ETRI Successfully Tests Three Authentication Devices

Biometric authentication technology has come into the spotlight with the increasing importance of security. Against this backdrop, ETRI has developed smart authentication devices with strengthened security compared to the existing biometric authentication technology and successfully passed FIDO interoperability test.

Although biometrics became popular as a means for authentication to replace passwords, the method of using smart cards is emerging as a superior alternative in areas requiring stronger security because it is safer to save major key information in a card. ETRI has recently developed an authentication device that satisfies the international standard and is resistant to hacking. The following three authentication technologies were developed by the institution and then passed FIDO interoperability test held in the United States: a smartcard authenticator working with a smartphone, an authentication device involving a smart watch, and FIDO client suite for iOS using TouchID. Dr. Soo-hyung Kim, Director of ETRI’s Authentication Research Section explained, “The new technology is safer because its hardware can be protected in a safer manner and it uses more powerful authentication means such as biometrics or ownership-based authentication.”

In the case of smart watches, users standing in front of a car can be issued a security token from the authentication server via their smart watch and borrow the car conveniently. Troublesome authentication processes can be also replaced by Bluetooth or NFC (near field communication) to ensure more convenient access control systems. ETRI also introduced a follow-up FIDO authentication technology for banking transactions. The new technology can verify users in a much easier and safer way by using various biometric information such as fingerprints, face, and voice, instead of the traditional password. Since such biometric information is not saved into the server and instead is saved in terminal hardware, it becomes possible to prevent any leakage resulting from hacking or violation of privacy. “Now we can choose from a wider variety of authentication means and they are based on the international standard of FIDO,” said Dr. Seung-hun Jin, Managing Director, Information Security Research Division. “Therefore, the new technology has far better flexibility, expandability, and security.” The internationally certified technologies have been transferred to 16 companies thus far, and further technology development is expected to help strengthen security of authentication devices and increase the types of authenticator. ETRI plans to continue advancing its FIDO technology and expand the use of its biometric authentication technology to personal computers and web browsers.