Terminal apparatus, server apparatus, blockchain and method for FIDO universal authentication using the same

A terminal apparatus, comprising:

• one or more processors for:
• sending a Fast Identity Online (FIDO) service request for any one of FIDO registration, FIDO authentication, and FIDO deregistration for an application service provided by a server apparatus to the server apparatus;
• and
• performing local authentication of a user in order to enable the server apparatus to process the FIDO service request,
• wherein the server apparatus requests a blockchain to verify a FIDO service response message, which is created as a result of local authentication of the user, and processes the FIDO service request based on a result of verification of the FIDO service response message,
• wherein the verifying of the FIDO service response message is configured such that, when the FIDO service request is a request for the FIDO authentication or the FIDO deregistration and when a credential identifier thereof is included in an authentication information list that includes credential identifiers associated with the identification information of the user, the one or more processors perform local authentication of the user, create an electronic signature signed with a private key associated with the credential identifier, and create the FIDO service response message, including the electronic signature and the credential identifier, and
• wherein the processing of the FIDO service request is configured such that the blockchain acquires information that is required for verifying second information included in the FIDO service response message from a blockchain database using first information included in the FIDO service response message and verifies the FIDO service response message by verifying the second information using the acquired information.

A server apparatus, comprising:

• one or more processors for:
• requesting a terminal apparatus to perform local authentication of a user in order to process a Fast Identity Online (FIDO) service request from the terminal apparatus, the FIDO service request being for any one of FIDO registration, FIDO authentication, and FIDO deregistration for an application service provided to the terminal apparatus;
• and
• requesting a blockchain to verify a FIDO service response message, which is created as a result of local authentication of the user, and processing the FIDO service request based on a result of verification of the FIDO service response message,
• wherein the verifying of the FIDO service response message is configured such that, when the FIDO service request is a request for the FIDO authentication or the FIDO deregistration and when a credential identifier thereof is included in an authentication information list that includes credential identifiers associated with the identification information of the user, the terminal apparatus performs local authentication of the user, creates an electronic signature signed with a private key associated with the credential identifier, and creates the FIDO service response message, including the electronic signature and the credential identifier, and
• wherein the processing of the FIDO service request is configured such that the blockchain acquires information that is required for verifying second information included in the FIDO service response message from a blockchain database using first information included in the FIDO service response message and verifies the FIDO service response message by verifying the second information using the acquired information.