KR20040082674A - System and Method for Authenticating a Living Body Doubly - Google Patents

Abstract

The present invention relates to a dual biometric authentication system and method, comprising: a first storage medium for storing and managing first biometric information of a biometric authentication customer; a second storage medium for storing and managing second biometric information of the biometric authentication customer; First biometric authentication is performed by matching the first biometric information provided from the biometric authentication customer and the first biometric information stored in the first storage medium, and the first biometric information and the second biometric information are determined from the first biometric authentication result. Extracting predetermined biometric authentication linkage condition information between biometric information, extracting the second biometric information stored in the second storage medium using the biometric linkage condition information, and extracting the extracted second biometric information and the biometric authentication customer. In the dual biometric authentication system for matching the second biometric information provided from the second biometric authentication and using the same It is about.

Description

System and Method for Authenticating a Living Body Doubly}

The present invention provides a first storage medium for storing and managing first biometric information of a biometric customer, a second storage medium for storing and managing second biometric information of the biometric customer and a first biometric received from the biometric customer. First biometric authentication by matching the first biometric information stored in the first storage medium with the first biometric information, and the predetermined biometric authentication linkage condition information between the first biometric information and the second biometric information is determined from the first biometric authentication result. Extract the second biometric information stored in the second storage medium using the bio-integrated condition information, and match the extracted second biometric information with the second biometric information provided from the biometric customer. The present invention relates to a dual biometric authentication system for performing second biometric authentication and a dual biometric authentication method using the same.

Biometric authentication is an automated means of verifying and verifying the identity of each person by measuring each person's physiological and / or behavioral characteristics. Fingerprints, hand shapes, iris recognition, voice verification, face Recognition, signature verification, retinal recognition, keyboard input features, palm prints, veins, and DNA.

Such biometric authentication has almost no risk of loss, theft, oblivion, or duplication due to external factors, and has features and advantages that enable tracking of security breaches.

However, existing biometric authentication stores the biometric information of the biometric customer in a specific storage medium (eg, a server on a network) of the biometric service provider, thereby exploiting biometric information and data, tracking biometric customer activity, and privacy. Due to the infringement of the, despite the many features and advantages of the above-mentioned biometric authentication has not been activated.

Therefore, recently, in order to overcome the problems of the existing biometric authentication, a method of storing biometric information of a biometric authentication customer in a storage medium (for example, an IC chip card) that can be carried by the customer has been proposed.

However, since the biometric authentication method is performed by the biometric authentication unit mounted in the terminal device, the biometric service provider does not directly participate in the biometric authentication process, and if the terminal device is abused, the biometric authentication service There is a problem that providers have to doubt the integrity of biometric authentication.

Recently, a method of dividing biometric information of a biometric authentication customer, storing some of the biometric information in a storage medium possessed by the biometric authentication customer, and storing the rest in a storage medium of the biometric authentication service provider has been proposed. Application No.:10-2001-0047576)

However, the biometric authentication method as described above also has a problem that the biometric authentication service provider does not directly participate in the biometric authentication process to doubt the integrity of the biometric authentication when the location where the divided biometric information is combined and authenticated is realized in the terminal device. Is still present, and if the location where the divided biometric information is combined and authenticated is realized at the server of the biometric authentication service provider, problems such as the possibility of abuse of the biometric information and data cannot be solved at the source.

An object of the present invention to solve the above problems is a first storage medium for storing and managing the first biometric information of the biometric authentication customer, and a second storage medium for storing and managing the second biometric information of the biometric authentication customer; First biometric authentication is performed by matching the first biometric information provided from the biometric authentication customer and the first biometric information stored in the first storage medium, and the first biometric information and the second biometric information are determined from the first biometric authentication result. Extracting predetermined biometric authentication linkage condition information between biometric information, extracting the second biometric information stored in the second storage medium using the biometric linkage condition information, and extracting the extracted second biometric information and the biometric authentication customer. A second biometric authentication system configured to perform second biometric authentication by matching the second biometric information received from the second biometric information and a second biometric authentication system Setting a type of biometric information and a second biometric information and a biometric authentication interworking condition for interworking the first and second biometric information, and obtaining the set first biometric information and the second biometric information from the biometric authentication customer Generating the first biometric authentication information and the second biometric authentication information by interlocking the first biometric information and the second biometric information according to the set biometric authentication interworking condition; Storing the second biometric information in a second storage space, and extracting the first biometric information from the first storage medium when the biometric information of the biometric customer is authenticated. Generating information, extracting first biometric information of the biometric customer and performing first biometric authentication, the first biometric authentication result and / or first biometric authentication Extracting the biometric authentication linkage condition from the information and extracting the second biometric information from the second storage medium using the biometric linkage condition to generate second biometric information, and the second biometric information of the biometric customer It provides a dual biometric authentication method comprising the step of extracting the second biometric authentication.

Figure 1 extracts the first biometric information and the second biometric information of the biometric authentication customer, and generates the first biometric information and the second biometric information, etc. according to the biometric authentication interworking conditions, the first storage medium and the second storage medium Simple diagram of a biometric information registration system to store in.

2 is a simple flowchart illustrating a process of storing first biometric information and second biometric information in a first storage medium and a second storage medium through a biometric information registration system.

FIG. 3 is a simplified diagram of a dual biometric authentication system comprising a first storage medium possessed by a biometric customer, a second storage medium present on the network, and one biometric authentication unit.

4 is a simplified diagram of a dual biometric authentication system consisting of a second storage medium possessed by a biometric customer, a first storage medium present on the network, and one biometric authentication unit.

5 is a simplified diagram of a dual biometric authentication system comprising a first storage medium possessed by a biometric customer, a second storage medium present on the network, and two biometric authentication units.

FIG. 6 is a simplified diagram of a dual biometric authentication system comprising a second storage medium possessed by a biometric customer, a first storage medium present on the network, and two biometric authentication units.

7 is a simple flow diagram for a dual biometric authentication process.

<Description of main parts of drawing>

100: biometric information registration system 105: biometric authentication information generation unit

110: biometric authentication interworking conditions D / B 115: biometric authentication information processing unit

120: first biometric information extraction unit 125: biometric information registration unit

130: second biometric information extraction unit 135: biometric authentication service provider

140: first storage medium 145: first biometric information

150: second storage medium 155: second biometric information

160: biometric authentication customer

The present invention relates to a dual biometric authentication system and method, comprising: a first storage medium for storing and managing first biometric information of a biometric authentication customer; a second storage medium for storing and managing second biometric information of the biometric authentication customer; First biometric authentication is performed by matching the first biometric information provided from the biometric authentication customer and the first biometric information stored in the first storage medium, and the first biometric information and the second biometric information are determined from the first biometric authentication result. Extracting predetermined biometric authentication linkage condition information between biometric information, extracting the second biometric information stored in the second storage medium using the biometric linkage condition information, and extracting the extracted second biometric information and the biometric authentication customer. In the dual biometric authentication system for matching the second biometric information provided from the second biometric authentication and using the same It is about.

In the dual biometric authentication method, the storing of the biometric information may include the first biometric information and the second biometric information used by the biometric customer and / or the biometric authentication service provider to process the dual biometric authentication, Setting a biometric authentication interworking condition for interlocking each biometric authentication information for biometric authentication, acquiring the first biometric information and the second biometric information set in the process, and the first biometric information according to the set biometric authentication interlocking condition Generating first biometric information and second biometric information by interworking with the second biometric information, storing the first biometric information on a first storage medium, and storing the second biometric information on a second storage space. In the storing and authenticating the biometric information, the biometric authentication unit extracts the first biometric information from the first storage medium to generate the first biometric information. Extracting the first biometric information of the biometric authentication customer from the biometric information extraction unit to perform the first biometric authentication; extracting a biometric authentication interworking condition from the first biometric authentication result and / or the first biometric information; The authentication unit extracts the second biometric information from the second storage medium to generate the second biometric information, and extracts the second biometric information of the biometric customer from the biometric information extraction unit to perform a second biometric authentication, and the like. do.

In the present invention, the first biometric information and the second biometric information do not overlap, and include at least one biometric information among all kinds of biometric information capable of authenticating the identity of the biometric information provider through biometrics.

In the present invention, the first biometric information is biometric information that is the first biometric authentication in the dual biometric authentication process of the present invention, and is selected from at least one or more biometric information that does not overlap with the second biometric information. First biometric information is generated for primary biometric authentication.

In the present invention, the first biometric information is biometric information generated from the first biometric information for the first biometric authentication, and the first biometric information may be stored in the first storage medium through a series of encoding and encryption processes. Information processed into forms.

In the present invention, the first storage medium is a storage medium in which the first biometric information is stored, and an IC chip (IC chip card or wireless terminal) possessed by the biometric authentication customer according to the biometric information interworking conditions and / or the biometric authentication customer's selection. At least one storage medium is selected from a biometric authentication information storage space and / or a biometric information storage space on a server provided by a biometric service provider.

The first storage medium also includes an MS (Magnetic Strip) type card carried by a biometric customer.

In the present invention, the second biometric information is biometric information that is second biometric authentication in the dual biometric authentication process of the present invention, and is selected from at least one biometric information that does not overlap with the first biometric information. First biometric information is generated for primary biometric authentication.

In the present invention, the second biometric information is biometric information generated from the second biometric information for the second biometric authentication, and the second biometric information can be stored in the second storage medium through a series of encoding and encryption processes. Information processed into forms.

In the present invention, the second storage medium is a storage medium in which the second biometric information is stored, and an IC chip (IC chip card or wireless terminal) possessed by the biometric authentication customer according to the biometric information interworking condition and / or the biometric authentication customer's selection. At least one storage medium is selected from a biometric authentication information storage space and / or a biometric information storage space on a server provided by a biometric service provider.

The second storage medium also includes an MS (Magnetic Strip) type card carried by a biometric customer.

In the present invention, the biometric authentication interworking condition is information included in the first biometric information for extracting the second biometric information from the second biometric information during the second authentication process through the biometric information, or for performing the second biometric authentication. If there is no biometric authentication interworking condition included in the first biometric information, or the biometric authentication interlocking condition is not extracted in the first biometric authentication, any biometric participant including the biometric customer and a biometric service provider (Or including a participating agency and / or a malicious participant) can not extract the second biometric information from the second biometric information, and also cannot perform the second biometric authentication.

According to the present invention, the biometric authentication interworking condition is extracted only when the first biometric authentication process is successfully performed through the first biometric information. If the first biometric authentication fails, the biometric authentication interworking condition is extracted. Not characterized in that.

Further, according to the present invention, the biometric authentication interworking condition is not used as a tool for self-authentication, and serves only as a means for extracting the second biometric information from the second biometric information, or as a means for performing the second biometric authentication. Characterized by performing only. Therefore, even when the biometric authentication interworking condition is maliciously extracted (for example, the biometric authentication interworking condition is extracted by illegally accessing the first storage medium), the dual biometric authentication proposed by the present invention is malicious only by the biometric interworking condition alone. [Because the second biometric information is extracted from the second biometric information, it is useless without the second biometric information and the second biometric information extracted from the biometric customer].

According to the present invention, when the biometric authentication unit (= first biometric authentication unit) for performing the first biometric authentication and the biometric authentication unit (= second biometric authentication unit) for performing the second biometric authentication are separated, In transferring the biometric authentication condition from the first biometric authenticator to the second biometric authenticator, the biometric authentication interworking condition is at least one security standard and / or encryption algorithm applied between the first biometric authenticator and the second biometric authenticator. Can be protected by

According to a preferred embodiment of the present invention, the first biometric information and the second biometric information are encrypted by at least one method specified by a biometric service provider, and the biometric authentication information of the present invention is the second biometric information. It includes at least one encryption key information that can be encrypted or decrypted.

In addition, according to an embodiment of the present invention, at least one or more encryption keys included in the biometric authentication interworking condition as described above may have a symmetric key and / or a secret key having one encryption key rather than a public key infrastructure having two encryption keys. It is desirable to include the infrastructure.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, although the present invention deals with dual biometric authentication using the first biometric authentication and the second biometric authentication, those with ordinary knowledge in the technical field to which the present invention belongs may have a triple, quadruple, and fold It can be clearly appreciated that it can be extended to multiple biometric authentication, which is expanded to, for example, but it is omitted in the present invention because such an extension process may obscure the gist of the present invention.

1 extracts the first biometric information and the second biometric information of the biometric customer 160 and generates the first biometric information 145 and the second biometric information 155 according to the biometric authentication interworking conditions. A simple diagram of the biometric information registration system 100 stored in the first storage medium 140 and the second storage medium 150.

Referring to FIG. 1, the biometric information registration system 100 cooperates with the biometric information generation unit 105 to register a biometric information of a biometric customer 160 (eg, biometric information type selection and / or biometric authentication interworking information). The biometric information registration unit 125 for controlling and / or managing the determination), the at least one biometric information extraction unit 305 capable of extracting at least two or more biometric information from the biometric authentication customer 160, and The extracted at least two pieces of biometric information are generated in the first storage medium 140 and the second storage medium 155 by generating the first biometric information 145 and the second biometric information 155 through a biometric authentication interworking condition. The biometric information registration system 100 stores the biometric information registration system 100. The biometric information registration system 100 generates the biometric information registration system 100 using the first storage medium 140 and the second storage medium 155, respectively. Biometric authentication To be saved.

The biometric information registration unit 125 is a biometric registration system 100 that the biometric authentication service provider 135 provides to the biometric authentication customer 160 for biometric information registration, and is installed in a store of the biometric authentication service provider 135, Or installed at a location accessible to the biometric information generation unit through at least one or more network devices including the Internet.

The biometric information registration unit 125 provides the biometric information generation unit 105 with information for selecting the biometric information type and / or information for determining the biometric authentication interworking condition provided by the biometric information generation unit 105. And a function of controlling and / or managing the at least one biometric information extraction unit 305, and a function of notifying at least one or more information generated during the biometric information registration process to the biometric customer 160, and the like. Perform.

The biometric information extraction unit 305 is an apparatus and / or system capable of extracting at least one or more biometric information from biometric information of the biometric customer 160 through biometrics, and controls and / or the biometric information registration unit 125. Or it receives the management, and extracts the biometric information of the biometric authentication customer 160 and serves to provide to the biometric authentication information generation unit 105.

It is apparent that the number, function, and features of the biometric information extraction unit 305 depend on the type and feature of biometric information extracted from the biometric customer 160. For example, if the first biometric information extracted from the biometric customer 160 is a right thumb thumb, and the second biometric information is a left thumb thumb, the biometric information extractor 305 may include one fingerprint information extraction device and / or Or as a system. In addition, if the first biometric information extracted from the biometric customer 160 is a right hand fingerprint and the second biometric information is a right iris, the biometric information extraction unit 305 may use one fingerprint information extraction device and / or system (= The first biometric information extraction unit 305 and one iris information extraction device and / or system may be used.

The biometric authentication information generation unit 105 may be configured to at least one biometric authentication linkage condition (for example, the first biometric information 145) determined by the biometric customer 160 through the biometric information registration unit 125. Biometric authentication using the encryption key inputted by the user) using a biometric authentication interworking condition, or a specific matrix of the first biometric information extracted from the first biometric information 145 using the biometric authentication interworking condition). The biometric authentication information processing unit 115 for generating the first biometric authentication information 145 and the second biometric authentication information 155 based on the interlocking condition D / B 110 and the biometric authentication interlocking conditions determined as described above. It consists of.

The biometric authentication interworking condition D / B 110 of the biometric information generating unit 105 includes at least one biometric authentication interlocking condition for interlocking the first biometric information 145 and the second biometric information 155. As a D / B, a relationship between the first biometric information 145 and the second biometric information 155 and a rule for interworking with the first biometric information 145 and the second biometric information 155 may be used. Is stored. When the biometric customer 160 determines at least one biometric authentication interlock condition stored in the biometric authentication interlock condition D / B 110 through the biometric information registration unit 125, the biometric information processing unit 115 determines the biometric information. The first biometric information 145 and the second biometric information 155 are generated by interlocking the first biometric information and the second biometric information acquired from the at least one biometric information extraction unit 305 based on the authentication interlocking condition. do.

The biometric information processing unit 115 of the biometric information generating unit 105 may be obtained from at least one biometric information extracting unit 305 based on at least one biometric authentication interworking condition determined by the biometric customer 160. The first biometric information 145 and the second biometric information 155 are generated by interlocking the first biometric information with the second biometric information, and the biometric authentication information processing unit 115 processes and generates the first biometric information. The first biometric information 145 is stored in the first storage medium 140, and the second biometric information 155 is stored in the second storage medium 155.

The first storage medium 140 and the second storage medium 155 are at least one storage medium that can be carried and / or carried by the biometric customer 160 and at least one or more operated by the biometric service provider 135. The first storage medium 140 and the second storage medium 155 are not duplicated. For example, if the first storage medium 140 is selected as at least one storage medium that can be carried and / or carried by the biometric customer 160, the second storage medium 150 can be configured by the biometric service provider 135. When the second storage medium 150 is selected from at least one biometric server operated by the biometric service provider 135, the first storage medium 140 may be biometric. The authentication customer 160 is selected as at least one storage medium that may be carried and / or portable.

2 illustrates a process of storing the first biometric information 145 and the second biometric information 155 in the first storage medium 140 and the second storage medium 150 through the biometric information registration system 100. Here is a simple flow chart.

The biometric customer 160 generates the biometric authentication information through the biometric information registration unit 125 and types of the first biometric information and the second biometric information to be stored in the first storage medium 140 and the second storage medium 150. A method of storing biometric information generated from the biometric information (eg, the first biometric information 145 is stored in a storage medium possessed by the biometric customer 160, and the second biometric information 155 is stored on a network. Server) and the first biometric information 145 and the second biometric information 155 through the biometric authentication interworking condition D / B 110 of the biometric information generation unit 105. By determining the interworking condition of 205, the biometric information registration process proposed by the present invention is started.

Through the above process, the type and storage method of the first biometric information and the second biometric information are selected, and a biometric authentication interworking condition for interlocking the first biometric information 145 and the second biometric information 155 is determined. When the biometric information generation unit 105 requests the biometric authentication customer 160 to register the first biometric information through the biometric information registration unit 125, the biometric authentication customer 160 requests the first biometric information extraction unit ( The first biometric information is extracted through the 120 and transferred to the biometric information generation unit 105 (210).

When the first biometric information of the biometric authentication customer 160 is extracted from the first biometric information extraction unit 120 as described above, the biometric authentication information generation unit 105 authenticates the validity of the first biometric information. The validity of the first biometric information is that the authentication confirms whether the biometric information is unique to the invariant and / or biometric customer 160 whose identity can be identified through biometrics, and that the extracted biometric information is It is to check whether it can be used repeatedly in the biometric authentication process of the present invention.

If the validity of the first biometric information is not authenticated in the process (215), the biometric authentication information generation unit 105 notifies the first biometric information to be extracted again through the biometric information registration unit 125, and the biometric authentication customer. 160 repeats the first biometric information registration process as described above.

On the other hand, if the validity of the first biometric information is authenticated in the process (220), the biometric information generating unit 105 processes the first biometric information through the biometric information processing unit 115 (225). In the preferred embodiment of the present invention, the process of processing the first biometric information extracted from the first biometric information extraction unit 120 by the biometric information generation unit 105 may include the first biometric information extracted as described above (eg, Biometric information in the form of images) in the form of binary data (eg, matrix form).

When the process of extracting the first biometric information is completed as described above, the biometric authentication information generation unit 105 requests the biometric authentication customer 160 to register the second biometric information through the biometric information registration unit 125 and performs biometric authentication. The customer 160 extracts the second biometric information through the second biometric information extraction unit 130 and transmits the second biometric information to the biometric authentication information generation unit 105 (230).

When the second biometric information of the biometric authentication customer 160 is extracted from the second biometric information extraction unit 130 as described above, the biometric authentication information generation unit 105 authenticates the validity of the second biometric information. The validity of the second biometric information is that the authentication confirms whether the biometric information is unique to the invariant and / or biometric customer 160 whose identity can be identified through biometrics, and that the extracted biometric information is It is to check whether it can be used repeatedly in the biometric authentication process of the present invention.

If the validity of the second biometric information is not authenticated in the process (235), the biometric authentication information generation unit 105 notifies the second biometric information to be extracted again through the biometric information registration unit 125, and the biometric authentication customer. 160 repeats the second biometric information registration process as described above.

On the other hand, if the validity of the second biometric information is authenticated in the process (240), the biometric information generating unit 105 processes the second biometric information through the biometric information processing unit 115 (245). In the preferred embodiment of the present invention, the process of processing the second biometric information extracted from the second biometric information extraction unit 130 by the biometric authentication information generator 105 may include the extracted first biometric information (eg, Biometric information in the form of images) in the form of binary data (eg, matrix form).

When both the first biometric information and the second biometric information are extracted from the biometric customer 160 through the above-described process, and encoded through a series of processing, the biometric authentication information generating unit 105 may include the biometric information processing unit. The biometric authentication linkage condition determined by the biometric authentication customer 160 is extracted from the biometric authentication linkage condition D / B 110 through 115, and the first biometric information and the first biometric information and the first biometric information are based on the extracted biometric linkage condition. In operation 250, the first biometric authentication information 145 and the second biometric authentication information 155 are generated by interlocking the biometric information.

When the biometric information processing unit 115 generates the first biometric information 145 and the second biometric information 155 to which the biometric authentication interworking conditions are applied, the biometric information generating unit 105 performs the first biometric authentication. The information 145 is stored in the first storage medium 140 selected by the biometric customer 160 (255), and the second storage medium 150 selected by the biometric customer 160 in the second biometric information 155 is selected. (260).

Through the above process, the biometric information generation unit 105 normally stores the first biometric information 145 in the first storage medium 140, and the second biometric information ( If the 155 is stored normally, the biometric information generation unit 105 processes and / or generates at least two or more biometric information extracted from the biometric customer 160 and biometric information into biometric information for generating biometric information. In operation 265, all the information generated in the process is deleted. As a result, the first biometric information 145 and the second biometric information stored in the first storage medium 140 and the second storage medium 150 may be the only means for authentication of the biometric customer 160. have.

Hereinafter, a preferred embodiment of the dual biometric authentication system according to the present invention will be described. However, the following implementation method is only for the preferred several of the various implementation methods that can be presented by the present invention, those skilled in the art to which the present invention belongs based on the dual biometric authentication system 3 It is clear that one can infer that it can be extended to multiple biometric authentication systems to which more than one biometric information is applied.

According to the present invention, the dual biometric authentication system extracts a first storage medium 140 in which first biometric information 145 is stored, and first biometric information 145 from the first storage medium 140. The first storage medium interface 310, the second storage medium 150 in which the second biometric information 155 is stored, and the second biometric information 155 from the second storage medium 150. Extracts the first biometric information for performing the first biometric authentication and the second biometric information for the second biometric authentication from the second storage medium interface 315, which is a means for extracting At least one biometric authentication unit configured to perform first biometric authentication and / or second biometric authentication through the biometric information extraction unit 305 and the first biometric authentication information 145 and the second biometric authentication information 155 300, etc., characterized in that.

3 illustrates a dual biometric authentication system including a first storage medium 140 possessed by a biometric customer 160, a second storage medium 150 existing on a network, and one biometric authentication unit 300. For a simple drawing.

3A illustrates a storage medium (eg, a portable IC chip, a wireless terminal, etc.) possessed by the biometric customer 160 as the first storage medium 140, and the storage medium on the network (eg, Using the biometric authentication information D / B mounted in the biometric authentication server operated by the biometric authentication service provider as the second storage medium, the first storage medium interface 310 (eg, the IC chip if the first storage medium is an IC chip) The terminal device) is equipped with the biometric information extraction unit 305, the biometric authentication unit 300 and the like.

In performing the first biometric authentication through (a) of FIG. 3, the biometric authentication unit 300 receives the first biometric information 145 from the first storage medium 140 through the first storage medium interface 310. Extract the first biometric information, extract the first biometric information from the biometric customer 160 through the biometric information extraction unit 305 linked with the first storage medium interface 310, and then perform the first biometric authentication. Conduct. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (a) of FIG. 3, the biometric authentication unit 300 receives the second biometric information 155 from the second storage medium through the second storage medium interface 315 on the network. Extract second biometric information from the second biometric information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (for example, 2) extract the second biometric information from the biometric authentication information 155, and extract the second biometric information from the biometric customer 160 through the biometric information extraction unit 305 interoperating with the first storage medium interface 310 Second biometric authentication is performed.

3B illustrates a storage medium (eg, a portable IC chip, a wireless terminal, etc.) possessed by the biometric customer 160 as the first storage medium 140, and a storage medium (eg, A biometric authentication server operated by a biometric authentication service provider is used as the second storage medium 150, and the biometric information is stored in the first storage medium interface 310 (e.g., an IC chip terminal device if the first storage medium is an IC chip). The extraction unit 305 is mounted, and the biometric authentication unit 300 or the like is mounted on the second storage medium interface 315 (eg, a biometric authentication server operated by a biometric authentication service provider).

In performing the first biometric authentication through (b) of FIG. 3, the biometric authentication unit 300 extracts the first biometric authentication information 145 from the first storage medium 140 through a network to display the first biometric information. Extract the first biometric information of the biometric authentication customer 160 from the biometric information extraction unit 305 linked to the first storage medium interface 310, the biometric authentication unit 300 determines the first biometric information. The first biometric authentication is performed based on these. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (b) of FIG. 3, the biometric authentication unit 300 receives the second biometric authentication information 155 from the second storage medium 150 through the second storage medium interface 315. Extract the second biometric information from the second biometric authentication information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (for example, encrypt the biometric authentication interworking condition as the decryption key). After extracting the second biometric information from the second biometric authentication information 155, the second biometric authentication customer 160 of the biometric authentication customer 160 from the biometric information extraction unit 305, which is linked to the first storage medium interface 310 via a network When the biometric information is extracted, the biometric information extraction unit 305 extracts the second biometric information from the biometric customer 160 and performs a second biometric authentication based on the second biometric information as described above.

3 (c) shows a storage medium (eg, a portable IC chip, a wireless terminal, etc.) possessed by the biometric customer 160 as the first storage medium 140, and the storage medium on the network (eg, A biometric authentication server operated by a biometric authentication service provider is used as the second storage medium 150, and the biometric information is stored in the first storage medium interface 310 (e.g., an IC chip terminal device if the first storage medium is an IC chip). The extraction unit 305 is mounted, and the biometric authentication unit 300 is mounted on a network (for example, a VAN).

In performing the first biometric authentication through (c) of FIG. 3, the biometric authentication unit 300 on the network uses the first biometric information (from the first storage medium 140 through the first storage medium interface 310). If the first biometric information of the biometric authentication customer 160 is extracted through the network from the biometric information extraction unit 305 interworking with the first storage medium interface 310, the biometric authentication unit 300 extracts the biometric authentication unit 300. First biometric authentication is performed based on the first biometric information. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (c) of FIG. 3, the biometric authentication unit 300 on the network extracts the second biometric information 155 from the second storage medium 150 via the network. Extracting the second biometric information from the second biometric authentication information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (for example, the second biometric authentication information encrypted using the biometric interlocking condition as the decryption key). After extracting the second biometric information at 155, if the second biometric information of the biometric authentication customer 160 is extracted from the biometric information extraction unit 305 connected to the first storage medium interface 310 through the network, the second biometric information is extracted. The biometric authentication unit 300 on the network performs the second biometric authentication based on the second biometric information.

4 is a simplified diagram of a dual biometric authentication system comprising a second storage medium possessed by a biometric customer 160, a first storage medium 140 present on a network, and one biometric authentication unit 300. Drawing.

In FIG. 4A, a storage medium on the network (eg, biometric authentication information D / B mounted on a biometric authentication server operated by a biometric authentication service provider) is used as the first storage medium 140, and a biometric customer ( If the storage medium (e.g., portable IC chip, wireless terminal, etc.) possessed by the 160 is used as the second storage medium, and the second storage medium interface 315 (e.g., the second storage medium is an IC chip), the IC chip The terminal device) is equipped with the biometric information extraction unit 305, the biometric authentication unit 300 and the like.

In performing the first biometric authentication through (a) of FIG. 4, when biometric authentication is started through the second storage medium interface 315, the biometric authentication unit 300 performs the first storage medium interface 310 on the network. First biometric information is extracted by extracting the first biometric information 145 from the first storage medium 140 through the biometric information extractor 305 linked to the second storage medium interface 315. The first biometric information is extracted from the authentication customer 160 to perform the first biometric authentication. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (a) of FIG. 4, the biometric authentication unit 300 receives the second biometric information 155 from the second storage medium 150 through the second storage medium interface 315. Extract the second biometric information from the second biometric authentication information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (for example, encrypt the biometric authentication interworking condition as the decryption key). Extracting the second biometric information from the second biometric information 155) and extracting the second biometric information from the biometric customer 160 through the biometric information extractor 305 linked to the second storage medium interface 315. To perform a second biometric authentication.

4B illustrates a storage medium (for example, a biometric authentication server operated by a biometric authentication service provider) as a first storage medium 140, and the storage medium owned by the biometric customer 160 (see FIG. For example, a portable IC chip, a wireless terminal, or the like is used as the second storage medium 150, and the biometric information is stored in the second storage medium interface 315 (e.g., an IC chip terminal device if the first storage medium is an IC chip). The extraction unit 305 is mounted, and the biometric authentication unit 300 or the like is mounted in the first storage medium interface 310 (eg, a biometric authentication server operated by a biometric authentication service provider).

In performing the first biometric authentication through (b) of FIG. 4, if the biometric authentication is started through the second storage medium interface 315, the biometric authentication unit 300 uses the first storage medium interface 310. The first biometric information 145 is extracted from the first storage medium 140 to extract the first biometric information, and the biometric customer (from the biometric information extraction unit 305 interlocked with the second storage medium interface 315). When the first biometric information of 160 is extracted and transmitted through the network, the biometric authentication unit 300 performs a first biometric authentication based on the first biometric information. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (b) of FIG. 4, the biometric authentication unit 300 accesses the second storage medium interface 315 through a network to the second biometric authentication from the second storage medium 150. Extracts the information 155 and extracts the second biometric information from the second biometric information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process Extract the second biometric information from the encrypted second biometric information 155), and the second biometric information from the biometric customer 160 via the biometric information extraction unit 305 interlocked with the second storage medium interface 315. The biometric information is extracted to perform the second biometric authentication.

4C illustrates a storage medium (for example, a biometric authentication server operated by a biometric service provider) as a first storage medium 140, and the storage medium owned by the biometric customer 160 (see FIG. For example, a portable IC chip, a wireless terminal, or the like is used as the first storage medium 140, and the biometric information is stored in the second storage medium interface 315 (e.g., an IC chip terminal device if the first storage medium is an IC chip). The extraction unit 305 is mounted, and the biometric authentication unit 300 is mounted on a network (for example, a VAN).

In performing biometric authentication through (C) of FIG. 4, if biometric authentication is started through the second storage medium interface 315, the biometric authentication unit 300 uses the first storage medium interface 310. The first biometric authentication information 145 is extracted from the first storage medium 140, and the biometric authentication information of the biometric customer 160 is transmitted through the network from the biometric information extraction unit 305 linked to the second storage medium interface 315. When the biometric information is extracted, the biometric authentication unit 300 performs a first biometric authentication based on the first biometric information. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (C) of FIG. 4, the biometric authentication unit 300 on the network extracts the second biometric information 155 from the second storage medium 150 through the network. Extracting the second biometric information from the second biometric authentication information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (for example, the second biometric authentication information encrypted using the biometric interlocking condition as the decryption key). After extracting the second biometric information at 155), if the second biometric information of the biometric authentication customer 160 is extracted from the biometric information extraction unit 305 connected to the second storage medium interface 315 through the network, The biometric authentication unit 300 on the network performs the second biometric authentication based on the second biometric information.

5 is a simplified diagram of a dual biometric authentication system comprising a first storage medium 140 possessed by a biometric customer 160, a second storage medium present on a network, and two biometric authentication units 300. Drawing.

More specifically, FIG. 5 uses a storage medium (eg, a portable IC chip or a wireless terminal, etc.) possessed by the biometric customer 160 as the first storage medium 140, and uses a storage medium (eg, a biometric) on a network. If the biometric authentication information D / B mounted in the biometric authentication server operated by the authentication service provider is used as the second storage medium 150, and the first storage medium interface 310 (eg, the first storage medium is an IC chip) When the biometric information extraction unit 305, the first biometric authentication unit 500, and the like are mounted on the IC chip terminal device, and the second biometric authentication unit 505 is mounted on the second storage medium interface 315. It is about.

In performing the first biometric authentication through FIG. 5, the first biometric authentication unit 500 extracts the first biometric information 145 from the first storage medium 140 through the first storage medium interface 310. Extracts the first biometric information, extracts the first biometric information from the biometric customer 160 through the biometric information extraction unit 305 interworking with the first storage medium interface 310, and performs the first biometric authentication .

According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication. In addition, the biometric authentication interworking condition is transmitted to the second biometric authentication unit 505 through the network for the second biometric authentication.

Further, according to the present invention, in the transfer of the biometric authentication interworking condition from the first biometric authentication unit 500 to the second biometric authentication unit 505 as described above, the biometric authentication interworking condition is the first biometric authentication unit 500. And at least one or more security standards and encryption algorithms promised between the second biometric authentication unit 505 and securely transmitted.

In addition, according to the present invention, in the transfer of the biometric authentication interworking condition from the first biometric authentication unit 500 to the second biometric authentication unit 505 as described above, various additional information (for example, credit) together with the biometric authentication interworking conditions Full card payment) can be delivered together.

In performing the second biometric authentication through FIG. 5, the second biometric authentication unit 505 extracts the second biometric information 155 from the second storage medium 150 through the second storage medium interface 315. The second biometric information is extracted from the second biometric information 155 based on the biometric authentication interworking condition transmitted after the first biometric authentication unit 300 performs the first biometric authentication, and the first storage medium. The second biometric information is extracted by extracting the second biometric information from the biometric customer 160 through the biometric information extraction unit 305 linked to the interface 310.

6 illustrates a dual biometric authentication system including a second storage medium 150 possessed by a biometric customer 160, a first storage medium 140 present on a network, and two biometric authentication units 300. For a simple drawing.

More specifically, FIG. 6 uses a storage medium on the network (eg, biometric authentication information D / B mounted in a biometric authentication server operated by a biometric service provider) as the first storage medium 140, and uses the biometric customer 160. Uses a storage medium (for example, a portable IC chip, a wireless terminal, etc.) possessed by the second storage medium, and the first biometric authentication unit 500 is mounted on the first storage medium interface 310. This is a case where the biometric information extraction unit, the second biometric authentication unit 505, and the like are mounted on the second storage medium interface 315 (for example, the IC chip terminal device if the first storage medium is an IC chip).

In performing the first biometric authentication through FIG. 6, the first biometric authentication unit 500 extracts the first biometric information 145 from the first storage medium 140 through the first storage medium interface 310. The first biometric information is extracted, and the first biometric information is extracted by extracting the first biometric information from the biometric customer 160 through the biometric information extraction unit linked to the second storage medium interface 315.

According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication. In addition, the biometric authentication interworking condition is transmitted to the second biometric authentication unit 505 through the network for the second biometric authentication.

Further, according to the present invention, in the transfer of the biometric authentication interworking condition from the first biometric authentication unit 500 to the second biometric authentication unit 505 as described above, the biometric authentication interworking condition is the first biometric authentication unit 500. And at least one or more security standards and encryption algorithms promised between the second biometric authentication unit 505 and securely transmitted.

In addition, according to the present invention, in the transfer of the biometric authentication interworking condition from the first biometric authentication unit 500 to the second biometric authentication unit 505 as described above, various additional information (for example, credit) together with the biometric authentication interworking conditions Full card payment authorization) can be delivered together.

In performing the second biometric authentication through FIG. 6, the second biometric authentication unit 505 extracts the second biometric authentication information 155 from the second storage medium 150 through the second storage medium interface 315. The second biometric information is extracted from the second biometric information 155 based on the biometric authentication linkage condition transmitted after the first biometric unit 500 performs the first biometric authentication, and the second storage medium. The second biometric information is extracted by extracting the second biometric information from the biometric customer 160 through the biometric information extraction unit linked to the interface 315.

7 is a simple flow diagram for a dual biometric authentication process.

More specifically, FIG. 7 illustrates a common method of performing dual biometric authentication through a dual biometric authentication system such as FIGS. 3, 4, 5, and 6, and the like. Is omitted. However, it is apparent to those skilled in the art that the process of FIG. 7 can easily infer a specific method that is actually applied to FIGS. 3, 4, 5, and 6.

When the dual biometric authentication process according to the present invention is started, the biometric authentication unit 300 extracts the first biometric information 145 from the first storage medium 140 through the first storage medium interface 310 ( 700, the first biometric information of the biometric customer 160 stored in the first storage medium 140 is extracted through the biometric information registration process from the extracted first biometric information 145 (705). .

When the first biometric information 145 of the biometric customer 160 is extracted from the first biometric information 145 as described above, the biometric authentication unit 300 performs biometric authentication through the biometric information extraction unit 305. First biometric information of the same type as the first biometric information stored in the first storage medium 140 is extracted from the biometric information of the attempted biometric customer 160 (710).

As described above, when the first biometric information is extracted from the first biometric information 145 and the first biometric information is extracted from the biometric customer 160 through the biometric information extraction unit 305, the biometric authentication unit 300 is extracted. In step 715, first biometric authentication is performed based on the first biometric information.

If the first biometric authentication fails in the process (720), the biometric authentication unit 300 transmits the biometric authentication failure information to the biometric authentication service provider 135, and ends the dual biometric authentication process proposed by the present invention. (725).

On the other hand, if the first biometric authentication succeeds (730), the biometric authentication unit 300 generates a biometric authentication interworking condition generated from the first biometric authentication result as described above or included in the first biometric authentication information 145. Extract 735 and extract second biometric information 155 from the second storage medium 150 via the second storage medium interface 315 (740).

When the second biometric authentication information 155 is extracted from the second storage medium 150 as described above, the biometric authentication unit 300 performs the second biometric based on the biometric authentication interworking condition extracted in the first biometric authentication process. The second biometric information of the biometric customer 160 stored in the second storage medium is extracted from the authentication information 155 through the biometric information registration process (745).

As described above, when the second biometric authentication information 155 of the biometric authentication customer 160 is extracted from the second biometric authentication information 155 through the biometric authentication interworking condition, the biometric authentication unit 300 performs biometric information through the biometric information extraction unit. The second biometric information of the same type as the second biometric information stored in the second storage medium 150 is extracted from the biometric information of the biometric customer 160 attempting authentication (750).

As described above, when the second biometric information is extracted from the second biometric information 155, and the second biometric information is extracted from the biometric authentication customer 160 through the biometric information extracting unit, the biometric authentication unit 300 determines the first biometric information. Second biometric authentication is performed based on the biometric information (755).

If the second biometric authentication fails in the process (760), the biometric authentication unit 300 transmits the biometric authentication failure information to the biometric service provider 135, and ends the dual biometric authentication process proposed by the present invention. .

On the other hand, if the second biometric authentication succeeds (765), the biometric authentication unit 300 generates dual biometric authentication success information based on the first biometric authentication result and the second biometric authentication result as described above. 135, 770;

When the double biometric authentication success information is transmitted from the biometric authentication unit 300 as described above, the biometric authentication service provider 135 provides various additional services based on biometric authentication to the corresponding biometric authentication customer 160 (775). The type of supplementary service includes all kinds of services that the biometric authentication service can provide to the biometric authentication customer 160.

According to the present invention, a first storage medium for storing and managing first biometric information of a biometric customer, a second storage medium for storing and managing second biometric information of the biometric customer, and a second storage medium provided from the biometric customer The first biometric authentication is performed by matching the first biometric information with the first biometric information stored in the first storage medium, and the predetermined biometric authentication is interworked between the first biometric information and the second biometric information based on the first biometric authentication result. Extracting the condition information, extracting the second biometric information stored in the second storage medium using the bio-integrated condition information, and extracting the extracted second biometric information and the second biometric information provided from the biometric customer. A dual biometric authentication system for matching and performing second biometric authentication, and types of first biometric information and second biometric information for dual biometric authentication; Setting a biometric authentication interworking condition for interlocking the first and second biometric authentication information, acquiring the set first biometric information and the second biometric information from the biometric authentication customer, according to the set biometric authentication interlocking condition Generating the first biometric information and the second biometric information by interworking the first biometric information with the second biometric information, storing the first biometric information on a first storage medium, and performing the second biometric authentication. Storing the information in a second storage space, when the biometric authentication of the biometric authentication customer is performed, extracting the first biometric information from the first storage medium to generate first biometric information, and Extracting the biometric information to perform a first biometric authentication; and extracting a biometric authentication interworking condition from the first biometric authentication result and / or the first biometric information And generating second biometric information by extracting second biometric information from the second storage medium using the biometric authentication interworking condition, and extracting second biometric information of the biometric authentication customer to perform second biometric authentication. By providing a dual biometric authentication method comprising the step of implementing, there is an advantage that can be fundamentally solved problems such as the possibility of exploitation of existing biometric information and data.

Claims (12)

A first storage medium storing and managing first biometric information of a biometric customer; A second storage medium storing and managing second biometric information of the biometric customer; And First biometric authentication is performed by matching the first biometric information provided from the biometric authentication customer and the first biometric information stored in the first storage medium, and the first biometric information and the second biometric information are determined from the first biometric authentication result. Extracting predetermined biometric authentication linkage condition information between biometric information, extracting the second biometric information stored in the second storage medium using the biometric linkage condition information, and extracting the extracted second biometric information and the biometric authentication customer. Dual biometric authentication system to match the second biometric information provided from the second biometric authentication. The method of claim 1, wherein the dual biometric authentication system, A biometric information extraction unit which extracts first biometric information and second biometric information from the biometric customer; And And a biometric authentication unit configured to perform biometric authentication by matching the biometric information extracted by the biometric information extraction unit with biometric information stored in the first storage medium and the second storage medium. The method of claim 2, wherein the biometric authentication unit, Located inside or outside the dual biometric authentication system, or Dual biometric authentication system, characterized in that included in the server located on the wired and wireless network. The method of claim 1, wherein the biometric information, A dual biometric authentication system comprising at least one of fingerprint, hand shape, iris recognition, voice verification, face recognition, signature verification, retina recognition, keyboard input feature, palm fingerprint, vein shape, DNA. The method of claim 1 or 4, wherein the biometric information, Dual biometric authentication system characterized in that the encrypted processing. The method of claim 1, wherein the first biometric information, The dual biometric authentication system, characterized in that it does not overlap with the second biometric information. The method of claim 1, wherein the first storage medium, And a biometric authentication customer-owned IC chip card (or terminal). The method of claim 1, wherein the first storage medium, And a biometric customer-owned MS (Magnetic Strip) type card. The method of claim 1, wherein the second storage medium, The dual biometric authentication system internal storage medium, or An external storage medium connected to the dual biometric authentication system, or A dual biometric authentication system comprising a storage medium in a server located on a wired or wireless network. The server of claim 3 or 9, wherein the server located on the wired or wireless network comprises: Dual biometric authentication system comprising at least one card company server, bank server, VAN company server, mobile carrier server, biometric authentication service providing server. The method of claim 1, wherein the bio-integration condition information, And a cryptographic key for extracting the second biometric information. Setting a biometric authentication interworking condition for interlocking the types of the first biometric information and the second biometric information for processing the dual biometric authentication and the first and second biometric authentication information; Obtaining the set first biometric information and the second biometric information from the biometric customer; Generating the first biometric information and the second biometric information by interworking the first biometric information and the second biometric information according to the set biometric authentication interworking condition; Storing the first biometric information in a first storage medium and storing the second biometric information in a second storage space; During biometric authentication of the biometric authentication customer, the first biometric information is extracted from the first storage medium to generate first biometric information, and the first biometric information is extracted by extracting the first biometric information of the biometric authentication customer. Performing; Extracting a biometric authentication interworking condition from the first biometric authentication result and / or the first biometric authentication information; And Extracting second biometric information from the second storage medium using the biometric interworking condition to generate second biometric information, and extracting second biometric information of the biometric customer to perform second biometric authentication; Dual biometric authentication method comprising a.