KR101219957B1 - Authentication method, device and system using biometrics and recording medium for the same - Google Patents

Abstract

Disclosed are a user authentication method, apparatus and system using biometrics, and a recording medium therefor. According to the present invention, the user's body information is not directly recorded on the system authentication apparatus or the server, but is recorded on the user's own personal authentication apparatus. Allow system access to be authorized. Therefore, the user's body information is stored only in the personal authentication device, and the system authentication device authorizes the user through pairing with the personal authentication device, thereby relieving anxiety about the leakage of physical information and personal information even if the user is authenticated using biometrics. can do. Therefore, the user's active participation in the biometrics user authentication system can be derived, thereby contributing to the expansion of the application range of the biometrics user authentication system.

Description

Authentication method, device and system using biometrics and recording medium for the same}

The present invention relates to a user authentication method, apparatus and system, and a recording medium therefor, and more particularly, to a user authentication method, apparatus and system using biometrics, and a recording medium therefor.

As the importance of security increases in the modern society, various user authentication methods have been proposed and used. The user authentication method using biometrics among user authentication methods is a user authentication method that has recently been in the spotlight as a method of providing reliable security since the user's body information is used as a security medium for user authentication. Fingerprint recognition method is a user authentication method using representative biometrics currently used. Recently, however, the shape of the hand, the contour of the face (eyes, nose, eyebrows, mouth, cheek, etc., the shape of the ears), the shape of the ears, the gates, the retina of the eye, the iris, the back of the hand, Authentication methods using various biometrics, such as finger vein patterns, signatures, and DNA, have been devised to expand the scope of application.

Biometrics has the advantage that the user can be authenticated from the data using the body information because it is information that can be obtained from the individual, but also has the disadvantage that occurs because of the body information. For example, even if a fingerprint is stolen, it cannot be replaced with another fingerprint because the fingerprint cannot be generated alternatively. In other words, the password can not be changed unlike the normal password. In addition, since the camera can take a picture of your face without your consent, a lot of information can be exposed without your consent.

In addition, the existing user authentication method using biometrics is basically a user authentication method for a user whose body information is registered. In other words, existing user authentication methods such as fingerprint recognition method and iris recognition method can register a user's fingerprint or iris before the user uses the system, and authenticate only the registered user. In addition, in order to register a fingerprint or iris in the system, a user must directly participate in the user registration work.

However, due to the problems described above, users generally have a feeling of inadequacy of the user's body-specific information stored in a system used by an unspecified number for user authentication using biometrics. Therefore, it is difficult to expect active participation from users. Because of this problem, there are very few users who can authenticate using biometrics directly in the system. Therefore, there is a limitation in applying biometrics in a system that many users access.

An object of the present invention to provide a highly secure user authentication method using biometrics.

Another object of the present invention is to provide a personal authentication device using biometrics.

Another object of the present invention is to provide a user authentication system using biometrics.

In the user authentication method using a biometrics for achieving the above object is a user authentication method of a user authentication system comprising a system authentication device having a first biometrics detection unit and a personal authentication device having a second biometrics detection unit, Transmitting the user's body information detected by the first biometric detector to the personal authentication device as first body information, and whether the first body information matches the second body information detected by the second biometric detector Determining, when the first body information matches the second body information, the system authentication device and the personal authentication device are paired with each other, and an identifier of the personal authentication device is transmitted. Approve the identifier of the authentication device, and And transmitting to the personal authentication device, and inputting the system connection password to connect the user to the system authentication device.

The first and second body information for achieving the above object may include one or more of the user's fingerprint, hand shape, facial contour, ear shape, gate, eye retina or iris, back of hand, vein pattern of finger, sign, DNA It is characterized by the above information.

The step of transmitting the first body information to the personal authentication device to achieve the above object comprises the steps of the system authentication device searching and detecting one or more of the personal authentication device, the one or more detected by the user Selecting one personal authentication device among the personal authentication devices, acquiring the first body information by the first biometric detection unit, and transmitting the first body information to the selected personal authentication device; It is characterized by.

The step of transmitting the first body information to the personal authentication device to achieve the above object comprises: searching and detecting one or more of the system authentication devices by the personal authentication device, the one or more of which the user is detected. Selecting one personal authentication device among the system authentication devices, acquiring the first body information by the first biometric detection unit, and transmitting the first body information to the selected personal authentication device; Characterized in that.

The step of transmitting the system access password to the personal authentication device to achieve the object is determined whether the identifier of the personal authentication device is an approved identifier, if the identifier of the personal authentication device is an approved identifier, the system access password Is transmitted to the personal authentication device, and if the identifier of the personal authentication device is not an approved identifier, an authentication failure message is output.

In order to achieve the above object, the first and second biometric detectors may be implemented by one or two or more of a camera, a vibration sensor, an acceleration sensor, a gyroscope sensor, a compass sensor, a microphone, and a stethoscope.

The personal authentication device for achieving the other object is a first biometric detection unit for detecting the user's body information as the first body information, and performs a short-range direct wireless communication with an external system authentication device, detected by the system authentication device A first wireless communication unit which receives the user's body information as second body information, and compares the first body information with the second body information, and transmits an identifier to the system authentication apparatus through the first wireless communication unit. And a first control unit configured to perform pairing with the system authentication device.

A system authentication apparatus for achieving the another object includes a second biometric detection unit for detecting the body information of the user as the second body information, a second wireless communication unit for transmitting the first body information to the personal authentication device; And a second control unit for determining whether the identifier received from the personal authentication device is an approved identifier, and transmitting the system connection password to the personal authentication device through the second wireless communication unit. .

A user authentication system for achieving the another object is characterized by comprising the system authentication device and the personal authentication device, and performs a user authentication operation using the first and second body information.

Therefore, the user's body information is stored only in the personal authentication device, and the system authentication device authorizes the user through pairing with the personal authentication device using the user's body information as a medium, so even if the user is authenticated using biometrics, the body information and You can relieve anxiety about the leakage of personal information. Therefore, the user's active participation in the biometrics user authentication system can be derived, thereby contributing to the expansion of the application range of the biometrics user authentication system.

1 shows an example of a user authentication system using biometrics according to the present invention.
FIG. 2 shows the configuration of the user authentication system of FIG.
3 is a flowchart illustrating a user authentication method using biometrics according to the present invention.

In order to fully understand the present invention, operational advantages of the present invention, and objects achieved by the practice of the present invention, reference should be made to the accompanying drawings and the accompanying drawings which illustrate preferred embodiments of the present invention.

Hereinafter, the present invention will be described in detail with reference to the preferred embodiments of the present invention with reference to the accompanying drawings. However, the present invention can be implemented in various different forms, and is not limited to the embodiments described. In order to clearly describe the present invention, parts that are not related to the description are omitted, and the same reference numerals in the drawings denote the same members.

Throughout the specification, when an element is referred to as " including " an element, it does not exclude other elements unless specifically stated to the contrary. The terms "part", "unit", "module", "block", and the like described in the specification mean units for processing at least one function or operation, And a combination of software.

1 shows an example of a user authentication system using biometrics according to the present invention, and FIG. 2 shows the configuration of the user authentication system of FIG.

1 and 2, the user authentication system 10 using biometrics according to the present invention includes a personal authentication device 100 and a system authentication device 200 of a user.

The personal authentication device 100 is a portable authentication device possessed by a user and may include various devices capable of wireless communication, including a mobile phone and a smartphone. The system authentication device 200 is a device for authenticating a user so that the user can access the user authentication system 10 and performing a designated operation for the authenticated user. An automated teller machine (ATM) or an unmanned civil complaint Devices such as document issuers may be included. 1 illustrates a smartphone as an example of the personal authentication device 100, and illustrates an automatic teller machine as an example of the system authentication device 200.

In the present invention, the personal authentication device 100 and the system authentication device 200 are provided with biometrics detection units 110 and 210 that can detect user's unique body information such as fingerprint, iris, and heart rate, respectively.

The biometrics detectors 110 and 210 may include various sensors according to the type of body information to be detected. For example, the biometric detection unit 110 or 210 may include a camera as a sensor when detecting body information of a user such as a fingerprint or an iris, and the biometric detection unit when detecting a biometric characteristic such as a heartbeat. The sensors 110 and 210 may include sensors such as a vibration sensor, an accelerometer, a gyroscope, and a compass.

The acceleration sensor can detect the vibration caused by the heartbeat as the acceleration due to the vibration of the sensor, and the gyroscope sensor and the compass sensor can detect the change in the angular motion and azimuth which changes the vibration of the sensor due to the heartbeat, respectively. In addition, a sensor capable of directly detecting physical vibration, such as a microphone and a stethoscope, may also be used as a sensor provided in the biometric detectors 110 and 210. Recently, a method of detecting a heartbeat using a camera has been disclosed, so that a camera may be used as a sensor even when detecting a heartbeat. In addition to the above-described sensors, any sensor capable of changing and outputting a detection signal according to body information may be applied to the biometrics detection units 110 and 210.

In FIG. 1, the biometrics detectors 110 and 210 are illustrated in separate configurations in the personal authentication device 100 and the system authentication device 200, but as described above, a sensor such as a camera, a microphone, or a gyroscope sensor may be provided. If the personal authentication device 100 and the system authentication device 200 are already included, the included sensor may be used, and may not be derived outside the personal authentication device 100 and the system authentication device 200. have.

In the present invention, the user is authenticated using the body information detected at both sides of the personal authentication device 100 and the system authentication device 200 as a password for pairing, and thus the personal authentication device 100 and the system authentication device ( 200 is configured to sense the same body information. In addition, although the types of sensors provided in the biometrics detectors 110 and 210 may be different from each other in order for the personal authentication device 100 and the system authentication device 200 to detect the same body information, each biometrics detection unit ( When the sensors included in the 110 and 210 are configured in the same manner, more reliable pairing can be performed.

Each of the personal authentication apparatus 100 and the system authentication apparatus 200 includes wireless communication units 120 and 220 for performing short range wireless communication such as Bluetooth, infrared communication, and radio frequency identification (RFID).

The wireless communication units 120 and 220 are provided to perform direct networking in a short distance (for example, within 2 m) wirelessly between the personal authentication device 100 and the system authentication device 200.

The biometrics may assume that the user is in close proximity to the system authentication apparatus 200 because the user's body information is used. Since the personal authentication apparatus 100 is a device that the user carries, the result is a personal authentication apparatus 100. May be considered as a state in which the user is close to the system authentication apparatus 200. In addition, since the wireless communication distance of the wireless communication unit 120, 220 may be vulnerable when the wireless communication distance is wide, the wireless communication distance of the wireless communication unit 120, 220 may be limited to a short range.

The controllers 130 and 230 control the biometric detection units 110 and 210 and the wireless communication units 120 and 220, respectively, and control the function unit 240 of the system authentication device 200 to perform a designated operation. The authentication of the user by the user authentication system 10 is to perform a designated operation for authenticated users, and the user authentication system 10 rarely performs only user authentication. That is, the system authentication apparatus 200 authenticates a user in order to perform a predetermined unique function. Accordingly, the controllers 130 and 230 control not only the biometric detection unit 110 and 210 and the wireless communication unit 120 and 220 but also the functional unit.

The functional unit 240 performs a designated operation for a user who is approved and connected to the user authentication system 10. For example, the functional unit 240 is a device such as a door lock. May be implemented as a physical locking device, and when the system authentication device 200 is a communication device, the functional unit 240 may be implemented as a communication circuit. As shown in FIG. 1, in the case of a cash machine, the functional unit 200 may deposit or withdraw cash. In addition, the function unit 240 may perform not only one function but also various functions in combination. That is, the function unit 240 may perform both a function as a locking device and a communication function.

The communication function may include other wired / wireless communication means except for short range wireless communication performed by the wireless communication units 120 and 220. In particular, the system authentication device 200 may be connected to an external server (not shown) through a network to perform a designated operation.

Although not shown, the personal authentication device 100 may also include a function unit to perform additional operations other than user authentication, and the personal authentication device 100 and the system authentication device 200 may each be a display unit and a user interface unit. An input unit may be provided.

Pairing is a conventional technique used in Bluetooth. When a pairing operation is described in Bluetooth, two or more devices among a plurality of devices capable of Bluetooth communication located at a short distance (for example, within 10 m) are to be paired with each other. In this case, the device attempting pairing first searches for a nearby device, and the peripheral device forwards its address to the device attempting pairing. Then, the device attempting pairing requests and obtains the identifier (PIN code) of the peripheral device again, and the user selects a desired device to see the acquired identifier, and transmits data wirelessly. In other words, pairing is a technique in which devices capable of Bluetooth communication mutually authenticate and transmit data wirelessly.

However, the current pairing used in Bluetooth allows a plurality of devices to transmit data wirelessly through an identifier (PIN code), there is a problem that the security is weak. Although some Bluetooth devices require a password for the pairing process, most passwords are simply composed of numbers or a combination of numbers and letters, and thus are not used in a system requiring a high level of security.

Accordingly, in the present invention, biometrics is used as mutual security authentication means for pairing. As described above, biometrics can provide reliable security since the user's body information is used as a security medium for user authentication. However, it has been difficult for users to obtain their information because they avoid storing their body specific information on a common device.

In the present invention, the pairing operation is performed using biometrics as a security medium, but the user's body information is not stored in the common device. That is, since the system authentication device 200 which is a public device does not store the detected user's body information but uses only as a temporary password for pairing with the personal authentication device 100, the user in the public device due to hacking or the like. It is possible to prevent the body information from being leaked, and it is possible to provide a higher level of security than a method of authenticating a user by simply entering a numeric or text password. In addition, user information is not stored in the personal authentication device 100, and may be always detected and authenticated during a pairing operation.

In the present invention, pairing is not limited to communication using Bluetooth, but may be performed using near field communication such as infrared communication and Radio-Frequency Identification (RFID).

3 is a flowchart illustrating a user authentication method using biometrics according to the present invention.

First, the user accesses the system authentication device 200 and requests a system authentication (S110). In response to the system authentication request, the system authentication device 200 searches for and detects a personal authentication device 100 in the vicinity of which wireless communication is possible (S120). The user selects his personal authentication device 200 among the detected personal authentication devices (S130).

Thereafter, the user inputs his or her body information using the biometric detection unit 210 of the system authentication apparatus 200 (S140). The system authentication apparatus 200 transmits the detected body information to the selected personal authentication apparatus 100 using the wireless communication unit 220 (S150).

Then, the personal authentication device 100 determines whether the body information transmitted from the system authentication device 200 matches the body information detected and stored by the biometric detection unit 110 of the personal authentication device 100 or currently detected. (S160).

If the body information does not match as a result of the determination, the system authentication apparatus 200 displays the authentication failure message or transmits the personal authentication apparatus 100 (S170). However, if the body information coincides with the determination result, the identifier of the personal authentication device 100 is transmitted to the system authentication device 200 using the wireless communication unit 120 of the personal authentication device 100 (S180).

The system authentication device 200 determines whether the received identifier of the personal authentication device 100 is an approved identifier (S190). In this case, the system authentication apparatus 200 may query a server (not shown) connected through a network to determine whether the identifier of the personal authentication apparatus 100 is an approved identifier. In addition, the identifier of the personal authentication device 100 may be set in various forms, and when the personal authentication device 100 is a device such as a mobile phone or a smart phone, a phone number may be used as the identifier.

If it is determined that the identifier of the personal authentication device 100 is an unauthorized identifier, the system authentication device 200 displays the authentication failure message or transmits the authentication failure message to the personal authentication device 100 (S170). However, if it is determined that the identifier of the personal authentication device 100 is an approved identifier, the system authentication device 200 approves the user, and the system authentication password for the connection to the system authentication device 200 by the personal authentication device 100 is obtained. Transmit (S200). In this case, the system access password transmitted by the system authentication apparatus 200 to the personal authentication apparatus 100 may be a one time password (OTP).

The user inputs the system connection password received in the personal authentication device 100 or the system authentication device 200 to complete user authentication (S210). Thereafter, the user requests the system authentication apparatus 200 to perform an operation required by the user, and the system authentication apparatus 200 completes pairing by performing an operation according to the request (S220).

For example, when the system authentication device 200 is a cash dispenser, the user deposits or withdraws cash after user authentication is completed, and locks or locks the lock in the case of a door lock. Release it.

In the above description, the system authentication device 200 searches for and detects the personal authentication device 100. However, in some cases, the personal authentication device 100 may search for and detect the surrounding personal authentication device 100. .

The device according to the invention can be embodied as computer readable code on a computer readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. Examples of the recording medium include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like, and a carrier wave (for example, transmission via the Internet). The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is evident that many alternatives, modifications and variations will be apparent to those skilled in the art.

Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

Claims (11)

In the user authentication method of the user authentication system comprising a system authentication device having a first biometrics detection unit and a personal authentication device having a second biometrics detection unit,
Transmitting the user's body information detected by the first biometric detector to the personal authentication device as first body information;
Determining whether the first body information matches the second body information detected by the second biometrics detection unit;
When the first body information matches the second body information, the system authentication device and the personal authentication device are paired, and an identifier of the personal authentication device is transmitted;
The system authentication device approving an identifier of the personal authentication device, and a system connection password transmitted to the personal authentication device; And
Inputting the system connection password, wherein the user is connected to a system authentication apparatus.
The method of claim 1, wherein the first and second body information is
User authentication method, characterized in that the user's fingerprint, hand shape, facial contour, ear shape, gate, eye retina or iris, the back of the hand, vein pattern of the finger, sign, DNA or more information.
The method of claim 2, wherein the first physical information is transmitted to the personal authentication device.
Searching and detecting one or more of the personal authentication devices by the system authentication device;
Selecting one personal authentication device of the one or more personal authentication devices detected by the user;
Acquiring the first body information by the first biometric detector; And
And transmitting the first body information to the selected personal authentication device.
The method of claim 2, wherein the first physical information is transmitted to the personal authentication device.
The personal authentication device searching for and detecting one or more of the system authentication devices;
Selecting, by the user, one personal authentication device of the detected one or more system authentication devices;
Acquiring the first body information by the first biometric detector; And
And transmitting the first body information to the selected personal authentication device.
The method of claim 2, wherein the system access password is transmitted to the personal authentication device.
Determining whether an identifier of the personal authentication device is an approved identifier;
If the identifier of the personal authentication device is an approved identifier, transmitting the system connection password to the personal authentication device; And
And if the identifier of the personal authentication device is not an approved identifier, outputting an authentication failure message.
The method of claim 2, wherein the first and second biometrics detection unit
User authentication method, characterized in that implemented by one or two or more of the camera, vibration sensor, acceleration sensor, gyroscope sensor, compass sensor, microphone and stethoscope.
A first biometric detector detecting the body information of the user as first body information;
A first wireless communication unit performing short-range wireless communication with an external system authentication device to receive the user's body information detected by the system authentication device as second body information; And
And a first controller configured to perform pairing with the system authentication apparatus by transmitting an identifier to the system authentication apparatus through the first wireless communication unit when the first body information is matched with the second body information. Personal authentication device.
A system authentication device using a personal authentication device according to claim 7,
A second biometric detector detecting the body information of the user as the second body information;
A second wireless communication unit which transmits the first body information to the personal authentication device; And
And a second controller for determining whether the identifier received from the personal authentication device is an approved identifier, and transmitting the system connection password to the personal authentication device through the second wireless communication unit. System authentication device.
A user authentication system comprising a system authentication device according to claim 8 and the personal authentication device according to claim 7, and performing a user authentication operation using the first and second body information.
The method of claim 9, wherein the first and second biometrics detection unit
Detecting one or more of the user's fingerprint, hand shape, face contour, ear shape, voiceprint, retina or iris of the eye, back of hand, vein pattern of finger, sign, DNA as the first body information User authentication system.
The method of claim 10, wherein the first and second biometrics detection unit
User authentication system, characterized in that implemented in one or more of the camera, vibration sensor, acceleration sensor, gyroscope sensor, compass sensor, microphone and stethoscope.

Images