行動裝置之兩階段身分認證機制

Two-step mobile user authentication mechanisms

羅嘉寧(Jia-Ning Luo)

《資訊安全通訊》 24卷4期 (2018/10) Pp. 31-43

摘要

隨著雲端服務的興起，使用者有越來越多的資訊儲存在雲端服務中。傳統的文字密碼機制已無法保障使用者的帳號安全，使用第二因子認證及兩階段認證已逐漸成為趨勢。本文介紹Google所提供的兩階段驗證機制Google authenticator，及FIDO聯盟所提出的通用認證框架（Universal Authentication Framework，UAF）、通用第二因子認證（Universal 2nd Factor，U2F）及FIDO2機制。

關鍵字

兩階段驗證 ； 身分認證 ； 第二因子認證

並列摘要

With the rise of cloud services, users have more and more information stored in cloud services. The traditional text password mechanism has been unable to protect the user's account security. The use of the second factor authentication and two-stage authentication has gradually become a trend. This article introduces the Google authenticator, a two-stage authentication mechanism provided by Google, and the Universal Authentication Framework (UAF), Universal 2nd Factor (U2F), and FIDO2 mechanisms proposed by the FIDO Alliance.

並列關鍵字

two-step verification ； user authentication ； second-factor authentication

參考文獻

FIDO Alliance, https://fidoalliance.org (2018/10/12).

FIDO Bluetooth® Specification v1.0, https://fidoalliance.org/specs/fido-u2f-v1.2-ps20170411/fido-u2f-bt-protocol-v1.2-ps-20170411.html (2017/04/11).

FIDO NFC Protocol Specification v1.0, https://fidoalliance.org/specs/fido-u2f-v1.2-ps20170411/fido-u2f-nfc-protocol-v1.2-ps-20170411.html (2017/04/11).

FIDO UAF Architectural Overview, https://fidoalliance.org/specs/fido-uaf-v1.1-ps20170202/fido-uaf-protocol-v1.1-ps-20170202.html (2017/02/02).

FIDO Universal 2nd Factor (U2F) Overview, https://fidoalliance.org/specs/fido-u2f-v1.2-ps-20170411/fido-u2f-overview-v1.2-ps-20170411.html (2017/04/11).