Electronic device for generating and authenticating identification information of hardware device, and operation method thereof

1 . An operation method of an electronic device, comprising:

determining identification information used for authentication of a hardware device using a public key of the hardware device generated from a private key of the hardware device; and

managing the identification information;

receiving, from the hardware device requiring authentication, identification information of the hardware device;

checking whether the received identification information is pre-registered identification information, wherein the electronic device checks whether the received identification information corresponds to identification information pre-registered in a valid list;

when the received identification information does not correspond to identification information pre-registered in the valid list, rejecting authentication of the hardware device and ending operation; and

when the received identification information corresponds to the identification information pre-registered in the valid list, performing, thereafter, public key infrastructure (PKI)-based authentication of the hardware device requiring authentication in response to a case in which the received identification information is the pre-registered identification information using a public key acquired from the received identification information or a public key received from the hardware device requiring authentication,

wherein, in the performing of the PKI-based authentication, the PKI-based authentication is performed using the acquired public key or the received public key without an authentication certificate issued by a certificate authority (CA) server; and

rejecting authentication of the hardware device in response to the identification information not being the pre-registered identification information.

2 . The operation method of claim 1 , wherein, in the determining of the identification information, the identification information is determined based on the public key or a value acquired by applying a predetermined function to the public key.

3 . The operation method of claim 2 , wherein the function corresponds to a cryptographic hash algorithm for determining data of a predetermined length from the public key, a cryptographic algorithm for encrypting the public key, a function using a portion of the public key, or a combination thereof.

4 . The operation method of claim 1 , wherein, in the determining of the identification information, the identification information is determined further using information on at least one of producer identification information, product identification information, a production date, and a production location of the hardware device.

5 . The operation method of claim 1 , wherein the hardware device is any one of a chip, a module, and a device to be authenticated.

6 . The operation method of claim 1 , wherein, in the performing of the PKI-based authentication, the PKI-based authentication is performed based on whether a PKI signature for a random value generated by the electronic device is able to be generated using the acquired public key or the received public key.

7 . The operation method of claim 1 , wherein, in the performing of the PKI-based authentication, the PKI-based authentication is performed based on whether the hardware device requiring authentication is able to decrypt data encrypted based on the acquired public key.

8 . The operation method of claim 1 , wherein, in the performing of the PKI-based authentication, the PKI-based authentication is performed based on whether PKI-based session generation succeeds using the acquired public key or the received public key.

9 . The operation method of claim 1 , wherein, in the performing of the PKI-based authentication, the PKI-based authentication is performed based on whether a signature of a signature document received from the hardware device requiring authentication is able to be verified with the acquired public key.

10 . The operation method of claim 1 , wherein, in the performing of the PKI-based authentication, the authentication is performed based on whether the identification information acquired from the received public key corresponds to the received identification information in response to a case in which the public key is not able to be effectively generated from the received identification information.

11 . A non-transitory computer readable storage medium in which a program for executing the method of claim 1 is recorded.

12 . An electronic device comprising:

a processor; and

a memory including at least one instruction executable by the processor;

wherein when the at least one instruction is executed by the processor, the processor:

determines identification information used for authentication of a hardware device,

manages the identification information using a public key of the hardware device generated from a private key of the hardware device,

receive, from the hardware device requiring authentication, identification information of the hardware device;

checks whether the received identification information is pre-registered identification information, wherein the processor checks whether the received identification information corresponds to identification information pre-registered in a valid list,

when the received identification information does not correspond to identification information pre-registered in the valid list, rejects authentication of the hardware device and ends operation; and

when the received identification information corresponds to the identification information pre-registered in the valid list, performs, thereafter, public key infrastructure (PKI)-based authentication of the hardware device requiring authentication in response to a case in which the received identification information is the pre-registered identification information using a public key acquired from the received identification information or a public key received from the hardware device requiring authentication, without using an authentication certificate issued by a certificate authority (CA) server, and

rejects authentication of the hardware device in response to a case in which the received identification information is not the pre-registered identification information.

13 . The electronic device of claim 12 , wherein the processor determines the identification information based on the public key or a value acquired by applying a predetermined function to the public key.

14 . The electronic device of claim 13 , wherein the function corresponds to a cryptographic hash algorithm for determining data of a predetermined length from the public key, a cryptographic algorithm for encrypting the public key, a function using a portion of the public key, or a combination thereof.

15 . The electronic device of claim 12 , wherein the processor determines the identification information further using information on at least one of producer identification information, product identification information, a production date, and a production location of the hardware device.

16 . The electronic device of claim 12 , wherein the hardware device is any one of a chip, a module, and a device to be authenticated.