Method and system for authenticating iot device using mobile device

An authentication system comprising:

• a mobile agent installed in a mobile device of a user, generating seed information for generating authentication information to be used mutual authentication between devices, and generating first authentication information by using the seed information and a predesignated algorithm as an authentication application program performing a predesignated authentication procedure is driven;
• a device authentication agent installed in an Internet of things (IoT) device with a communication module, connected with the mobile agent through wireless communication, receiving the seed information from the mobile agent, and generating second authentication information by using the received seed information and the predesignated algorithm;
• and
• an authentication server connected with the mobile agent through the wireless communication, connected with the IoT device through wired communication or the wireless communication, generating third authentication information by using the received seed information and the predesignated algorithm when receiving the seed information and the first authentication information from the mobile agent, receiving the second authentication information from the device authentication agent, and duplicatively verifying whether the received first authentication information and the third authentication information coincide with each other and whether the received second authentication information and the third authentication information coincide with each other.

An authentication system comprising:

• a device authentication agent installed in an Internet of things (IoT) device with a communication module and acquiring first device authentication information for authenticating the corresponding IoT device;
• a mobile agent installed on a mobile device of a user, acquiring user authentication information for authenticating the user, and generating an authentication request message including the device authentication information received from the device authentication agent and the user authentication information;
• and
• an authentication server generating authentication information for verification corresponding to each of the device authentication information and the user authentication information included in the authentication request message to compare coincidence of the authentication information for verification and determining whether the IoT device and the user are authentic.