FIDO 환경에서 공인인증기관을 이용한 사용자 장치와 RP 서버(FIDO 서버)간 강력한 상호인증
A Robust Mutual Authentication between User Devices and Relaying Server(FIDO Server) using Certificate Authority in FIDO Environments
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
Recently, Biometrics is being magnified than ID or password about user authentication. However, unlike a PIN, password, and personal information there is no way to modify the exposure if it is exposed and used illegally. As FIDO(Fast IDentity Online) than existing server storing method, It stores a user's biometric information to the user device. And the user device authentication using the user's biometric information, the user equipment has been used a method to notify only the authentication result to the server FIDO. However, FIDO has no mutual authentication between the user device and the FIDO server. We use a Certificate Authority in order to mutually authenticate the user and the FIDO server. Thereby, we propose a more reliable method and compared this paper with existed methods about security analysis.
Abstract
Recently, Biometrics is being magnified than ID or password about user authentication. However, unlike a PIN, password, and personal information there is no way to modify the exposure if it is exposed and used illegally. As FIDO(Fast IDentity Online) than existing server storing method, It stores a user's biometric information to the user device. And the user device authentication using the user's biometric information, the user equipment has been used a method to notify only the authentication result to the server FIDO. However, FIDO has no mutual authentication between the user device and the FIDO server. We use a Certificate Authority in order to mutually authenticate the user and the FIDO server. Thereby, we propose a more reliable method and compared this paper with existed methods about security analysis.
참고문헌 (7)
- Tae Bong Kim, "SmartSIGN", Fintechforum June Annual Presentation, KTB Solution, 23rd (2015)
- "Fido Alliance"[URL]
- "DRAFT NIST Special Publication 800-63-3Digital Authentication Guideline"[URL]
- "ITU-T SG17 WG5 Q9"[URL]
- SooHyung Kim, "FinTech Era : Needs for the innovation of user authentication technologies", Communications of the Korean Institute of Information Scientists and Engineers, KIISE, 33(5), pp.17~22 (2015)
- Standard for distributed management of biometrics, "Korea Financial Telecommunications & Clearings Institute", Korea Financial Telecommunications &Clearings Institute, ~ (2015)
- Jaejung Kim, "Study on the password-free certification system using the FIDO (Fast IDentity Online)", Communications of the Korea Information Science Society, KIISE, 33(5) (2015)