CN108092776B - A system based on an authentication server and an authentication token - Google Patents

Abstract

The invention discloses an identity authentication server and an identity authentication token, which are characterized in that the identity authentication server includes a standard FIDO server connected to each other and a storage space for storing keys, namely a database; the identity authentication token is based on physical Unclonable and FIDO U2F protocol, including U2F module, PUF module connected to U2F module, TRNG module, USB module, interactive module, and touch module connected to interactive module; identity token interacts with client browser, customer The terminal browser interacts with the FIDO server in the authentication server. The invention adopts the combination of physical unclonable function and FIDO, guarantees the uniqueness and non-replicability of the token with the physical unclonable function, and guarantees the accuracy of the user's identity and the non-tampering and non-repudiation of the operation with FIDO.

Description

A system based on an authentication server and an authentication token

technical field

The invention belongs to the technical field of identity authentication security, in particular to a system based on an identity authentication server and an identity authentication token.

Background technique

With the continuous development of the global energy Internet, various businesses within and between enterprises are increasingly relying on information systems and network platforms. This new situation has put forward higher and higher requirements for the resource management modes of electric power enterprises such as human resources management, financial management, production management, and enterprise management. The core business in the information system of electric power enterprises, such as the recruitment of human resources involved in the introduction of talents in the human resources business, the inter-enterprise linkage of key talents, and the key business in financial management are the financial transactions within and between enterprises, and production management. The key business transactions of related services and materials, the key tasks within and between enterprises, and the allocation and release of key special funds are the key concerns of the enterprise. Objectively, it is necessary to ensure that the relevant content cannot be tampered with sex and non-repudiation.

Ensure that the employees of the enterprise can effectively control the core business of the enterprise, and the processing process is not tampered with and non-repudiation, and the high-quality resources within the enterprise and between enterprises are monitored within the legal scope through convenient informatization means, and they are not subject to monitoring technical authority at the same time. As a technical means of managing the key links of enterprise resources, it has become a key demand under the Energy Internet.

FIDO (Fast Online Identity Authentication) is a set of open, extensible and collaborative standard protocols proposed by the FIDO Alliance, aiming to provide an online identity with high security, cross-platform compatibility, excellent user experience and user privacy protection Authentication technology architecture to change the existing online authentication method and reduce the dependence on passwords when authenticating users. FIDO has two sets of specifications: U2F (Second Factor Protocol) and UAF. U2F is based on the existing user name + password authentication, adding a more secure authentication factor for login authentication. Users can log into the service with a username and password as before, and the service will prompt the user to present a second-factor device to authenticate. U2F can use simple passwords (such as a 4-digit PIN) without sacrificing security.

The existing FIDO U2F identity token may be cracked, and may be copied or cloned by malicious attackers, resulting in a huge risk to the security of the identity authentication system. In order to ensure the non-replicability of identity tokens, new technologies need to be introduced. PUF (Physical Unclonable Technology) is a hardware function implementation circuit that relies on chip characteristics, with uniqueness and randomness. By extracting the process parameter deviation that must be introduced in the chip manufacturing process, the excitation signal and the generated unpredictable response signal are realized. The only corresponding function function. Integrating PUF in the FIDO U2F identity token and applying its functionality is a direction worth exploring.

On the other hand, the use of random numbers plays an important role in identity authentication systems. Imperfect random numbers will allow attackers to perform replay, interleaving and other attacks on the authentication protocol, resulting in huge risks to system security. To solve this problem, a true random number generator should be used in the authentication token.

SUMMARY OF THE INVENTION

In order to solve the deficiencies of the prior art, the purpose of the present invention is to provide a system based on an identity authentication server and an identity authentication token, which solves the problems of the token being copied and the identity being used fraudulently in the identity authentication process, so as to ensure the The immutability and non-repudiation of relevant operations.

In order to achieve the above goals, the present invention adopts the following technical scheme: a system based on an identity authentication server and an identity authentication token, characterized in that the identity authentication server includes a standard FIDO server connected to each other and a storage key for storing keys. space, the database;

Identity authentication token, based on physical unclonable and FIDO U2F protocol, including U2F module, PUF module, TRNG module, USB module, interactive module connected to the U2F module, and touch module connected to the interactive module;

The U2F module is used to implement encryption algorithms, human-computer interaction, and communication with the outside world;

The PUF module is a physical unclonable function module, which is used to generate the root key and communicate with the U2F module in a challenge-response manner;

The TRNG module is a true random number generator;

The USB module is used to communicate with the PC in the form of a human-machine interface device, to transmit the data sent by the received PC to the U2F module, and to transmit the data processed by the U2F module to the PC;

The touch module is a touch-sensing module, including a touch-sensing module and an LED light. The touch-sensing module and the LED light are respectively connected to the interaction module. During registration or authentication, the LED light flashes to prompt the user to touch, and the user presses the touch module. Confirmation to prevent involuntary operation and user misoperation;

The interaction module is a human-computer interaction information processing module, which is connected with the touch sensing module, drives the touch sensing module and receives the operation information of the user on the touch module and transmits it to the U2F module, and is connected with the LED light for driving the LED light;

The identity token interacts with the client browser, which in turn interacts with the FIDO server in the authentication server.

The aforementioned system based on an identity authentication server and an identity authentication token is characterized in that the verification process of the identity authentication token is realized by a digital signature, which involves the following keys:

①The token private key and token certificate of the identity authentication token are used to verify whether the identity token is legal; the token private key and certificate are preloaded into the identity token U2F module database, and the token will send the certificate during registration to the FIDO server;

②The root key of the identity authentication token is used to generate the encrypted key handle; before each use of the root key, the U2F module and the PUF module must execute the challenge-response protocol. After the protocol is executed correctly, the U2F module will receive the PUF module. The sent root key value;

③The public-private key pair used in the signature, these keys are generated in the identity authentication token, and the physical unclonable function and the true random number generator module are used in the generation process.

The aforementioned system based on an identity authentication server and an identity authentication token is characterized in that the identity authentication server is built based on the FIDO protocol, and additionally stores a token certificate, a signature public key, and a handle on the standard FIDO server, After receiving the authentication or registration request, challenge data can be generated and the response data returned by the token can be verified to return the verification result; the token private key, token certificate and root key are stored in the identity authentication token.

The aforementioned system based on an identity authentication server and an identity authentication token is characterized in that the identity authentication token is a hardware device, which is not directly connected to the network, and interacts with the FIDO server through a client browser.

The aforementioned system based on an identity authentication server and an identity authentication token is characterized in that the identity authentication token supports two operations: registration and authentication; the user invokes the registration method when using it for the first time, and then invokes the authentication method by using it for the first time. ;The registration operation establishes the signature public key and private key key pair in the identity authentication token, and registers the user's identity, public key and handle in the FIDO server for subsequent authentication operations; in the authentication operation, the token needs to be sent to FIDO The server proves that it holds the legitimate private key.

The aforementioned system based on an identity authentication server and an identity authentication token is characterized in that the registration method comprises the steps of:

(1) When the user requests registration in the client browser, input the registered user name in the client browser, send it to the FIDO server, the FIDO server generates a random number A, and sends the random number A together with the user name to the client Browsers, using random numbers can effectively prevent replay attacks;

(2) The client browser checks the TLS connection with the FIDO server, and after determining that it is a legitimate FIDO server, the client generates a registration challenge parameter list {TLS connection data TLSData, a random session parameter SessionRandomValue randomly generated by the client browser, random Number A, username}, the client further performs hash operation on the FIDO server URL to obtain the URL hash value;

(3) The client browser sends the registration challenge parameter list and the URL hash value to the U2F module through the USB module through the USB interface of the identity authentication token connected with the USB interface of the computer;

(4) The U2F module of the identity authentication token calls the digital signature key generation algorithm to generate a pair of signature public and private keys; the signature public key and signature private key take the client login session information and random number A as parameters, and pass the encryption Calculated by the key generation algorithm, where the login session information includes the FIDO server URL, username, TLSData, and SessionRandomValue;

(5) The U2F module calls the PUF module through the challenge-response protocol to generate its own root key, and uses the root key as the encryption key, the signature private key and the FIDO server URL hash value as the plaintext, calls the symmetric encryption algorithm, and generates after encryption key handle; root key length is 128 bits;

(6) The U2F module of the identity authentication token calls the digital signature algorithm, uses its own signature private key as the key, and signs the list {key handle, signature public key, registration challenge parameter list} to generate a signature value;

(7) The U2F module sends the key handle, signature public key, registration challenge parameter list, signature value, and token certificate to the client browser through the USB module through the USB interface, and the client browser sends it to the FIDO server. ;

(8) The FIDO server extracts the token certificate from the received message, and first verifies the validity of the token certificate; if it is legal, it extracts the token public key in the token certificate, invokes the signature verification algorithm, and uses the token The public key is used to verify the validity of the signature; if it is legal, the FIDO server stores the "username, signature public key, and key handle" and informs the client browser that the registration is successful; otherwise, it informs the client that the registration failed.

The aforementioned system based on an identity authentication server and an identity authentication token is characterized in that the key generation algorithm, the symmetric encryption algorithm, the hash algorithm and the digital key in the steps (4), (5) and (6) are There are two modes of signature, one is national secret algorithm, including SM2, SM3, SM4 algorithm; the other is standard FIDO algorithm including RSA, ECDSA, SHA256, AES, and the algorithm is built into the U2F module.

The aforementioned system based on an identity authentication server and an identity authentication token is characterized in that the authentication method comprises the steps:

(1) When the FIDO server receives the user authentication request, it searches the database to find the user's registration key handle, and the server generates a random number B, and sends the random number B together with the registration key handle to the client;

(2) The client browser checks the TLS connection of the server and determines that it is a legitimate server, obtains the TLS connection data TLSData, and performs a hash operation on the list {FIDO server URL, random number B, TLSData} to obtain the hash operation The result is used as the authentication challenge value; the client further performs hash operation on the FIDO server URL to obtain the hash value of the URL;

(3) The client browser sends the authentication challenge value, URL hash value, and registration key handle to the U2F module of the identity authentication token through the USB interface and the USB module;

(4) After the LED light of the touch module on the identity authentication token lights up, the user performs physical confirmation by touching the touch sensing module next to the lighted light, and the interaction module will transmit the confirmation information to the U2F module after receiving the touch confirmation;

(5) The authentication signature counter of the U2F module is incremented by 1, which can record the number of times the identity authentication operation is performed;

(6) The U2F module calls the PUF module with the challenge response protocol to generate its own root key, uses the root key to call the symmetric encryption algorithm, decrypts the key handle, and obtains the URL hash value and the signature private key;

(7) The U2F module of the identity authentication token verifies whether the URL hash value obtained by the decryption handle is consistent with the URL hash value sent by the client in step (3), if it is inconsistent, the execution is interrupted, and the authentication fails, if it is consistent, execute the following step;

(8) The U2F module calls the TRNG true random number generator to generate a local random number C;

(9) U2F module uses the signature private key obtained in step (6) to decrypt the handle, and invokes the digital signature algorithm to digitally sign {authentication challenge value, authentication signature counter value, local random value C} to obtain the authentication signature value;

(10) The U2F module of the identity authentication token sends the authentication challenge value, authentication signature value, authentication signature counter value, and local random value C to the client browser, and the client browser forwards it to the FIDO server; the FIDO server searches for the user's The signature public key; and use the signature public key to call the signature verification algorithm to verify the validity of the signature; if it is valid, the user identity authentication is successful; otherwise, the client is notified that the authentication fails.

The aforementioned system based on an identity authentication server and an identity authentication token is characterized in that the steps (6), (2), (9) symmetric encryption algorithm, hash algorithm and digital signature have two modes, one is The second is the standard FIDO algorithm, including RSA, ECDSA, SHA256, AES, and the algorithm is built into the U2F module.

Beneficial effects achieved by the present invention:

The physical unclonable function is combined with FIDO to ensure the uniqueness and non-replicability of the token with the physical unclonable function, and the FIDO to ensure the accuracy of the user's identity and the non-tampering and non-repudiation of the operation;

Solve hidden dangers such as password leakage existing in traditional account password verification through second factor verification;

Ensure the scalability and universality of tokens through the U2F protocol, and realize multi-system unified identity authentication;

Guaranteed unclonability of tokens through a physical unclonable function;

The randomness and non-reproducibility of the challenge-response mechanism in the user authentication process are guaranteed by a true random number transmitter.

Description of drawings

Fig. 1 is the structural representation of the identity authentication server of the present invention;

Fig. 2 is the structural representation of the identity authentication token of the present invention;

Figure 3 is a flow chart of signature key generation.

Detailed ways

The present invention will be further described below in conjunction with the accompanying drawings. The following examples are only used to illustrate the technical solutions of the present invention more clearly, and cannot be used to limit the protection scope of the present invention.

As shown in Figure 1, an identity authentication server includes a standard FIDO server connected to each other and a storage space for storing keys, that is, a database.

As shown in Figure 2, an identity authentication token, based on the physical unclonable and FIDO U2F protocol, includes a U2F module, a PUF module connected to the U2F module, a TRNG module, a USB module, an interaction module, and a module connected to the interaction module. Touch module, LED light;

The functions of the U2F module are mainly to implement encryption algorithms, human-computer interaction, and communication with the outside world. The U2F module has storage space, encryption and decryption algorithms, and authentication counters. The U2F module takes the national certification Z8D256U-2 as an example, but is not limited to this;

The PUF module is a physical unclonable function module, which integrates a physical unclonable function, and can use the random difference of its internal physical structure to output an unpredictable response after receiving an incentive to ensure the unclonability of the identity token. It is used to generate the root key and communicate with the U2F module in a challenge-response manner. The PUF module contains a PUF chip, take the Quiddikey-filex-e chip of Intrinsic ID company as an example, but not limited to this;

The TRNG module is a true random number generator, which uses physical methods to generate random numbers. It is impossible to guess the results of the random numbers it generates. The generation process is never periodic to ensure the independence of each operation. The TRNG module contains a TRNG chip, taking the Quantis AIS 31 chip of ID Quantique as an example, but not limited to this;

The function of the USB module is to communicate with the PC in the form of a USB-HID (Human Interface Device) device, which is used to transmit the data sent by the PC to the U2F module, and to process the processed data from the U2F module. The data is transmitted to the PC side;

The touch module is a touch-sensing module, including a touch-sensing module and an LED light. The touch-sensing module and the LED light are respectively connected to the interaction module. During registration or authentication, the LED light flashes to prompt the user to touch, and the user presses the touch module. Confirmation to prevent involuntary operation and user misoperation;

The interaction module is a human-computer interaction information processing module, which is connected to the touch sensing module, drives the touch sensing module, and receives the user's operation information on the touch module and transmits it to the U2F module, and is connected to the LED light for driving the LED light.

The identity token interacts with the client browser, which in turn interacts with the FIDO server in the authentication server.

The authentication process of this token is achieved by digital signature, which involves the following keys:

①The token private key and certificate of the identity authentication token are used to verify whether the identity token is legal; the token private key and certificate are preloaded into the identity token U2F module database, and the token will send the certificate to FIDO during registration server;

②The root key of the authentication token is used to generate the encrypted key handle. The reading of the root key requires the participation of the PUF module. The PUF is not integrated on the main chip of the U2F module, but exists as an independent chip. In order to ensure the correctness of the root key, the U2F main chip and the PUF chip must execute the challenge-response protocol before each use of the root key. After the protocol is executed correctly, the main chip receives the root key value sent by the PUF chip;

③ The public and private key pair used for signature. These keys are generated in the identity authentication token, and modules such as physical unclonable functions and true random number generators are used in the generation process to effectively ensure the high security of the keys.

The key generation process is shown in Figure 3.

Table 1 shows the storage of keys in the U2F module of the authentication token and the FIDO server.

Table 1 Key storage situation table

This identity authentication server is built based on the FIDO protocol, and additionally stores the token certificate, signature public key, and handle on top of the standard FIDO server. It can generate challenge data after receiving the authentication or registration request and verify the response data returned by the token and return the verification result.

This identity token is a dedicated hardware device, which is not directly connected to the network, but interacts with the FIDO server through the client browser.

The token supports two operations: registration, authentication. The registration method will be called on the first use by the user, and the authentication method will be called on subsequent uses. The registration operation will establish a signature public key and private key key pair in the identity authentication token, and register the user's identity, public key and handle in the FIDO server for subsequent authentication operations; in the authentication operation, the token needs to be sent to FIDO The server proves that it holds the legitimate private key.

A registration method according to the above-mentioned identity authentication server and identity authentication token, comprising the steps of:

(1) When the user requests registration in the client browser, input the registered user name in the client browser, send it to the FIDO server, the FIDO server generates a random number A, and sends the random number A together with the user name to the client Browsers, using random numbers can effectively prevent replay attacks;

(2) The client browser checks the TLS (Transport Layer Security) connection with the FIDO server, and after determining that it is a legitimate FIDO server, the client generates a registration challenge parameter list {TLS connection data (hereinafter referred to as TLSData), client browser A randomly generated session random parameter (hereinafter referred to as SessionRandomValue), random number A, user name}, the client further hashes the FIDO server URL to obtain the URL hash value;

(3) The client browser sends the registration challenge parameter list and the URL hash value to the U2F module through the USB module through the USB interface of the identity authentication token connected with the USB interface of the computer;

(4) The U2F module of the identity authentication token calls the digital signature key generation algorithm to generate a pair of signature public and private keys; the signature public key and signature private key take the client login session information and random number A as parameters, and pass the encryption It is calculated by the key generation algorithm, and the login session information includes the FIDO server URL, user name, TLSData, and SessionRandomValue.

(5) The U2F module calls the PUF module through the challenge-response protocol to generate its own root key, and uses the root key as the encryption key, the signature private key and the FIDO server URL hash value as the plaintext, calls the symmetric encryption algorithm, and generates after encryption key handle; root key length is 128 bits;

(6) The U2F module of the identity authentication token calls the digital signature algorithm, uses its own signature private key as the key, and signs the list {key handle, signature public key, registration challenge parameter list} to generate a signature value;

(7) The U2F module sends the key handle, signature public key, registration challenge parameter list, signature value, and token certificate to the client browser through the USB module through the USB interface, and the client browser sends it to the FIDO server. ;

(8) The FIDO server extracts the token certificate from the received message, and first verifies the validity of the token certificate; if it is legal, it extracts the token public key in the token certificate, invokes the signature verification algorithm, and uses the token The public key is used to verify the validity of the signature; if it is legal, the FIDO server stores the "username, signature public key, and key handle" and informs the client browser that the registration is successful; otherwise, it informs the client that the registration failed.

The registration process ends here.

Steps (4), (5), (6) There are two modes of key generation algorithm, symmetric encryption algorithm, hash algorithm and digital signature, one is national secret algorithm (SM2, SM3, SM4 algorithm); the other is standard FIDO Algorithms (RSA, ECDSA, SHA256, AES), the algorithms are built into the U2F module.

An authentication method according to the above-mentioned identity authentication server and identity authentication token, comprising the steps of:

(1) When the FIDO server receives the user authentication request, it searches the database to find the user's registration key handle, and the server generates a random number B, and sends the random number B together with the registration key handle to the client;

(2) The client browser checks the TLS connection of the server and determines that it is a legitimate server, obtains the TLS connection data (hereinafter referred to as TLSData), and performs a hash operation on the list {FIDO server URL, random number B, TLSData}, Obtain the result of the hash operation as the authentication challenge value; the client further performs the hash operation on the FIDO server URL to obtain the hash value of the URL;

(3) The client browser sends the authentication challenge value, URL hash value, and registration key handle to the U2F module of the identity authentication token through the USB interface and the USB module;

(4) After the LED light of the touch module on the identity authentication token lights up, the user performs physical confirmation by touching the touch sensing module next to the lighted light, and the interaction module will transmit the confirmation information to the U2F module after receiving the touch confirmation;

(5) The authentication signature counter of the U2F module is incremented by 1, which can record the number of times the identity authentication operation is performed;

(6) The U2F module calls the PUF module with the challenge response protocol to generate its own root key, uses the root key to call the symmetric encryption algorithm, decrypts the key handle, and obtains the URL hash value and the signature private key;

(7) The U2F module of the identity authentication token verifies whether the URL hash value obtained by the decryption handle is consistent with the URL hash value sent by the client in step (3), if it is inconsistent, the execution is interrupted, and the authentication fails, if it is consistent, execute the following step;

(8) The U2F module calls the TRNG true random number generator to generate a local random number C;

(9) U2F module uses the signature private key obtained in step (6) to decrypt the handle, and invokes the digital signature algorithm to digitally sign {authentication challenge value, authentication signature counter value, local random value C} to obtain the authentication signature value;

(10) The U2F module of the identity authentication token sends the authentication challenge value, authentication signature value, authentication signature counter value, and local random value C to the client browser, and the client browser forwards it to the FIDO server; the FIDO server searches for the user's The signature public key; and use the signature public key to call the signature verification algorithm to verify the validity of the signature. If it is legal, the user authentication is successful; otherwise, it informs the client that the authentication fails.

Steps (6), (2), (9) There are two modes of symmetric encryption algorithm, hash algorithm and digital signature, one is national secret algorithm (SM2, SM3, SM4 algorithm); the other is standard FIDO algorithm (RSA, ECDSA , SHA256, AES). The algorithm is built into the U2F module.

The present invention adopts the combination of physical unclonable function and FIDO, uses the physical unclonable function to ensure the uniqueness and non-replicability of the token, and uses FIDO to ensure the accuracy of the user's identity and the non-tampering and non-repudiation of the operation; The second factor verification solves the hidden dangers of password leakage in traditional account password verification; guarantees the scalability and universality of tokens through the U2F protocol, and realizes multi-system unified identity authentication; through the physical unclonable function to ensure the unclonability of the token ; Ensure the randomness and non-reproducibility of the challenge-response mechanism in the user authentication process through a true random number transmitter.

The above are only the preferred embodiments of the present invention. It should be pointed out that for those skilled in the art, without departing from the technical principles of the present invention, several improvements and modifications can be made. These improvements and modifications It should also be regarded as the protection scope of the present invention.

Claims (6)

1. a system based on identity authentication server and identity authentication token, is characterized in that, identity authentication server, comprises the standard FIDO server that is connected with each other and the storage space that is used to store key, i.e. database; Identity authentication token, based on physical unclonable and FIDO U2F protocol, including U2F module, PUF module, TRNG module, USB module, interactive module connected to the U2F module, and touch module connected to the interactive module; The U2F module is used to implement encryption algorithms, human-computer interaction, and communication with the outside world; The PUF module is a physical unclonable function module, which is used to generate the root key and communicate with the U2F module in a challenge-response manner; The TRNG module is a true random number generator; The USB module is used to communicate with the PC in the form of a human-machine interface device, to transmit the received data sent by the PC to the U2F module, and to transmit the data processed by the U2F module to the PC; The touch module is a touch-sensing module, including a touch-sensing module and an LED light. The touch-sensing module and the LED light are respectively connected to the interaction module. During registration or authentication, the LED light flashes to prompt the user to touch, and the user presses the touch module. Confirmation to prevent involuntary operation and user misoperation; The interaction module is a human-computer interaction information processing module, which is connected with the touch sensing module, drives the touch sensing module and receives the operation information of the user on the touch module and transmits it to the U2F module, and is connected with the LED light for driving the LED light; The authentication token interacts with the client browser, and the client browser interacts with the FIDO server in the authentication server; The verification process of the identity authentication token is realized by digital signature, which involves the following keys: ①The token private key and token certificate of the identity authentication token are used to verify whether the identity authentication token is legal; the token private key and certificate are preloaded into the identity authentication token U2F module database, and the token will be The certificate is sent to the FIDO server; ②The root key of the identity authentication token is used to generate the encrypted key handle; before each use of the root key, the U2F module and the PUF module must execute the challenge-response protocol. After the protocol is executed correctly, the U2F module will receive the PUF module. The sent root key value; ③The public and private key pair used in the signature, these keys are generated in the identity authentication token, and the physical unclonable function and the true random number generator module are used in the generation process; The identity authentication token supports two operations: registration and authentication; the user invokes the registration method when using it for the first time, and then uses the invocation authentication method; wherein the registration operation establishes a signature public key and private key key pair in the identity authentication token , and register the user's identity, public key and handle in the FIDO server for subsequent authentication operations; in the authentication operation, the token needs to prove to the FIDO server that it holds a legal private key; The registration method includes the steps: (1) When the user requests registration in the client browser, input the registered user name in the client browser, send it to the FIDO server, the FIDO server generates a random number A, and sends the random number A together with the user name to the client Browsers, using random numbers can effectively prevent replay attacks; (2) The client browser checks the TLS connection with the FIDO server, and after determining that it is a legitimate FIDO server, the client generates a registration challenge parameter list {TLS connection data TLSData, a random session parameter SessionRandomValue randomly generated by the client browser, random Number A, username}, the client further performs hash operation on the FIDO server URL to obtain the URL hash value; (3) The client browser sends the registration challenge parameter list and the URL hash value to the U2F module through the USB module through the USB interface of the identity authentication token connected with the USB interface of the computer; (4) The U2F module of the identity authentication token calls the digital signature key generation algorithm to generate a pair of signature public and private keys; the signature public key and signature private key take the client login session information and random number A as parameters, and pass the encryption Calculated by the key generation algorithm, where the login session information includes the FIDO server URL, username, TLSData, and SessionRandomValue; (5) The U2F module calls the PUF module through the challenge-response protocol to generate its own root key, and uses the root key as the encryption key, the signature private key and the FIDO server URL hash value as the plaintext, calls the symmetric encryption algorithm, and generates after encryption key handle; root key length is 128 bits; (6) The U2F module of the identity authentication token calls the digital signature algorithm, uses its own signature private key as the key, and signs the list {key handle, signature public key, registration challenge parameter list} to generate a signature value; (7) The U2F module sends the key handle, signature public key, registration challenge parameter list, signature value, and token certificate to the client browser through the USB module through the USB interface, and the client browser sends it to the FIDO server. ; (8) The FIDO server extracts the token certificate from the received message, and first verifies the validity of the token certificate; if it is legal, it extracts the token public key in the token certificate, invokes the signature verification algorithm, and uses the token The public key is used to verify the validity of the signature; if it is legal, the FIDO server stores the "username, signature public key, and key handle" and informs the client browser that the registration is successful; otherwise, it informs the client that the registration failed. 2. a kind of system based on identity authentication server and identity authentication token according to claim 1, is characterized in that, described identity authentication server is built based on FIDO protocol, and additionally stored token certificate above standard FIDO server , signature public key, handle, can generate challenge data after receiving the authentication or registration request and verify the response data returned by the token and return the verification result; the token private key, token certificate, root key are stored in the identity in the authentication token. 3. a kind of system based on identity authentication server and identity authentication token according to claim 1, it is characterized in that, described identity authentication token is hardware equipment, is not directly connected to the network, through client browser and FIDO server interaction. 4. a kind of system based on identity authentication server and identity authentication token according to claim 1, is characterized in that, the key generation algorithm in described steps (4), (5), (6), symmetric encryption There are two modes of algorithm, hash algorithm and digital signature, one is national secret algorithm, including SM2, SM3, SM4 algorithm; the other is standard FIDO algorithm including RSA, ECDSA, SHA256, AES, the algorithm is built in U2F module. 5. A system based on an identity authentication server and an identity authentication token according to claim 1, wherein the authentication method comprises the steps: (1) When the FIDO server receives the user authentication request, it searches the database to find the user's registration key handle, and the server generates a random number B, and sends the random number B together with the registration key handle to the client; (2) The client browser checks the TLS connection of the server and determines that it is a legitimate server, obtains the TLS connection data TLSData, and performs a hash operation on the list {FIDO server URL, random number B, TLSData} to obtain the hash operation The result is used as the authentication challenge value; the client further performs hash operation on the FIDO server URL to obtain the hash value of the URL; (3) The client browser sends the authentication challenge value, URL hash value, and registration key handle to the U2F module of the identity authentication token through the USB interface and the USB module; (4) After the LED light of the touch module on the identity authentication token lights up, the user performs physical confirmation by touching the touch sensing module next to the lighted light, and the interaction module will transmit the confirmation information to the U2F module after receiving the touch confirmation; (5) The authentication signature counter of the U2F module is incremented by 1, which can record the number of times the identity authentication operation is performed; (6) The U2F module calls the PUF module with the challenge response protocol to generate its own root key, uses the root key to call the symmetric encryption algorithm, decrypts the key handle, and obtains the URL hash value and the signature private key; (7) The U2F module of the identity authentication token verifies whether the URL hash value obtained by the decryption handle is consistent with the URL hash value sent by the client in step (3), if it is inconsistent, the execution is interrupted, and the authentication fails, if it is consistent, execute the following step; (8) The U2F module calls the TRNG true random number generator to generate a local random number C; (9) U2F module uses the signature private key obtained in step (6) to decrypt the handle, and invokes the digital signature algorithm to digitally sign {authentication challenge value, authentication signature counter value, local random value C} to obtain the authentication signature value; (10) The U2F module of the identity authentication token sends the authentication challenge value, authentication signature value, authentication signature counter value, and local random value C to the client browser, and the client browser forwards it to the FIDO server; the FIDO server searches for the user's The signature public key; and use the signature public key to call the signature verification algorithm to verify the validity of the signature; if it is valid, the user identity authentication is successful; otherwise, the client is notified that the authentication fails. 6. a kind of system based on identity authentication server and identity authentication token according to claim 5, is characterized in that, the symmetric encryption algorithm in described steps (6), (2), (9), hash algorithm There are two modes for digital signature, one is national secret algorithm, including SM2, SM3, SM4 algorithm; the other is standard FIDO algorithm, including RSA, ECDSA, SHA256, AES, the algorithm is built in U2F module.

Images