TWM491898U - Authentication device of user information - Google Patents

Description

User information verification device

This creation relates to a verification device, and more particularly to a verification device for user information.

Nowadays, the transaction methods using card materials are becoming more and more popular, and there is a certain risk if the card data transaction is not verified. For example, a tampering with the verification host caused by a man-in-the-middle attack may occur, or a counterfeit card may occur. Therefore, how to verify the user information of card data transactions is very important.

At present, the commonly used user information verification methods, including key encryption production and digital signature, provide four important security guarantees such as data confidentiality, data source identification, data integrity, and transaction non-repudiation. To protect user information and prevent counterfeiting and tampering.

The key encryption method of the authentication device of the conventional user information can be divided into symmetry and asymmetry. The symmetry encryption method uses the same key for the encryption and decryption of the message, and both the transmission and the reception have the same A key. The non-symmetric encryption method has a public key and a private key for each user. After the message is encrypted by one of the keys, it must be decrypted by another key. Public keys can be widely distributed, and private keys must be kept secret. Verification devices using various key encryption methods have their own advantages and disadvantages. For card data transactions, due to their high penetration rate, the types and distribution fields of the verification end mechanisms are quite diverse, so it is necessary to establish more Validation devices that are generally promoted while maintaining efficiency and safety, and verifying their user information.

In view of the above, how to verify the card with a more universally validated verification device User information on data transactions is an important research topic.

Therefore, the purpose of this creation is to provide a verification device for user information to improve the problems of the prior art.

The technical means used in the present invention to solve the problem of the prior art is a user information verification device. The verification device verifies a user information based on a user identification code (ID) of the user, and the verification device includes a first A tripartite trust institution, a client organization, and a verification authority. The third-party trust institution stores a user identifier (ID) of each user, a second public key (e), a first private key (d), and a first public corresponding to the first private key (d). Key (N), the third party trust authority generates a second private key (g) based on the user identification number (ID), the first private key (d), and the first public key (N). The client organization receives the second private key (g) from the third party trust authority. The verification end mechanism receives the second public key (e) and the first public key (N) from the third party trust authority. The integer number of random numbers generated by the user equipment according to the first public key (N), the second public key (e), and the user data when the user equipment and the verification end mechanism transmit a message (m). And generating a first information (t), and obtaining a second information according to the first public key (N), the second private key (g), a first correspondence function value, and an integer random number (r) ( s), and the verification end mechanism according to the first public key (N), the second public key (e), the message (m), and the user identification code (ID) received from the client organization, the first information (t ) and the second information (s) to authenticate the user.

In an embodiment of the present creation, the first correspondence function value is a unique function value corresponding to the message (m).

In an embodiment of the present author, the first correspondence function is a hash function.

In an embodiment of the present invention, the verification end mechanism performs the verification of the user information by corresponding to the unique function value according to the first correspondence function.

In an embodiment of the present invention, the third-party trusting authority is a card issuing party, and the client-side mechanism processes a card data sent by the self-issuing card-side, and the verification-end mechanism is a host.

In an embodiment of the present creation, the first private key (d) is stored non-publicly in a third party trust authority.

Through the technical means adopted by this creation, the user identification code (ID) of each card data is not only used to represent the user on the card data, but also has relevance to the verification, so that the card issuer and the card data can be effectively saved. storage. Moreover, in the verification end mechanism that needs to be universally set, only the first public key (N) and the second public key (e) need to be placed, and it is not necessary to store more individual users as the card issuance increases. Data can also save storage space. In addition, the verification end mechanism can verify the confidentiality of the verified data without knowing the situation of the first private key (d) stored in the card issuer, and is suitable for verifying the card data with high popularity. transaction.

The specific embodiments of the present invention will be further described by the following examples and accompanying drawings.

100‧‧‧ User information verification device

1‧‧‧ Third-party trust institutions

2‧‧‧Customer institution

3‧‧‧Verification end mechanism

d‧‧‧First private key

e‧‧‧Second public key

g‧‧‧Second private key

ID‧‧‧User ID

m‧‧‧Message

N‧‧‧first public key

R‧‧‧ random number

s‧‧‧Second information

t‧‧‧First Information

Figure 1 is a schematic diagram showing a verification device for user information according to an embodiment of the present invention.

Figure 2 is a diagram showing the operation of the user information verification apparatus according to an embodiment of the present invention.

Figure 3 is a flow chart showing a method of verifying user information according to an embodiment of the present invention.

Figure 4 is a second flow chart showing a method of verifying user information according to an embodiment of the present invention.

Figure 5 is a flow chart showing a method of user information verification according to another embodiment of the present creation.

Referring to FIG. 1 , the user information verification device of the present invention is a verification device for verifying user information by a verification end mechanism based on a user identification code (ID) of a user. 100 includes a third-party trust authority 1, a client-side mechanism 2, and a verification-end mechanism 3. For example, in this embodiment, the user information, such as transaction information, on a card data is verified, and the third-party trusted institution 1 is a card issuing party, and the client device 2 can be a chip card or a smart phone. And processing a card data sent by the spontaneous chi-square, and the verification end mechanism 3 is a master machine.

Hereinafter, referring to FIG. 2 to FIG. 4 together with the verification method used by the verification device 100 for user information, a detailed description of the user information verification apparatus 100 of the present creation is as follows: the verification method includes a key creation. Step (step S01), a key placement step (step S02), a transaction message delivery step (step S03), and a transaction message verification step (step S04).

First, a key creation step (step S01), the third party trust organization 1 generates a second private based on the user identification code (ID), a first private key (d), and a first public key (N). Key (g).

The first private key (d) is stored non-publicly in the third-party trust authority 1. The second private key (g) is obtained using the following formula:

Then, the key insertion step (step S02), the key placement step (step S02) includes the user identification code (ID), the first public key (N), the second public key (e), and the corresponding The second private key (g) is placed in the client device 2 (step S021), and a first public key (N) and a second public key (e) corresponding to the first private key (d) are placed The end mechanism 3 is verified (step S022). However, the present creation is not limited thereto, and step S022 may be performed before step S021 (Fig. 5), or even before step S01. That is to say, when the card issuer does not issue the card information, the host (verification end mechanism 3) can pre-store the second public key (e) from the card issuer (third party trust institution 1).

Then, the transaction message delivery step (step S03), the transaction message delivery step (step S03) includes transmitting a transaction message (m) between the client device 2 and the verification terminal mechanism 3, and the client device 2 is based on the first public The key (N), the second public key (e), and an integer random number (r) generated by the user data processing component 2 generate a first information (t) (step S031), and the user end mechanism 2 is based on The first public key (N), the second private key (g), a first correspondence function value, and an integer random number (r) generate a second information (s) (step S032). However, this creation is not limited to this, step Step S032 can also be performed before step S031, as shown in FIG.

The first corresponding function value of the client mechanism 2 is obtained by a hash function (H( )). The first information (t) is obtained using the following formula: The second information (s) is obtained using the following formula: .

Finally, the transaction message verification step (step S04) is for the verification end mechanism 3 to receive the user according to the first public key (N), the second public key (e), the transaction message (m), and the user terminal 2 The user is authenticated by the identification code (ID), the first information (t), and the second information (s).

In the transaction message verification step (step S04), the verification end mechanism 3 performs user information according to a first function corresponding to the message (m) corresponding to the first information (t). Verification, and the first corresponding function is a hash function. The verification end mechanism 3 verifies the user ID using the following formula:

The present invention is characterized in that the user information verification device 100 of the present invention verifies the user information on a card data by the verification end mechanism 3 based on a user identification code (ID) of the user, so each The user identification code (ID) of the card data can be used not only for the user on the card data but also as the verification code, so that the storage space of the third-party trusting institution 1 and the client-side mechanism 2 can be effectively saved, and the storage can be saved. space. Furthermore, in the verification end mechanism 3 (ie, the host) that needs to be widely installed, only the first public key (N) and the second public key (e) need to be placed, without increasing the number of card issuances. The data storage volume does not need to know the first private key (d) stored in the third-party trust institution 1 (ie, the card issuer), and the data confidentiality of the verification can be guaranteed, which is quite suitable for verifying the high penetration rate. Card information transaction.

The above description is only for the preferred embodiment of the present invention, and those skilled in the art can make other improvements according to the above description, but these changes still belong to the creative spirit of the creation and the patents defined below. In the scope.

100‧‧‧ User information verification device

1‧‧‧ Third-party trust institutions

2‧‧‧Customer institution

3‧‧‧Verification end mechanism

d‧‧‧First private key

e‧‧‧Second public key

g‧‧‧Second private key

ID‧‧‧User ID

m‧‧‧Message

N‧‧‧first public key

s‧‧‧Second information

t‧‧‧First Information

Claims (5)

A user information verification device, which verifies a user information based on a user identification code (ID) of a user, the verification device comprising: a third-party trust organization, storing users of each user An identification code (ID), a first public key (N), a second public key (e), a first private key (d), and a first public key corresponding to the first private key (d) ( N), the third-party trust authority generates a second private key (g) according to the user identification code (ID), the first private key (d), and the first public key (N); The institution receives the second private key (g) from the third-party trust authority; and a verification end mechanism receives the second public key (e) and the first public key (N) from the third-party trust authority When the client device and the verification end mechanism transmit a message (m), the client organization generates the message according to the first public key (N), the second public key (e), and the user data. An integer random number (r) to generate a first information (t), and according to the first public key (N), the second private key (g), a first corresponding function value, and the integer random number (r) a second information (s), and the verification end mechanism is based on the first public key (N), the second public key (e), the message (m), and the user received from the client organization The user is verified by an identification code (ID), the first information (t), and the second information (s). The verification device of claim 1, wherein the first corresponding function value is a unique function value corresponding to the message (m). The verification device of claim 1, wherein the first corresponding function is a hash function. The authentication device of claim 1, wherein the third-party trusting authority is a card issuing party, and the client-side mechanism processes a card data sent from the card-issuing party, and the verification-end mechanism is a host. The verification device of claim 1, wherein the first private key (d) is stored non-publicly in the third party trust authority.