Design And Implementation Of FIDO Service Platform

With the rapid development of the Internet,more and more safety problems came out as the opened information system.In order to deal with these problems,many manufactures set out their own security mechanism.As different manufactures have different measures,it is difficult to interact with each other among different manufactures.FIDO Alliance(Fast Identify online),which is the world?s largest ecosystem for standards-based,interoperable authentication,and aimed at building an open standard,has built up and published U2F(Universal Second Factor)specification and UAF(Universal Authentication Framework)specification which satisfy the W3 C in 2014.In the specification and certificate built by FIDO Alliance,U2 F second device used to reduce the dependency for users on password and UAF authenticator used to eliminate.There is no complete authentication system which is based on the specification and certificate built by FIDO Alliance.However,if the authentication system could integrate the U2 F protocol and UAF protocol,it will give the users more flexibility.This paper will design and complete the service platform based on the specification and certificate built by FIDO Alliance.The main contents of this paper are as follows:(1).Study the key technology includes authentication,digital signature,encryption,HTTPS,Django framework and Nginx server.(2).Study U2 F protocol and UAF protocol and get the information format,the usage scenarios and information interaction,then,design and complete the FIDO service platform.First,this paper will analyze the Customers? Requirement use the Use Case Diagram and Activity Diagram.Then,this paper will design the FIDO service platform from architecture to interface,URL and database.Finally,this paper will complete the FIDO service platform use Django framework,MySQL,Redis and Nginx.(3).Design and complete the Bluetooth low energy module of the FIDO client,which worked in the identity system based on smart wearable devices.(4).Test the FIDO service platform from many aspects.Test the function of FIDO service platform through FIDO test tool,Curl and the authentication system based on smart wearable device.Test the performance of the FIDO service platform by AB tool.