User verification device, authentication system and authentication method for security key
A user verification device, an authentication system, and an authentication method for a security key are provided. The user verification device includes a security chip, a proximity sensor, a connector, and a microcontroller unit. The connector is connected to an electronic apparatus. The microcontroller unit is coupled to the security chip, the proximity sensor, and the connector. When the microcontroller unit receives an identity authentication request from the electronic apparatus through the connector, the microcontroller unit determines whether an object is approaching the user verification device through the proximity sensor. When the microcontroller unit determines that the object is approaching the user verification device through the proximity sensor, the microcontroller unit reads an identity authentication response from the security chip and outputs the identity authentication response to the electronic apparatus through the connector.
1 . A user verification device for a security key, comprising:
a security chip;
a proximity sensor;
a connector configured to be connected to an electronic apparatus; and
a microcontroller unit coupled to the security chip, the proximity sensor, and the connector, wherein the electronic apparatus executes a browser or an application and receives a personal identity number,
wherein the browser or the application sends the personal identity number to the user verification device,
wherein when the microcontroller unit receives the personal identity number from the electronic apparatus through the connector, the microcontroller unit determines whether the object is approaching the user verification device through the proximity sensor,
wherein when the microcontroller unit determines that the object is approaching the user verification device through the proximity sensor, the microcontroller unit reads a user credential from the security chip and outputs the user credential to the electronic apparatus through the connector,
wherein the browser or the application sends the user credential to a network application, so that the network application sends the identity authentication request to the browser or the application, and the browser or the application sends the identity authentication request to the user verification device,
wherein when the microcontroller unit receives the identity authentication request from the electronic apparatus through the connector, the microcontroller unit determines whether an object is approaching the user verification device through the proximity sensor,
wherein when the microcontroller unit determines that the object is approaching the user verification device through the proximity sensor, the microcontroller unit reads an identity authentication response from the security chip and outputs the identity authentication response to the electronic apparatus through the connector.
2 . The user verification device according to claim 1 , wherein the browser or the application sends the identity authentication response to the network application, so that the network application agrees that the browser or the application performs a password-free authentication login operation.
3 . The user verification device according to claim 1 , wherein the identity authentication request is a fast identity online (FIDO) request, and the identity authentication response is fast identity online data.
4 . The user verification device according to claim 1 , further comprising:
an indication unit coupled to the microcontroller unit,
wherein when the microcontroller unit receives the identity authentication request from the electronic apparatus through the connector, the microcontroller unit sends out an indication signal through the indication unit.
5 . The user verification device according to claim 1 , wherein the proximity sensor has a sensing window, and the sensing window emits a sensing signal toward an opening of a body of the user verification device to sense whether the object is approaching the user verification device.
6 . The user verification device according to claim 1 , wherein the proximity sensor determines whether the object is approaching the user verification device according to whether the time when the object is approaching the user verification device exceeds a predetermined time threshold.
7 . The user verification device according to claim 1 , wherein at least two of the security chip, the proximity sensor, and the microcontroller unit are integrated into a same chip, and the connector comprises a universal serial bus (USB) interface.
8 . An authentication system for a security key, comprising:
an electronic apparatus; and
a user verification device, comprising:
a security chip;
a proximity sensor;
a connector configured to be connected to the electronic apparatus; and
a microcontroller unit coupled to the security chip, the proximity sensor, and the connector, wherein the electronic apparatus executes a browser or an application and receives a personal identity number,
wherein the browser or the application sends the personal identity number to the user verification device,
wherein when the microcontroller unit receives the personal identity number from the electronic apparatus through the connector, the microcontroller unit determines whether the object is approaching the user verification device through the proximity sensor,
wherein when the microcontroller unit determines that the object is approaching the user verification device through the proximity sensor, the microcontroller unit reads a user credential from the security chip and outputs the user credential to the electronic apparatus through the connector,
wherein the browser or the application sends the user credential to a network application, so that the network application sends the identity authentication request to the browser or the application, and the browser or the application sends the identity authentication request to the user verification device,
wherein when the microcontroller unit receives the identity authentication request from the electronic apparatus through the connector, the microcontroller unit determines whether an object is approaching the user verification device through the proximity sensor,
wherein when the microcontroller unit determines that the object is approaching the user verification device through the proximity sensor, the microcontroller unit reads an identity authentication response from the security chip and outputs the identity authentication response to the electronic apparatus through the connector.
9 . The authentication system according to claim 8 , wherein the browser or the application sends the identity authentication response to the network application, so that the network application agrees that the browser or the application performs a password-free authentication login operation.
10 . An authentication method for a security key, suitable for a user verification device and an electronic apparatus, wherein the electronic apparatus executes a browser or an application, wherein the user verification device comprises a connector, a proximity sensor, and a security chip, wherein the authentication method comprises:
receiving a personal identity number through the browser or the application;
sending the personal identity number to the user verification device through the browser or the application;
determining whether the object is approaching the user verification device through the proximity sensor when the user verification device receives the personal identity number from the electronic apparatus through the connector;
reading a user credential from the security chip and outputting the user credential to the electronic apparatus through the connector when the user verification device determines that the object is approaching the user verification device through the proximity sensor;
sending the user credential to the network application through the browser or the application, so that the network application sends a identity authentication request to the browser or the application, and the browser or the application sends the identity authentication request to the user verification device;
determining whether an object is approaching the user verification device through the proximity sensor when the user verification device receives the identity authentication request from the electronic apparatus through the connector;
reading an identity authentication response from the security chip when the proximity sensor determines that the object is approaching the user verification device; and
outputting the identity authentication response to the electronic apparatus through the connector.
11 . The authentication method according to claim 10 , further comprising:
sending the identity authentication response to the network application through the browser or the application, so that the network application agrees that the browser or the application performs a password-free authentication login operation.