KR101268289B1 - Otp key generation module and method using the voice and communication apparatus thereof - Google Patents

Abstract

The present invention generates an OTP key automatically from a user's voice regardless of the characteristics of a communication network, and uses a generated OTP key to exchange an OTP key between devices and perform secure communication. The present invention relates to an OTP generating module, a generating method, and a communication device using the same.
The OTP key generation module using voice according to the present invention includes a voice input unit receiving a sender's voice, a sampling unit sampling a unit input time from a voice input through the voice input unit, and digitizing and scaling the sampled value to OTP. An OTP key generation module using a voice including an OTP group generation unit for generating a key group of the device, the OTP key generation module comprising: a diffusion detector for removing white noise from a voice signal input through the voice input unit and removing a region that inhibits diffusion; A synchronization information generation unit for generating the sequence information of the OTP key to be used in the generated OTP key group and synchronization time and an encryption unit for encrypting the OTP key and voice signal designated by the synchronization information generation unit; Synchronization information generated by the synchronization information generation unit, the replacement of which OTP at which time in the OTP group to replace Further comprising: information, the encryption unit, by exchanging synchronization information generated by the synchronization information generator to the key exchange algorithm is characterized in that it shares with the receiver.

Description

OTP key generation module using voice and method of generation and communication device using same {OTP KEY GENERATION MODULE AND METHOD USING THE VOICE AND COMMUNICATION APPARATUS THEREOF}

The present invention automatically generates an OTP key from the sender's voice regardless of the characteristics of the communication network, and uses the generated OTP key to exchange voice and secure communication of the OTP key between devices. The present invention relates to an OTP key generation module and generation method and a communication device using the same.

In general, one time password (OTP) is a one-time password generated by a challenge value or a response value or event value corresponding to a current time to provide a remote authentication service in a communication terminal device or a communication service requiring high security. By providing the OTP) function, the security of the remote authentication service is greatly improved.

The user authentication method using the one-time password (OTP) is a method of preventing the reuse of the password once used by using a feature that the forward calculation of the hash function is easy but the backward calculation is very difficult. Even if it is exposed to, it can eliminate the risk of false authentication using it.

FIG. 6 is a brief description of the principle of the OTP method. As shown in FIG. 6, in the preparation step, the user determines a password and registers it with a server by passing a hash function of an appropriate number of times (for example, 100 times). . In other words, if the hash function is h (),

P100 = h [h (‥‥ h (password) ‥‥)]

         <-100 times->

Is calculated as, where P100 passes a password 100 hashes. The server then registers P100, which is the result of applying this hash function, and that it has passed 100 times.

Next, when actually logging in, the server requests P99, and the user calculates P99 (passing the password 99 hashes) on his computer. That is, when a user enters a password into his computer, the computer calculates P99 and sends it to the server. The server receives P99 and passes it through the hash function once to find P100 and determine whether it matches P100 stored in the server (P100 = h (P99)). To match means that the user entered a legitimate password.

In this way, if authentication is successful on the user's computer, the server updates P100 and stores P99. Then ask P98 the next time you log in and repeat the above steps.

As described above, according to the OTP-type user authentication, since there is a person who is eavesdropping on communication and the P99 is exposed, the eavesdropper cannot know P98, so that the user can transmit the password with confidence.

However, in order to use an OTP, a user must possess a device for generating a password, and there is a problem in that the device needs to be authenticated for the OTP with a registered authentication system.

On the other hand, the biomatrix information is evaluated as an identity verification method without the risk of being stolen or altered by theft or leakage. However, this also has a problem of security due to imitation, in order to prevent the leakage of the password, a method of generating an encryption authentication key by applying a one-time encryption key (OTP) generation method to a biometric authentication method has been proposed, Authentication methods include fingerprint recognition and voice recognition.

In addition, the mobile OTP (Mobile-OTP) is a concept that uses the OTP module mounted on the mobile device to overcome the disadvantage of the existing OTP method that must carry the OTP dedicated terminal. There are many mobile devices that run Java applets, and mobile devices such as Java language-enabled mobile phones and PDAs enable mobile OTP. The mobile OTP consists of a client component and a server component. The client component generates an OTP by hashing data such as a current time, a 4-digit PIN number input by a user, and 16 hexadecimal secret codes generated at the time of device initialization. .

If you look at other mobile OTP, first enter your ID and fixed password to create an OTP and send it to your mobile phone via SMS, and the user enters the OTP to log in to Internet banking. When the desired processing task is selected, it consists of a process of receiving and confirming the signature processing data through SMS. Another example is a service for authenticating a user by transmitting a one-time password that is audible to the user who has requested authentication. In order to use this, after receiving basic user authentication by transmitting a user name and password, a voice OTP service is requested with a user ID and a phone number, and a service is provided through a registered phone. On the other hand, the voice-based one-time encryption system of the mobile environment is applied, consisting of four authentication procedures of biometric information such as face recognition, voice recognition, lip movement, word recognition. A one-time password consisting of four numbers is displayed, and the user speaks these numbers through the camera and microphone built into the mobile phone, and is encrypted and sent to the authentication center for pre-learned user's 0, 1, 2, ..., 9 If the speaker is matched by comparing the phonetic information up to, the user is authenticated.

However, in the above-described systems, there is a fatal problem in that it is not possible to provide communication security between general mobile devices because the service provider has a structure for authenticating a user by generating and providing an OTP in common.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and an object of the present invention is to generate an OTP key generation module using a voice capable of automatically generating an OTP key from a sender's voice regardless of the characteristics of an audio input device or a communication network. To provide.

In addition, an object of the present invention is to provide an OTP key generation module using a voice and a communication device using a generation method which can automatically generate an OTP key from a sender's voice to provide private communication security between systems.

In other words, an OTP key is generated by sampling a sender's voice, and an OTP key is exchanged and secured communication between communication devices using a protocol using the generated OTP key.

The OTP key generation module using voice according to the present invention includes a voice input unit receiving a sender's voice, a sampling unit sampling a unit input time from a voice input through the voice input unit, and digitizing and scaling the sampled value to OTP. An OTP key generation module using a voice including an OTP group generation unit for generating a key group of the device, the OTP key generation module comprising: a diffusion detector for removing white noise from a voice signal input through the voice input unit and removing a region that inhibits diffusion; A synchronization information generation unit for generating the sequence information of the OTP key to be used in the generated OTP key group and synchronization time and an encryption unit for encrypting the OTP key and voice signal designated by the synchronization information generation unit; Synchronization information generated by the synchronization information generation unit, the replacement of which OTP at which time in the OTP group to replace The apparatus further includes information, wherein the encryption unit exchanges the synchronization information generated by the synchronization information generation unit with a key exchange algorithm to share the information with the receiver.

delete

delete

delete

The communication device using the OTP key generation module using voice according to the present invention comprises a voice input unit for receiving a sender's voice, a sampling unit sampling a unit time from the voice input through the voice input unit, and digitizing the sampled value. A transmitter configured to include an OTP group key generator for generating an OTP key group and to transmit a voice signal; A communication device using an OTP key generation module using a voice, comprising a receiving unit including a receiving unit for receiving a signal through a communication interface unit, decoding the received signal through a decoding unit, and outputting the decoded signal. The transmission unit includes a synchronization information generation unit for generating the sequence information of the OTP key to be used in the OTP key group generated by the OTP group key generation unit and synchronization information at the time of synchronization, and scaling the OTP key and voice signal designated by the synchronization information generation unit. And an encryption unit for encrypting and a communication interface unit for transmitting and receiving a signal generated by the encryption unit, wherein the synchronization information further includes replacement information on which OTP key is replaced at which time in the OTP group. And the decoding unit of the receiving unit receives the synchronization information generated by the synchronization information generating unit. It is characterized by performing a function.

delete

delete

delete

delete

As described above, in order to use a conventional OTP, a medium for generating a one-time password is necessary. However, the present invention generates a one-time password using voice. This has the effect of enabling private secure communication that is not necessary.

In addition, since these voices can perform at least 8,000 samplings per second, there is no restriction on the number of passwords that must be used and discarded once. This can significantly reduce the load on the security system and improve the performance of the system. do.

That is, since the content of the voice is communicated through a simple system to communicate, there is an effect that can provide private secure communication between mobile devices. Therefore, even if the communication contents are intercepted in the middle of the non-inductive transmission medium, the sender and the receiver are provided with private communication security because they are encrypted voice signals.

1 is a schematic configuration diagram of an OTP key generation module using voice according to an embodiment of the present invention;
2 is a flowchart of a method for generating an OTP key using voice according to an embodiment of the present invention;
3A and 3B are graphs showing voice signals;
4 is an OTP group generated by an OTP key generation module using voice according to an embodiment of the present invention;
5 is a schematic structural diagram of a communication device equipped with an OTP key generation module using voice according to an embodiment of the present invention;
6 is a flow chart of a conventional general OTP generation method.

Hereinafter, an OTP key generation module and generation method using voice according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic configuration diagram of an OTP key generation module using voice according to an embodiment of the present invention, Figure 2 is a flow chart of the OTP key generation method using voice according to an embodiment of the present invention, Figures 3a and 3B is a graph showing a voice signal, and FIG. 4 is an OTP key group generated by an OTP key generation module using voice according to an embodiment of the present invention.

5 is a schematic structural diagram of a communication device equipped with an OTP key generation module using voice according to an embodiment of the present invention.

In the drawings, the same reference numerals are given to the same elements even when they are shown in different drawings. In the drawings, the same reference numerals as used in the accompanying drawings are used to designate the same or similar elements. And detailed description of the configuration will be omitted. Also, directional terms such as "top", "bottom", "front", "back", "front", "forward", "rear", etc. are used in connection with the orientation of the disclosed drawing (s). Since the elements of the embodiments of the present invention can be positioned in various orientations, the directional terminology is used for illustrative purposes, not limitation.

As shown in FIGS. 1 to 4, the OTP key generation module and the generation method using the preferred voice according to an embodiment of the present invention, the voice input unit 10 and the voice input unit 10 to receive the sender's voice. OTP key for generating a key group of one time password (hereinafter referred to as "OTP") by digitizing and scaling the sampled value, and sampling unit 20 for sampling for a unit time from the voice input through A group generation unit 30, a synchronization information generation unit 40 which generates information on the sequence number and synchronization time of the OTP key to be used in the generated OTP key group, and the OTP and voice designated by the synchronization information generation unit 40 And an encryption unit 50 for encrypting the signal.

In this case, it is preferable to further include a diffusion detector 22 for removing noise from the voice signal input through the voice input unit 10 and removing a region that inhibits the diffusivity. The diffusion detector 22 removes the white noise region corresponding to the 'A' portion and the regions that inhibit the diffusivity from the voice signal as shown in FIG. 3A (using only the red portion in FIG. 3A). As shown in FIG. 3B, it can be seen that generating an OTP key group in a region where voice is used has a large dispersion. In other words, the large dispersion increases the resistance to hacking caused by brute force attack by providing proliferation to the OTP key group.

The OTP key group generation unit 30 can sample 8,000 times or more per second by sampling and digitizing a voice signal, but can adjust the size and number of OTP keys to be used according to the computing capability of the system.

4 shows a sample of 23101 samples per second generated by 24 bits.

The seed generated in this way encrypts the voice signal. In addition, all generated OTP keys are used only once and are not reused. That is, the OTP key used is automatically deleted from the system.

The synchronization information generation unit 40 provides information about at what point the voice signal is encrypted and decrypted and at which point in time, which OTP is replaced in the OTP group. That is, synchronization is performed between users by synchronization time information.

The encryption unit 50 encrypts the OTP key and the voice signal designated by the synchronization information generation unit 40. Of course, the specified OTP key and voice signal may be computed by different functions, but are preferably scaled for spreadability. In addition, the encryption unit 50 exchanges the synchronization information generated by the synchronization information generation unit 40 with a key exchange algorithm to share with the receiver. In the present invention, a symmetric key cryptography is used. As is well known, a public key cryptography system uses a symmetric key (secret key) cipher that requires relatively less computing power than public key cryptography because it requires a lot of computing power.

Looking at the OTP key generation method using the voice of the present invention configured as described above with reference to Figure 2, first receives the sender's voice through the voice input unit 10 (S10). Thereafter, the input voice signal is sampled by the sampling unit 20 for a unit time (S22).

By digitizing the sampled signal, the OTP key group generation unit 30 generates an OTP key group, and generates synchronization information on the time point of encryption and decryption, which OTP key is used in the OTP key group, and the synchronization time information. Generated in the unit 40 (S30).

After that, the OTP key and the voice signal designated by the synchronization information generator 40 are encrypted (S40), and private security communication is provided between users. In addition, the synchronization information is shared with the receiver using a symmetric key exchange algorithm.

Here, it is preferable to further include a diffusion detection step (S20) for removing the white noise from the voice signal input through the voice input unit 10 and the area that inhibits the diffusion.

On the other hand, Figure 5 is a schematic diagram of a communication device equipped with an OTP key generation module using the voice according to the present invention.

The present invention includes a configuration of a known communication device, and includes a transmitter 100 and a receiver 200. Therefore, detailed configuration description of the known communication device is omitted.

The transmitter 100 transmits the voice input unit 10, the diffusion detector 22, the sampling unit 20, the OTP key group generation unit 30, the synchronization information generation unit 40, and the encryption unit 50. And a communication interface 60 for transmitting and receiving an encrypted signal by wire or wirelessly, wherein the receiving unit 200 receives a signal through the communication interface 60 and decrypts the received signal. And a decoder 70 for outputting the audio signal, and an audio output unit 80 for outputting the multiplexed signal.

As is well known, the communication interface unit 60 uses a different interface according to a wired or wireless communication device, and uses a voice of ver internet protocol (VoIP) or an address resolution protocol (ARP) according to a voice network or a data network. Done.

The receiver 200 receives a voice signal encrypted through the transmitter 100 through the communication interface 60. In this case, the receiving unit 200 is in a state of receiving the synchronization information generated by the synchronization information generating unit 40 in advance and storing it in the decoding unit 70.

Therefore, the decoding is performed by synchronizing at the synchronization time using the OTP key designated according to the synchronization information. In addition, according to the replacement time, the OTP key is replaced and decrypted, and the voice signal from which the OTP is removed is output through the voice output unit 80.

Encryption and decryption, on the other hand, the size of the OTP key is a major factor in determining the strength of security. However, there is a disadvantage that the size is not long because of limitations in the computing power of the system. Therefore, in order to overcome this disadvantage, the present invention encrypts the contents of voice communication by performing the encryption and decryption process by replacing the OTP necessary for encryption and decryption with a certain unit cycle in a certain unit cycle to perform secure communication.

In addition, bidirectional communication between users preferably uses a Diffie-Hellman key exchange algorithm.

The embodiments of the present invention described above and shown in the drawings should not be construed as limiting the technical idea of the present invention. The scope of protection of the present invention is limited only by the matters described in the claims, and those skilled in the art will be able to modify the technical idea of the present invention in various forms. Accordingly, such improvements and modifications will fall within the scope of the present invention if they are apparent to those skilled in the art.

10: voice input unit 20: sampling unit
22: spread detector 30: OTP key group generation unit
40: synchronization information generation unit 50: encryption unit
60: communication interface unit 70: decryption unit
80: audio output unit 100: transmission unit
200: Receiver

Claims (9)

A voice input unit 10 for receiving a sender's voice, a sampling unit 20 for sampling a unit input time from the voice input through the voice input unit 10, and the sampled value are digitized and scaled to form a key group of the OTP. In the OTP key generation module using a voice comprising an OTP group generation unit 30 to generate,
A diffusion detector 22 which removes white noise from the voice signal input through the voice input unit 10 and removes a region that inhibits the spreadability, and a sequence and synchronization timing of the OTP key to be used in the generated OTP key group A synchronization information generation unit 40 for generating synchronization information, and an encryption unit 50 for encrypting an OTP key and a voice signal designated by the synchronization information generation unit 40,
The synchronization information generated by the synchronization information generation unit 40 further includes replacement information on which OTP is replaced at which time in the OTP group.
The encryption unit (50), OTP key generation module using a voice, characterized in that for sharing the synchronization information generated by the synchronization information generation unit 40 with a key exchange algorithm.
delete delete delete delete delete delete A voice input unit 10 for receiving the sender's voice, a sampling unit 20 for sampling a unit of time from the voice input through the voice input unit 10, and an OTP digitizing the sampled value to generate an OTP key group A transmitter 100 including a group key generator 30 to transmit a voice signal; Receiving unit 200 including a voice output unit 80 for receiving a signal through the communication interface unit 60, decoding the received signal through the decoding unit 70, and outputs the decoded signal In the communication device using the OTP key generation module using voice,
The transmitter 100 generates a synchronization information generation unit 40 for generating the sequence information of the OTP key to be used in the OTP key group generated by the OTP group key generation unit 30 and synchronization information at the time of synchronization, and the synchronization information generation. And an encryption unit 50 for scaling and encrypting the OTP key and voice signal designated by the unit 40, and a communication interface unit 60 for transmitting and receiving the signal generated by the encryption unit 50.
The synchronization information further includes replacement information on which OTP key is replaced at which time in the OTP group,
The decoding unit (70) of the receiving unit (200), the communication device using the OTP key generation module using the voice, characterized in that performs the function of receiving the synchronization information generated by the synchronization information generation unit (40). delete

Images