WO2021100907A1

WO2021100907A1 - Fido-based silent authentication method, system, and program

Info

Publication number: WO2021100907A1
Application number: PCT/KR2019/015981
Authority: WO
Inventors: 이철영; 조효원; 지창훈; 최완택
Original assignee: (주)이더블유비엠
Priority date: 2019-11-20
Filing date: 2019-11-20
Publication date: 2021-05-27
Also published as: KR20220126733A

Abstract

A FIDO-based authentication method between an authenticator that requests authentication and a device to be authenticated in response to an authentication request is characterized by: generating an encrypted first message from a first message for authentication in the authenticator and transmitting the encrypted first message to the device to be authenticated; generating a second message by decrypting the encrypted first message in the device to be authenticated; and determining authentication when the first message and the second message are the same or correspond to each other.

Description

FIDO-based implicit authentication method, system and program

The present invention relates to a method, system, and program of FIDO (Fast Identity Online)-based silent authentication, and in more detail, a communication device (communication device It relates to a FIDO method of implicit (non-interaction) authentication method, system and program that maintains high security (confidentiality) between ).

In general, low-power communication networks such as LoRa, NB-IoT, and SigFox, such as LPWAN (Low Power Wide Area Network), often require security authentication such as FIDO to be applied.

For example, various authentications between devices of IoT (Internet of Things), or security authentication between communication devices, are very important for the safety of information exchanged and devices to be controlled (controlled). For example, when it is necessary to connect a new IoT camera to the user terminal, if authentication for the new IoT camera is performed, after that, the user terminal can trust the data transmitted from the newly authenticated IoT camera.

Hereinafter, devices that require authentication for access, such as IoT devices or communication devices, may be collectively referred to as simply'devices', and security authentication and various other authentications may be collectively referred to as simply'authentication'. , In some cases, a device that challenges authentication is referred to as an'authenticator' (e.g., a user terminal), and a device that authenticates by responding to an authentication request is referred to as an'authenticator' (e.g., IoT device). have.

Increasing the convenience and speed of this security authentication, and enhancing the stability or safety level are sometimes difficult to be compatible with each other.

The technology of the following patent documents is,'In a method of authenticating an Internet of Things (IOT) device in a user terminal, generating device information including a key and an identifier of the IOT device; Signing the device information using a certificate stored in a memory; Transmitting the signed device information and the public certificate to an authentication server; And transmitting the generated device information to the IOT device.

Here,'the identifier is in the form of a GUID (Globally Unique Identifier), and the key may be either a public key or a symmetric key', and'the signing of the device information uses a private key corresponding to the public certificate. It may be'to sign it.'

[Prior technical literature]

[Patent Literature]

(Patent Document 1) Patent Publication 10-2016-0084680

In security authentication, while improving the convenience and speed of authentication, it is not easy to maintain or reinforce the stability and safety level of authentication. In particular, there are cases where user interaction such as fingerprint scanning and verification is required for high security in authentication, such as authentication using biometric information.

However, such user interference causes both the convenience and speed of security authentication between devices to be hindered. This is because, for example, in the case of fingerprint scanning, the user must perform an operation of scanning fingerprints one by one, and it takes time to scan the fingerprint. The same goes for the signature of a public certificate, for example. In the description of the patent document, the signature is also performed through a public certificate. As such, the user's interference is required for authentication and connection, thereby reducing convenience and speed.

In particular, in the case of IoT devices, a number of devices in units of tens to tens of thousands of units need to be authenticated in advance before operation, and authentication must be performed again even if there is a post-authentication problem due to hacking or failure during operation. Needs to be. In this situation, authentication due to user interference is very inconvenient, and because authentication takes time, there is an inherent limitation in that it is inevitably low-speed and low-efficiency. Therefore, it causes a loss in operating time and performance of the device.

On the other hand, in the case of adopting authentication without user intervention, for example, biometric authentication or digital certificate signing, the user's confirmation is not required, so the convenience is increased, but the possibility of hacking, authentication theft, and authentication errors increases, so the stability of authentication. However, there is a concern about a decrease in safety level.

The present invention has been made to solve the problem of the prior art, and when authentication using user interference is impossible, unreasonable or inconvenient, the original performance of the device in repetitive authentication between devices while excluding (removing) user interference It is intended to provide a FIDO-based implicit authentication method, system, and program that can overcome difficulties in commercialization of products and systems due to user interference by increasing the speed and security (safety) level rather than reducing the value.

An authentication method according to FIDO based implicit authentication method according to an embodiment of the present invention for achieving the aforementioned problems is based on the FIDO between the authenticator in response to the authentication requester and the authentication request that requests authentication, the authentication challenge An encrypted first message is generated from the first message for authentication at the device and transmitted to the authenticator, the encrypted first message is decrypted by the authenticator to generate a second message , and the first message and the second message are When the message is the same or corresponding, it is characterized in that it is determined by authentication.

Here, it is preferable that the first message is encrypted by a first root key in the authentication requester, and the second message is decrypted by a second root key in the authenticator.

In addition, the first root key is preferably generated by decrypting the original root key encrypted by the authentication requester.

And the encrypted first with the first message, from the authentication requester, the first and first hash encrypted first hash value generated from the value of the root key, the first key, the first route by using the hash value, The encrypted first root key generated from is transmitted to the authenticator, and the second root key is decrypted from the encrypted first hash value by the authenticator and using a decrypted second hash value, It is preferable that it is decrypted and generated from the encrypted first root key.

Here, if the hashed second hash value generated from the second root key matches the decrypted second hash value, it is preferable that the second root key is allowed to be used for decryption of the encrypted first message.

On the other hand, the FIDO-based implicit authentication system according to an embodiment of the present invention for achieving the above object is an authentication system based on FIDO between an authentication requester requesting authentication and an authenticator responding to the authentication request, group certificate request groups, and the first message encryption unit for generating a first message encrypted from the first message for authentication, and the encrypted first message comprises a transmission unit for transmitting to said authentication, wherein the authentication, A first message decryption unit that decrypts the encrypted first message to generate a second message, and an authentication decision unit that determines authentication when the first message and the second message are the same or correspond to each other. It is done.

On the other hand, the FIDO-based implicit authentication program according to an embodiment of the present invention for achieving the above object, claims 1 to 5 based on FIDO between an authentication requester requesting authentication and an authenticator responding to the authentication request. It is characterized in that it is a program stored in a recording medium in which a program for executing the authentication method according to any one of claims, including an information processing device, in the authentication requester and the authenticator.

According to the present invention, when authentication using user interference is impossible, unreasonable, or inconvenient, user interference is excluded (removed), and the original performance of the device is not degraded in repetitive authentication between devices, but rather speed and security (safety ) By raising the level, a FIDO-based implicit authentication method, system, and program that can overcome difficulties in commercialization of products and systems due to user interference are provided.

1 is a block diagram showing a data processing flow in an authentication requester (authenticator, challenger) and an authenticator (responser) of an implicit authentication method according to an embodiment of the present invention.

2 is a diagram illustrating the use of a root key introduced in the process of transmitting a message for authentication in an authentication requester and encryption processing of a hash value in an implicit authentication method according to an embodiment of the present invention. It is a block diagram for explaining.

3 is a diagram illustrating the use of a root key introduced in a process of receiving and verifying a message for authentication in an authenticator, decrypting a hash value, and processing received message verification in an implicit authentication method according to an embodiment of the present invention. It is a block diagram for explanation.

4 is a conceptual diagram for explaining a method of increasing the level of security by removing user interference and introducing a root key, proposed in the implicit authentication method according to an embodiment of the present invention.

FIG. 5 is a description of a case in which a device implementing an implicit authentication method according to an embodiment of the present invention is connected to a low-power communication network such as LoRa, NB-IoT, and SigFox, for example, a Low Power Wide Area Network (LPWAN) communication network. It is a conceptual diagram for

6 is a conceptual diagram for explaining an existing method of device authentication requiring user interference in the conventional FIDO technology.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. Advantages and features of the present invention, and a method of achieving them will become apparent with reference to the embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in a variety of different forms, and only these embodiments allow the disclosure of the present invention to be complete, and are common in the technical field to which the present invention pertains. It is provided to fully inform the knowledgeable person of the scope of the invention, and the invention is only defined by the scope of the claims. The same reference numerals refer to the same elements throughout the specification.

Unless otherwise defined, all terms (including technical and scientific terms) used in the present specification may be used with meanings that can be commonly understood by those of ordinary skill in the art to which the present invention belongs. In addition, terms defined in a commonly used dictionary are not interpreted ideally or excessively unless explicitly defined specifically.

In addition, that a member or module is connected to the front, rear, left, right, top and bottom of another member or module may include not only direct connection, but also a case where another third member or module is interposed and connected in the middle thereof. have. And a member or module that performs a certain function can be implemented by dividing the function into two or more members or modules. Conversely, two or more members or modules each having a function can be integrated into one It can be implemented by being integrated as a member or module. Further, some electronic function blocks may be realized by the execution of software, or may be realized in a state in which the software is implemented in hardware through an electric circuit.

The FIDO-based implicit authentication method according to an embodiment of the present invention is an authentication method based on FIDO between the authentication requester 10 and the authenticator 20. The authentication requester (10, authenticator, challenger) is a device that requests authentication, and when authentication passes, it is a device that will receive permission for authenticated communication, that is, a new device, and the authenticator (20, responser) is A device that responds to a request, for example, a device that has already passed authentication or a device that has authentication authority. Authentication is a process of determining whether connection is possible by checking a counterpart between devices, such as between devices of IoT or between communication devices.

The method of the present invention consists of steps of message encryption and delivery, message decryption and authentication decision.

The encryption and transmission are performed by the authentication requester 10, for example, an encrypted first message 7 is generated from the first message 6 for authentication by an encryption unit (not shown), and, for example, a transmission unit The encrypted first message 7 is transmitted to the authenticator 20 by (not shown). The first message 6 is previously stored in the authentication requester 10 and is, for example, a Hello message. The encryption method of the message is predetermined.

The decryption and authentication decision is performed by the authenticator 20, for example, the encrypted first message 7 is decrypted by a decryption unit (not shown) to generate a second message 6' , for example, authentication When the first message 6 and the second message 6'are the same or correspond to each other by the determination unit (not shown), authentication is determined. Since the encrypted first message (7) is received from the authentication requester (10), and the second message (6') is generated by the decryption process, it is already provided in the authenticator (20). no. The decryption method of the encrypted message is predetermined in correspondence with the encryption method of the message.

As described above, in the FIDO-based implicit authentication method according to the present invention, user interference such as biometric authentication or signature of a public certificate, which are commonly required in FIDO, is not performed. Accordingly, the user's request for physical actions or biometric information is eliminated. Therefore, required device-to-device'silent' authentication and device-to-device high-speed authentication are implemented.

At the same time, in order to increase the level of security in IoT, the root key 2 is introduced in the implementation of the present invention, and when the device is authenticated and registered as in FIDO, the message 6 is further encrypted, communicated, and decrypted. By making authentication decisions, we are raising the level of security.

That is, the first message 6 is encrypted by the first

root key

2 in the authentication requester 10, while the second message 6'is the second root in the authenticator 20. It is to be decrypted by the key 2'. Here, if the first root key 2 and the second root key 2'are not the same, the encryption and decryption results cannot be matched. Therefore, in order to pass authentication, these first and second root keys 2 , 2') need to be identical to each other.

The root key (2, '2) referred to in the present invention is a device that attempts a'challenge' to access an external device or FIDO system for authentication, that is, a key stored in the authentication requester 10. , It is not necessary to have the device of the challenged side, that is, the authenticator 20 in advance. However, even if the root key 2'is provided in the authenticator 20 in advance, it does not depart from the scope of the present invention. Conversely, information received from the authentication requester 10 even if it is not provided in advance in the authenticator 20 It may be configured to generate the root key (2') by using. Using this root key (2, 2'), the message 6 for signing and authentication can be communicated silently between the device and the device (Device-to-Device).

In the present invention, after authentication using the root key (2, 2') is completed, subsequent encryption and decryption in the channel established between the device and the device is performed using this root key (2, 2'). Since it can be implemented, it can be recognized as a secure communication channel (Secure Connection Line).

In particular, the first root key 2 is preferably configured to be generated by decrypting the original root key 1 encrypted by the authentication requester 10. To this end, the encrypted original root key 1 may be stored in advance in a secure storage device (not shown).

In this way, since the original root key 1 is stored in a pre-encrypted state in the secure storage device, it is difficult to expose the root key 1 even if hacking occurs, and it is safe because it is impossible to decrypt even if it is exposed.

In addition, as a configuration not to be provided with a second root key (2') in the authenticator 20 in advance, the authentication requester (10) to the authenticator 20 to the first root key (2) It may be configured such that information is sent, and the authenticator 20 can extract the second root key 2', which is the same as the first root key 2, from this information. As one such configuration, the information can be made as a result of encryption and hashing.

That is, as shown in FIGS. 1 and 2, the first hash value of the first root key 2 together with the encrypted first message 7 in the authenticator 20 in the authentication requester 10 (3) An encrypted first hash value (4) generated from, and an encrypted first root key (5) generated from the first root key (2) using the first hash value (3), It can be configured to be transmitted.

Here, in the hash processing of the first hash value 3, a predetermined hash processing routine, for example, SHA-256 (a random value key and an encryption value seed of the root key 2) may be used. In addition, for the encryption of the encrypted first hash value 4, a predetermined encryption processing routine, for example, an Elliptic Curve Integrated Encrypt Scheme (ECIES) may be used. In addition, for the encryption of the encrypted first root key 5, for example, the hash value 3 may be used.

In this case, as shown in FIGS. 1 and 3, the second root key 2 ′ in the authenticator 20 is a decrypted second hash value formed by decrypting from the encrypted first hash value 4 ( 3' ) is preferably configured to be decrypted and generated from the encrypted first root key 5.

Here, the decryption of the decrypted second hash value 3'may be performed using ECIES.

In this way, even if the root key is not provided in the authenticator 20 in advance, using the encrypted first root key 5 and the encrypted first hash value 4 transmitted from the authentication requester 10, the root key Since it is possible to generate (2'), authentication is performed by confirming that not only the encryption and decryption method and the hash method set in advance between the authentication requester 10 and the authenticator 20, but also the data used for encryption and decryption and hash are identical. So the security becomes more thorough.

On the other hand, if the hashed second hash value (3'') generated from the second root key (2') matches the decrypted second hash value (3'), the encrypted first message (7) It is preferable that the second root key 2'is allowed to be used for decryption.

According to this configuration, it is a very unlikely condition that the result value (3') by decryption of the encrypted hash value and the result value (3') by the hash after decryption of the root key encrypted with a different route coincide with each other. Only when is satisfied, the second root key 2'is determined to be the validity of the second root key 2, that is, matched with the first root key 2, and the message is decrypted using the second root key 2'. This further strengthens security.

<FIDO-based implicit authentication system>

Meanwhile, the FIDO-based implicit authentication system according to an embodiment of the present invention is an authentication system based on FIDO between the authentication requester 10 requesting authentication and the authenticator 20 responding to the authentication request.

Here, the authentication requester 10 includes a first message encryption unit (not shown ) that generates an encrypted first message 7 from the first message 6 for authentication, and the encrypted first message ( 7) is configured to include a transmission unit (not shown ) for transmitting to the authenticator 20, and the authenticator 20 decrypts the encrypted first message 7 to obtain a second message 6' ) a first message decoding unit for generate (not shown) and the first message (6) and the second message (6 ') comprises the same or corresponding authentication decision unit (not shown) to determine the authentication when the It is characterized in that it is configured.

In addition, a program stored in a recording medium according to an embodiment of the present invention is a program stored in a recording medium in which a program for executing a method in the authentication requester and the authenticator including an information processing device is recorded, the method comprising: It is an implicit authentication method based on FIDO between an authentication requester requesting authentication and an authenticator responding to the authentication request.

As shown in FIG. 5, the FIDO-based implicit authentication method, system, and program according to an embodiment of the present invention can be effectively used for LPWAN communication devices frequently used in IoT by, for example, removing user interference. .

Although the embodiments of the present invention have been described with reference to the accompanying drawings, those of ordinary skill in the art to which the present invention pertains can be implemented in other specific forms without changing the technical spirit or essential features. You will be able to understand. Therefore, it should be understood that the embodiments described above are illustrative and non-limiting in all respects.

The present invention can be used in the industry of FIDO-based implicit authentication methods, systems, and programs.

[Explanation of code]

1: original encrypted root key

2: decrypted first root key 2': decrypted second root key

3: first hash value 3', 3'': second hash value

4, 4': encrypted first hash value

5, 5': encrypted first root key

6: Original first message 6': decrypted second message

7, 7': encrypted first message

Claims

As an authentication method based on FIDO between an authentication requester requesting authentication and an authenticator responding to an authentication request,

An encrypted first message is generated from the first message for authentication in the authentication requester and transmitted to the authenticator,

The encrypted first message is decrypted in the authenticator to generate a second message,

When the first message and the second message are the same or correspond to each other, authentication is determined

FIDO-based implicit authentication method, characterized in that.
The method according to claim 1,

The first message is encrypted by the first root key in the authentication requester,

The second message is decrypted by the second root key in the authenticator.

FIDO-based implicit authentication method, characterized in that.
The method according to claim 2,

The first root key is generated by decrypting the original root key encrypted by the authentication requester.

FIDO-based implicit authentication method, characterized in that.
The method according to claim 2,

Together with the encrypted first message, from the authentication requester, the first from the first encrypted first hash value generated from a hash value of the root key, the key, the first route using the first hash value, The generated encrypted first root key is transmitted to the authenticator,

The second root key is generated by decrypting from the encrypted first root key using a decrypted second hash value formed by decrypting from the encrypted first hash value by the authenticator.

FIDO-based implicit authentication method, characterized in that.
The method of claim 4,

If the hashed second hash value generated from the second root key matches the decrypted second hash value, the second root key is allowed to be used for decryption of the encrypted first message.

FIDO-based implicit authentication method, characterized in that.
As an authentication system based on FIDO between an authentication requester requesting authentication and an authenticator responding to an authentication request,

The authentication requester,

A first message encryption unit for generating an encrypted first message from the first message for authentication,

Transmission unit for transmitting the encrypted first message to the authenticator

Consisting of including,

The authenticator,

A first message decryption unit that decrypts the encrypted first message to generate a second message,

An authentication decision unit that determines as authentication when the first message and the second message are the same or correspond to each other

Consisting of

FIDO-based implicit authentication system, characterized in that.
Claim that the authentication based on the FIDO between the authenticator in response to the authentication requester and the authentication request to request 1 to claim 5 in including the authentication method for the information processing device according to any one from the authentication challenge group authenticator comprising A program stored in a recording medium that records a program to be executed.