KR20030061092A - smart card system and including authentication and authorization toolkit by biometric information and its authentication method - Google Patents

Abstract

An object of the present invention is to provide biometrics information (fingerprints, etc.) that can be used to prevent unauthorized use of third parties in connection with financial transactions and other personal information-related cards, such as loss or theft, or hacking of card information due to malicious intent. To provide a smart card authentication method and system thereof.

The smart card system includes at least a memory unit 12 and a smart card such as a CPU, RAM, and EPROM (EEPROM) such that data is read or written via a smart card reader / writer through which an electrical connection for communication with another system is made. In the IC chip embedded smart card 10 including a driving unit 11 of the present invention, when the smart card reader / writer 2 is driven, it recognizes and inputs biometric / body information capable of identifying a user. A biometric / body information input unit 16 for receiving is provided on the smart card 10, and the biometric / body information digital data inputted from the biometric / body information input unit 16 is stored in the memory unit at the time of initial card issuance. The living body / body is stored in the living body / body information digital data unit 13 of the nonvolatile memory area 12 and input when the stored living body / body information digital data and the smart card 10 are used. Compare the information to the digital data is characterized in that is configured to drive through 11 of the smart card 10 the same time, perform the following steps:

Description

Smart card system and authentication method including biometrics information recognition and authentication device {smart card system and including authentication and authorization toolkit by biometric information and its authentication method}

The present invention relates to a smart card system including a biometrics information recognition and authentication device. More specifically, the smart card includes a biometrics recognition device for identification and a process for recognizing and authenticating the same. It's about being able to verify your identity or replace your password during financial transactions without using a separate biometrics recognition system or separate password.

In general, smart cards that can be used as research centers that run security systems using personal information, smart card systems that can enter and exit special entrances, smart card systems for financial transactions and credit transactions, and electronic resident ID cards and electronic medical insurance cards. In the case of a system, it consists of a personal information storage through an electronic chip and an information sharing system through a reader.

However, the password required to use the smart card and credit card must always be familiar with the user, and when using the card, there is an inconvenience in that the user must manually enter the password directly into the card reader. It is a source of tremendous financial loss, as well as a source of personal privacy infringement.

In addition, in the case of the authentication system using the fingerprint system that is used in some conventional systems, a large authentication server that needs to store and authenticate the fingerprints of all users is required. Must be accompanied by equipment.

An object of the present invention is to solve the above-mentioned conventional problems, by receiving the biometrics information of the individual in the smart card itself by utilizing the on / off signal processing of the smart card, the original personal information blocking and password function The present invention provides a smart card system including a biometric information recognition and authentication device.

1 is a block diagram showing a part of the configuration of a smart card according to an embodiment of the present invention;

2 is a block diagram showing a part of a configuration of a smart card reader for reading / writing the smart card of FIG. 1;

3 is a flowchart illustrating a process of issuing a smart card related to an embodiment of the present invention;

4 is a flowchart illustrating a process of authenticating and driving a smart card according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

10: smart card 11: drive unit

12: memory unit 13: living body / body information digital data storage unit

14: card information storage unit 15: authentication program storage unit

16: biological / body information input unit 20: smart card reader / writer

21: driving power transmitter 22: smart card information recognition unit

23: Server connection

The technical solution of the present invention for achieving the above objects, the biometric information recognition unit inside the smart card, card information storage unit having personal information and other financial information, and biometrics such as personal fingerprints that act as a personal password It consists of a smart card including a digital data storage unit for body information, a drive unit capable of communication and driving, and a lead / writer of the smart card.

That is, the smart card system including the biometrics information recognition and authentication apparatus of the present invention includes at least a CPU, a RAM, and the like so that data can be read or recorded via a smart card reader / writer through which an electrical connection for communication with another system is made. In an IC chip embedded smart card including a memory unit such as an EPROM (EEPROM) and a driving unit of a smart card, the biometric / body information which is driven when driven by a smart card reader / writer and can identify a user is provided. A biometric / body information input unit for recognition and input is provided on a smart card, and the biometric / body information digital data of the user inputted from the biometric / body information input unit is inputted in the nonvolatile memory area of the memory unit at the time of initial card issuance. Stored in the body information digital data section, the stored biometric / body information digital data and smart car It is configured to perform the following steps through the driving unit of the smart card at the same time by comparing the biometric / body information digital data input at the time of use, or when the biometric / body information input unit coincides with the biometric / body information of the user And configured to turn on.

In addition, the present invention is a method for issuing a smart card using the above-mentioned smart card system and driving the smart card when using the smart card system. And storing identifiable biometric / body information digital data of the user who applied for issuance in the digital data unit, which is a volatile memory area, and inputting biometric / body information through a smart card reader / writer when the smart card is used. Recognize the biometrics / body information through the unit, input the recognized biometrics / body information as digital data, compare it with the biometric / body information digital data stored in the digital data unit, and perform the following steps through the driving unit of the smart card at the same time. When the drive is turned off when the drive is not the same. This provides the issuing and driving method of a smart card containing the biometrics information identification and authentication apparatus, characterized in that to authenticate the user.

If the biometrics / body information is fingerprint information, according to the smart card issuance application, fingerprint digital information is stored in the memory of the card and the smart card issuing step capable of biometric information recognition and authentication through the mesh grid of the biometric information recognition unit; When using a smart card, hold your thumb (when using fingerprint biometric information) at the location of your biometric information input unit (fingerprint, etc.) and compare the bending contents of the mesh grid with your biometric information (fingerprint, etc.) and the bending of the mesh grid. Comparing the digital information of the contents with the stored information of individual biometric information (fingerprints, etc.) and determining whether the various information in the smart card can be driven according to the result of the comparison, and driving the RF chip of the smart card based on the result. It is configured to include the step of driving the smart card itself by the user's biometric / body information, further In transactions such as banking, smart card readers, the card reader reads the personal information and card number stored in the memory (RF chip) inside the card. Determining whether the credit card is bad by checking the lead card number on the B / L information when the user's use is confirmed, and approving financial transactions and sharing of personal information within the transaction limit if it is determined that the card is normal. It is configured to include.

Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.

The smart card 10 according to the present invention is a built-in CPU and generally includes a CPU in an IC chip as a contact type or combi type card in which an IC chip is embedded in a plastic material. Smart card including RAM and EEPROM (EPROM). The smart card 10, which is an IC chip embedded card (IC card), is largely classified into a contact type, a contactless type, and a mixed type thereof (COMBI type), and the like, wherein the contact type is bidirectionally communicated through an electrical contact with a terminal. The non-contact type is a two-way communication without direct contact with the terminal, and the shape and standard defined by the credit card or international standard (ISO7810, ID-1, ID-2, ID-3) And contact and non-contact communication ICs having external specifications other than these standards.

This basic contactless IC chip built-in card is mounted on an IC chip composed of a CPU, a RAM, an EPROM (EEPROM), a contactless interface and an RF interface driven by a COS (card operating system), at least, between card sheets made of plastic. With the end connected to the connection part for the electrical connection of the IC chip, the antenna wire, which is mainly a coil of copper wire for transmitting and receiving electrical energy and data signals with an external card reader / writer, is looped between the card sheets. Arranged and configured. The IC chip may have various structures, such as a board attached to an IC chip, and the contact type has a contact interface instead of a contactless interface and an RF interface, and includes a contact module. In the case of the combination type, the contactless configuration further includes a contact module.

Smart card 10 according to an embodiment of the present invention shown in Figure 1, like a conventional smart card, smart card lead / writer 20 is made for electrical connection for communication with other systems (see Figure 2 Memory unit 12, such as a CPU, RAM, and EPROM (EEPROM), and a drive unit 11 of a smart card so that data can be read or written through the data, and the living body / body information according to the present invention. The digital data storage unit 13 and the biometric / body information input unit 16 are included.

The living body / body information digital data storage unit 13 stores the living body / body information digital data to be input from the living body / body information input unit 16 at the time of initial card issuance. Therefore, the living body / body information digital data storage unit 13 is allocated to the nonvolatile memory area of the memory unit 12.

The biometric / physical information input unit 16 is provided on the smart card 10, and the biometric / body information which is firstly activated when the smart card 10 is driven by the smart card reader / writer 2 and can identify a user. It is configured to recognize and receive body information.

In the smart card 10 configured as described above, the biometric / body information digital data stored in the biometric / body information digital data storage unit 13 and the biometric / body information digital data input when the smart card 10 is used are compared. To drive the smart card 10 at the same time to perform the next step.

Further, the living body / body information input unit 16 itself is turned on only when the living body / body information is matched, and the driving unit 11 operates. When the living body / body information is inconsistent, the driving unit 11 is turned off. It is also possible to be configured to be impossible to drive. For example, in the case of a fingerprint, a fine touch screen pad having the same pattern as that of the user's fingerprint is formed, and the touch screen pad is configured such that the driving unit 11 is connected when the fingerprint of the pattern is touched. The biometric / physical information recognized and input by the biometric / body information input unit 16 may be uniquely identifiable body information such as fingerprints, voices, retinas, facial images, irises, palm prints, and / or communicates with the outside. Biometric information from a biochip or body contact biochip. In this case, it is preferable that only unique information that can be identified is formed, and various conventional techniques can be employed for this purpose.

3 shows an example of a smart card issuing process related to an embodiment of the present invention as a flowchart, and FIG. 4 shows an example of an authentication and driving process of a smart card related to an embodiment of the present invention as a flowchart.

First, the issuing process of the smart card 10 is a identifiable living body / body of the user who applied for issuance to the digital data unit 13, which is a nonvolatile memory area of the memory unit 12 inside the card, when the card is issued according to the issuance application. Storing the information digital data. At this time, the process of determining whether there is a new card, that is, whether there is data recorded in the biometric / body information digital data storage unit 13, and initializes the biometric / body information digital data storage unit 13 In addition, it is also possible to drive the unique identifiable biometric / body information through the smart card reader / writer 20 through the biometric / body information input unit 16, the biometric / body information digital data storage unit ( 13), or may be input from another bio / body information input device.

3 is a view illustrating a process of storing a fingerprint as an example, when fingerprint information, which is biometric / body information, is input in step S11, the digital information is extracted in step S12, and biometric and personal image information are extracted in step S13. In combination, a unique key is generated and a customer information database is constructed in step S14. Thereafter, when the mesh grid information is input through the biometric / body information input unit 16 of the smart card 10 in step S15, it is checked whether the input is matched in the setting unit in step S16 and the information is set. Then, in step S17 is issued a smart card 10 that can recognize the customer and can be authenticated.

In addition, when the living body / body information input unit 16 is composed of a mesh grid, and the mesh grid itself generates a user fingerprint pattern by recognizing a fingerprint, which is the user's living body / body information, and presses the fingerprint through the fingerprint pattern. Issuing the smart card 10 by configuring the biometric / body information input unit 16 having a user's own fingerprint pattern to drive the smart card 10 from the smart card reader / writer 20 through the drive unit 11 It is possible.

When using the smart card 10 issued in this way, the biometric / body information is first recognized through the biometric / body information input unit 16 via the smart card reader / writer 20 and the recognized biometric / body information is used. Input as digital data (store in RAM).

After comparing the digital data of the living body / body information inputted at the time of use with the living body / body information digital data stored in the digital data unit 13, the driving unit may perform the next step of the smart card 10 at the same time. 11) continue to drive, and when not the same, the smart card 10 is turned off.

In FIG. 4, the biometric / body information input unit 16 recognizes the fingerprint as the biometric / body information at step S21 and stores the fingerprint as the bending information in the RAM at step S22, and the biometric / body information of the memory unit 12 at step S23. The biometric / body information stored at the time of issuance from the digital data storage unit 13 is read and compared to confirm whether there is a match (step S24). At this time, when it does not match, the driving of the smart card 10 is turned off through the driving unit 11 in step S25, and when it matches, the driving continues through the driving unit 11 in step S26 and the smart card 10 in step S27. The card information is authenticated, the authentication step ends, and the next step is performed. That is, when using a smart card, the card reader reads the cardholder's personal information and card number stored in the memory (RF chip) inside the card, and if the user's use is notified in the above step and the user cannot confirm the transaction, Determining whether the credit card is a bad card by inquiring the lead card number to the B / L information, and if it is determined that the normal card in the step may include the step of approving financial transactions and personal information sharing within the transaction limit.

In addition, when the biometric / body information input unit 16 of the fingerprint pattern is included, a user's fingerprint in which the smart card 10 is driven by the smart card reader / writer 20 is input to the biometric / body information input unit 16. It depends on the pattern.

By doing so, the user of the smart card 10 can be directly authenticated by the living body / body information, so that the inconvenience of inputting the password can be eliminated, and there is no fear of leakage such as a password, thereby storing financial information and personal information. In the event of a loss or theft of a smart card, there is no fear of financial accidents, and moreover, it is possible to prevent the illegal use of a third party in connection with the hacking of smart card information by malicious. In addition, by simplifying the connection process of the authentication server according to the smart card 10 authentication system, the load of the authentication system can be reduced, the cost can be reduced, and the digitization of biological / body information (fingerprint, etc.) Based on the unique key value generation through this, it is possible to activate e-commerce, in particular, using biometric information (fingerprints, etc.), which accurately authenticates the user's use of the financial settlement by e-commerce on the Internet.

In step S14 of FIG. 3, the customer information database stored together with the card information of the smart card 10, the user information, and the biometric / body information digital data may be used for external authentication, and the smart card 10 may also be used. If the digital data of the living body / body information does not match when the use of the illegal use it is possible to save the warning when the next reuse of the smart card (10).

In addition, it is also preferable to include a living body / body information processing processor separate from the existing drive unit 11 to be able to process only the issuing step and the authentication step described above independently.

As described above, according to the configuration and operation of the present invention, the own smart card itself includes a personal identification recognition information input unit and authentication unit through biometric information (fingerprint, etc.), and inconvenience caused by the input of a password and financial information and personal. The unique effect of preventing the illegal use of a third party in relation to the loss or theft of the smart card storing the information or the hacking of the smart card information due to malicious, etc. will appear.

The present invention can greatly reduce the load and cost by the authentication system by simplifying the connection process of the authentication server according to its own authentication system.

The present invention has the effect of accurately authenticating whether or not the user is used for financial settlement due to electronic commerce on the Internet based on digitalization of biometric information (fingerprint, etc.) and generation of unique key values.

Claims (4)

At least a memory unit 12 such as a CPU, a RAM and an EPROM (EEPROM) and a driving unit of the smart card so that data can be read or written via the smart card reader / writer 20 through which an electrical connection for communication with another system is made. In the IC chip built-in smart card 10 configured to include 11), A biometric / body information input unit 16 is provided on the smart card 10 to recognize and receive biometric / body information which is driven when driven by the smart card reader / writer 2 and can identify a user. The biometric / body information digital data of the user inputted from the biometric / body information input section 16 is stored in the biometric / body information digital data section 13 of the nonvolatile memory area of the memory section 12 when the card is first issued. The stored biometric / body information digital data and the biometric / body information digital data input when the smart card 10 is used are configured to perform the following steps through the driving unit 11 of the smart card 10 at the same time. Recognizing biometrics information, characterized in that configured to operate the direct drive unit 11 when the biometric / body information input unit 16 matches the biometric / body information of the user. Smart card authentication system that includes the device. The method of claim 1, wherein the biometric / body information recognized and input by the biometric / body information input unit 16 communicates with body information such as a fingerprint, voice, retina, face image, iris, palm print, and / or the like. Smart card system comprising a biometrics information recognition and authentication device, characterized in that the biometric information from the biochip or body contact biochip possible. At least a memory unit 12 such as RAM and an EPROM (EEPROM) and a driving unit 11 of the smart card such that data is read or written via the smart card reader / writer 20 through which an electrical connection for communication with another system is made. And a method for issuing and using the IC chip embedded smart card 10 configured to include a biometric / body information input unit 16 for recognizing and inputting biometric / body information digital data. In According to the application for issuing the smart card 10, upon identification of the biometric / body information digital of the user who applied for issuance to the digital data unit 13, which is a nonvolatile memory area of the memory unit 12 inside the card, upon issuing the card. And storing the data, and recognizing the living body / body information through the living body / body information input unit 16 through the smart card reader / writer 20 when using the smart card 10. / Body information as digital data is compared with the biometric / body information digital data stored in the digital data unit 13, and at the same time through the drive unit 11 of the smart card 10 to perform the following steps, Smart card authentication method characterized in that the user is authenticated by turning off the drive through the drive unit (11) of the smart card (10) when not. The digital data unit 13 according to claim 3, wherein the digital data unit 13 is initialized when the smart card 10 is issued, and the biometric / body information digital data inputted through the biometric / body information input unit 16 is stored in the digital data unit 13. And storing the card information of the smart card, the user information, and the biometric / body information digital data together in a customer information database.