公开(公告)号：KR100764882B1

公开(公告)日：2007-10-09

申请号：KR1020060095882

申请日：2006-09-29

Applicant: 한국과학기술원

Inventor： 박기웅 ,  임상석 ,  박규호

IPC: H04L9/32 ,  H04L9/28 ,  H04L9/30 ,  H04L9/08

Abstract: A device and a method for PKI(Public Key Infrastructure) based single sign-on authentication on a low computing security device are provided to minimize the delay of an authentication operation by allowing one symmetric key based server to manage the authentication device divided by regions. A device for PKI based single sign-on authentication on a low computing security device includes an authorized server(50c), a judging server(60), and a security terminal(70). The authorized server(50c) includes an individual key and a public key for authentication authorized by a user(40), generates a vicarious certificate by the individual key, and performs an operation for authentication according to a user's request. The judging server(60) stores evidence data for authentication by using an embedded key to prevent a user's denial to the authentication. The security terminal(70) has authentication, authority, charging, communication functions, and is driven by a low level processor.

Abstract translation: 提供了一种基于PKI（公钥基础设施）基于低计算安全设备的单点登录认证的设备和方法，通过允许一个基于对称密钥的服务器来管理由区域划分的认证设备来最小化认证操作的延迟。 在低计算安全设备上用于基于PKI的单点登录认证的设备包括授权服务器（50c），判断服务器（60）和安全终端（70）。 授权服务器（50c）包括由用户（40）授权的用于认证的专用密钥和公开密钥，由个别密钥生成替代证书，并根据用户请求进行认证操作。 判断服务器（60）通过使用嵌入的密钥存储用于认证的证据数据，以防止用户拒绝认证。 安全终端（70）具有认证，权限，计费，通信功能，由低级处理器驱动。