A Robust Mutual Authentication between User Devices and Relaying Server(FIDO Server) using Certificate Authority in FIDO Environments

SeungJin Han

Journal of The Korea Society of Computer and Information

Abbr : JKSCI
2016, 21(10), pp.63-68
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science

SeungJin Han ¹

¹ 경인여자대학교

ABSTRACT

Recently, Biometrics is being magnified than ID or password about user authentication. However, unlike a PIN, password, and personal information there is no way to modify the exposure if it is exposed and used illegally. As FIDO(Fast IDentity Online) than existing server storing method, It stores a user's biometric information to the user device. And the user device authentication using the user's biometric information, the user equipment has been used a method to notify only the authentication result to the server FIDO. However, FIDO has no mutual authentication between the user device and the FIDO server. We use a Certificate Authority in order to mutually authenticate the user and the FIDO server. Thereby, we propose a more reliable method and compared this paper with existed methods about security analysis.
KEYWORDS

FIDO(Fast IDentity Online) , Mutual Authentication , User Device , Relaying Server , Certificate Authority
REFERENCES (7)

[confproc] Tae Bong Kim / 2015 / SmartSIGN / Fintechforum June Annual Presentation, KTB Solution, 23rd

[web] / Fido Alliance / https://fidoalliance.org/specs/fido-uaf-v1.0-ps-20141208/fido-uaf-protocol-v1.0-ps-20141208.pdf

[web] NIST(National Institute of Standards and Technology) / DRAFT NIST Special Publication 800-63-3Digital Authentication Guideline / https://pages.nist.gov/800-63-3/sp800-63-3.html

[web] / ITU-T SG17 WG5 Q9 / http://www.itu.int/itu-t/workprog/wp_item.aspx?isn=9429

[journal] SooHyung Kim / 2015 / FinTech Era : Needs for the innovation of user authentication technologies / Communications of the Korean Institute of Information Scientists and Engineers, KIISE 33 (5) : 17~22

[report] Korea Financial Telecommunications & Clearings Institute / 2015 / Standard for distributed management of biometrics / Korea Financial Telecommunications &Clearings Institute

[journal] Jaejung Kim / 2015 / Study on the password-free certification system using the FIDO (Fast IDentity Online) / Communications of the Korea Information Science Society, KIISE 33 (5)
KCI Citation (2)

KJC Korea
Journal Central

Statistics

Tools