基于QES的虚拟FIDO2认证器：用于安全、可同步WebAuthn凭证的架构选项
QES-Backed Virtual FIDO2 Authenticators: Architectural Options for Secure, Synchronizable WebAuthn Credentials
AI总结：
本文提出基于QES的虚拟FIDO2认证器架构，通过PKCS#11密钥实现安全同步，兼顾信任与部署权衡。
摘要：
FIDO2和WebAuthn标准提供了抗钓鱼、基于公钥的身份验证，但传统上依赖于设备绑定的加密密钥，这些密钥无法自然地跨用户设备传输。最近的passkey部署通过平台特定的云生态系统解决了这一限制，使多设备凭证得以同步。然而，这些方法要求用户和组织信任相应的云或手机提供商，以保护和确保认证材料的可用性。同时，合格电子签名（QES）令牌和基于智能卡的PKCS#11模块提供了高保证、硬件根身份，但它们并不直接兼容WebAuthn流程。本文探讨了将这些技术结合的架构选项，通过使用QES级的PKCS#11密钥安全地虚拟化FIDO2认证器，并启用加密的云同步功能。我们首先提出并实现了一个基线架构，其中云存储仅保存密文，而解密能力始终保持在用户的硬件令牌上。然后，我们提出了一种加强的变种，引入了基于 oblivious pseudorandom function（OPRF）的机制，该机制绑定到本地用户验证因素，从而减轻跨协议滥用，并确保同步密钥不能在预期的FIDO2语义之外被重新利用；这种增强的设计进行了分析但未实施。两种架构都保持了纯WebAuthn/FIDO2接口，同时提供了不同的信任和部署权衡。我们提供了系统模型、威胁分析、基线架构的实现和实验评估，随后讨论了加强变种对高保证认证部署的安全影响。
英文摘要：
FIDO2 and the WebAuthn standard offer phishing-resistant, public-key based authentication but traditionally rely on device-bound cryptographic keys that are not naturally portable across user devices. Recent passkey deployments address this limitation by enabling multi-device credentials synchronized via platform-specific cloud ecosystems. However, these approaches require users and organizations to trust the corresponding cloud or phone providers with the protection and availability of their authentication material. In parallel, qualified electronic signature (QES) tokens and smart-card--based PKCS#11 modules provide high-assurance, hardware-rooted identity, yet they are not directly compatible with WebAuthn flows. This paper explores architectural options for bridging these technologies by securing a virtual FIDO2 authenticator with a QES-grade PKCS#11 key and enabling encrypted cloud synchronization of FIDO2 private keys. We first present and implement a baseline architecture in which the cloud stores only ciphertext and the decryption capability remains anchored exclusively in the user's hardware token. We then propose a hardened variant that introduces an Oblivious Pseudorandom Function (OPRF)-based mechanism bound to a local user-verification factor, thereby mitigating cross-protocol misuse and ensuring that synchronization keys cannot be repurposed outside the intended FIDO2 semantics; this enhanced design is analyzed but not implemented. Both architectures preserve a pure WebAuthn/FIDO2 interface to relying parties while offering different trust and deployment trade-offs. We provide the system model, threat analysis, implementation of the baseline architecture, and experimental evaluation, followed by a discussion of the hardened variant's security implications for high-assurance authentication deployments.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
