Blockchain-based FIDO authentication method, apparatus and system

Abstract

The present disclosure relates to a blockchain-based FIDO authentication method, apparatus and system. The method comprises the following steps: an initial authentication request sent by a piece of user equipment is received by a first application service, an authentication request is sent to the user equipment, wherein the authentication request includes a challenge value. After the user equipment uses an authentication private key to sign the challenge value, a FIDO server receives the authentication response sent by the user equipment through the first application service, and the authentication response includes a challenge value signature, and then the FIDO obtains an authentication public key corresponding to the authentication private key from the blockchain, and the challenge valuesignature in the authentication response is verified using the authentication public key. The method solves the problems that the FIDO system in the prior art is vulnerable to information leakage, tampered or failed, and the security of the FIDO system is improved.

Description

technical field [0001] The present disclosure relates to the field of information security, in particular, to a blockchain-based FIDO authentication method, device and system. Background technique [0002] The FIDO (Fast Identity Online) standard is an open standard protocol proposed by the FIDO Alliance, which aims to provide an online identity verification with high security, cross-platform compatibility, excellent user experience and user privacy protection. Technology Architecture. The FIDO standard completes user authentication by integrating two major technologies of biometric identification and asymmetric encryption, trying to end the trouble that users have to memorize and use a large number of complex passwords for many years. Two authentication protocols are proposed in the current FIDO standard: U2F (Universal 2nd Factor Protocol, universal second factor) and UAF (Universal Authentication Framework, universal authentication framework). [0003] Among them, U2F i...

AI Technical Summary

Problems solved by technology

[0006] An object of the present disclosure is to provide a blockchain-based FIDO authentication method, device, and system, which can solve the problem that the existing centralized deployment of FIDO servers is vulnerable to attacks, resulting in information leakage, tampering, or system failure.

Images