| CPC G06F 21/32 (2013.01) [G06F 21/45 (2013.01); G06F 21/602 (2013.01)] | 15 Claims |

|
1. A method of performing authentication by an electronic apparatus, the method comprising:
receiving an access request to an application executed on the electronic apparatus and biometric information of a user of the electronic apparatus;
identifying an authentication level required in the application;
based on a result of comparing the authentication level with a preset value, obtaining either public helper data stored in a server or private helper data stored in the electronic apparatus as helper data used for user authentication;
obtaining an encryption key based on the biometric information of the user and either the public helper data or the private helper data by using a fuzzy extractor; and
performing user authentication for accessing the application, based on the encryption key,
wherein the public helper data is used to generate the encryption key for access to an application that requires security greater than or equal to a reference value, and the private helper data is used to generate the encryption key for access to an application that requires security lower than the reference value.
|