Security key device, security authentication system, and security authentication method

A security authentication system comprising:

• an electronic device configured to execute a browser;
• and
• a security key device adapted to plug in the electronic device and comprising:
• a communication module;
• a security processing unit configured to execute programs of an authentication module, a bridge module, and a management module, wherein the programs of the authentication module, the bridge module, and the management module are stored in the security key device,
• wherein the authentication module is configured to operate according to a Fast IDentity Online protocol, and the management module is configured to operate according to a Public Key Infrastructure (PKI) protocol, and the management module is further configured to store key data which are generated by the management module according to the Public Key Infrastructure protocol;
• a processing unit coupled to the communication module and the security processing unit;
• and
• a confirmation unit coupled to the processing unit, wherein the authentication module receives an input command through the communication module, the input command is provided based on the Fast IDentity Online protocol by a web authentication module of the browser executed by the electronic device, and the authentication module determines that the input command is used to be executed by the authentication module or the input command is used to access the management module through the bridge module according to a header of the input command, so that the management module outputs the key data to the authentication module,
• wherein when the authentication module determines that the input command is used to access the management module through the bridge module, the bridge module determines whether the confirmation unit provides a confirmation signal, so as to output a confidential data of the management module to the authentication module, and then further provide the confidential data to the electronic device by the authentication module, wherein the confidential data is generated based on the PKI protocol.

A security authentication method adapted for a security key device and an electronic device comprising:

• storing and executing programs of an authentication module, a bridge module, a management module, and a confirmation unit by the security device, wherein:
• the authentication module is configured to operate according to a Fast IDentity Online protocol, and
• the management module is configured to operate according to a Public Key Infrastructure (PKI) protocol, and the management module is further configured to store key data which are generated by the management module according to the Public Key Infrastructure protocol,
• coupling the security key device to the electronic device;
• executing a browser through the electronic device;
• receiving, by the security key device, an input command provided based on the Fast IDentity Online protocol by a web authentication module of the browser executed by the electronic device;
• determining, by the authentication module according to a header of the input command, that the input command is used to be executed by the authentication module or used to access the management module through the bridge module, so that the management module outputs the key data to the authentication module;
• and
• when the authentication module determines that the input command is used to access the management module through the bridge module, determining, by the bridge module, whether the confirmation unit provides a confirmation signal, so as to output a confidential data of the management module to the authentication module, and then further provide the confidential data to the electronic device by the authentication module, wherein the confidential data is generated based on the PKI protocol.