KR101747743B1 - Method for processing user certification using sign information providing personalized pass rate - Google Patents

Abstract

A personal authentication processing method using signature information providing a personalized pass rate is provided. The method includes: receiving sign information from a user terminal and registering the sign information; receiving sign information for authenticating the user from the user terminal; comparing the sign information for the identity authentication with the registered sign information to obtain a matching rate And if the matching rate is greater than a preset pass rate, determining sign information for the identity authentication as the registered sign information and performing identity authentication processing, wherein the pass rate is a property of each user And the characteristics of the user include statistics of the past matching rate of the user.

Description

METHOD FOR PROCESSING USER CERTIFICATION USING SIGN INFORMATION PROVIDING PERSONALIZED PASS RATE USING SIGNATURE INFORMATION PROVIDING PERSONALIZED PASS RATE

The present invention relates to authentication of a user, and more particularly, to authentication of a user using registered sign information.

Personal authentication When you want to use certain online services such as membership registration, change of member information, electronic payment, internet banking, etc., you need to know whether you are the real person or not by means of personal identification such as cell phone information, I- It shows what you check through. In recent years, unique biometric information such as fingerprints, veins, irises, faces, and voices has been studied as means of identification. Such inherent biometric information is evaluated as having high reliability and stability as compared with the means of identifying the user such as mobile phone information. However, there is a problem that a separate device for inputting the inherent biometric information and the resistance of the user due to inherent risk of leakage of the biometric information is required. On the other hand, bio-activity information such as signatures can extract personal characteristics, and has advantage of user convenience and compatibility as a verification means.

Korean Patent Publication No. 10-2010-0104906, September 29, 2010

A problem to be solved by the present invention is to provide a self-authentication processing method using sign information that can improve self-authentication error and ensure user convenience with accuracy, and an application for performing the same.

The problems to be solved by the present invention are not limited to the above-mentioned problems, and other problems which are not mentioned can be clearly understood by those skilled in the art from the following description.

According to an aspect of the present invention, there is provided a method for authenticating a user using sign information, the method comprising: receiving sign information from a user terminal and registering the sign information; receiving sign information for authenticating the user from the user terminal; Comparing sign information for authentication of the user with the registered sign information to calculate a matching rate, and if the matching rate is greater than a preset pass rate, sign information for the identity authentication is determined as the registered sign information Wherein the passing rate is personalized and set differently based on the characteristics of each user, and the characteristics of the user include statistics of the past matching rate of the user.

In some embodiments of the invention, the statistic includes a cumulative average of the matching rate for a predetermined period of time of the user, and the pass rate may be dynamically set by the principal authentication processing server.

In some embodiments of the present invention, the statistic may be one of a statistic of the matching rate when the user succeeded in the authentication of the user in the past and a statistic of the matching rate when the user failed the authentication of the user in the past, And combinations thereof.

According to another aspect of the present invention, there is provided a method of authenticating a user using sign information, the method comprising: receiving sign information from a user terminal and registering the sign information; receiving signature information for authenticating the user from the user terminal; Comparing sign information for authentication of the user with the registered sign information to calculate a matching rate, and if the matching rate is greater than a preset pass rate, sign information for the identity authentication is determined as the registered sign information Wherein the pass rate is set to a reference pass rate at a first point in time, corrected and set to a personalized pass rate at a second point in time, and wherein the personalized pass rate is a value obtained by multiplying the past matching rate Are set based on the statistics.

According to another aspect of the present invention, there is provided a method for authenticating a user using sign information, the method comprising: receiving sign information from a user terminal and registering the sign information; receiving signature information for authenticating the user from the user terminal; Comparing sign information for authentication of the user with the registered sign information to calculate a matching rate, and if the matching rate is greater than a preset pass rate, sign information for the identity authentication is judged as the registered sign information Wherein the pass rate is personalized and set based on a pass rate rating selected by a user from among a plurality of pass rate ratings.

Other specific details of the invention are included in the detailed description and drawings.

According to the authentication processing method of the present invention using the sign information of the present invention, the pass rate for determining whether the sign information for authentication of the user is the registered sign information is obtained based on the past statistics of the matching rate of the user or by the user And personal authentication is set based on the selected pass rate rating. Therefore, it is possible to improve the authentication error of the user authentication using the sign information, and assure user convenience with accuracy.

The effects of the present invention are not limited to the above-mentioned effects, and other effects not mentioned can be clearly understood by those skilled in the art from the following description.

FIG. 1 is a block diagram schematically showing a system capable of providing a personal authentication processing method using sign information according to an embodiment of the present invention.
2 is a block diagram schematically illustrating a detailed configuration of the user terminal of FIG.
3 is a view schematically showing a sign pattern inputted by a user.
FIG. 4 is a flowchart schematically illustrating a signing information registration process in a self-authentication processing method using sign information according to an embodiment of the present invention.
FIG. 5 is a flowchart schematically illustrating an authentication processing procedure of a principal authentication processing method using sign information according to an embodiment of the present invention.
FIG. 6 is a schematic diagram for explaining personalization and setting of a pass rate for determining whether sign information for authenticating a person is registered sign information. FIG.
7 is a schematic diagram for explaining providing a personalized pass rate based on statistics of a user's past match rate.
Figure 8 is a schematic diagram for illustrating providing a personalized pass rate based on a pass rate rating selected by a user.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. However, it is to be understood that the present invention is not limited to the disclosed embodiments, but may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. It is to be understood by those of ordinary skill in the art that the present invention is not limited to the above embodiments, but may be modified in various ways.

Although the first, second, etc. are used to describe various elements, components and / or sections, it is needless to say that these elements, components and / or sections are not limited by these terms. These terms are only used to distinguish one element, element or section from another element, element or section. Therefore, it goes without saying that the first element, the first element or the first section mentioned below may be the second element, the second element or the second section within the technical spirit of the present invention.

The terminology used herein is for the purpose of illustrating embodiments and is not intended to be limiting of the present invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification. The terms " comprises "and / or" comprising "used in the specification do not exclude the presence or addition of one or more other elements in addition to the stated element. Like reference numerals refer to like elements throughout the specification.

Unless defined otherwise, all terms (including technical and scientific terms) used herein may be used in a sense commonly understood by one of ordinary skill in the art to which this invention belongs. In addition, commonly used predefined terms are not ideally or excessively interpreted unless explicitly defined otherwise.

FIG. 1 is a block diagram schematically showing a system capable of providing a personal authentication processing method using sign information according to an embodiment of the present invention.

Referring to FIG. 1, the system 1 includes user terminals 100 and 200, a web / mobile service server 300, and an authentication system 400.

The user terminals 100 and 200, the web / mobile service server 300, and the authentication system 400 may exchange data and / or information with each other through a network. The network may be wired or wireless. According to an embodiment, the network may comprise sub-networks of various sizes, topologies and communication schemes.

User terminals 100 and 200 represent computer systems used by users. For example, the user terminals 100, 200 may be a computer system such as a smart phone, a tablet, a personal digital assistant (PDA), a laptop, a desktop, etc., It is not. The user terminals 100 and 200 may be other unillustrated computer systems available for online services.

The user terminal 100 utilizes web-based or mobile-based online services provided by the web / mobile service server 300. The user terminal 200 can authenticate the user when the user terminal 100 uses a specific online service requiring the user's authentication. The user terminal 200 may download and install a software module (application or the like) for performing the authentication processing method according to the embodiment of the present invention from an app market or a download site. As described later, the identity authentication system 400 provides the identity authentication service using the sign information. Accordingly, the user terminal 200 performing the identity authentication of the user can use a touch sensor, a touch pad, or a touch Screen or other device. Meanwhile, when the user terminal 100 includes a device such as a touch sensor, a touch pad, or a touch screen, the user terminal 100 may perform authentication of the user's identity, as shown in FIG.

The web / mobile service server 300 provides web-based or mobile-based online services. Authentication of the user may be required when the web / mobile service server 300 provides specific online services such as membership registration, membership information change, electronic payment, and Internet banking. In this case, the web / mobile service server 300 requests the identity authentication system 400 to perform authentication of the user's identity using the identity authentication service using sign information provided by the identity authentication system 400, And receives a processing result of the user's personal authentication from the personal authentication system 400. [ Depending on the result of the authentication process, the web / mobile service server 300 may not provide or provide the specific online service to the user terminal 100. For example, the web / mobile service server 300 may be a search / portal service server, a community service server, a business web site server, an open market server, a game server, a financial institution server, no.

The identity authentication system 400 provides an identity authentication service using signature information. The identity authentication system 400 requests the user terminal 200 to sign information of the user in advance and receives the sign information and the terminal unique information of the user from the user terminal 200. [ The user's sign information and the terminal unique information can be encrypted and transmitted to the identity authentication system 400. [ The identity authentication system 400 maps and stores user sign information and terminal unique information for each user. Similarly, the user's signature information and the terminal unique information can be encrypted and stored.

The identity authentication system 400 can receive a user authentication process request including user identification information from the web / mobile service server 300 and identify the user terminal 200 corresponding to the user identification information. The identity authentication system 400 requests signature information for authenticating the user to the identified user terminal 200 and transmits signature information and authentication information (e.g., IMEI) for authenticating the user from the user terminal 200 . The identity authentication system 400 identifies the sign information for the identity authentication and determines whether the sign information for the identity authentication is the same as the registered sign information of the user. The identity authentication system 400 transmits the authentication result to the web / mobile service server 300. The result of the authentication processing of the user can be classified into, for example, "success" or "failure". If the sign information for the identity authentication is not the same as the registered sign information of the user, or if the unique information of the user terminal 200 is not the same as the registered unique information of the user terminal 200, the identity authentication process fails.

1, the personal authentication system 400 includes a personal authentication processing server 410 for performing overall functions and operations of the personal authentication service using signature information and managing the process, And a sign information storage server 420 for mapping and registering the terminal unique information.

1, the authentication server 410 and the signature information storage server 420 may be provided as a single server according to an embodiment of the present invention. Also, according to the embodiment, the web / mobile service server 300, the authentication server 410 and / or the sign information storage server 420 may be provided as a single server.

2 is a block diagram schematically illustrating a detailed configuration of the user terminal of FIG.

2, the user terminal 200 includes a wireless communication unit 210, an A / V input unit 220, an input unit 230, a sensing unit 240, an output unit 250, a storage unit 260, A controller 270, a controller 280, and a power supply unit 290.

The wireless communication unit 210 may wirelessly communicate with an external device. The wireless communication unit 210 wirelessly communicates with an external device using various wireless communication methods such as mobile communication, WiBro, WiFi, Bluetooth, Zigbee, ultrasound, infrared, and RF . The wireless communication unit 210 may transmit data and / or information received from the external device to the control unit 280 and may transmit the data and / or information transmitted from the control unit 280 to the external device. For this, the wireless communication unit 210 may include a mobile communication module 211 and a short-range communication module 212.

Also, the wireless communication unit 210 may acquire the location information of the user (specifically, the user terminal 200) by including the location information module 213. The location information of the user terminal 200 may be provided from, for example, a GPS positioning system, a WiFi positioning system, a cellular positioning system or a beacon positioning system, but is not limited thereto, Lt; / RTI > The wireless communication unit 210 may transmit the position information received from the positioning system to the control unit 280. [

The A / V input unit 220 is for inputting video or audio signals, and may include a camera module 221 and a microphone module 222. The camera module 221 may include an image sensor such as a CMOS (Complementary Metal Oxide Semiconductor) sensor, a CCD (Charge Coupled Device) sensor, or the like.

The input unit 230 receives various information from the user. The input unit 230 may include input means such as a keypad, a button, a switch, a touch pad, and a jog wheel. When the touch pad has a mutual layer structure with a display module 251 described later, a touch screen can be configured.

The sensing unit 240 senses the state of the user or the state of the user terminal 200. The sensing unit 240 may include sensing means such as a touch sensor, a proximity sensor, a pressure sensor, a vibration sensor, a geomagnetic sensor, a gyro sensor, an acceleration sensor, and a biometric sensor. The sensing unit 240 may be used for user input.

The output unit 250 notifies the user of various information. The output unit 250 may output information in various forms such as text, image, moving picture, voice, or the like. To this end, the output unit 250 may include a display module 251 and a speaker module 252. The display module 251 may be a plasma display panel (PDP), a liquid crystal display (LCD), a thin film transistor (TFT) LCD, an organic light emitting diode (OLED), a flexible display, May be provided in any form well known in the art. The output unit 250 may further comprise any type of output means well known in the art.

The storage unit 260 stores various data and commands. The storage unit 260 may store various software modules including system software for the operation of the user terminal 200 and an application for performing the authentication processing method using the sign information according to the embodiment of the present invention. The storage 260 may include RAM, ROM, EPROM, EEPROM, flash memory, hard disk, removable disk, or any form of computer readable recording medium known in the art.

The interface unit 270 serves as a channel with an external device connected to the user terminal 200. The interface unit 270 receives data and / or information from an external device or receives power and transmits the received data and / or information to the internal components of the user terminal 200, Or supply internal power. The interface unit 270 may include, for example, a wired / wireless headset port, a charging port, a wired / wireless data port, a memory card port, a universal serial bus An audio input / output port, a video input / output (I / O) port, and the like.

The control unit 280 controls other components to control the overall operation of the user terminal 200. The control unit 280 may perform various software modules including system software stored in the storage unit 260 and an application for performing a self-authentication processing method using sign information according to an embodiment of the present invention.

The power supply unit 290 includes a wireless communication unit 210, an A / V input unit 220, an input unit 230, a sensing unit 240, an output unit 250, a storage unit 260, an interface unit 270, (Not shown). The power supply unit 290 may include an internal battery.

On the other hand, the components shown in Fig. 2 are not essential, and the user terminal 200 may further include some components not shown or may be modified to not include some of the components shown .

Upon registration of the sign information or upon request of the sign information received from the identity authentication processing server 410, the user terminal 200 requests the sign input to the user. A user can input a signature to the user terminal 200 by touching a device such as a touch sensor, a touch pad, or a touch screen with a finger or an electronic pen (i.e., providing a touch) and drawing a sign pattern. The user terminal 200 generates sign information using the sensed user's touch. The sign information includes coordinate values of the user's touch corresponding to the sign pattern. The user terminal 200 can extract coordinate values of the user's touch in real time and record signature information to generate signature information. A coordinate value of a user's touch may be recorded as a coordinate value of a vector type in consideration of a point where a user's touch start point may change each time the user inputs a sign.

In the authentication processing method using the sign information of the present invention, the signature information may further include a pressure value as well as coordinate values of the user's touch as individual characteristics. For example, the pressure value of the touch of the user may be a real number between 0 and 1 including a decimal point, but the present invention is not limited thereto. The user terminal 200 may extract coordinate values and pressure values of the user's touch, and may generate sign information by recording the coordinates and pressure values of the touch with the user's touch point.

Meanwhile, although not explicitly shown, the sign information may further include a speed, an acceleration, a time interval, an existing time, a start coordinate value, an end coordinate value, etc. of the user's touch. In order to maximize security and accuracy of identity authentication using signature information, the degree of matching of these values may be scored as described below in the process of comparing sign information.

3 is a view schematically showing a sign pattern inputted by a user.

As shown in FIG. 3, the sign pattern may have a form of a sperm, but the present invention is not limited thereto, and the sign pattern may have a relatively simple form so that the user can easily input the sign pattern . On the other hand, if the sign pattern has an excessively simple shape, there is a fear of malfunction. Therefore, there may be a predetermined reference value related to the size of the sign data (coordinate value data, etc.). The sine pattern may also include one continuous pattern, or may comprise a plurality of discontinuous patterns.

FIG. 4 is a flowchart schematically illustrating a signing information registration process in a self-authentication processing method using sign information according to an embodiment of the present invention.

Referring to FIG. 4, in step S510, the authentication server 410 receives signature information from the user terminal 200. FIG. When a user inputs a sign to a device such as a touch sensor, a touch pad, or a touch screen, the user terminal 200 can generate sign information using the sensed user's touch. As described above, the sign information can be encrypted and transmitted to the identity authentication processing server 510. [

Subsequently, in step S520, the authentication server 410 registers and stores the sign information received from the user terminal 200 in the sign information storage server 420. [ As described above, the sign information storage server 420 can map sign information, together with the unique information, and store the encrypted sign information.

FIG. 5 is a flowchart schematically illustrating an authentication processing procedure of a principal authentication processing method using sign information according to an embodiment of the present invention.

Referring to FIG. 5, in step S610, the authentication processing server 410 receives signature information for authentication of the user from the user terminal 200. FIG. As described above, the sign information for authenticating the user can be encrypted and transmitted to the identity authentication processing server 410. [

Subsequently, in step S620, the authentication processing server 410 can compare the sign information for authenticating the user with the registered sign information of the user, and calculate the matching rate of signature data. The authentication processing server 410 compares the coordinate value, pressure value, velocity, acceleration, time interval, existing time, start coordinate value, end coordinate value, etc. of the user's touch included in the sign information with each other The matching degree can be calculated by scoring the degree of matching and synthesizing the scoring result.

Then, in step S630, if the matching rate calculated according to the comparison result is greater than a preset pass rate, the authentication server 410 determines the sign information for the user authentication as the registered sign information of the user, . At this time, in the user authentication processing method using sign information according to the embodiment of the present invention, the pass rate for determining whether the sign information for the user authentication is the registered sign information of the user is personalized and set differently for each user . As a result, it is possible to improve the authentication error of the user's identity by using the sign information, and assure the user convenience with accuracy. The personalized passing rate will be described in detail below with reference to Figs. 6 to 8. Fig.

Subsequently, in step S640, the personal authentication processing server 410 transmits the personal authentication processing result to the web / mobile service server 300. [

FIG. 6 is a schematic diagram for explaining personalization and setting of a pass rate for determining whether sign information for authenticating a person is registered sign information. FIG.

Referring to FIG. 6, the pass rate is set such that all users are equally set to a reference pass rate (for example, 85%) at the time when the user first registers the sign information. At the time of user authentication after the registration, Can be corrected and set differently for each user at a given passing rate. The personalized pass rate may be set within a predetermined range (e.g., xx% to yy%). Depending on the user, the personalized transit rate may be set to be higher or lower than the reference transit rate, the same as the reference transit rate.

7 is a schematic diagram for explaining providing a personalized pass rate based on statistics of a user's past match rate.

Referring to FIG. 7, the authentication server 410 may set a personalized pass rate based on characteristics of each user. Here, the characteristics of the user may include statistics of the past matching rate of the user. This is based on the fact that the rates at which users can accurately reproduce the same sign as registered signatures are different. If the same pass rate is uniformly set for all users, the authentication error may increase.

The pass rate of the time point tc at which the current user performs the identity authentication based on the cumulative average value of the matching rates at the time points t1, t2, t3, t4, ... at which the user performed the identity authentication for the predetermined period of the past is personalized . The personalized pass rate may be dynamically set by the authentication processing server 410 at a predetermined time or at a frequency of the number of authentication attempts. To this end, the authentication processing server 410 calculates the cumulative average value of the matching rates at all points in time or at some point in time (for example, within a predetermined period or a predetermined number of times) .

In FIG. 7, the personalized pass rate is set to be lower than the reference pass rate, but as described above, the personalized pass rate can be set higher than the reference pass rate. Alternatively, the through rate may be maintained at the reference through rate. In order to set the personalized pass rate, the statistics of the matching rate when the user has successfully authenticated himself / herself in the past (i.e., when the matching rate is higher than the pass rate) and when the user fails to authenticate himself / herself Is less than the pass rate), one or a combination of these may be used.

Figure 8 is a schematic diagram for illustrating providing a personalized pass rate based on a pass rate rating selected by a user.

Referring to FIG. 8, the user can input the pass rate in the setting window of the application described above, and the user terminal 200 can transmit the pass rate information input by the user to the authentication processing server 410. The user may select any of the multiple rate classes (e.g., high, normal, low, etc.). The identity authentication processing server 410 can set a personalized pass rate based on the pass rate class selected by the user. (For example, 85%) is set to be the same as the reference passing rate when the normal is selected, and when a high is selected, a higher passing rate (for example, 90%) than the reference passing rate is set (For example, 80%) lower than the reference passing rate can be set when low is selected.

The methods described in connection with the embodiments of the present invention may be implemented with software modules that are executed by hardware modules (e.g., processors, etc.). The software modules may reside in RAM, ROM, EPROM, EEPROM, flash memory, hard disk, removable disk, CD-ROM, or any form of computer readable recording medium known in the art .

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, It will be understood. Therefore, it should be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

100, 200: user terminal
200: Web / Mobile Service Server
410: Personal authentication processing server
420: sign information storage server

Claims (5)

A method performed by a computer,
Requesting the user terminal for first sign information for registration;
Receiving first sign information for registration and unique information of the user terminal from the user terminal;
Mapping the first sign information for the registration and the unique information of the user terminal and registering the same;
Receiving a personal authentication processing request including user identification information from a service server;
Identifying the user terminal corresponding to the user identification information;
Requesting the user terminal for second authentication information for authenticating the user;
Receiving second signature information for authenticating the user and unique information of the user terminal from the user terminal;
Identifying the registered first sign information corresponding to the unique information of the user terminal;
Comparing the second sign information for the identity authentication with the registered first sign information to calculate a matching rate; And
And if the matching rate is greater than a preset pass rate, determining second authentication information for authenticating the user as the registered first authentication information,
The user terminal generates sign information using the touch pattern of the user sensed by the touch device,
Wherein the pass rate is personalized and set differently based on statistics of the matching rate of the user for a predetermined period of time in the past,
Wherein the personalization setting of the pass rate is performed dynamically with a predetermined period or a predetermined number of times of self-authentication performed.
Personal authentication processing method using signature information providing personalized pass rate. A method performed by a computer,
Requesting the user terminal for first sign information for registration;
Receiving first sign information for registration and unique information of the user terminal from the user terminal;
Mapping the first sign information for the registration and the unique information of the user terminal and registering the same;
Receiving a personal authentication processing request including user identification information from a service server;
Identifying the user terminal corresponding to the user identification information;
Requesting the user terminal for second authentication information for authenticating the user;
Receiving second signature information for authenticating the user and unique information of the user terminal from the user terminal;
Identifying the registered first sign information corresponding to the unique information of the user terminal;
Comparing the second sign information for the identity authentication with the registered first sign information to calculate a matching rate; And
And if the matching rate is greater than a preset pass rate, determining second authentication information for authenticating the user as the registered first authentication information,
The user terminal generates sign information using the touch pattern of the user sensed by the touch device,
Wherein the pass rate is set as a reference pass rate at the time of registration of the sign information, and is corrected and set to a personalized pass rate at the time of performing authentication of the user after the sign information is registered,
Wherein the personalized pass rate is personalized and set differently based on statistics of the matching rate of the user for a predetermined period of time in the past,
Wherein the personalization setting of the pass rate is performed dynamically with a predetermined period or a predetermined number of times of self-authentication performed.
Personal authentication processing method using signature information providing personalized pass rate. 3. The method according to claim 1 or 2,
Wherein the statistic is a statistic of the matching rate when the user has failed to authenticate the user in the past,
Personal authentication processing method using signature information providing personalized pass rate. 3. The method according to claim 1 or 2,
Wherein the sign information includes a coordinate value and a pressure value of the touch of the user,
Personal authentication processing method using signature information providing personalized pass rate. 5. The method of claim 4,
Wherein the sign information further includes a speed, an acceleration, a time interval, a duration time, a start coordinate value, and an end coordinate value of the user's touch,
Personal authentication processing method using signature information providing personalized pass rate.

Images