Method and apparatus for providing securities to electronic devices
A secured device including a security hardware module and a method thereof are provided. The secured device generates first user authentication information based on a user input, generates encryption key generation information corresponding to the first user authentication information, receives second user authentication information from an electronic device, and transmits to the electronic device the encryption key generation information corresponding to the first user authentication information when the second user authentication information matches the first user authentication information. The first user authentication information and the encryption key generation information are secured by the security hardware module.
1. A method comprising:
generating, at a secured device comprising a security hardware module, first user authentication information of a first user based on a user input;
generating, at the secured device, encryption key generation information corresponding to the first user authentication information of the first user;
receiving, at the secured device, encrypted second user authentication information of the first user from an electronic device;
decrypting, at the secured device, the received second user authentication information of the first user;
acquiring the encryption key generation information corresponding to the first user authentication information of the first user when the decrypted second user authentication information of the first user matches the first user authentication information of the first user;
encrypting, at the secured device, the encryption key generation information; and
transmitting, from the secured device, the encrypted encryption key generation information to the electronic device,
wherein the first user authentication information of the first user and the encryption key generation information are secured by the security hardware module of the secured device,
wherein the transmitted encrypted encryption key generation information is decrypted at the electronic device, and
wherein the decrypted encryption key generation information is used to generate an encryption key.
2. The method of claim 1 , further comprising:
receiving, at the secured device, a random number generated and transmitted by the electronic device; and
encrypting, at the secured device, the encryption key generation information based on the received random number.
3. The method of claim 1 , further comprising:
encrypting, at the secured device, the encryption key generation information based on the first user authentication information of the first user.
4. The method of claim 1 , wherein the method further comprises:
receiving, at the secured device, device information of the electronic device from the electronic device; and
authenticating, at the secured device, the electronic device based on the received device information of the electronic device,
wherein the receiving of the second user authentication information of the first user comprises receiving the second user authentication information of the first user from the authenticated electronic device.
5. The method of claim 1 , further comprising:
transmitting device information of the secured device from the secured device to the electronic device to authenticate the secured device at the electronic device.
6. The method of claim 1 , wherein information is stored based on the generated encryption key.
7. The method of claim 1 , wherein permission for a user is set based on the generated encryption key.
8. The method of claim 1 , wherein the generated encryption key is removed based on a predetermined standard.
9. The method of claim 1 , wherein the second user authentication information of the first user and the encryption key generation information are removed after the encryption key is generated.
10. The method of claim 1 , wherein the encryption key generation information is first encryption key generation information, and
wherein second encryption key generation information generated by the electronic device is further used to generate the encryption key.
11. The method of claim 1 , wherein second encryption key generation information is generated based on the second user authentication information of the first user.
12. The method of claim 1 , wherein the encryption key generation information is encrypted based on a public key of the electronic device.
13. A non-transitory computer-readable storage medium comprising instructions, which, when executed, cause a secured device comprising a security hardware module to:
generate first user authentication information of a first user based on a user input;
generate encryption key generation information corresponding to the first user authentication information of the first user;
receive encrypted second user authentication information of the first user from an electronic device;
decrypt the received second user authentication information of the first user;
acquire the encryption key generation information corresponding to the first user authentication information of the first user when the decrypted second user authentication information of the first user matches the first user authentication information of the first user;
encrypt the encryption key generation information; and
transmit the encrypted encryption key generation information to the electronic device
wherein the first user authentication information of the first user and the encryption key generation information are secured by the security hardware module of the secured device,
wherein the transmitted encrypted encryption key generation information is decrypted at the electronic device, and
wherein the decrypted encryption key generation information is used to generate an encryption key.
14. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions further cause the secured device to:
receive a random number generated and transmitted by the electronic device; and
encrypt the encryption key generation information based on the received random number.
15. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions further cause the secured device to:
encrypt the encryption key generation information based on the first user authentication information of the first user.
16. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions further cause the secured device to:
receive device information of the electronic device from the electronic device; and
authenticate the electronic device based on the received device information of the electronic device.
17. The non-transitory computer-readable storage medium of claim 13 , wherein the encryption key generation information is first encryption key generation information, and
wherein second encryption key generation information generated by the electronic device is further used to generate the encryption key.
18. The non-transitory computer-readable storage medium of claim 13 , wherein the encryption key generation information is encrypted based on a public key of the electronic device.
19. A device comprising:
a security hardware module;
a memory storing instructions; and
a processor to execute the instructions to:
generate first user authentication information of a first user based on a user input,
generate encryption key generation information corresponding to the first user authentication information of the first user,
receive encrypted second user authentication information of the first user from an electronic device,
decrypt the received second user authentication information of the first user,
acquire the encryption key generation information corresponding to the first user authentication information of the first user when the second user authentication information of the first user matches the first user authentication information of the first user,
encrypt the encryption key generation information, and
transmit the encrypted encryption key generation information to the electronic device,
wherein the first user authentication information of the first user and the encryption key generation information are secured by the security hardware module,
wherein the transmitted encrypted encryption key generation information is decrypted at the electronic device, and
wherein the decrypted encryption key generation information is used to generate an encryption key.