KR20000059245A - Biometrics Information Save System and Verification Method of Using the same - Google Patents

Abstract

The present invention relates to a biometric information storage system that enables sharing of biometric information stored in a database on a plurality of web sites as well as identifying the identity of an Internet user using biometric information stored in a database.

The biometric information storage system of the present invention includes a biometric information database in which biometric information of a plurality of Internet users is stored, a plurality of web servers requesting identification of an Internet user using biometric information, and a biometric information when a web server requests a request. A bio server that stores biometric information in the information database and determines whether the biometric information stored in the biometric information database matches the biometric information of the Internet user requested by the web server, and a history of the request, confirmation and result of the biometric information. And a service communication server installed in each of the bio server and the web server in order to interface or relay data transmission between the bio server and the web server.

Description

Biometrics Information Storage System and Verification Method of Using the Same}

The present invention relates to a method of verifying the identity of an Internet user using the Internet, and in particular, to share the biometric information stored in the database in a plurality of websites and to identify the identity of the Internet user using the biometric information stored in the database The present invention relates to a biometric information storage system and an internet user authentication method using the same.

In general, Internet sites use identification and passwords to identify users. Internet users can verify their identity by accessing a site registered as a member and entering their ID and password. However, in such a method, the ID and password may be exposed by hacking or the like. The hacker uses the paid information using the exposed ID and password, and the Internet user whose password and ID are exposed must pay a predetermined amount for the information not used by the hacker. In addition, hackers reveal their IDs and passwords hacked on some Internet sites, and the Internet users exposed to the IDs and passwords suffer a lot. In particular, there is a fear that information to be protected socially or nationally may be leaked to the outside by the exposure of the password and ID. In addition, when the ID and password of the Internet user is exposed, identity information of the Internet user is exposed. The identity information of the exposed Internet user may be used for malicious purposes. In addition, even if the Internet user using the paid information denies the fact of viewing the paid information used by the existing method using the password and ID does not provide a way to confirm exactly who the user using the paid information. Therefore, it is difficult to secure trust between an Internet site and an Internet user.

Secure Socket Layer (SSL) and Public Key Infrastructure (PKI) are used to prevent information from being exposed, that is, to enhance security of computer networks including the Internet. SSL is a technique to prevent malicious tampering or detection that may occur during transmission by encrypting the information transmitted between the Internet user and the Internet site. However, such SSL does not provide a way to verify the identity of Internet users. In addition to encryption of information, PKI adds information repudiation, notarization, and tamper-proof features of the sender. To do this, the PKI uses Digital IDs in consultation with the Notified Authority, the Internet site, and the overall user agreement. In such a PKI method, a public notary institution should be established for the management and operation of a private key, and it is necessary to restructure the system at the national level. In addition, the Internet user is inconvenient to manage the private key generated through the operation of the software and to use a password for operating the software.

Accordingly, it is an object of the present invention to provide a biometric information storage system and an internet user authentication method using the biometric information that can identify the identity of an Internet user using biometric information.

1 is a block diagram showing a biological information system of the present invention.

2 is a flowchart illustrating a method in which an internet user stores his biometric information.

3 is a flowchart illustrating a process of authenticating an Internet user using stored biometric information.

<Description of the code | symbol about the principal part of drawing>

2: Biological Information Database 4: Service Record Database

6: service provider bio server 8: service communication server

10: Internet 12: Internet user

14: service communication server 16: service user web server

18: customer database 20: service communication server

22: service user web server 24: customer database

In order to achieve the above object, the biometric information storage system of the present invention includes a biometric information database in which biometric information of a plurality of Internet users is stored, a plurality of web servers requesting identification of Internet users using biometric information, and a web server. A bio server that stores the biometric information in the biometric information database and determines whether the biometric information stored in the biometric information database matches the biometric information of the Internet user requested by the web server, and requests, confirms, and And a service communication database installed in each of the bio server and the web server to interface or relay the data transmission between the bio server and the web server.

The Internet user authentication method using the biometric information of the present invention comprises the steps of an internet user accessing a web server to which he or she registers as a member through an internet network, and the biometric information of an internet user when an internet user registers as a member to the web server. Storing the information in the biometric information database, and confirming the identity of the Internet user using the biometric information when an Internet user registered as a member attempts to access paid or closed information by accessing a web server.

Other objects and features of the present invention in addition to the above objects will become apparent from the description of the embodiments with reference to the accompanying drawings.

Hereinafter, exemplary embodiments of the present invention will be described with reference to FIGS. 1 to 3.

1 is a block diagram showing a method for providing an Internet user authentication service according to an embodiment of the present invention.

Referring to FIG. 1, a plurality of service user web servers 16 and 22 for providing predetermined information on the Internet, and a customer database in which information of members registered in the service user web servers 16 and 22 is stored. DataBase (hereinafter referred to as "DB") 18, 24, a biometric information DB 2 that stores biometric information of the Internet user 12, and a biometric information DB2 that stores biometric information. Authentication of the biometric information requested from the service provider bio server 6 for confirming the identity of the Internet user 12 using the biometric information stored in the information DB 2 and the Internet user web servers 16 and 22. Service recording DB 4 in which time and the like are recorded, and service communication servers 8, 14 and 20 for transmitting and receiving information between the service provider bio server 6 and the service user web server 16 and 22; Equipped. The service provider bio server 6 is installed at a service provider's workplace or a designated place to extract biometric information and to analyze and determine the extracted biometric information. This service provider bio server 6 is composed of computer hardware and functional software. The biometric information DB 2 is a logical storage place where the biometric information of the Internet user 12 is systematically recorded. The service user web servers 16 and 22 use the service provider bio server 6 to verify the identity of the internet user 12. The service user web servers 16 and 22 display predetermined information on the terminal of the Internet user 12 so that the Internet user 12 can access and view the information. The customer DBs 18 and 24 store information of Internet users 12 registered as members in the Internet user web servers 16 and 22. In other words, the IDs and passwords registered by the respective Internet users 12 are stored in the customer DBs 18 and 24. The service record DB 4 records the details of the service user web server 16 and 22 using the biometric information authentication service from the service provider bio server 6. That is, the service record DB 4 stores an authentication record for authenticating the Internet user 12 at the request of the service user web server 16, and the like. The service communication server 8, 14, 20 transmits and receives information exchanged between the service provider bio server 6 and the service user web server 16, 22 via the Internet network.

2 is a flowchart illustrating a process of registering an Internet user as a member of a service user web server.

Referring to FIG. 2, first, the Internet user 12 connects to any one of the first to nth service user web servers 16 and 22 through the Internet 10 (S30). At this time, the Internet user 12 Assume that is connected to the first service user web server 16. If the Internet user 12 is not a member of the service user web server 16 to which he is connected, he / she applies for membership registration. (S32) Information provided by the Internet user 12 during the membership registration application process (for example, an ID). And passwords) are stored and managed in the customer DB 18. In addition, during the registration process, the Internet user 12 inputs whether he or she has used an authentication service using biometric information. After the Internet user 12 registers as a member of the service user web server 16, the service user web server 16 requests the service provider bio server 6 to generate and store biometric information. At this time, the information transmitted from the service user web server 16 is made by the service communication server 14 connected to the service user web server 16, and the service communication server (connected to the service user web server 16) ( The information transmitted by 14 is received by the service communication server 8 connected to the service provider bio server 6. The information transmitted from the service user web server 16 to the service provider bio server 6 includes whether the biometric information of the Internet user 12 registered as a member is registered. In other words, if the Internet user 12 has entered the authentication service using the biometric information in the user registration process of step S32, the biometric information registration process is omitted. In other words, the service provider bio server 6 provides the information of the Internet user 12 stored in the biometric information DB 2 to the plurality of service user web servers 16 and 22. Accordingly, the plurality of service user web servers 16 and 22 share the biometric information of the Internet user 12 through the service provider bio server 6. The service provider bio server 6 checks whether there is already registered biometric information of the Internet user 12 registered as a member in the service user web server 16 (S34). The biometric information to be registered is input (S36). In step S36, the Internet user selects at least one of biometric information to be used, for example, voice, fingerprint, and face. The service provider bio server 6 having received biometric information to be registered in operation S36 displays a screen on which the biometric information can be input from the internet user 12 on the terminal of the internet user 12. The internet user 12 transmits the biometric information selected by the internet user 6 to the service provider bio server 6, and the service provider bio server 6 converts the bio information transmitted from the internet user 12 into digital data to generate biometric information DB. (2). (S38) The bio server 6 then checks whether the biometric information of the Internet user 12 is stored in the biometric information DB 2 without error. (S42) In step S42, an error is detected. If so, the service provider bio server 6 receives an input from the Internet user 12 to re-enter the biometric information. (S40) If the biometric information is stored again in step S40, the biometric information is repeated while repeating steps S38 to S42. The information is stored in the DB (2). If the biometric information is not input again at step S40, the service user web server 16 notifies that the subscription has failed. The service user web server 16 notified that the subscription has failed from the service provider bio server 6 displays a screen indicating that the subscription has failed on the terminal of the Internet user 12. (S54) Customer information for later processing (S56) If the biometric information is stored without error in step S42, the service provider bio server 6 notifies the service user web server 16 of the successful input of the biometric information. The service user web server 16 notified of the successful input of the biometric information from the service provider bio server 6 displays a screen indicating that the subscription is successful on the terminal of the Internet user 12. (S52) After the registration process On the other hand, if there is a registered biomark in step S34, the service provider bioserver 6 searches the biometric information DB 2 to check whether the biometric information of the Internet user 12 is stored. (S44, S46) In step S46, if the biometric information of the Internet user 12 is stored, the service provider bio server 6 notifies the service user web server 16 that there is already registered biometric information. The service user web server 16 notified that there is biometric information registered from the service provider bio server 6 displays a screen indicating that the subscription is successful on the terminal of the Internet user 12. (S52) After the registration process (S58) If the biometric information of the Internet user 12 is not stored in step S46, the service provider bio server 6 transmits an error message to the service user web server 16. The service user web server 16, which has received the error message from the service provider bio server 6, displays the error on the terminal of the Internet user 12. (S48) After that, whether or not the Internet user 12 is re-registered (S50) If the internet user 12 re-registers, step S34 is repeated. (S34) If the internet user 12 does not re-register, the service user web server 16 notifies that the subscription has failed. The screen is displayed on the terminal of the Internet user 12 (S54). Then, the customer information is notified to the customer support team for the troubleshooting. (S56)

3 is a flowchart illustrating an authentication process of an internet user registered with biometric information.

Referring to FIG. 3, first, the Internet user 12 accesses any one of the first through n th service user web servers 16 and 22 that he or she has registered as a member through the Internet 10 (S60). It is assumed that the Internet user 12 accesses the first service user web server 16. The Internet user 12 goes through a user login process that is recognized as a registered member of the service user web server 16 to which he is connected. (S62) The service user web server 16 is a user ID entered by the Internet user 12 and the user. It is checked whether the password matches the ID and password stored in the customer DB 18. (S64) An ID or password input by the Internet user 12 in step S64 is stored in the customer DB 18 or If the password does not match, the service user web server 16 checks whether to continue the login process. (S66) If the login process is continued in step S66, the steps S62 to S64 are repeated. If the login process is not continued in step S66, the authentication process of the Internet user is terminated. (S84) If the login is successful in step S64, the Internet user 12 reads the public information provided by the service user web server 16, and the like. (S68) The viewing of such public information may not go through a user login process. When the Internet user 12 who has successfully logged in attempts to view the paid information or the closed information provided by the service user web server 16, the service communication server 14 of the service user web server 16 is the service provider bio server. The Internet user 12 classification information or the like is transmitted to the service communication server 8 of (6). (S70) The service provider bio server 6 having received the identification information or the like of the Internet user 12 inputs biometric information. And displays the processed screen on the terminal of the Internet user 12. (S72) The Internet user 12 then transmits his / her biometric information to the service provider bio server 6 according to the contents displayed on his terminal. . The service provider bio server 6 receives the biometric information of the Internet user 12 and checks the identity of the Internet user 12. (S76) When the identity of the Internet user 12 is verified in step S76, the service provider bio server (6) transmits the verification result to the service user web server 16. At this time, the service record DB 4 of the service provider bio server 6 records the information of the service user web server 16 which has requested the identity verification and the Internet user 12 whose identity is verified. The service user web server 16 having received the verification result allows the Internet user 12 to view the closed information. (S82) Meanwhile, if the biometric information verification of the Internet user 12 fails in step S76, the service provider bio server (6) checks whether the biometric information verification process is repeated. (S74) If repeating the biometric information verification process is selected in step S74, steps S72 and S76 are performed. If the biometric information verification process is not repeated at step S74, the service provider bio server 6 transmits a message to the service user web server 16 indicating that the verification has failed. The service user web server 16, which has received a message indicating that verification has failed, displays a screen on the terminal of the Internet user 12 indicating that the closed information cannot be read (S78). In addition, the service user web server 16 ) Notifies the customer support team to the customer information for fault handling (S80).

As described above, according to the biometric information storage system and the Internet user authentication method using the same, the identity of the Internet user is confirmed using the biometric information of the Internet user. Therefore, it is possible to accurately identify the identity of the Internet user. In addition, Internet users use biometric information in order to use paid information or closed information, and since such records are recorded and managed in a database, trust can be secured between Internet users and service users. Furthermore, the Internet user can verify his or her identity by using physical information to gain confidence in his or her own information or service use and expenses for which he / she is unwilling to read.

Those skilled in the art will appreciate that various changes and modifications can be made without departing from the technical spirit of the present invention. Therefore, the technical scope of the present invention should not be limited to the contents described in the detailed description of the specification but should be defined by the claims.

Claims (6)

A biological information database in which biometric information of a plurality of Internet users is stored; A plurality of web servers requesting identification of Internet users using the biometric information; A bio server for storing biometric information in the biometric information database upon request of the web server and determining whether the biometric information stored in the biometric information database matches the biometric information of the Internet user requested by the web server; A service record database storing a history of the request, confirmation and result of the biometric information; And a service communication server installed in each of the bio server and the web server in order to interface or relay data transmission between the bio server and the web server. The method of claim 1, The biometric information storage system, characterized in that at least one of the fingerprint, voice and face. The method of claim 1, The biometric information is converted into digital data by the bio server and stored in the biometric information database. In the Internet user authentication method using the biometric information to confirm the identity of the Internet user using the biometric information, Accessing a web server to which the internet user registers as a member through an internet network; Storing the biometric information of the internet user in a biometric information database when the internet user registers as a member of the web server; And confirming the identity of the Internet user by using the biometric information when an Internet user registered as the member attempts to access the web server and view paid or closed information. User authentication method. The method of claim 4, wherein The step of registering the Internet user as a member on the web server, Checking whether the web server has previously registered biometric information from an internet user who registers as a member; Receiving the biometric information for use by the Internet user if the internet user has not previously used the biometric information, and storing the biometric information in the biometric information database; Outputting a message to the terminal of the Internet user that the biometric information has been successfully processed if the biometric information has been successfully stored in the biometric information database; Retrieving the biometric information of the internet user from the biometric information database if the internet user previously used biometric information; And if the biometric information is stored in the biometric information database, outputting a message indicating that normal processing is performed to the terminal of the internet user. The method of claim 4, wherein Identifying the identity of the Internet user using the biometric information, Accessing the web site to which the internet user has registered as a member; Confirming the identity of the Internet user using the biometric information stored in the biometric information database when the Internet user attempts to close the web site or view the paid information; Providing the closed or paid information when the identity of the Internet user is verified, And if the identity of the Internet user is not verified, outputting an access rejection message to the terminal of the Internet user.