User device performing password based authentication and password registration and authentication methods thereof

Patent metadata

Field	Value
Publication number	US-10044703-B2
Application number	US-201514602825-A
Country	US
Kind code	B2
Filing date	Jan 22, 2015
Priority date	Feb 28, 2014
Publication date	Aug 7, 2018
Grant date	Aug 7, 2018

Abstract

A password registration method of a user device which uses a password-based authentication manner is provided. The password registration method includes combining a salt to an input password to generate a combination password; expanding the combination password to generate an expanded password of which a data length is increased; compressing the expanded password to output authentication data; and storing the authentication data in an authentication database.

First claim

What is claimed is:

1. A password registration method of a user device which uses a password-based authentication manner, comprising:
performing operations as follows on at least one processor:
combining a salt with an input password to generate a combination password having a bit length corresponding to a sum of a bit length of the salt and a bit length of the input password;
expanding the combination password to generate an expanded password, a bit length of the expanded password being greater than a bit length of the combination password;
compressing the expanded password to output authentication data; and
storing the authentication data in an authentication database;
wherein combining the salt with the input password comprises inserting the salt onto the input password at any bit location thereof.

2. The password registration method of claim 1 , wherein the combination password is expanded using at least one of a stream cipher, a key derivation function, and a pseudo random number generator.

3. The password registration method of claim 1 , further comprising:
performing a mixing operation in which an arrangement of bits of the expanded password is reconfigured, with a code length of the expanded password maintained.

4. The password registration method of claim 3 , wherein the mixing operation comprises:
iteratively applying a round function to the expanded password during a plurality of rounds.

5. The password registration method of claim 4 , wherein the round function comprises a function with a feistel structure or substitution-permutation network structure.

6. The password registration method of claim 1 , further comprising:
generating the salt using a random number generator in response to the input password.

7. A password authentication method of a user device which uses a password-based authentication manner, comprising:
reading first authentication data and a salt corresponding to an ID) of a user from an authentication database;
combining the salt with an input password to generate a combination password having a bit length corresponding to a sum of a bit length of the salt and a bit length of the input password;
expanding the combination password to generate an expanded password, a bit length of the expanded password being greater than a bit length of the combination password;
compressing the expanded password to output second authentication data; and
comparing the first authentication data and the second authentication data to authenticate the password of the user;
wherein combining the salt with the input password comprises inserting the salt onto the input password at any bit location thereof.

8. The password authentication method of claim 7 , wherein the first authentication data is data that is generated by expanding or compressing a password that the user previously registers.

9. The password authentication method of claim 7 , wherein the combination password is expanded using at least one of a stream cipher, a key derivation function, and a pseudo random number generator.

10. The password authentication method of claim 7 , further comprising:
performing a mixing operation in which an arrangement of bits of the expanded password is reconfigured, with a code length of the expanded password maintained.

11. The password authentication method of claim 10 , wherein the mixing operation comprises:
iteratively applying a round function to the expanded password to generate a mixing password.

12. The password authentication method of claim 11 , further comprising:
generating the mixing password as the second authentication data via a compression operation.

13. The password authentication method of claim 11 , wherein the round function comprises a function with a feistel structure or substitution-permutation network structure.

14. The password authentication method of claim 7 , wherein compressing the expanded password comprises:
using a compression algorithm that comprises a hash function.

15. A user device which performs password-based user authentication, comprising:
an input/output interface configured to receive an ID and a password of a user; and
an expanded cryptography unit configured to combine a salt with the password to generate a combination password, the combination password having a bit length corresponding to a sum of a bit length of the salt and the password, and to expand the combination password to output an expanded password and compress the expanded password to output authentication data;
wherein a bit length of the expanded password is greater than a bit length of the combination password; and
wherein the expanded cryptography unit is further configured to combine the salt with the password by inserting the salt onto the password at any bit location thereof.

16. The user device of claim 15 , further comprising:
a nonvolatile memory device configured to store the authentication data.

17. The user device of claim 15 , wherein the expanded cryptography unit comprises:
a central processing unit configured to perform an expansion operation on the password or a compression operation on the expanded password; and
a RAM configured to store computer readable program code to implement an expanded cryptography operation for the expansion operation or the compression operation.

18. The user device of claim 17 , wherein the RAM is further configured to store a random number generation module that generates the salt to be combined with the password during the expansion operation.

19. The user device of claim 17 , wherein the central processing unit is further configured to perform a mixing operation in which an arrangement of bits of the expanded password is changed without a change in a length of the expanded password.

Assignees

• Lee Jesang
• Kim Sunghyun
• Han Minja
• Samsung Electronics Co Ltd

Inventors

• Lee Jesang
• Kim Sunghyun
• Han Minja

Classifications

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L9/0863

  involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067) · CPC title

• G06F21/31

  User authentication · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F21/46

  by designing passwords or checking the strength of passwords · CPC title