IP Library › Granted Patent US 11,012,424
Granted Patent B2
US 11,012,424 · App. 16/171,986 · Granted May 18, 2021

System and method for authentication

Inventors: Kyu-Young Choi (Seoul, KR); Ji-Hoon Cho (Seoul, KR); Hyo-Jin Yoon (Seoul, KR); Duk-Jae Moon (Seoul, KR)
Assignee: SAMSUNG SDS CO., LTD.
H04L63/0428H04L9/0866H04L9/0894H04L9/3231H04L63/061
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,012,424
App. No.
16/171,986
Granted
May 18, 2021
Kind
B2
Abstract

An authentication system and method are provided. According to the embodiments of the present disclosure, it is possible to provide a secure authentication service capable of maintaining personal privacy by enabling authentication while preventing personal information used for personal authentication, such as biometric information, from being exposed in the authentication process.

Claims (62)

1. An authentication system comprising:

a registration request apparatus;

an authentication request apparatus; and

an authentication server,

wherein the registration request apparatus generates a master key, transmits the master key to the authentication request apparatus, generates an authentication key for registration target personal information using the registration target personal information and the master key, and transmits the authentication key to the authentication server,

the authentication request apparatus stores the master key in a secure area of the authentication request apparatus, generates a ciphertext for authentication target personal information in the secure area by using the authentication target personal information and the master key, and transmits the generated ciphertext to the authentication server, and

the authentication server receives the authentication key from the registration request apparatus, stores the authentication key, and performs authentication of the authentication target personal information using the authentication key and the ciphertext when the ciphertext is received from the authentication request apparatus.

2. The authentication system of claim 1 , wherein the authentication server performs the authentication by computing the authentication key and the ciphertext in an encrypted state.

3. The authentication system of claim 2 , wherein the authentication server calculates a similarity between the registration target personal information and the authentication target personal information by computing the authentication key and the ciphertext in an encrypted state, and performs the authentication based on the similarity.

4. The authentication system of claim 3 , wherein the registration request apparatus generates the master key and the authentication key using an initialization algorithm and an authentication key generation algorithm of functional encryption,

the authentication request apparatus generates the ciphertext using an encryption algorithm of the functional encryption, and

the authentication server calculates the similarity using a decryption algorithm of the functional encryption.

5. The authentication system of claim 1 , wherein the registration request apparatus deletes the master key after generating the authentication key.

6. The authentication system of claim 1 , wherein the registration request apparatus generates the master key and the authentication key in a secure area of the registration request apparatus.

7. The authentication system of claim 1 , wherein the registration target personal information and the authentication target personal information are biometric information.

8. An authentication method which is performed in an authentication system including a registration request apparatus, an authentication request apparatus, and an authentication server, the authentication method comprising:

generating, at the registration request apparatus, a master key;

transmitting, at the registration request apparatus, the master key to the authentication request apparatus;

receiving, at the authentication request apparatus, the master key and storing the master key in a secure area of the authentication request apparatus;

generating, at the registration request apparatus, an authentication key for registration target personal information using the registration target personal information and the master key;

transmitting, at the registration request apparatus, the authentication key to the authentication server;

receiving and storing, at the authentication server, the authentication key;

generating, at the authentication request apparatus, a ciphertext for authentication target personal information in the secure area by using the authentication target personal information and the master key;

transmitting, at the authentication request apparatus, the ciphertext to the authentication server; and

performing, at the authentication server, authentication of the authentication target personal information using the authentication key and the ciphertext.

9. The authentication method of claim 8 , wherein the performing of the authentication comprises performing the authentication by computing the authentication key and the ciphertext in an encrypted state.

10. The authentication method of claim 9 , wherein the performing of the authentication comprises:

calculating a similarity between the registration target personal information and the authentication target personal information by computing the authentication key and the ciphertext in an encrypted state; and

performing the authentication based on the similarity.

11. The authentication method of claim 10 , wherein the generating of the master key comprises generating the master key using an initialization algorithm of functional encryption,

the generating of the authentication key comprises generating the authentication key using an encryption key generation algorithm of the functional encryption,

the generating of the ciphertext comprises generating the ciphertext using an encryption algorithm of the functional encryption, and

the performing of the authentication comprises calculating the similarity using a decryption algorithm of the functional encryption.

12. The authentication method of claim 8 , further comprising deleting, at the registration request apparatus, the master key after generating the authentication key.

13. The authentication method of claim 8 , wherein in the generating of the master key and the generating of the authentication key, the master key and the authentication key are generated in a secure area of the registration request apparatus.

14. The authentication method of claim 8 , wherein the registration target personal information and the authentication target personal information are biometric information.

15. An authentication system comprising:

a registration/authentication request apparatus; and

an authentication server,

wherein the registration/authentication request apparatus generates a master key in a secure area of the registration/authentication request apparatus, stores the master key in the secure area, generates an authentication key for registration target personal information in the secure area by using the registration target personal information and the master key, transmits the authentication key to the authentication server, generates a ciphertext for authentication target personal information in the secure area by using the authentication target personal information and the master key, and transmits the ciphertext to the authentication server, and

the authentication server receives the authentication key from the registration/authentication request apparatus, stores the authentication key, and performs authentication of the authentication target personal information using the authentication key and the ciphertext when the ciphertext is received from the registration/authentication request apparatus.

16. The authentication system of claim 15 , wherein the authentication server performs the authentication by computing the authentication key and the ciphertext in an encrypted state.

17. The authentication system of claim 16 , wherein the authentication server calculates a similarity between the registration target personal information and the authentication target personal information by computing the authentication key and the ciphertext in an encrypted state and performs the authentication based on the similarity.

18. The authentication system of claim 17 , wherein the registration/authentication request apparatus generates the master key, the authentication key, and the ciphertext using an initialization algorithm, an authentication key generation algorithm, and an encryption algorithm of functional encryption and

the authentication server calculates the similarity using a decryption algorithm of the functional encryption.

19. The authentication system of claim 15 , wherein the registration target personal information and the authentication target personal information are biometric information.

20. An authentication method which is performed in an authentication system including a registration/authentication request apparatus and an authentication server, the authentication method comprising:

generating, at the registration/authentication request apparatus, a master key in a secure area of the registration/authentication request apparatus;

storing, at the registration/authentication request apparatus, the master key in the secure area;

generating, at the registration/authentication request apparatus, an authentication key for registration target personal information in the secure area by using the registration target personal information and the master key;

transmitting, at the registration/authentication request apparatus, the authentication key to the authentication server;

receiving and storing, at the authentication server, the authentication key;

generating, at the registration/authentication request apparatus, a ciphertext for authentication target personal information in the secure area by using the authentication target personal information and the master key;

transmitting, at the registration/authentication request apparatus, the ciphertext to the authentication server; and

performing, at the authentication server, authentication of the authentication target personal information using the authentication key and the ciphertext.

21. The authentication method of claim 20 , wherein the performing of the authentication comprises performing the authentication by computing the authentication key and the ciphertext in an encrypted state.

22. The authentication method of claim 21 , wherein the performing of the authentication comprises calculating a similarity between the registration target personal information and the authentication target personal information by computing the authentication key and the ciphertext in an encrypted state, and performing the authentication based on the similarity.

23. The authentication method of claim 22 , wherein the generating of the master key comprises generating the master key using an initialization algorithm of functional encryption,

the generating of the authentication key comprises generating the authentication key using an encryption key generation algorithm of the functional encryption,

the generating of the ciphertext comprises generating the ciphertext using an encryption algorithm of the functional encryption, and

the performing of the authentication comprises calculating the similarity using a decryption algorithm of the functional encryption.

24. The authentication method of claim 20 , wherein the registration target personal information and the authentication target personal information are biometric information.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 26, 2018
From: CHOI, KYU-YOUNG; CHO, JI-HOON; YOON, HYO-JIN; MOON, DUK-JAE
To: SAMSUNG SDS CO., LTD.
Reel/Frame 047872/0705 →
Priority Claims (1)
KR 10-2017-0143365 · Oct 31, 2017 · national
Continuity (1)
Related Publication 20190182221A1 · Jun 13, 2019
Cited By (2)
US 12,425,221 US 12,438,710