Authentication in ubiquitous environment

A method of authenticating a user in an authentication management system based on a public key certificate, the method performed by a portable device of the user, the portable device storing a private key in which a verification code including a biometric code is inserted and encrypted biometric data or an encrypted combination of pieces of biometric data from which the biometric code is derived, the method comprising:

• acquiring biometric data or a combination of pieces of biometric data of the user;
• comparing the biometric data or the combination of pieces of biometric data of the user with at least one of the encrypted biometric data or the encrypted combination of pieces of biometric data stored in the portable device or the biometric code;
• transmitting, when the biometric data or the combination of pieces of biometric data of the user matches the at least one of the encrypted biometric data or the encrypted combination of pieces of biometric data, authentication information including the verification code inserted in the private key to a remote entity;
• and
• requesting an authentication of the user.

A method of managing an authentication of a user in an authentication management system based on a public key certificate, the method performed by a remote entity connected to a portable device of the user via a network, the method comprising:

• receiving, from the portable device, a public key corresponding to a private key in which a verification code including a biometric code derived from biometric data or a combination of pieces of biometric data of the user is inserted;
• performing a registration of the user based on the public key;
• receiving, from the portable device, authentication information including the verification code inserted in the private key;
• verifying the authentication information based on the public key;
• and
• performing the authentication of the user based on a result of the verifying.

A method of managing an authentication of a user in an authentication management system based on a public key certificate, the method performed by a public terminal configured to provide a predetermined service and a service providing server configured to manage the public terminal, the method comprising:

• receiving including the service providing server receiving, from a portable device of a user, a public key corresponding to a private key in which a verification code including a biometric code derived from biometric data or a combination of pieces of biometric data of the user is inserted;
• performing including the service providing server performing a registration of the user based on the public key;
• receiving including the public terminal receiving, from the portable device, authentication information including the verification code inserted in the private key;
• requesting including the public terminal requesting the service providing server to perform a verification of the authentication information based on the public key;
• performing including the public terminal performing the authentication of the user based on a result of the verification;
• and
• providing including the public terminal providing, when the authentication of the user is successful, the predetermined service.