KR101511381B1 - Apparatus and method for authenticating user - Google Patents

Abstract

The present invention relates to an apparatus and method for authenticating a user, and more particularly, to an apparatus and method for authenticating a user using an input pattern of a user to improve security. A touch input unit 10 for receiving a touch input of a user, a storage unit 20 for storing authentication information for authenticating a user, inputting a touch input from the touch input of the user received by the touch input unit 10, A pattern extracting unit 30 for extracting a pattern and a determination unit 40 for comparing the input pattern extracted by the pattern extracting unit 30 with the authentication information stored in the storage unit 20 to determine whether the user is authenticated . According to the present invention, since hardware for performing a fingerprint or iris recognition function is not additionally required to maintain security, it is possible to perform user authentication at low cost, and it is possible to perform not only a combination of characters or graphics constituting a user ID and a password, It is possible to maintain the security even if the user ID and the password are exposed.

User Authentication, Input Pattern, Touchpad, Password

Description

[0001] Apparatus and method for authenticating user [

The present invention relates to an apparatus and method for authenticating a user, and more particularly, to an apparatus and method for authenticating a user using an input pattern of a user to improve security.

Recently, with the development of technology related to electronic devices, interest in user interfaces is also increasing. Particularly, efforts to develop an intuitive user interface for facilitating input for a user to perform a specific operation are continuing, and an electronic device that simultaneously performs input and output through a touch screen is disclosed .

In addition, recent breakthroughs in communication technology have led to the generalization of portable electronic devices, and portable electronic devices that provide various service functions in accordance with user's desires are being developed.

On the other hand, when a user wishes to receive a mobile banking service using the portable electronic device, user authentication is required to determine whether the user is authenticated by the user. The user authentication is mainly performed by inputting a user ID and a password .

At this time, since the user ID and password for the user authentication are generally composed of 6 to 10 letters and numbers, there is a risk that the user ID and the password are exposed to others.

Therefore, in order to solve the above problem, a biometric security technology for authenticating a user by recognizing a fingerprint or an iris has been developed.

However, the above-described conventional techniques have the following problems.

That is, in order to apply the biometric security technology, hardware for recognizing fingerprints or irises is additionally required, which raises a problem of cost increase, and when applied to a portable electronic device, the volume of the product increases and the weight becomes heavy .

In the case of a user authentication method using a user ID and a password according to the related art, there is a risk that security is weakened because a user ID and a password are exposed to others.

SUMMARY OF THE INVENTION Accordingly, the present invention has been made keeping in mind the above problems occurring in the prior art, and it is an object of the present invention to provide a user authentication apparatus and method capable of improving security without using a biometric security technique for recognizing a fingerprint or iris will be.

It is another object of the present invention to provide a user authentication apparatus and method that can solve a security vulnerability caused by exposing a user ID and a password to another user according to a user authentication method using a user ID and a password.

According to an aspect of the present invention, there is provided a touch input apparatus including a touch input unit for receiving a touch input of a user, a storage unit for storing a password and an authentication pattern of characters or graphics, A pattern extracting unit for extracting an input pattern from a touch input of a user and a determination unit for determining whether the user is authenticated by comparing the input pattern extracted by the pattern extracting unit with an authentication pattern stored in the storage unit, Includes information on at least one of a touch pressure, a touch speed, and a touch thickness sensed when the password is input.

At this time, the pattern extracting unit may classify the password inputted through the touch input unit by a stroke unit, and extract the input pattern for each of the separated strokes.

The stroke classification may be performed using the start and end points of the touch signal sensed when the password is input.

In addition, the stroke segment may be performed using a point where the movement of the touch signal sensed when the password is input is stopped.

In this case, the pattern extracting unit may include a pressure sensing unit for sensing the touch pressure of the user input at two or more levels for each of the separated strokes, and the determining unit may determine the touch pressure It is possible to determine whether the user is authenticated according to whether the level is equal to the touch pressure level of the authentication pattern.

The pattern extracting unit may include a speed sensing unit that senses a touch speed of a user input by dividing the touch speed into two or more levels for each of the divided strokes, and the determination unit determines whether the touch speed level sensed by the speed sensing unit Whether the user is authenticated or not may be determined according to whether the authentication pattern is equal to the touch speed level of the authentication pattern.

The pattern extracting unit may include a thickness sensing unit that senses a touch thickness of a user input by dividing the touch thickness into two or more levels for each of the separated strokes. The determination unit may determine the touch thickness level sensed by the thickness sensing unit, Is equal to the touch thickness level of the authentication pattern.

(B) extracting an input pattern from the received touch input of the user; and (c) comparing the extracted input pattern with an authentication pattern, And determining whether the user is authenticated. The input pattern may include at least one of information on a touch pressure, a touch speed, and a touch thickness sensed when the password is input.

In this case, the step (b) may be performed by dividing a password by the touch input of the received user into stroke units, and extracting the input pattern for each of the separated strokes.

The stroke classification may be performed using the start and end points of the touch signal sensed when the password is input.

In addition, the stroke segment may be performed using a point where the movement of the touch signal sensed when the password is input is stopped.

The step (b) may be performed by dividing the input pattern into two or more levels for each of the divided strokes, and the step (c) And determining whether the user is authenticated according to whether or not the user is authenticated.

As described above in detail, according to the apparatus and method for authenticating a user according to the present invention, the following effects can be expected.

That is, since hardware for performing a fingerprint or iris recognition function is not additionally required to maintain security, user authentication can be performed at a low cost, and a portable electronic device having a user authentication device according to the present invention can be made thin There is an advantage.

According to the present invention, since user authentication is performed using a user's input pattern as well as a combination of characters or graphics composing a user ID and a password, security can be maintained even if a user ID and a password are exposed.

Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing a user authentication apparatus constituting a specific embodiment of the present invention.

As shown in FIG. 1, a user authentication apparatus according to a specific embodiment of the present invention includes a touch input unit 10.

The touch input unit 10 receives a user's touch input and receives a user command. The touch input unit 10 senses a user's touch input and generates an input signal corresponding to the sensed touch input.

At this time, the touch input unit 10 may be constituted by a touch screen or a touch pad, and the touch screen or the touch pad senses and discriminates the pressure, speed and line thickness according to the touch input of the user.

Meanwhile, in order to generate authentication information for user authentication, a user inputs a password composed of characters or graphics through the touch input unit 10. The password input through the touch input unit 10 is stored in the storage unit 20.

The storage unit 20 stores authentication information for authenticating a user.

Here, the authentication information includes a password set for user authentication. The password may be composed of letters or figures.

The authentication information includes an authentication pattern set from an input pattern extracted by the pattern extraction unit 30, which will be described later, when the user inputs the password through the touch input unit 10 to set the password.

Here, the authentication pattern is information used as a reference for comparing an input pattern extracted from a password inputted by a user for user authentication. The authentication pattern is formed of level information of a touch pressure, a touch speed, or a touch thickness extracted from a user input when the password is set.

That is, if the password is the same as the password included in the authentication information, and the input pattern extracted from the password input for user authentication is the same as the authentication pattern included in the authentication information, the user authentication succeeds.

At this time, the input pattern includes at least one of information on touch pressure, touch speed, and touch thickness sensed when the password is input.

That is, the input pattern includes information on the touch pressure applied to the touch input unit 10 when the user inputs a character or a graphic through the touch input unit 10. Here, the touch pressure refers to a handwriting pressure at the time of writing a specific stroke of a character or a figure forming the password.

The input pattern includes information on a touch speed at the time of inputting a character or a graphic to the touch input unit 10 by a user. At this time, the touch speed means a writing speed when writing a specific stroke of a character or a figure forming the password.

In addition, the input pattern includes information on the thickness of the touch when the character or the graphic is input to the touch input unit 10. Here, the touch thickness refers to the thickness of the strokes constituting the character or figure.

A user authentication apparatus according to a specific embodiment of the present invention includes a pattern extracting unit (30). The pattern extracting unit 30 extracts the input pattern from the touch input of the user received by the touch input unit 10. The input pattern of the user touch input extracted by the pattern extracting unit 30 is compared with the authentication information stored in the storage unit 20 by the determination unit 40 to be described later.

The pattern extracting unit 30 extracts a character or graphic stroke from a touch signal sensed when the password is input, and extracts the input pattern for each of the separated strokes. That is, the pattern extracting unit 30 extracts the input pattern by sensing at least one of information on the touch pressure, the touch speed, and the touch thickness for each of the separated strokes.

At this time, the pattern extracting unit 30 divides a stroke of a character or a figure into two types.

First, the first method of segmentation by the pattern extracting unit 30 is to use start and end points of a touch signal sensed when the character or graphic object is input. Here, the starting point of the touch signal refers to a point at which the user touches the touch input unit 10 with a finger or a touch pen to input a character or a graphic. The end point of the touch signal refers to a point where the finger or the touch pen is spaced apart from the touch input unit 10 during the touch input by the user.

That is, when a user touches the touch input unit 10 with a finger or a touch pen, a straight line or a curve input to the touch input unit 10 until one touch of the touch input unit 10 is released .

The second method of segmentation by the pattern extracting unit 30 is to use a point where the movement of the touch signal sensed at the time of inputting the character or figure is interrupted. That is, when the user moves the finger or the touch pen on the touch input unit 10 to input a character or a graphic using the finger or the touch pen to the touch input unit 10 and then stops, A straight line or a curve is divided into one stroke. At this time, whether or not the movement of the finger or the touch pen is stopped is determined by whether the finger or the touch pen is detected at a specific point on the touch input unit 10 for a predetermined time or more.

If the touch input point is not changed for a predetermined time or longer after the touch input point is moved after the touch input by the finger or the touch pen is received at a specific point on the touch pad, A straight line or a curved line is divided into a single stroke.

The pattern extracting unit 30 includes a pressure sensing unit 32 for sensing a touch pressure of a user input for each of the separated strokes, a speed sensing unit 34 for sensing a touch speed, (36).

At this time, the pressure sensing unit 32 detects the touch pressure of the user input by dividing the stroke into two or more levels. For example, when a pressure value for discriminating a touch pressure by a user is set to 500 Pa, a stroke sensed by the touch pressure of 500 Pa or more and a stroke sensed by the touch pressure of less than 500 Pa are distinguished.

In addition, the speed sensing unit 34 divides the touch speed of the user input into two or more levels for each of the divided strokes. For example, when a speed value for distinguishing the touch speed by the user is set to 0.5 m / s, a stroke detected at 0.5 m / s or more and a stroke at which the touch speed is less than 0.5 m / s It is classified.

The thickness sensing unit 36 senses the touch thickness of the user input by dividing the stroke into two or more levels. For example, when the reference for discriminating the thickness of the touch by the user is set to 0.5 cm, a stroke sensed at a touch thickness of 0.5 cm or more and a stroke sensed at a touch thickness of less than 0.5 cm are distinguished.

In this case, even when the same password as the authentication information is input by sensing the touch pressure, the touch speed, or the touch thickness for each stroke separately at two or more levels, the user input pattern is not limited to the authentication pattern The user authentication is failed and the security is improved.

The input pattern extracted by the pattern extracting unit 30 is compared with the authentication information stored in the storage unit 20 by the determination unit 40 to determine whether or not the user is authenticated.

The judging unit 40 judges whether or not the password received by the touch input unit 10 and the touch pressure level of each stroke sensed by the pressure sensing unit 32 correspond to the authentication information, .

In addition, the determination unit 40 determines whether the user is authenticated according to whether the password input by the user and the touch speed level for each stroke sensed by the speed sensing unit 34 are the same as the authentication information .

The determination unit 40 determines whether the user is authenticated according to whether the password input by the user and the touch thickness level of each stroke sensed by the thickness sensing unit 36 are the same as the authentication information.

That is, when the correct password is input by the user, the determination unit 40 compares at least one of a touch pressure level, a touch speed level, and a touch thickness level for each stroke constituting the password with the authentication information, If the input pattern is identical to the authentication pattern, it is determined that the user authentication is successful.

2A is an exemplary diagram showing an example of a password input screen by a user authentication device constituting a specific embodiment of the present invention.

A user authentication apparatus constituting a specific embodiment of the present invention stores authentication information including a password set by a user and an authentication pattern extracted at the time of setting the password.

As shown in FIG. 2A, when the password set by the user is composed of alphabetical letters of 'K', 'E', and 'Y', and the authentication pattern for user authentication is a touch Pressure, touch speed, or touch thickness.

Here, the stroke of each stroke constituting the alphabet signifies that the level of the touch pressure, the touch speed, or the touch thickness is divided into different levels from the touch pressure, the touch speed, or the touch thickness of another stroke.

For example, in a case where a touch pressure of a level higher than touch pressure of another stroke is detected for a thick part of each stroke constituting the alphabet, a touch pressure level for each stroke may be set so that user authentication is successful.

At this time, if the input pattern extracted from the password touch input for user authentication is not the same as the authentication information stored in the storage unit 20, the user authentication fails.

That is, even if the passwords 'K', 'E', and 'Y' are input by the user as shown in FIG. 2A, the input pattern extracted from the user input may be an authentication pattern The user authentication fails.

2B is an exemplary view showing another example of a password input screen by a user authentication apparatus constituting a specific embodiment of the present invention.

As shown in FIG. 2B, when the passwords 'K', 'E', and 'Y' are input by the user and the input pattern extracted from the user input matches the authentication pattern for each stroke according to the authentication information User authentication is successful.

Therefore, according to the user authentication apparatus according to the specific embodiment of the present invention, security can be further improved by utilizing a user's input pattern as well as a combination of letters or figures composing a user ID and a password in user authentication.

Hereinafter, preferred embodiments of the user authentication method according to the present invention will be described in detail with reference to the accompanying drawings.

3 is a flowchart illustrating details of a user authentication method according to a specific embodiment of the present invention.

As shown in FIG. 3, the user authentication method according to a specific embodiment of the present invention starts with a step of receiving a password of a character or a figure from a user (S100).

At this time, the password constitutes authentication information for user authentication. The authentication information includes an authentication pattern set from a user's input pattern extracted when the user inputs the password through the touch pad to set the password. Here, the authentication pattern is information used as a reference for comparing an input pattern extracted from a password inputted by a user for user authentication.

That is, if the password is the same as the password included in the authentication information, and the input pattern extracted from the password input for user authentication is the same as the authentication pattern included in the authentication information, the user authentication succeeds.

Herein, the input pattern includes at least one of information on the touch pressure, the touch speed, and the touch thickness sensed when the password is input, as described above.

Next, strokes are discriminated using a touch signal sensed when the password is input (S110).

This is for extracting a character or graphic stroke from a touch signal sensed when the password is input, and extracting an input pattern for each of the separated strokes.

Next, the touch pressure is divided into two or more levels for each stroke and sensed (S120).

Here, the touch pressure refers to a handwriting pressure at the time of writing a specific stroke of a character or a figure constituting the password.

For example, when a pressure value for discriminating a touch pressure by a user is set to 500 Pa, an input pattern for user authentication is classified by dividing a stroke in which the touch pressure is detected to be 500 Pa or more and a stroke in which the touch pressure is detected to be less than 500 Pa .

Next, it is determined whether the password is correctly input (S130).

At this time, if the password is correctly input, operation 140 is performed. On the other hand, if the password is not input correctly, operation 100 is performed.

This is to judge whether the information according to the input pattern to be described later is the same as the authentication information when the password is correctly inputted for the user authentication, and to re-input the password from the user if the password is not inputted correctly.

If it is determined in operation 130 that the password is correctly input, it is determined whether the touch pressure level for each stroke is equal to the touch pressure level based on the authentication information in operation S140.

At this time, if the touch pressure level is equal to the touch pressure level by the authentication information, operation 150 is performed. On the other hand, if the touch pressure level is not equal to the touch pressure level by the authentication information, step 100 is performed.

This is to further improve security by utilizing a user's input pattern as well as a combination of letters or figures composing the password for user authentication.

Next, if it is determined in operation 140 that the touch pressure level is equal to the touch pressure level by the authentication information, the user authentication is successfully terminated (S150).

4 is a flowchart illustrating details of a user authentication method according to another embodiment of the present invention.

As shown in FIG. 4, the user authentication method according to another embodiment of the present invention starts from a step of receiving a password of a character or a figure from a user (S200).

Next, strokes are distinguished by using start and end points of a touch signal sensed when the password is input (S210).

Here, the starting point of the touch signal refers to a point at which the user touches the finger or the touch pen to input a character or a figure. The end point of the touch signal means a point at which the finger or the touch pen is separated from the touch pad during a touch input by the user.

That is, a straight line or a curved line is divided into one stroke until the user touches the touch pad with a finger or the touch pen and then releases the finger or the touch pen from the touch pad.

Next, the touch speed for each stroke is divided into two or more levels and sensed (S220).

Here, the touch speed refers to a writing speed when writing a specific stroke of a character or a figure forming the password.

For example, when a speed value for distinguishing the touch speed by the user is set to 0.5 m / s, a stroke detected at 0.5 m / s or more and a stroke at which the touch speed is less than 0.5 m / s And extracts an input pattern for user authentication.

Next, it is determined whether the password is correctly input (S230).

At this time, if the password is correctly input, operation 240 is performed. On the other hand, if the password is not input correctly, operation 200 is performed.

If it is determined in operation 230 that the password is correctly input, it is determined whether the touch speed level for each stroke is the same as the touch speed level for the authentication information in operation S240.

At this time, if the touch speed level is equal to the touch speed level by the authentication information, operation 250 is performed. On the other hand, if the touch speed level is not equal to the touch speed level by the authentication information, step 200 is performed.

Next, if it is determined in operation 240 that the touch speed level is equal to the touch speed level of the authentication information, user authentication is successfully terminated (S250).

5 is a flowchart illustrating details of a user authentication method according to another embodiment of the present invention.

As shown in FIG. 5, the user authentication method according to another embodiment of the present invention starts from a step of receiving a password of a character or a graphic from a user (S300).

Next, in step S310, strokes are distinguished using a point where the movement of the touch signal sensed when the password is input is stopped.

That is, when the user moves the finger or the touch pen on the touch pad to input a character or a figure using the finger or the touch pen on the touch pad and then stops the stroke or the curve, .

At this time, whether or not the movement of the finger or the touch pen stops is determined by whether the finger or the touch pen senses movement to another point for a predetermined time or more at a specific point on the touch pad.

That is, if the touch input point is not changed for a predetermined time or longer after the touch input point is moved after the touch input by the finger or the touch pen is received at a specific point on the touch pad, A stroke or a curved line is divided into a single stroke and sensed.

Next, the touch thickness is divided into two or more levels for each stroke, and sensed (S320).

Here, the touch thickness refers to the thickness of the strokes constituting the character or figure.

For example, when the reference for discriminating the thickness of the touch by the user is set to 0.5 cm, a stroke sensed at a touch thickness of 0.5 cm or more and a stroke sensed at a touch thickness of less than 0.5 cm are distinguished.

Next, it is determined whether the password is correctly input (S330).

If the password is correctly input, step 340 is performed. On the other hand, if the password is not input correctly, operation 300 is performed.

If it is determined in operation 330 that the password is correctly input, it is determined whether the touch thickness level for each stroke is equal to the touch thickness level based on the authentication information in operation S340.

At this time, if the touch thickness level is equal to the touch thickness level by the authentication information, operation 350 is performed. On the other hand, if the touch thickness level is not equal to the touch thickness level by the authentication information, operation 300 is performed.

This is because the touch thickness for each stroke is divided into two or more levels and sensed and compared with the touch thickness by the user input pattern, even when the password is correctly input, the user input pattern is divided into the authentication pattern included in the authentication information If the same input is not made, the user authentication is failed so as to improve the security.

Next, if it is determined in operation 340 that the touch thickness level is equal to the touch thickness level based on the authentication information, the user authentication is successfully terminated (S350).

Therefore, according to the user authentication method according to each embodiment of the present invention, since the user authentication is performed using the coincidence of the password and the user input pattern, the security can be improved at low cost.

It is to be understood that the invention is not limited to the embodiments described above but is defined by the scope of the appended claims and that various changes and modifications can be made by those skilled in the art It is self-evident.

1 is a block diagram showing a user authentication apparatus constituting a specific embodiment of the present invention.

2A is an exemplary diagram showing an example of a password input screen by a user authentication apparatus constituting a specific embodiment of the present invention;

FIG. 2B is an exemplary view showing another example of a password input screen by a user authentication device constituting a specific embodiment of the present invention; FIG.

3 is a flowchart detailing a user authentication method according to a specific embodiment of the present invention.

4 is a flowchart illustrating details of a user authentication method according to another embodiment of the present invention.

5 is a flowchart illustrating details of a user authentication method according to another embodiment of the present invention.

Description of the Related Art [0002]

10: touch input unit 20: storage unit

30: pattern extracting unit 32: pressure detecting unit

34: Speed sensing part 36: Thickness sensing part

40:

Claims (12)

A touch input unit for receiving a touch input of a user; A storage unit for storing passwords and authentication patterns of characters or graphics; A pattern extracting unit for extracting an input pattern from the touch input of the user received by the touch input unit; And And a determination unit for determining whether the user is authenticated by comparing the input pattern extracted by the pattern extraction unit with the authentication pattern stored in the storage unit, The pattern extracting unit may extract the input pattern for each stroke by dividing the password input through the touch input unit into strokes, divide the touch speed of the user input into two or more levels for each stroke, And a speed sensing part for sensing the speed of the vehicle; Wherein the determination unit determines whether the user is authenticated according to whether the touch speed level sensed by the speed sensing unit is equal to the touch speed level of the authentication pattern. delete The method according to claim 1, In the stroke classification, And a start and an end point of a touch signal detected when the password is input. The method according to claim 1, In the stroke classification, Wherein the user authentication is performed using a point where the movement of the touch signal detected when the password is input is stopped. The method according to any one of claims 1, 3, and 4, Wherein the pattern extracting unit further comprises a pressure sensing unit for sensing a touch pressure of a user input by dividing the touch pressure into two or more levels for each of the separated strokes, Wherein the determining unit determines whether the user is authenticated according to whether a touch pressure level for each stroke sensed by the pressure sensing unit is equal to a touch pressure level of the authentication pattern. delete delete (a) the touch input unit receiving a touch input of a user; (b) extracting an input pattern by a pattern extracting unit based on a touch input of the received user; And (c) judging whether the user is authenticated by comparing the extracted input pattern with the authentication pattern stored in the storage unit; Wherein the step (b) comprises: dividing a password generated by the touch input of the received user into strokes; detecting a touch speed of the user input by dividing the strokes into two or more levels; Wherein the step (c) comprises determining whether or not the user authentication is performed according to whether or not the detected touch speed level of each stroke is the same as the touch speed level of the authentication pattern. delete 9. The method of claim 8, In the stroke classification, And a start and an end point of a touch signal detected when the password is input. 9. The method of claim 8, In the stroke classification, Wherein a point at which movement of a touch signal sensed at the time of inputting the password is stopped is used. 12. The method according to any one of claims 8, 10 and 11, The step (b) may further include detecting a touch pressure of a user input for each of the divided strokes by dividing the touch pressure into two or more levels; Wherein the step (c) further comprises determining whether a touch pressure level for each stroke detected is equal to a touch pressure level of the authentication pattern.

Images