entity authentication server 300 ( 812 ) and decrypt the first cipher text using the first response signal ( 813 ). The first response signal may be a decryption key for decrypting the first ciphertext.

The first electronic device 100 may authenticate the entity authentication server 300 by comparing the first decryption value obtained by decrypting the first ciphertext with the first challenge signal ( 814 ). When the first decryption value and the first challenge signal are the same, the first electronic device 100 may determine that the authentication of the entity authentication server 300 is successful ( 814a ). When the first decryption value and the first challenge signal are not the same, the first electronic device 100 may determine the authentication of the entity authentication server 300 as failure (814b).

When the object authentication server 300 is authenticated, the first electronic device 100 transmits the ID of the second electronic device 500 to the object authentication server 300 to request access to the second electronic device 500 . can (815).

The entity authentication server 300 may authenticate the second electronic device 500 in response to a request for access to the second electronic device 500 of the first electronic device 100 .

For example, the entity authentication server 300 may receive the ID of the second electronic device 500 ( 833 ) and generate a random number based on the TRNG PUF in response to the ID of the second electronic device 500 .

The entity authentication server 300 may transmit the generated random number as a second challenge signal to the second electronic device 500 ( 834 ).

The entity authentication server 300 may extract a second CRP list corresponding to the second electronic device 500 from among the stored CRP lists using the ID of the second electronic device 500 .

The entity authentication server 300 may extract a response signal corresponding to the second challenge signal from the second CRP list.

The second electronic device 500 may receive the second challenge signal transmitted from the entity authentication server 300 ( 851 ).

The second electronic device 500 may input the second challenge signal to the second PUF circuit included in the second electronic device 500 and output a second response signal corresponding to the second challenge signal. In this case, the second PUF circuit included in the second electronic device 500 may be a CRP PUF-based circuit like the second PUF circuit 133 included in the first electronic device 100 .

The second electronic device 500 may generate the second cipher text by encrypting the second challenge signal using the second response signal. The second response signal may be an encryption key for encrypting the second challenge signal. The second cipher text may be a cipher text in which the second challenge signal is encrypted.

The second electronic device 500 may transmit the second encrypted text to the entity authentication server 300 ( 852 ).

The entity authentication server 300 may receive the second cipher text transmitted from the second electronic device 500 ( 835 ) and decrypt the second cipher text using the second response signal ( 836 ). The second response signal may be a decryption key for decrypting the second ciphertext.

The entity authentication server 300 may authenticate the second electronic device 500 by comparing the second decryption value obtained by decrypting the second ciphertext with the second challenge signal ( 837 ). When the second decryption value and the second challenge signal are the same, the entity authentication server 300 may determine that the authentication of the second electronic device 500 is successful ( 837a ). When the second decryption value and the second challenge signal are not the same, the entity authentication server 300 may determine that the authentication of the second electronic device 500 fails ( 837b ).

When the second electronic device 500 is authenticated, the object authentication server 300 transmits an access request of the first electronic device 100 to the second electronic device 500 (838) to the first electronic device 100 and the second electronic device 500 may be connected.

For example, the second electronic device 500 may allow the access request of the first electronic device 100 in response to the access request of the first electronic device 100 transmitted from the entity authentication server 300 ( 853). Accordingly, the second electronic device 500 may communicate with the first electronic device 100 by completing object authentication between the first electronic device 100 and the second electronic device 500 ( 854 ).

When the second electronic device 500 is authenticated, the object authentication server 300 transmits an authentication result for the second electronic device 500 to the first electronic device 100 (839) to the first electronic device 100 ) to connect to the second electronic device 500 .

The first electronic device 100 may receive an authentication result for the second electronic device 500 transmitted from the entity authentication server 300 (S817).

The first electronic device 100 completes the object authentication between the first electronic device 100 and the second electronic device 500 according to the authentication success of the second electronic device 500 to connect with the second electronic device 500 It can freely access and perform communication (817).

When the communication session expires, the first electronic device 100 , the object authentication server 300 , and the second electronic device 500 may re-perform the object authentication by repeating the aforementioned object authentication process.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic such as floppy disks. - includes magneto-optical media, and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

The software may comprise a computer program, code, instructions, or a combination of one or more thereof, which configures a processing device to operate as desired or is independently or collectively processed You can command the device. The software and/or data may be any kind of machine, component, physical device, virtual equipment, computer storage medium or device, to be interpreted by or to provide instructions or data to the processing device. , or may be permanently or temporarily embody in a transmitted signal wave. The software may be distributed over networked computer systems, and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

As described above, although the embodiments have been described with reference to the limited drawings, those skilled in the art may apply various technical modifications and variations based on the above. For example, the described techniques are performed in a different order than the described method, and/or the described components of the system, structure, apparatus, circuit, etc. are combined or combined in a different form than the described method, or other components Or substituted or substituted by equivalents may achieve an appropriate result.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (13)

authenticating, by the first electronic device, an object authentication server;
transmitting, by the first electronic device, an ID of a second electronic device to which the first electronic device will access to the object authentication server in response to successful authentication with respect to the object authentication server; and
authenticating, by the first electronic device, the second electronic device based on an authentication result of the object authentication server for the second electronic device;
An object authentication method that includes .
According to claim 1,
The step of authenticating the object authentication server,
generating a random number through a first physical unclonable function (PUF) circuit included in the first electronic device;
transmitting the random number to the entity authentication server as a challenge signal for authenticating the entity authentication server;
outputting a response signal by inputting the challenge signal to a second PUF circuit included in the first electronic device;
receiving an encrypted text generated using the challenge signal from the entity authentication server;
decrypting the cipher text using the response signal; and
comparing the decryption value obtained by decrypting the ciphertext with the challenge signal to authenticate the entity authentication server
An object authentication method that includes .
3. The method of claim 2,
The step of authenticating the entity authentication server by comparing the decryption value obtained by decrypting the ciphertext with the challenge signal,
determining that the authentication of the entity authentication server is successful when the decryption value and the challenge signal are the same; or
determining that the authentication of the entity authentication server fails when the decryption value and the challenge signal are not the same
An object authentication method that includes .
According to claim 1,
performing, by the first electronic device, an access to the second electronic device through the entity authentication server in response to a successful authentication with respect to the second electronic device;
An object authentication method further comprising a.
3. The method of claim 2,
generating, by the entity authentication server, the encrypted text in response to the challenge signal; and
transmitting, by the entity authentication server, the encrypted text to the first electronic device
An object authentication method further comprising a.
6. The method of claim 5,
The step of generating the ciphertext is
extracting a response signal corresponding to the challenge signal from a CRP list (challenge to response pairs list) in response to the challenge signal;
generating the cipher text by encrypting the challenge signal using the extracted response signal
An object authentication method that includes .
According to claim 1,
authenticating, by the entity authentication server, the second electronic device in response to the ID of the second electronic device;
transmitting, by the entity authentication server, an authentication result for the second electronic device to the first electronic device; and
transmitting, by the entity authentication server, an access request of the first electronic device to the second electronic device to the second electronic device
An object authentication method further comprising a.
8. The method of claim 7,
The step of authenticating, by the entity authentication server, the second electronic device in response to the ID of the second electronic device,
generating a random number and transmitting the random number to the second electronic device as a challenge signal for authenticating the second electronic device;
extracting a response signal corresponding to the challenge signal from the CRP list corresponding to the second electronic device;
receiving a ciphertext generated using the challenge signal from the second electronic device;
decrypting the ciphertext using the extracted response signal; and
authenticating the second electronic device by comparing a decryption value obtained by decrypting the ciphertext with the challenge signal
An object authentication method that includes .
In an electronic device,
a transceiver for communicating with the entity authentication server; and
A security chip that authenticates the entity authentication server, and authenticates the different electronic device based on an authentication result for a different electronic device to which the electronic device of the entity authentication server will access
An electronic device comprising a.
10. The method of claim 9,
The security chip,
a first PUF circuit that generates a random number and outputs the random number as a first challenge signal for authenticating the entity authentication server;
a second PUF circuit for outputting a first response signal in response to the first challenge signal;
a decrypter for receiving a first ciphertext generated using the first challenge signal from the entity authentication server and decrypting the first ciphertext using the first response signal; and
The entity authentication server is authenticated by comparing the first decryption value obtained by decrypting the first ciphertext with the first challenge signal, and the different electronic device is authenticated in response to the authentication success of the entity authentication server for the different electronic device. authenticator
An electronic device comprising a.
11. The method of claim 10,
The security chip,
The second PUF circuit encrypts the second challenge signal using a second response signal output by the entity authentication server in response to a second challenge signal for authenticating the electronic device, thereby generating a second ciphertext. group
further comprising,
The second encrypted text is transmitted to the object authentication server in order for the object authentication server to authenticate the electronic device.
10. The method of claim 9,
The transceiver is
An electronic device that transmits the ID of the different electronic device to the object authentication server in response to successful authentication with respect to the object authentication server.
10. The method of claim 9,
The electronic device is
An electronic device configured to access the different electronic device through the entity authentication server in response to successful authentication of the entity authentication server and the different electronic device.

Images