次世代の認証(WebAuthn/FIDO2)について説明を試みる

by OSCA

Slide 1

Slide 1 text

04$" ᖛ໺Ұೋࡾ !FOHJOFFS@PTDB ࣍ੈ୅ͷೝূʹ͍ͭͯઆ໌ΛࢼΈΔ 8FC"VUIFOUJDBUJPO"1*'*%0 8ΤϯδχΞษڧձ

Slide 2

Slide 2 text

ࣗݾ঺հ © OSCA 04$"ᖛ໺Ұೋࡾ ͸·ͷ͔ͣ;Έ 4*FS໷ܠࣸਅՈ * ʮ8ΤϯδχΞษڧձʯΛओ࠵ * +BWB 1)1ܥͷ8ΤϯδχΞ * ਓ޻஌ೳ "* ͷ։ൃ΋΍ͬͯΔ * ݸਓͰ΋714आΓͯ8αʔϏεΛӡӦ͢Δͷ͕झຯ * ເͷࠃɹెาݍ಺ॅΈ * !FOHJOFFS@PTDB!PTDBQIPUP!EJTOFZ@PTDB

Slide 3

Slide 3 text

Slide 4

Slide 4 text

ʮύεϫʔυೝূʯͷ՝୊Λղܾ͢Δ࣍ੈ୅ͷೝূ © OSCA ΞΧ΢ϯτ ύεϫʔυ ϩάΠϯ 8ͷੈքʹ͓͍ͯ΋ύεϫʔυΛར༻ͨ͠ೝূʹมΘ Δɺ৽͍͠ೝূٕज़͕ීٴ͠͸͡ΊΑ͏ͱ͍ͯ͠·͢ɻ

Slide 5

Slide 5 text

ʮύεϫʔυೝূʯͷ՝୊Λղܾ͢Δ࣍ੈ୅ͷೝূ © OSCA ෼ͱ͍͏୹͍࿮ͷதͰɺ ʮͲΜͳ΋ͷͳͷ͔ʯͱ͍͏֓ཁΛ͓఻͍͑ͨ͠ͱࢥ͍·͢ɻ

Slide 6

Slide 6 text

Slide 7

Slide 7 text

© OSCA ೥݄೔1VCMJDLFZ ύεϫʔυʹґଘ͠ͳ͍ೝূʮ8FC"VUIOʯΛ$ISPNF'JSFGPY&EHF͕࣮૷։ ࢝ɺ8$͕ඪ४Խɻ8FC͸ύεϫʔυʹґଘ͠ͳ͍ΑΓ҆શͰศརͳ΋ͷ΁ IUUQTXXXQVCMJDLFZKQCMPHXFCBVUIODISPNFGJSFGPYFEHFXDXFCIUNM l(PPHMFɺ.P[JMMBɺϚΠΫϩιϑτ͕ ʮ8FC"VUIOʯͷ࣮૷Λ։࢝ɻ͜ΕʹΑ ͬͯʮ'*%0ʯͷීٴ͕ظ଴͞Εɺ8FC ϒϥ΢β͔Βࢦ໲ೝূ΍إೝূͳͲͰ؆ ୯ʹ8FCαΠτ΁ͷϩάΠϯ΍ࢧ෷͍ͷ ঝೝͱ͍ͬͨૢ࡞͕࣮ݱ͞Εͦ͏ͩɻz

Slide 8

Slide 8 text

Slide 9

Slide 9 text

© OSCA ೥݄೔;%/FU+BQBO ʮ(PPHMF$ISPNFʯ҆ఆ൛ϦϦʔεʮ4QFDUSFʯ؇࿨ࡦɺʮ8FC"VUIOʯର ԠͳͲ IUUQTKBQBO[EOFUDPNBSUJDMF l݅ͷηΩϡϦςΟमਖ਼Λࢪͨ͠΄ ͔ɺύεϫʔυʹґଘ͠ͳ͍৽ͨͳೝূ ํࣜʮ8FC"VUIOʯʹσϑΥϧτͰରԠ ͢Δɻ தུ ࢦ໲΍εϚʔτϑΥϯʹอ ଘ͞Εͨإը૾ͷΑ͏ͳੜମೝূ৘ใɺ ͋Δ͍͸:VCJLFZͷೝূσόΠεͷΑ͏ ͳ64#ϋʔυ΢ΣΞΛར༻ͯ͠΢Σϒα ΠτʹαΠϯΞοϓ͢ΔखஈΛఏڙ͢ Δɻz

Slide 10

Slide 10 text

© OSCA ೥݄೔1VCMJDLFZ ϚΠΫϩιϑτɺ8FC"VUIOΛ&EHFʹ࣮૷ɻύεϫʔυෆཁɺੜମೝূ΍1*/Ͱ 8FCαΠτ΁ϩάΠϯՄೳʹɻ೥ळͷ8JOEPXTΞοϓσʔτͰ IUUQTXXXQVCMJDLFZKQCMPHXFCBVUIOFEHFQJOXFCXJOEPXT@IUNM lϚΠΫϩιϑτ͸ɺ೥݄ࠒʹ༧ ఆ͞Ε͍ͯΔ8JOEPXTͷେܕΞοϓ σʔτʢ34ʣʹ޲͚ͯ։ൃதͷ࠷৽Ϗ ϧυɺ8JOEPXTCVJMEͰɺ ύεϫʔυෆཁͰ8FCαΠτʹϩάΠϯ Ͱ͖Δඪ४࢓༷ʮ8FC"VUIOʯΛ .JDSPTPGU&EHFʹ࣮૷ͨ͜͠ͱΛ໌Β ͔ʹ͠·ͨ͠ɻz

Slide 11

Slide 11 text

© OSCA ೥݄೔1VCMJDLFZ $ISPNF͔Βɺ8FC"VUIOͰ.BDͷ5PVDI*%ͱ"OESPJEͷࢦ໲ೝূ͕σϑΥϧ τͰར༻Մೳʹɻ8FCαΠτ΁ͷϩάΠϯ΋λονͰ IUUQTXXXQVCMJDLFZKQCMPHDISPNF@XFCBVUIONBDUPVDIJEBOESPJEIUNM l(PPHMF͸݄ʹϦϦʔεͨ͠$ISPNF Ͱ8FC"VUIO΁ͷରԠΛߦ͍·ͨ͠ ͕ɺ݄ʹϦϦʔε͞ΕΔ$ISPNF Ͱ͸࣮૷ΛਐԽͤ͞ɺσϑΥϧτͰ.BD ͷ5PVDI*%ͱ"OESPJEͷࢦ໲ೝূʹରԠ ͢Δ͜ͱΛ໌Β͔ʹ͠·ͨ͠ɻz

Slide 12

Slide 12 text

© OSCA ೥݄೔Ϡϑʔגࣜձࣾ Ϡϑʔɺ৽ͨͳ΢Σϒೝূͷن֨ʮ'*%0ʯͷ'*%0$FSUJGJFEʢೝఆʣΛࠃ಺ا ۀͰ།ҰऔಘɹύεϫʔυΛ࢖Θͳ͍҆શͳϩάΠϯ؀ڥͷ࣮ݱʹલਐ IUUQTBCPVUZBIPPDPKQQSSFMFBTFB lϠϑʔגࣜձࣾ͸ɺੜମೝূͳͲͷ࣍ੈ ୅ೝূͷඪ४ԽΛఏএ͢Δۀքஂମ '*%0ʢϑΝΠυʣΞϥΠΞϯεͷ৽ͨͳ ن֨ʮ'*%0ʯͷೝఆΛɺ೥݄ʹ ੈքͰॳΊͯ։࠵͞Εͨʮ'*%0ʯೝఆ ςετʹ͓͍ͯɺ͜ͷͨͼऔಘͨ͜͠ͱ Λ͓஌Βͤ͠·͢ɻࠃ಺اۀͰ͸།Ұͷ ೝఆऔಘͱͳΓ·͢ɻz

Slide 13

Slide 13 text

© OSCA ೥݄೔Ϡϑʔגࣜձࣾ Ϡϑʔɺ"OESPJEεϚʔτϑΥϯͷ΢Σϒϒϥ΢βʔ্ͰͷϩάΠϯ͕ࢦ໲ೝূͳ ͲͷੜମೝূʹରԠ IUUQTBCPVUZBIPPDPKQQSSFMFBTFB l"OESPJEεϚʔτϑΥϯͷ΢Σϒϒϥ΢ βʔ্ʹ͓͍ͯɺϠϑʔͷαʔϏεʹࢦ ໲ೝূͳͲͷੜମೝূΛ࢖༻ͯ͠ϩάΠ ϯͰ͖ΔΑ͏ʹͳΓ·ͨ͠ɻz l·ͣ͸"OESPJEͷ୅දతͳ΢Σϒϒϥ΢ βʔͰ͋Δʮ(PPHMF$ISPNFʯʹରԠ ͍ͨ͠·͢ɻຊػೳ͸ɺ:BIPP+"1"/ *%ʹϩάΠϯ্ͨ͠Ͱɺੜମೝূͷઃఆ ʹɺ࢖༻͢Δ"OESPJEεϚʔτϑΥϯΛ ొ࿥͢Δ͜ͱͰར༻Ͱ͖·͢ɻz

Slide 14

Slide 14 text

Slide 15

Slide 15 text

֤छϒϥ΢β͕ʮ8FC"VUIOʯʹରԠ © OSCA ೥݄೔ 'JSFGPY ೥݄೔ (PPHMF$ISPNF ·΋ͳ͘ .JDSPTPGU&EHF

Slide 16

Slide 16 text

֤छϒϥ΢β͕ʮ8FC"VUIOʯʹରԠ © OSCA ೥݄೔ 'JSFGPY ೥݄೔ (PPHMF$ISPNF ·΋ͳ͘ .JDSPTPGU&EHF ύεϫʔυ͕ෆཁͷ ೝূํࣜΒ͍͠

Slide 17

Slide 17 text

Ϡϑʔגࣜձࣾࠃ಺།Ұͷ'*%0ೝఆऔಘ © OSCA

Slide 18

Slide 18 text

Slide 19

Slide 19 text

'*%0ΞϥΠΞϯε 'BTU*%FOUJUZ0OMJOF"MMJBODF © OSCA ੜମೝূΛϕʔεͱͨ͠ศརͰ҆શͳΦϯϥΠϯೝূΛ࣮ݱ ͢ΔͨΊʹɺ೥ʹ݁੒͞Εͨۀքஂମɻ <Ճໍஂମൈਮ> .JDSPTPGU (PPHMF "NB[PO .BTUFS$BSE 7*4" ෋࢜௨ υίϞ -*/& େ೔ຊҹ࡮ ָఱ ࡾඛ6'+ Ϡϑʔ

Slide 20

Slide 20 text

8FC"VUIO΁ͷي੻ © OSCA 8$ʹ'*%0ͷ8FC"1*෦෼Λఏग़ɻ 8$8FC"VUIFOUJDBUJPOϫʔΩϯάάϧʔϓൃ଍ɻ 8FC"VUIFOUJDBUJPO 8FC"VUIO "1*קࠂީิʹɻ

Slide 21

Slide 21 text

Slide 22

Slide 22 text

ύεϫʔυೝূͷ՝୊ © OSCA ଟ͘ͷ8αΠτͰར༻͞Ε͍ͯΔʮύεϫʔυೝূʯ͸ɺ ࣍ͷΑ͏ͳ՝୊͕͋Γ·͢ɻ ✓ ͓͔֮͑ͯͳ͍ͱ͍͚ͳ͍ ֮͑ΒΕͳ͍ ✓ ೖྗ͕໘౗͍͘͞ ✓ ࿙Ӯ͠΍͍͢ ✓ ࠶ར༻͕Մೳ རศੑ ҆શੑ

Slide 23

Slide 23 text

ύεϫʔυೝূͷ՝୊ © OSCA ʮΞΧ΢ϯτʯͱʮύεϫʔυʯͷೝূͰ͸ɺωοτϫʔΫ தΛʮύεϫʔυʯ͕ྲྀΕͯ͠·͍ͬͯΔɻ tGb9T3hM!gLaThB14P ೝূ

Slide 24

Slide 24 text

ύεϫʔυೝূͷ՝୊ © OSCA ΋ͬͱzศརzͰz҆શzͳ࢓૊Έ͕͋Ε͹ྑ͍ͷʹɾɾɾ

Slide 25

Slide 25 text

৽͍͠ೝূͷ࢓૊Έ ֓ཁ © OSCA ➢ ύεϫʔυ େ੾ͳ΋ͷ ΛωοτϫʔΫதʹྲྀ͞ͳ͍ɻ tGb9T3hM!gLaThB14P

Slide 26

Slide 26 text

৽͍͠ೝূͷ࢓૊Έ ֓ཁ © OSCA ➢ ύεϫʔυ େ੾ͳ΋ͷ ΛωοτϫʔΫதʹྲྀ͞ͳ͍ɻ ➢ ೝূ͸σόΠεଆͷzศརͳํ๏lͰߦ͏ɻ tGb9T3hM!gLaThB14P ೝূ

Slide 27

Slide 27 text

৽͍͠ೝূͷ࢓૊Έ ֓ཁ © OSCA ➢ ύεϫʔυ େ੾ͳ΋ͷ ΛωοτϫʔΫதʹྲྀ͞ͳ͍ɻ ➢ ೝূ͸σόΠεଆͷzศརͳํ๏zͰߦ͏ɻ ➢ ೝূ݁ՌΛαʔόʔʹૹ৴͢Δɻ tGb9T3hM!gLaThB14P ೝূ݁Ռ ೝূ

Slide 28

Slide 28 text

৽͍͠ೝূͷ࢓૊Έ ֓ཁ © OSCA ͜͜·Ͱͷઆ໌͚ͩͩͱ ʮೝূ݁ՌΛӕ͔ͭΕͨΒͲ͏͢ΔΜͩʁʯ ͱࢥ͑ͯ͠·͏͚Ͳɺͦ͜͸͔ͬ͠Γߟ͑ΒΕ͍ͯΔɻ

Slide 29

Slide 29 text

Slide 30

Slide 30 text

ొ৔͢Δ΋ͷ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ʮೝূثʯʮϒϥ΢βʯʮαʔόʔʯ

Slide 31

Slide 31 text

ొ৔͢Δ΋ͷ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ʮೝূثʯʮϒϥ΢βʯʮαʔόʔʯ ࢦ໲ηϯλʔ Χϝϥ 64#Ωʔ ͳͲ

Slide 32

Slide 32 text

ొ৔͢Δ΋ͷ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ʮೝূثʯʮϒϥ΢βʯʮαʔόʔʯ 8FC"VUIOʹ ରԠͨ͠ϒϥ΢β

Slide 33

Slide 33 text

ొ৔͢Δ΋ͷ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ೝূثͷʮൿີ伴ʯʮެ։伴ʯ ެ։伴҉߸ํࣜ ൿີ伴 ެ։伴

Slide 34

Slide 34 text

ొ৔͢Δ΋ͷ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ೝূثͷʮൿີ伴ʯʮެ։伴ʯ ެ։伴҉߸ํࣜ ൿີ伴 ެ։伴 ೝূثݻ༗ͷ ൿີ伴ɾެ։伴Λ࣋ͭ

Slide 35

Slide 35 text

ԡ͓͑ͯ͘͞΂͖ͭͷॲཧ © OSCA ೝূʹར༻͢Δೝূثͷొ࿥ ೝূثΛར༻ͨ͠ೝূ

Slide 36

Slide 36 text

ೝূʹར༻͢Δೝূثͷొ࿥ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ϩάΠϯೝূͳͲͰར༻͍ͨ͠ೝূثΛɺ αʔϏεΛఏڙ͍ͯ͠Δαʔόʔʹొ࿥͠·͢ɻ

Slide 37

Slide 37 text

ೝূʹར༻͢Δೝূثͷొ࿥ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ϩάΠϯೝূͳͲͰར༻͍ͨ͠ೝূثΛɺ αʔϏεΛఏڙ͍ͯ͠Δαʔόʔʹొ࿥͠·͢ɻ ࠓޙར༻͢Δೝূث Λڭ͑ͯʔʂ

Slide 38

Slide 38 text

ೝূʹར༻͢Δೝূثͷొ࿥ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ϩάΠϯೝূͳͲͰར༻͍ͨ͠ೝূثΛɺ αʔϏεΛఏڙ͍ͯ͠Δαʔόʔʹొ࿥͠·͢ɻ ೝূث͝ͱͷॴఆͷ खஈͰɺϢʔβݕূ

Slide 39

Slide 39 text

ೝূʹར༻͢Δೝূثͷొ࿥ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ϩάΠϯೝূͳͲͰར༻͍ͨ͠ೝূثΛɺ αʔϏεΛఏڙ͍ͯ͠Δαʔόʔʹొ࿥͠·͢ɻ ൿີ伴ɾެ։伴͕ੜ ੒͞ΕΔ ൿີ伴 ެ։伴

Slide 40

Slide 40 text

ೝূʹར༻͢Δೝূثͷొ࿥ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ϩάΠϯೝূͳͲͰར༻͍ͨ͠ೝূثΛɺ αʔϏεΛఏڙ͍ͯ͠Δαʔόʔʹొ࿥͠·͢ɻ ެ։伴ͳͲΛؚΉ৘ ใΛૹΓฦ͢ɻ ൿີ伴 ެ։伴

Slide 41

Slide 41 text

ೝূʹར༻͢Δೝূثͷొ࿥ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ϩάΠϯೝূͳͲͰར༻͍ͨ͠ೝূثΛɺ αʔϏεΛఏڙ͍ͯ͠Δαʔόʔʹొ࿥͠·͢ɻ Ϣʔβ৘ใͱެ։伴 Λඥ͚ͮΔɻ ʮྃղʂొ࿥ͨ͠ʂʯ ൿີ伴 ެ։伴

Slide 42

Slide 42 text

Slide 43

Slide 43 text

Slide 44

Slide 44 text

ೝূثΛར༻ͨ͠ೝূ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ೝূ࣌͸ɺొ࿥ࡁΈͷೝূث͔Βͷ݁ՌΛ৴པ͢Ε͹ྑ͍ɻ ൿີ伴 ެ։伴 ೝূث͝ͱͷॴఆͷ खஈͰɺϢʔβݕূ

Slide 45

Slide 45 text

ೝূثΛར༻ͨ͠ೝূ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ೝূ࣌͸ɺొ࿥ࡁΈͷೝূث͔Βͷ݁ՌΛ৴པ͢Ε͹ྑ͍ɻ ൿີ伴 ެ։伴 ೝূثͰͷೝূ݁Ռ Λൿີ伴Λར༻ͯ͠ॺ ໊͢Δɻ ೝূ݁Ռ

Slide 46

Slide 46 text

ೝূثΛར༻ͨ͠ೝূ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ೝূ࣌͸ɺొ࿥ࡁΈͷೝূث͔Βͷ݁ՌΛ৴པ͢Ε͹ྑ͍ɻ ൿີ伴 ެ։伴 ॺ໊͞Εͨೝূ݁Ռ ΛૹΓฦ͢ɻ ೝূ݁Ռ

Slide 47

Slide 47 text

ೝূثΛར༻ͨ͠ೝূ © OSCA ϒϥ΢β Web Authentication API αʔόʔ ೝূث "VUIFOUJDBUPS ೝূ࣌͸ɺొ࿥ࡁΈͷೝূث͔Βͷ݁ՌΛ৴པ͢Ε͹ྑ͍ɻ ൿີ伴 ެ։伴 ެ։伴Λར༻ͯ͠ɺ ೝূ݁ՌΛݕূ͠ɺ ໰୊ͳ͚Ε͹ϢʔβΛ ಛఆͰ͖Δɻ ೝূ݁Ռ

Slide 48

Slide 48 text

Slide 49

Slide 49 text

Slide 50

Slide 50 text

Slide 51

Slide 51 text

·ͱΊ © OSCA ➢ ֤ϒϥ΢βͰ8FC"VUIFOUJDBUJPO"1* 8FC"VUIO ͷ࣮૷͕ਐΊΒΕ͍ͯΔ͜ͱͰɺϒϥ΢βͰ'*%0ೝূ͕ ࣮ݱͰ͖ΔΑ͏ʹͳ͖ͬͯͨɻ ➢ ࠃ಺Ͱ͸Ϡϑʔ͕͍ͪૣ͘ରԠΛߦͬͨɻ ➢ ೥͕ʮݩ೥ʯʹͳΔ͔΋ʂʁ