基於生物辨識之強安全認證應用技術實用性研究

Abstract

2020年將有超過500億台設備存取智慧聯網服務，平均每人擁有6部以上設備，然而＞80%IoT設備密碼強度及複雜度不足，並且＞70%的設備傳輸未加密並可輕易取得帳號資訊，顯示傳統身分認證機制已不足以應付新興的IoT應用。由FIDO標準聯盟推動新一代認證標準，將身分驗證由機密共享(What you know, What you have)轉成透過生物特徵方式驗證(What you are)，帶動了生物辨識市場蓬勃成長，預估於2024年將達到149億美元，並廣泛應用於金融、健康醫療、智慧家庭甚至企業安控等領域。因應此一趨勢，本文提出一基於生物辨識之強安全認證應用技術架構，並透過相關場域實證，探究生物辨識技術之實用性及成熟度，供後續應用領域導入此一技術之參考。There will be more than 50 billion connected devices in 2020, It means each one person will have average of more than 6 devices. However, more than 80% of IoT devices using weakness password and more than 70% of devices transfer unencrypted data which could disclosure account information easily. It shows that traditional identity authentication mechanisms are not sufficient for huge IoT applications. Therefore the FIDO (Fast IDentity Online) Alliance plans to change the nature of authentication by developing specifications that define an open, scalable, interoperable set of mechanisms that supplant reliance on passwords to securely authenticate users of online services. The new authentication standards based on biometric will widely used in finance, health care, smart home and enterprise management. That drives the biometric market grows fast and will reach 14.9 billion in 2024. In this paper, we proposed our implementation of a strong security authentication architecture based on FIDO standards. It has been deploy into IoT application field such as health care and mobile payment to show the adaptability and technology readiness of FIDO.