Authentication device and method

Abstract

An authentication device 1 comprises: a transmission unit 122 that transmits secret information to a network interface capable of executing a prescribed program; a reception unit 123 that receives, from the network interface, processed secret information generated as a result of the network interface using a secret key of the network interface to process the secret information; a restoration unit 124 that restores the processed secret information to the original secret information by using the processed secret information and a public key corresponding to the secret key; and a confirmation unit 125 that confirms whether the secret information transmitted by the transmission unit matches the secret information restored by the restoration unit 124.

Description

Authentication device and method

[0001] The disclosed technology relates to authentication technology.

[0002] Programmable network interfaces such as SmartNICs (see, for example, Non-Patent Documents 1 and 2) are becoming more common. By using such a network interface, encryption and decryption, control of communication destinations, etc. can be performed on the network interface side, thereby reducing the load on applications on the host machine.

[0003] When data is communicated between an application running on one host machine and another running on another host machine, the data is encrypted and sent / received using a programmable network interface connected to both host machines. In this case, if the network interface is replaced, there is a possibility that the application may communicate with an unintended host machine. To eliminate this possibility, a method is required that can authenticate that the application is using a legitimate network interface.

[0004] Intel (registered trademark), "A SmartNIC for Accelerating Communications and Networking Workloads," [online], [searched July 17, 2024], Internet <URL: https: / / cdrdv2.intel.com / v1 / dl / getContent / 779620> NVIDIA (registered trademark), "ConnectX-6: The Highest Performance and Flexible Solution," [online], [searched July 17, 2024], Internet <URL: https: / / www.nvidia.com / ja-jp / networking / ethernet / connectx-6 / >

[0005] However, no method has been proposed to date that can authenticate a network interface as legitimate.

[0006] The disclosed technology aims to provide an authentication device and method that can authenticate that a network interface is legitimate.

[0007] An authentication device according to one aspect of the disclosed technology includes a transmitting unit that transmits secret information to a network interface capable of executing a specified program, a receiving unit that receives, from the network interface, processed secret information generated by the network interface processing the secret information using its own private key, a restoration unit that restores the processed secret information to its original secret information using a public key corresponding to the processed secret information and the private key, and a verification unit that verifies whether the secret information transmitted by the transmitting unit matches the secret information restored by the restoration unit.

[0008] An authentication device according to one aspect of the disclosed technology includes: a short-term key generation unit that generates a short-term private key eSKa and a short-term public key ePKa from identification information of an application performing authentication, identification information of a network interface capable of executing a specified program, and the application's private key SKa; a transmission unit that transmits the short-term public key ePKa to the network interface capable of executing the specified program; a reception unit that receives from the network interface the short-term private key eSKs and the short-term public key ePKs among the short-term public keys ePKs that the network interface has generated from the application's identification information, the network interface's identification information, and the network interface's private key SKs; and a key generation unit that generates a key SK from the application's identification information, the network interface's identification information, the application's private key SKa, the short-term private key eSKa, and the short-term public key ePKs.

[0009] According to the disclosed technology, it is possible to authenticate that a network interface is legitimate.

[0010] Fig. 1 is a diagram illustrating an example of the functional configuration of an authentication device according to a first embodiment. Fig. 2 is a diagram illustrating an example of a processing procedure of an authentication method according to the first embodiment. Fig. 3 is a diagram illustrating an example of the functional configuration of an authentication device according to a second embodiment. Fig. 4 is a diagram illustrating an example of a processing procedure of an authentication method according to the second embodiment. Fig. 5 is a diagram illustrating an example of the functional configuration of a computer.

[0011] Hereinafter, embodiments of the disclosed technology will be described with reference to the drawings. Note that components having the same functions in the drawings are given the same reference numerals, and redundant description will be omitted.

[0012] First Embodiment An authentication device 1 according to a first embodiment performs authentication using a PKI (Public Key Infrastructure).

[0013] As shown in FIG. 1, the authentication device 1 of the first embodiment includes a storage unit 120, a public key certificate generation unit 121, a transmission unit 122, a reception unit 123, a restoration unit 124, and a confirmation unit 125.

[0014] The communication method is realized, for example, by each component of the authentication device 1 performing the processes from step S121 to step S125 shown in FIG.

[0015] A network interface N capable of executing a predetermined program is attached to the authentication device 1. An example of the network interface N is a SmartNIC.

[0016] The processing described below is performed by an application installed in the authentication device 1. This application may be performed by an instance, which is a virtual entity constructed in the authentication device 1. Examples of an instance are a container, a pod, and a VM (Virtual Machine) instance.

[0017] Examples of the processing of the authentication device 1 are the <preparation processing> and <authentication processing> shown below.

[0018] <Preparation Processing> The network interface N generates a public key PKs and a private key SKs of the network interface N. The public key PKs and the private key SKs are stored in the storage unit N0 of the network interface N.

[0019] The network interface N transmits the public key PKs and the identification information of the network interface N to the authentication device 1 .

[0020] The identification information of the network interface N is information unique to the network interface N, such as the MAC address of the network interface N, an IMEI (International Mobile Equipment Identity), or a serial number.

[0021] The public key certificate generation unit 121 generates a public key certificate for the network interface N using the public key PKs and the identification information of the network interface N (step S121). The public key certificate generation unit 121 transmits the generated public key certificate to the network interface N. For example, the public key PKs and the identification information of the network interface N are included in the public key certificate.

[0022] The network interface N stores the received public key certificate in the storage unit N0.

[0023] The preparation process described above (processing including step S121) is performed before the authentication process (processing including steps S122 to S125) described later.

[0024] <Authentication Process> The transmission unit 122 transmits secret information to the network interface N (step S122). The secret information is information known only to the subject performing the authentication. The secret information is, for example, a random number Rn.

[0025] The network interface N uses its own private key SKs read from the storage unit N0 to process the private information received from the authentication device 1, thereby generating processed private information Sgn. An example of the processed private information Sgn is a signature for the private information using the private key SKs.

[0026] The receiving unit 123 receives, from the network interface N, the processed secret information that the network interface N has generated by processing the secret information using its own secret key SKs (step S123).

[0027] The restoration unit 124 restores the processed secret information to the original secret information using the processed secret information and the public key PKs corresponding to the secret key SKs (step S124).

[0028] The confirmation unit 125 confirms whether the secret information transmitted by the transmission unit 122 matches the secret information generated by the restoration unit 124 (step S125). If it is confirmed that they match, it can be determined that the authentication of the network interface N has been successful.

[0029] The network interface N may transmit the public key PKs and public key certificate read from the storage unit N0 together with the processed secret information. In this case, the confirmation unit 125 confirms that the secret information matches and also confirms from the public key certificate that the received public key PKs is correct. In this case, the confirmation unit 125 may determine that the authentication of the network interface N has been successful if both confirmations are successful.

[0030] The network interface N may also transmit the identification information of the network interface N together with the processed secret information. In this case, the confirmation unit 125 confirms whether the secret information matches and also confirms from the public key certificate that the received identification information of the network interface N is correct. In this case, the confirmation unit 125 may determine that the authentication of the network interface N has been successful if both confirmations are successful.

[0031] Furthermore, the network interface N may transmit the public key PKs and public key certificate read from the storage unit N0, along with the processed secret information, and the identification information of the network interface N. In this case, the confirmation unit 125 confirms that the secret information matches, confirms from the public key certificate that the received public key PKs is correct, and confirms from the public key certificate that the received identification information of the network interface N is correct. In this case, the confirmation unit 125 may determine that the authentication of the network interface N has been successful if all confirmations have been made.

[0032] Second Embodiment An authentication device 1 according to a second embodiment performs ID-based authentication key exchange (IBAKE).

[0033] The following description will focus on the differences from the first embodiment, and will omit redundant description of the same parts as in the first embodiment.

[0034] As shown in FIG. 3, the authentication device 1 of the second embodiment includes a memory unit 120, a master private key generation unit 126, a long-term private key generation unit 127, a short-term key generation unit 128, a transmission unit 129, a reception unit 1210, and a key generation unit 1211.

[0035] The communication method is realized, for example, by each component of the authentication device 1 performing the processes from step S126 to step S1211 shown in FIG.

[0036] <Preparation Process> The master private key generation unit 126 generates a master private key MSK (step S126). The generated master private key MSK is stored in the storage unit 120.

[0037] The long-term private key generation unit 127 first receives the identification information of the network interface N from the network interface N. Then, the long-term private key generation unit 127 generates a private key SKa of the application using the master private key MSK read from the storage unit 120 and the identification information of the application (step S127). The private key SKa is the long-term private key of the application. The identification information of the network interface N and the generated private key SKa are stored in the storage unit 120.

[0038] The application identification information is information unique to the application, such as the application's MAC address, IMEI (International Mobile Equipment Identity), serial number, etc. This application performs authentication.

[0039] Then, the long-term private key generation unit 127 generates a private key SKs for the network interface N from the master private key MSK and the identification information of the network interface N read from the storage unit 120 (step S127). The private key SKs is a long-term private key for the network interface N. The private key SKs and the identification information of the application are sent to the network interface N.

[0040] The network interface N stores the received secret key SKs and application identification information in the storage unit N0 of the network interface N.

[0041] The preparation process described above (processing including steps S126 and S127) is performed before the authentication process (processing including steps S128 to S1211) described later.

[0042] <Authentication Process> The short-term key generation unit 128 generates a short-term private key eSKa and a short-term public key ePKa of the application from the identification information of the application, the identification information of the network interface N, and the private key SKa of the application (step S128). To do this, the short-term key generation unit 128 reads the identification information of the network interface N and the private key SKa of the application from the storage unit 120.

[0043] The transmission unit 129 transmits the generated short-term public key ePKa to the network interface N (step S129).

[0044] The network interface N generates a short-term private key eSKs and a short-term public key ePKs of the network interface N from the identification information of the application, the identification information of the network interface N, and the private key SKs of the network interface. To this end, the network interface N reads the identification information of the application and the private key SKs of the network interface from the storage unit N0 of the network interface N.

[0045] The network interface N transmits the generated short-term public key ePKs to the authentication device 1.

[0046] The receiving unit 1210 receives from the network interface N the short-term private key eSKs and the short-term public key ePKs among the short-term public keys ePKs generated by the network interface N from the application identification information, the network interface N identification information, and the network interface N's private key SKs (step S1210).

[0047] The key generation unit 1211 generates a key SK from the application identification information, the network interface N identification information, the application's private key SKa, short-term private key eSKa, and short-term public key ePKs (step S1211).

[0048] The network interface N generates a key SK from the identification information of the application, the identification information of the network interface N, the private key SKs of the network interface N, the short-term private key eSKa, and the short-term public key ePKs.

[0049] If the network interface N is authentic, the key SK generated by the key generation unit 1211 matches the key SK generated by the network interface N. In this case, data encrypted with the key SK generated by the key generation unit 1211 can only be decrypted by the network interface N. Conversely, data encrypted with the key SK generated by the network interface N can only be decrypted by the authentication device 1. For this reason, it can be considered that the above process described in the second embodiment effectively performs authentication.

[0050] [Modifications] The specific configurations of the embodiments of the disclosed technology are not limited to the configurations described above. The specific configurations of the embodiments of the disclosed technology can be appropriately modified in design, etc., within the scope of the spirit of the embodiments of the disclosed technology.

[0051] The various processes described in the embodiments of the disclosed technology may not only be performed chronologically in the order described, but may also be performed in parallel or individually depending on the processing capacity of the device performing the processes or as needed.

[0052] For example, data may be exchanged directly between the components of the authentication device, or may be exchanged via a storage unit (not shown).

[0053] The authentication device 1 may perform only the authentication process. In this case, the preparation process is performed before the authentication process. In this case, the authentication device 1 of the first embodiment may include at least a transmitter 122, a receiver 123, a restorer 124, and a verifying unit 125. Similarly, the authentication device 1 of the second embodiment may include at least a short-term key generator 128, a transmitter 129, a receiver 1210, and a key generator 1211.

[0054] The authentication device 1 may further include a detection unit 1212 that detects whether a new network interface capable of executing a predetermined program has been attached to the authentication device 1. In this case, if the detection unit 1212 detects a new network interface, the above-described processing is performed on the detected new network interface. This allows authentication to be performed on the network interface attached to the authentication device 1.

[0055] In the first embodiment, the aforementioned processing refers to at least the processing of the transmitting unit 122, the receiving unit 123, the restoring unit 124, and the verifying unit 125. In the second embodiment, the aforementioned processing refers to at least the processing of the short-term key generating unit 128, the transmitting unit 129, the receiving unit 1210, and the key generating unit 1211.

[0056] After the authentication device 1 has successfully authenticated the network interface N, in other words, after it has confirmed that the network interface N is a legitimate network interface, the authentication device 1 may communicate with an external device via the network interface N. In this case, the authentication device 1 may encrypt data sent and received between the authentication device 1 and the network interface N using a predetermined key. An example of the predetermined key is key SK.

[0057] Furthermore, a device (terminal) for using the device, system, or method of the present invention via a network (telecommunications line) may also be provided. The "device (terminal) for use" may be provided with functions (e.g., control function, decoding function, restoration function, input / output function, etc.) necessary to obtain the effects of implementing the device, system, or method of the present invention.

[0058] It goes without saying that other modifications are possible without departing from the spirit of the present invention.

[0059] All publications, patent applications, and technical standards mentioned in this specification are herein incorporated by reference to the same extent as if each individual publication, patent application, or technical standard was specifically and individually indicated to be incorporated by reference.

[0060] [Program, Recording Medium] The functions realized by the components described in this specification may be implemented in circuitry or processing circuitry, including general-purpose processors, application-specific processors, integrated circuits, ASICs (Application Specific Integrated Circuits), CPUs (Central Processing Units), conventional circuits, and / or combinations thereof, programmed to realize the described functions. A processor includes transistors and other circuits and is considered to be circuitry or processing circuitry. A processor may also be a programmed processor that executes a program stored in a memory.

[0061] In this specification, a circuitry, unit, or means is hardware that is programmed to realize or performs the described functions, which may be any hardware disclosed herein or any hardware known to be programmed to realize or perform the described functions.

[0062] If the hardware is a processor considered to be a type of circuitry, the circuitry, means, or unit is a combination of the hardware and software used to configure the hardware and / or processor.

[0063] The various processes described above can be implemented by loading a program that executes each step of the above method into the recording unit 2020 of the computer 2000 shown in Figure 5, and operating the control unit 2010, input unit 2030, output unit 2040, display unit 2050, etc.

[0064] The program describing the processing contents can be recorded on a computer-readable recording medium, which may be, for example, a magnetic recording device, an optical disk, a magneto-optical recording medium, a semiconductor memory, or any other suitable recording medium.

[0065] The program may be distributed by, for example, selling, transferring, lending, etc. portable recording media such as DVDs and CD-ROMs on which the program is recorded. Furthermore, the program may be stored in a storage device of a server computer, and then transferred from the server computer to other computers via a network, thereby distributing the program.

[0066] A computer that executes such a program may first temporarily store the program recorded on a portable recording medium or transferred from a server computer in its own storage device. Then, when executing a process, the computer reads the program stored on its own recording medium and executes the process in accordance with the read program. Alternatively, the computer may read the program directly from a portable recording medium and execute the process in accordance with the program. Furthermore, the computer may execute the process in accordance with the program each time a program is transferred from a server computer to the computer. Alternatively, the server computer may not transfer the program to the computer, but may instead execute the process through a so-called ASP (Application Service Provider) service, which realizes the processing function by issuing an execution instruction and obtaining the results. Furthermore, the server computer may execute the process at the terminal using a so-called SaaS (Software as a Service) service, which allows users to use part of the server computer along with the program. In this embodiment, the program includes information used for processing by an electronic computer that is equivalent to a program (such as data that is not a direct instruction to a computer but has properties that dictate computer processing).

[0067] Furthermore, in this embodiment, the device is configured by executing a predetermined program on a computer, but at least a part of the processing contents may be realized by hardware.

Claims

1. An authentication device comprising: a transmitting unit that transmits secret information to a network interface capable of executing a predetermined program; a receiving unit that receives, from the network interface, processed secret information generated by the network interface processing the secret information using its own private key; a restoring unit that restores the processed secret information to its original secret information using a public key corresponding to the processed secret information and the private key; and a verifying unit that verifies whether the secret information transmitted by the transmitting unit matches the secret information restored by the restoring unit.

2. An authentication device comprising: a short-term key generation unit that generates a short-term private key eSKa and a short-term public key ePKa from identification information of an application performing authentication, identification information of a network interface capable of executing a specified program, and the private key SKa of the application; a transmission unit that transmits the short-term public key ePKa to the network interface capable of executing the specified program; a reception unit that receives from the network interface a short-term private key eSKs and a short-term public key ePKs among the short-term public keys ePKs that are generated by the network interface from the identification information of the application, identification information of the network interface, and the private key SKs of the network interface; and a key generation unit that generates a key SK from the identification information of the application, identification information of the network interface, the private key SKa of the application, the short-term private key eSKa, and the short-term public key ePKs.

3. An authentication device according to claim 1, further comprising a detection unit that detects whether a new network interface capable of executing a predetermined program has been attached to the authentication device 1, and when the new network interface is detected, the transmission unit, reception unit, restoration unit and confirmation unit perform processing for the detected new network interface.

4. An authentication device according to claim 2, further comprising a detection unit that detects whether a new network interface capable of executing a predetermined program has been attached to the authentication device 1, and when the new network interface is detected, the short-term key generation unit, the transmission unit, the reception unit and the key generation unit perform processing for the detected new network interface.

5. An authentication method comprising: a sending step in which a sending unit sends secret information to a network interface capable of executing a predetermined program; a receiving step in which a receiving unit receives, from the network interface, processed secret information generated by the network interface processing the secret information using its own private key; a restoring step in which a restoring unit restores the processed secret information to the original secret information using a public key corresponding to the processed secret information and the private key; and a verifying step in which a verifying unit verifies whether the secret information sent by the sending unit matches the secret information restored by the restoration step.

6. An authentication method comprising: a short-term key generation step in which a short-term key generation unit generates a short-term private key eSKa and a short-term public key ePKa from identification information of an application performing authentication, identification information of a network interface capable of executing a predetermined program, and the private key SKa of the application; a transmission step in which a transmission unit transmits the short-term public key ePKa to the network interface capable of executing the predetermined program; a reception step in which a reception unit receives from the network interface a short-term private key eSKs and a short-term public key ePKs among the short-term public keys ePKs generated by the network interface from the identification information of the application, identification information of the network interface, and the private key SKs of the network interface; and a key generation step in which a key generation unit generates a key SK from the identification information of the application, identification information of the network interface, the private key SKa of the application, the short-term private key eSKa, and the short-term public key ePKs.

Images