WO2013005929A3 - 보안 토큰에 대한 발급자 인증 방법 및 그 장치 - Google Patents

보안 토큰에 대한 발급자 인증 방법 및 그 장치 Download PDF

Info

Publication number
WO2013005929A3
WO2013005929A3 PCT/KR2012/004826 KR2012004826W WO2013005929A3 WO 2013005929 A3 WO2013005929 A3 WO 2013005929A3 KR 2012004826 W KR2012004826 W KR 2012004826W WO 2013005929 A3 WO2013005929 A3 WO 2013005929A3
Authority
WO
WIPO (PCT)
Prior art keywords
security token
recipient
authenticating
value
hash function
Prior art date
Application number
PCT/KR2012/004826
Other languages
English (en)
French (fr)
Other versions
WO2013005929A2 (ko
Inventor
이준호
구자인
Original Assignee
삼성에스디에스(주)
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 삼성에스디에스(주) filed Critical 삼성에스디에스(주)
Publication of WO2013005929A2 publication Critical patent/WO2013005929A2/ko
Publication of WO2013005929A3 publication Critical patent/WO2013005929A3/ko

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3234—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Storage Device Security (AREA)

Abstract

보안 토큰에 대한 발급자 인증 방법 및 그 장치가 개시된다. 보안토큰과 연결된 외부장치는 보안토큰으로부터 수신한 의사난수와 상수값을 연접연산하고, 일방향해시함수를 적용한 후 일방향해시함수의 결과값과 공유 인증키에 대해 대칭키 암호화 알고리즘을 적용하여 보안토큰에 전송하며, 보안토큰은 자체 생성한 암호화값과 수신한 암호화값이 동일여부를 기초로 발급자 인증을 수행한다.
PCT/KR2012/004826 2011-07-06 2012-06-19 보안 토큰에 대한 발급자 인증 방법 및 그 장치 WO2013005929A2 (ko)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
KR10-2011-0066874 2011-07-06
KR1020110066874A KR101350984B1 (ko) 2011-07-06 2011-07-06 보안 토큰에 대한 발급자 인증 방법 및 그 장치

Publications (2)

Publication Number Publication Date
WO2013005929A2 WO2013005929A2 (ko) 2013-01-10
WO2013005929A3 true WO2013005929A3 (ko) 2013-03-14

Family

ID=47437522

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/KR2012/004826 WO2013005929A2 (ko) 2011-07-06 2012-06-19 보안 토큰에 대한 발급자 인증 방법 및 그 장치

Country Status (2)

Country Link
KR (1) KR101350984B1 (ko)
WO (1) WO2013005929A2 (ko)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR101247564B1 (ko) * 2013-01-24 2013-03-26 토피도 주식회사 데이터베이스 데이터의 위변조 방지 방법
CN107615702A (zh) 2016-03-24 2018-01-19 慧与发展有限责任合伙企业 文本加密
CN113037498B (zh) * 2021-03-15 2022-11-25 珠海晶通科技有限公司 离线设备的安全认证方法

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20050000481A (ko) * 2003-06-27 2005-01-05 주식회사 케이티 이중 요소 인증된 키 교환 방법 및 이를 이용한 인증방법과 그 방법을 포함하는 프로그램이 저장된 기록매체
KR20050064717A (ko) * 2003-12-24 2005-06-29 삼성전자주식회사 휴대 인터넷 시스템에서 인증 및 인증 실패에 따른 기지국운용 방법
KR20080044164A (ko) * 2006-11-15 2008-05-20 리서치 인 모션 리미티드 클라이언트 자격증명서 기반의 보안 세션 인증 방법 및장치
KR20090039451A (ko) * 2007-10-18 2009-04-22 주식회사 케이티 사용자 패스워드로부터 유도된 비밀키 기반의 인증 방법

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20050000481A (ko) * 2003-06-27 2005-01-05 주식회사 케이티 이중 요소 인증된 키 교환 방법 및 이를 이용한 인증방법과 그 방법을 포함하는 프로그램이 저장된 기록매체
KR20050064717A (ko) * 2003-12-24 2005-06-29 삼성전자주식회사 휴대 인터넷 시스템에서 인증 및 인증 실패에 따른 기지국운용 방법
KR20080044164A (ko) * 2006-11-15 2008-05-20 리서치 인 모션 리미티드 클라이언트 자격증명서 기반의 보안 세션 인증 방법 및장치
KR20090039451A (ko) * 2007-10-18 2009-04-22 주식회사 케이티 사용자 패스워드로부터 유도된 비밀키 기반의 인증 방법

Also Published As

Publication number Publication date
WO2013005929A2 (ko) 2013-01-10
KR101350984B1 (ko) 2014-01-13
KR20130005468A (ko) 2013-01-16

Similar Documents

Publication Publication Date Title
MX2019007645A (es) Dispositivo lector para la lectura de una marca que comprende una funcion fisicamente no clonable.
WO2011149765A3 (en) Rfid security and mobility architecture
TN2015000274A1 (en) Method and apparatus for marking manufactured items using physical characteristic
NZ746653A (en) Access control for encrypted data in machine-readable identifiers
WO2016073411A3 (en) System and method for a renewable secure boot
WO2015030903A3 (en) Image based key derivation function
WO2015023332A3 (en) Incorruptible public key using quantum cryptography for secure wired and wireless communications
PE20170656A1 (es) Autenticacion de la red de servicio
MX361152B (es) Aprovisionamiento de licencias de gestión de derechos digitales (drm) en un dispositivo cliente que utiliza un servidor de actualizaciones.
WO2014116528A3 (en) Providing an encrypted account credential from a first device to a second device
MX356841B (es) Métodos y dispositivos para autorizar una operación.
WO2015023341A3 (en) Secure authorization systems and methods
GB2512249A (en) Secure peer discovery and authentication using a shared secret
WO2014109828A3 (en) Method for secure substring search
WO2011109772A3 (en) Method and apparatus for providing security to devices
WO2014059136A3 (en) Techniqued for secure data exchange
EP2565862A4 (en) Encryption processing system, key generation device, encryption device, decryption device, signature processing system, signature device and verification device
UA100829C2 (ru) Системы, методы и оборудование для выявления ошибки шифрования и восстановления безошибочного состояния
WO2012154976A3 (en) System and method for web-based security authentication
WO2016114830A3 (en) Methods and systems for authentication interoperability
WO2012087692A3 (en) System and method for secure communications in a communication system
NZ613485A (en) Method for authenticating first communication equipment by means of second communication equipment
MY171259A (en) System and method for identity-based entity authentication for client-server communications
EP3704829B8 (en) Cryptographic key generation system and method
WO2012154503A3 (en) Certificate blobs for single sign on

Legal Events

Date Code Title Description
NENP Non-entry into the national phase

Ref country code: DE

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 12807317

Country of ref document: EP

Kind code of ref document: A2

122 Ep: pct application non-entry in european phase

Ref document number: 12807317

Country of ref document: EP

Kind code of ref document: A2