US 11,706,032 B2
Method and apparatus for user authentication
Kyu-Young Choi, Seoul (KR); Hee-Jin Park, Seoul (KR); and Ji-Hoon Cho, Seoul (KR)
Assigned to SAMSUNG SDS CO., LTD., Seoul (KR)
Filed by SAMSUNG SDS CO., LTD., Seoul (KR)
Filed on Oct. 26, 2019, as Appl. No. 16/664,827.
Claims priority of application No. 10-2019-0122333 (KR), filed on Oct. 2, 2019.
Prior Publication US 2021/0105139 A1, Apr. 8, 2021
Int. Cl. H04L 29/06 (2006.01); H04L 9/32 (2006.01); H04L 9/30 (2006.01); H04L 9/08 (2006.01)
CPC H04L 9/3231 (2013.01) [H04L 9/0869 (2013.01); H04L 9/30 (2013.01); H04L 9/3247 (2013.01); H04L 9/3271 (2013.01)] 4 Claims
OG exemplary drawing
 
1. A method of user authentication which is performed by a computing device comprising one or more processors and a memory storing one or more programs to be executed by the one or more processors, the method comprising:
acquiring biometric information of a user;
generating a random string and a helper string from the biometric information using a generate algorithm of a user authentication technique based on fuzzy extraction;
generating a secret value that corresponds to the biometric information;
generating a private key and a public key using the secret value and the random string, wherein the private key is generated through an exclusive OR between the secret key and the random string, and the public key is used for verification of a digital signature;
transmitting the public key to an authentication server; and
storing the secret value and the helper string,
wherein the transmitting of the public key comprises:
generating an attestation value defined by Fast Identity Online (FIDO) Universal Authentication Framework (UAF) protocol; and
transmitting the attestation value, together with the public key, to the authentication server, to enable 2-factor authentication in accordance with the UAF protocol from the FIDO.