Electronic device for performing authentication on basis of cloud server and control method therefor
Disclosed is an electronic device that operates based on a cloud server including a biometric sensor, a database that stores identification information on at least one of the biometric sensor, a user, and the electronic device and biometric information registered by the biometric sensor, and at least one processor, wherein the processor receives an authentication request of an authentication server through the cloud server, acquires biometric information of a user through the biometric sensor in response to the authentication request being received, determines whether the acquired biometric information corresponds to biometric information stored in the database, generates a response value including information on a result of the determining, and transmits the response value and the identification information to the cloud server, and the response value is transmitted to the authentication server when the transmitted identification information matches at least one of identification information stored in the cloud server.
1. An electronic device that operates based on a cloud server, the electronic device comprising:
a biometric sensor;
a database in which identification information on at least one of the biometric sensor, a user, and the electronic device and biometric information registered by the biometric sensor are stored; and
at least one processor,
wherein the at least one processor is configured to:
receive an authentication request of an authentication server through the cloud server;
acquire biometric information of a user through the biometric sensor in response to the authentication request being received;
determine whether the acquired biometric information corresponds to biometric information stored in the database and generate a response value comprising information on whether the acquired biometric information corresponds to the stored biometric information; and
transmit the generated response value and the identification information to the cloud server, and
the generated response value is transmitted to the authentication server from the cloud server when the transmitted identification information matches at least one of pieces of identification information previously stored in the cloud server.
2. The electronic device of claim 1 , wherein the generated response value is encrypted based on a registered private key and decrypted by a designated public key, and
the public key is stored in the cloud server or the authentication server.
3. The electronic device of claim 1 , wherein, in the cloud server, an authentication function to perform a user authentication using the biometric sensor in association with the electronic device is registered, and
the identification information previously stored in the cloud server is information stored in a process of registering the authentication function.
4. The electronic device of claim 1 , wherein when authentication functions of a plurality of electronic devices are registered in the cloud server, the identification information previously stored in the cloud server comprises identification information on each of the plurality of electronic devices.
5. The electronic device of claim 4 , wherein when the plurality of electronic devices comprises a first electronic device and a second electronic device, the identification information on each of the plurality of electronic devices comprises first identification information on the first electronic device and second identification information on the second electronic device,
the first identification information comprises information on at least one of a biometric sensor included in the first electronic device, a user of the first electronic device, and the first electronic device, and
the second identification information comprises information on at least one of a biometric sensor included in the second electronic device, a user of the second electronic device, and the second electronic device.
6. The electronic device of claim 5 , wherein when the first electronic device comprises a plurality of biometric sensors, sensor information for each of the plurality of biometric sensors comprises a plurality of pieces of different identification information.
7. The electronic device of claim 1 , wherein the identification information stored in the database comprises information on the biometric sensor, information on the user, and information on the electronic device,
the information on the biometric sensor comprises a type of the biometric sensor or a type of the biometric information,
the information on the user comprises an identification (ID) of a user account registered in the electronic device or a name of the user, and
the information on the electronic device comprises a type of the electronic device or a predetermined identification number assigned to the electronic device.
8. The electronic device of claim 1 , wherein the biometric sensor comprises at least one of an iris recognition sensor, a fingerprint recognition sensor, and a facial recognition sensor.
9. A biometric authentication method of an electronic device that operates based on a cloud server, the biometric authentication method comprising:
receiving an authentication request of an authentication server through the cloud server;
acquiring biometric information of a user through a biometric sensor in response to the authentication request being received;
determining whether the acquired biometric information corresponds to biometric information previously stored and generating a response value comprising information on whether the acquired biometric information corresponds to the previously stored biometric information; and
transmitting the generated response value and identification information on at least one of the biometric sensor, a user, and the electronic device to the cloud server,
wherein the generated response value is transmitted to the authentication server from the cloud server when the transmitted identification information matches at least one of pieces of identification information previously stored in the cloud server.
10. The biometric authentication method of claim 9 , wherein the generated response value is encrypted based on a registered private key and decrypted by a designated public key, and
the public key is stored in the cloud server or the authentication server.
11. The biometric authentication method of claim 9 , wherein, in the cloud server, an authentication function to perform a user authentication using the biometric sensor in association with the electronic device is registered, and
the identification information previously stored in the cloud server is information stored in a process of registering the authentication function.
12. The biometric authentication method of claim 9 , wherein when authentication functions of a plurality of electronic devices are registered in the cloud server, the identification information previously stored in the cloud server comprises identification information on each of the plurality of electronic devices.
13. The biometric authentication method of claim 12 , wherein when the plurality of electronic devices comprises a first electronic device and a second electronic device, the identification information on each of the plurality of electronic devices comprises first identification information on the first electronic device and second identification information on the second electronic device,
the first identification information comprises information on at least one of a biometric sensor included in the first electronic device, a user of the first electronic device, and the first electronic device, and
the second identification information comprises information on at least one of a biometric sensor included in the second electronic device, a user of the second electronic device, and the second electronic device.
14. The biometric authentication method of claim 13 , wherein when the first electronic device comprises a plurality of biometric sensors, sensor information for each of the plurality of biometric sensors comprises a plurality of pieces of different identification information.
15. The biometric authentication method of claim 9 , wherein the identification information on at least one of the biometric sensor, the user, and the electronic device comprises information on the biometric sensor, information on the user, and information on the electronic device,
the information on the biometric sensor comprises a type of the biometric sensor or a type of the biometric information,
the information on the user comprises an identification (ID) of a user account registered in the electronic device or a name of the user, and
the information on the electronic device comprises a type of the electronic device or a predetermined identification number assigned to the electronic device.
16. A biometric authentication system using a cloud server, the biometric authentication system comprising:
the cloud server;
an electronic device that operates based on the cloud server; and
an authentication server to which an authentication is requested,
wherein the electronic device comprises a biometric sensor, a database in which identification information on at least one of the biometric sensor, a user, and the electronic device and biometric information registered by the biometric sensor are stored, and at least one processor,
the at least one processor is configured to receive an authentication request of an authentication server through the cloud server, acquire biometric information of a user through the biometric sensor in response to the authentication request being received, determine whether the acquired biometric information corresponds to biometric information stored in the database, generate a response value comprising information on whether the acquired biometric information corresponds to the stored biometric information, and transmit the generated response value and the identification information to the cloud server,
the cloud server is configured to provide the response value and the identification information to the authentication server, and
the authentication server is configured to decrypt the response value using a previously stored public key when the identification information matches at least one of pieces of identification information previously stored in the authentication server.