KR20020089237A - Network security device in Biometric method - Google Patents

Abstract

PURPOSE: A method for authenticating a living body in a network security device is provided to make only registered user be connected by making a light and darkness state, the central point, and curved lines of a fingerprint being inputted by a user who connects in a system of a specific Internet or Intranet be detected within a pre-set error range, and comparing the detected fingerprint with pre-set fingerprint data. CONSTITUTION: An input of a fingerprint of a client or a manager connected to a specific Internet or Intranet is induced(S602). A light and darkness state of the inputted fingerprint is checked(S604). If the light and darkness state is suitable, a curvature in each point is calculated, a boundary area of the central point is designated, and the central point is detected(S608). If the central point exists, it is judged whether the position of the central point is suitable or not(S614). If the central point is suitable, a straight line is drawn horizontally based on the central point, and a direction angle of each curved line is calculated based on an accorded point between the straight line and each curved line(S618). It is checked whether a gradient by the direction angle is within a gradient error range(S620). If the gradient is within the gradient error range, the fingerprint is selected and coded(S626), and the fingerprint is authenticated by connecting to a server(S630). The fingerprint data are decoded(S638), matched with data stored in a database(S640), and an existence or not is checked(S642). If the data are matched, a gateway in the server is executed(S648) and a connection to the server is executed(S650).

Description

Biometric authentication method in network security equipment {Network security device in Biometric method}

The present invention relates to a biometric authentication method in a network security device, and more particularly, the business card status, center point, ridge angle, and the like of a fingerprint input by a user connecting into a specific Internet or intranet system within a preset error range. The present invention relates to a biometric authentication method of a client and an administrator that allows a registered user to be connected to be detected by comparing with fingerprint data.

In general, in the case of configuring an internal network connected to a public network such as the Internet, it is necessary to prevent leakage to the external network even if the resources are shared freely in the internal network. As described above, a security function for a specific resource is generally implemented through a firewall. In particular, when it is necessary to prevent the leakage of important resources internally, high reliability is required for the firewall.

Hereinafter, the prior art for the network security function (firewall) will be described.

First, Figure 4 is a block diagram showing the configuration of a firewall device of a network in the prior art.

As shown in FIG. 4, the network includes a firewall 100 that selectively performs a blocking function for an access request from an external network to an internal network; A plurality of clients 200 connected to the server 300 by being authenticated by the firewall 100 through the Internet; It is composed of a server 300 for performing the data exchange by accepting the connection request of the plurality of clients (200).

As such, the firewall of a network network is configured to block an illegally connected user by receiving an ID, password or address from a user in order to block those who access the external network from the external network.

The present invention is to protect the internal resources by receiving a fingerprint from the user connecting to the network using a biometric technology of the user, and by being authenticated by the firewall in accordance with the registration of the input fingerprint to be connected to the internal network. .

In addition, the real-time fingerprint selection input method previously applied in the patent application No. 2000-62538 filed by the present applicant is configured by applying to the present invention.

In order to solve the above problems, the present invention provides a predetermined fingerprint so that the business card state, the center point, the angle of the ridge and the like of the fingerprint input by the user connecting into the system of a particular Internet or intranet are detected within a preset error range. Its purpose is to allow only registered users to access data, compared to data.

1 is a flowchart illustrating a client registration process through a biometric authentication method in a network security device according to the present invention.

2 is a flowchart illustrating a client recognition process through a biometric authentication method in a network security device according to the present invention.

3 is a flow chart showing a client record management process through a biometric authentication method in a network security device according to the present invention.

Figure 4 is a block diagram showing the configuration of a firewall device of a network in the prior art.

* Description of the symbols for the main parts of the drawings *

100: firewall 200: client

300: server

A method for achieving the present invention, comprising: inducing a fingerprint of a client or an administrator connected to a specific Internet or intranet; When the fingerprint is input, subdividing the input fingerprint into arbitrary block units to check the contrast state of the input fingerprint, and confirming a dark or cloudy state according to the gray level of each block; Inducing a re-entry if the contrast of the fingerprint is dark or cloudy according to the number of block thresholds in the dark or cloudy state; If the contrast is determined to be appropriate, calculating a curvature at each point of the input fingerprint image to designate a boundary area of the center point and to detect the center point; Requesting re-entry if the center point is absent, and if it is determined that the center point is present, determining whether the position is suitable within an area where the center point is designated; Calculating a direction angle of the left and right ridges based on a coincidence point through which the ridges pass through a straight line by drawing a straight line to the left and right with respect to the center point if the position of the fingerprint is appropriate; Determining whether the tilt due to the left and right average direction angles falls within a preset tilt error range based on a normal direction of the fingerprint image; Selecting and encrypting the fingerprint if the slope falls within an error range, and authenticating the fingerprint by accessing a server; When accessing the server, decrypting fingerprint data and matching the data stored in a database to confirm existence; If the data is matched, the step of executing a gateway in the server, and characterized in that the step of connecting to the server.

Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings. (I explain it same as a conventional code)

1 is a flowchart illustrating a client registration process through a biometric authentication method in a network security device according to the present invention.

As shown in FIG. 1, when a client 200 accesses a network system of a specific Internet or intranet through its terminal, the client 200 accesses the network inside a series of associated programs (firewall: 100) located at the network gateway server. The input mode is output to input the fingerprint image of the client 200.

When the client 200 inputs its fingerprint through a mouse or a separate device (scanner) capable of fingerprint input in an input mode, the firewall 100 acquires the input fingerprint image online (S502).

The firewall 100 checks whether the contrast of the acquired fingerprint image is appropriate (S504). That is, the input fingerprint image is subdivided into arbitrary block units, and the average value of gray level of each block is calculated to check the image quality of each subdivided block, and if the average value is too high, the fingerprint image of the block Is considered to be cloudy, and if it is too low, the image is considered dark.

In addition, after determining the image state for each block and summing the number of blocks for each state, if the number of blocks in the dark state is greater than the threshold value, the entire fingerprint image is determined to be dark, and the input state of the fingerprint is input to the user. Because it is a state, it prints a message to input weakly and requires re-entry.

On the contrary, if the result of the summation is larger than the threshold value of the blurred state, the fingerprint image is judged to be blurry, and the user inputs a message for dark input because the input state of the fingerprint is weakly input. (S506).

If it is determined that the contrast state of the fingerprint image is appropriate, the curvature is calculated at each point of the input fingerprint image to designate a boundary area of the center point and detect the center point (S508).

At this time, since the center point may not come in at all or a wrong center point may be found by the noise, the authenticity of the center point is verified using a Poincare index (S510).

When the authenticity of the detected center point is verified, if it is determined that there is no center point, a message is output to the user to change the position of the fingerprint, thereby instructing the user to change the position of the fingerprint. If the fingerprint is re-entered and it is determined that there is a center point, it is determined whether the position is suitable within the region where the center point is designated (S514).

If the position of the center point is not located in the designated area but is biased to one side, a command is output to a user to change the position of the fingerprint to change the position of the fingerprint. If the fingerprint is located within the designated area, the next step is executed.

When the input fingerprint is located at the center point, a straight line having a predetermined length is drawn to the left and right based on the center point of the fingerprint, and the direction angles of the left and right ridges are calculated based on the coincidence point where the ridges pass through the straight line (S518). .

The average direction angles of the ridges are calculated, and the linear angles of the center points are continuously changed until they are closest to each other and closest to "0" in contrast to each of the left and right average directions based on the normal direction of the fingerprint image. The inclination of the image is calculated, and it is determined whether the inclination of the acquired fingerprint image has the smallest error range from the preset inclination (S520).

If the slope is greater than the error range of the preset slope, it is determined that the input fingerprint is wrong, and outputs a message to the user to adjust the inclination of the fingerprint, thereby instructing the user to adjust the inclination of the fingerprint.

The slope is selected to register a fingerprint image belonging to an error range of a predetermined slope (S524), and the selected fingerprint image data is encrypted (S526).

Attempting to connect (S528) to the internal server 300 of the firewall to authenticate the fingerprint image (S530). If the connection and fingerprint image authentication process does not go to the internal server 300 outputs a message "Server connection not available" (S532), if the server 300 connection is not more than three times (S534) initial screen of the server When the number of times the server is connected is less than three times, the server 200 outputs a reconnection command S536 to the client 200.

When the server 300 is connected, the fingerprint image data is decrypted (S538), and the overlap with the existing fingerprint data is checked (S540). If the fingerprint image data is duplicated (S542), the client 200 is notified that the fingerprint is duplicated and returns to the initial screen of the server, and if the fingerprint image data is not duplicated, the fingerprint data is stored in a database (not shown) (S544). The client registration process is terminated.

2 is a flowchart illustrating a client recognition process through a biometric authentication method in a network security device according to the present invention.

As shown in FIG. 2, when the client 200 accesses a network system of a specific Internet or intranet through its terminal, the client 200 accesses the network inside a series of related programs (firewall: 100) located at the network gateway server. The input mode is output to input the fingerprint image of the client 200.

When the client 200 inputs its fingerprint through a mouse or a separate device (scanner) capable of fingerprint input in an input mode, the firewall 100 acquires the input fingerprint image online (S602).

The firewall 100 checks whether the contrast of the acquired fingerprint image is appropriate (S604). That is, the input fingerprint image is subdivided into arbitrary block units, and the average value of gray level of each block is calculated to check the image quality of each subdivided block, and if the average value is too high, the fingerprint image of the block On the other hand, if the image is too low, the image is dark.

In addition, after determining the image state for each block and summing the number of blocks for each state, if the number of blocks in the dark state is greater than the threshold value, the entire fingerprint image is determined to be dark, and the input state of the fingerprint is input to the user. Because it is a state, it prints a message to input weakly and requires re-entry.

On the contrary, if the result of the summation is larger than the threshold value of the blurred state, the fingerprint image is judged to be blurry, and the user inputs a message for dark input because the input state of the fingerprint is weakly input. (S606).

If it is determined that the contrast state of the fingerprint image is appropriate, the curvature is calculated at each point of the input fingerprint image to designate a boundary area of the center point and detect the center point (S608).

At this time, since the center point may not come in at all or a wrong center point may be found by the noise, the authenticity of the center point is verified using a Poincare index (S610).

If the authenticity of the detected center point is verified, and if it is determined that there is no center point, a message is output to the user to change the position of the fingerprint, thereby instructing the user to change the position of the fingerprint. If the fingerprint is re-entered and it is determined that there is a center point, it is determined whether the position is suitable within the region where the center point is designated (S614).

If the position of the center point is not located in the designated area but is biased to one side, a command is output to the user to change the position of the fingerprint to change the position of the fingerprint. If the location of the fingerprint is located within the designated area, the next step is performed.

When the input fingerprint is located at the center point, a straight line having a predetermined length is drawn to the left and right based on the center point of the fingerprint, and the direction angles of the left and right ridges are calculated based on the coincidence point where the ridges pass through the straight line (S618). .

The average direction angles of the ridges are calculated, and the linear angles of the center points are continuously changed until they are closest to each other and closest to "0" in contrast to each of the left and right average directions based on the normal direction of the fingerprint image. The inclination of the images is calculated, and it is determined whether the inclination of the acquired fingerprint image has the smallest error range from the preset inclination (S620).

If the slope is greater than the error range of the preset slope, it is determined that the input fingerprint is wrong, and outputs a message to the user to adjust the inclination of the fingerprint, thereby instructing the user to adjust the inclination of the fingerprint.

The gradient is selected to register a fingerprint image belonging to an error range of a predetermined slope (S624), the selected fingerprint image data is encrypted (S626) and then attempted to access the internal server 300 of the firewall (S628). The fingerprint image is authenticated (S630).

If the connection and fingerprint image authentication process does not go to the internal server 300 outputs a message "No server connection" (S632). If the server 300 is not connected more than three times (S634), the server returns to the initial screen of the server, and if the number of times of connection of the server is less than three times, the server 300 outputs a reconnection command (S636) to the screen of the client 200.

When connected to the internal server 300, the fingerprint image data is decrypted (S638), and the firewall is matched with a database (S640) to check whether data matching the data in the database exists. If the number of times of data existence check is three or more times (S534), the recognition process of the client is terminated. If the number of times of connection of the server is less than three times, the fingerprint re-input command S646 is output to the client 200.

If the data is matched, the gateway in the server 300 is executed (S648) and connected to the server (S650).

3 is a flowchart of a client record management method through a biometric authentication method in a network security device according to the present invention.

As shown in FIG. 3, when an administrator accesses a network system of a specific Internet or intranet through his terminal, the fingerprint of the administrator connected inside the network from a series of related programs (firewall: 100) located at the network gateway server. Output the input mode to input the image.

When the administrator inputs his fingerprint through a mouse or a separate device (scanner) capable of fingerprint input in an input mode, the firewall 100 acquires the input fingerprint image online (S702).

The firewall 100 checks whether the contrast of the acquired fingerprint image is appropriate (S704). That is, the input fingerprint image is subdivided into arbitrary block units, and the average value of gray level of each block is calculated to check the image quality of each subdivided block, and if the average value is too high, the fingerprint image of the block Is considered to be cloudy, and if it is too low, the image is considered dark.

In addition, after determining the image state for each block and summing the number of blocks for each state, if the number of blocks in the dark state is greater than the threshold value, the entire fingerprint image is determined to be dark, and the input state of the fingerprint is input to the user. Because it is a state, it prints a message to input weakly and requires re-entry.

On the contrary, if the result of the summation is larger than the threshold value of the blurred state, the fingerprint image is judged to be blurry, and the user inputs a message for dark input because the input state of the fingerprint is weakly input. (S706).

If it is determined that the contrast state of the fingerprint image is appropriate, the curvature is calculated at each point of the input fingerprint image to designate a boundary area of the center point and detect the center point (S708).

In this case, since the center point may not come in at all or a wrong center point may be found by the noise, the authenticity of the center point is verified using a Poincare index (S710).

If the authenticity of the detected center point is verified, and if it is determined that there is no center point, a command is output to a user to change the position of the fingerprint to change the position of the fingerprint (S712). If the fingerprint is re-entered and it is determined that there is a center point, it is determined whether the position is suitable within the region where the center point is designated (S714).

If the position of the center point is not located in the designated area but is biased to one side, a command is output to the user to change the position of the fingerprint to change the position of the fingerprint. If the fingerprint is located within the designated area, the next step is executed.

When the input fingerprint is located at the center point, a straight line having a predetermined length is drawn to the left and right based on the center point of the fingerprint, and the direction angles of the left and right ridges are calculated based on the coincidence point where the ridges pass through the straight line (S718). .

The average direction angles of the ridges are calculated, and the linear angles of the center points are continuously changed until they are closest to each other and closest to "0" in contrast to each of the left and right average directions based on the normal direction of the fingerprint image. The inclination of the images is calculated, and it is determined whether the inclination of the acquired fingerprint image has the smallest error range from the preset inclination (S720).

If the inclination is larger than the error range of the preset inclination, it is determined that the input fingerprint is wrong, and a command is output to the user to adjust the inclination of the fingerprint, thereby instructing the user to adjust the inclination of the fingerprint.

The gradient is selected to register a fingerprint image belonging to an error range of a preset slope (S724), the selected fingerprint image data is encrypted (S726), and then an attempt is made to access the internal server 300 by a firewall (S728). While receiving the fingerprint image (S730).

If the server 300 is not connected during the connection and fingerprint image authentication process, a message “No server connection” is output (S732). If the connection of the server 300 is not more than three times (S734), the server registration process is terminated, and if the number of times of connection of the server is less than three times, the server 300 outputs a reconnection command (S736).

When the connection is made to the internal server 300, the fingerprint image data is decrypted (S738), and the identity of the administrator pre-recorded in the database is confirmed (S740). If the administrator's identity is not confirmed, the administrator's access is denied (S742), and the administrator registration process ends.

When the administrator identity is confirmed, the administrator checks whether the user connected to the firewall 100 is a registered user (S744). It is checked whether or not it is suitable as the registered user (S746). If it is not suitable as the registered user, the user data is deleted and then terminated.

If appropriate as the registered user, the user data is registered (S750) to allow the user to access the server 300.

As described above, the preferred embodiments of the present invention have been illustrated and described, but the present invention is not limited to the above-described embodiments, and the present invention belongs to the present invention without departing from the gist of the present invention as claimed in the claims. Anyone of ordinary skill in the art of various modifications can be made, as well as such changes are within the scope of the claims.

As described above, in the present invention, since a fingerprint is input from a client and an administrator accessing a network using a biometric technology and the fingerprint is registered at the firewall, the authentication process is performed at the firewall. Has the effect of protecting internal resources.

Claims (3)

Encouraging a fingerprint of a client or an administrator connected to a specific Internet or intranet; When the fingerprint is input, subdividing the input fingerprint into arbitrary block units to check the contrast state of the input fingerprint, and confirming a dark or cloudy state according to the gray level of each block; Inducing re-entry if the contrast of the fingerprint is dark or cloudy according to the number of block thresholds in the dark or cloudy state; If the contrast is determined to be appropriate, calculating a curvature at each point of the input fingerprint image to designate a boundary area of the center point and to detect the center point; Requesting re-entry if the center point is absent, and if it is determined that the center point is present, determining whether the position is suitable within an area where the center point is designated; Calculating a direction angle of the left and right ridges based on a coincidence point through which the ridges pass through a straight line by drawing a straight line to the left and right with respect to the center point if the position of the fingerprint is appropriate; Determining whether the tilt due to the left and right average direction angles falls within a preset tilt error range based on a normal direction of the fingerprint image; Selecting and encrypting the fingerprint if the slope falls within an error range, and authenticating the fingerprint by accessing a server; When accessing the server, decrypting fingerprint data and matching the data stored in a database to confirm existence; And executing the gateway in the server and connecting to the server if the data is matched. A client registration method comprising the steps of: encouraging a fingerprint of a client connected to a specific Internet or intranet; When the fingerprint is input, subdividing the input fingerprint into arbitrary block units to check the contrast state of the input fingerprint, and confirming a dark or cloudy state according to the gray level of each block; Inducing re-entry if the contrast of the fingerprint is dark or cloudy according to the number of block thresholds in the dark or cloudy state; If the contrast is determined to be appropriate, calculating a curvature at each point of the input fingerprint image to designate a boundary area of the center point and to detect the center point; Requesting re-entry if the center point is absent, and if it is determined that the center point is present, determining whether the position is suitable within an area where the center point is designated; Calculating a direction angle of the left and right ridges based on a coincidence point through which the ridges pass through a straight line by drawing a straight line to the left and right with respect to the center point if the position of the fingerprint is appropriate; Determining whether the tilt due to the left and right average direction angles falls within a preset tilt error range based on a normal direction of the fingerprint image; Selecting and encrypting the fingerprint if the slope falls within an error range, and authenticating the fingerprint by accessing a server; Decrypting fingerprint image data when connected to the server, and confirming duplication with existing fingerprint data; And if not duplicated, storing fingerprint data in a database. A method of managing registered information of a registered client, the method comprising: inducing a fingerprint of an administrator connected to a specific internet or intranet to be input; When the fingerprint is input, subdividing the input fingerprint into arbitrary block units to check the contrast state of the input fingerprint, and confirming a dark or cloudy state according to the gray level of each block; Inducing re-entry if the contrast of the fingerprint is dark or cloudy according to the number of block thresholds in the dark or cloudy state; If the contrast is determined to be appropriate, calculating a curvature at each point of the input fingerprint image to designate a boundary area of the center point and to detect the center point; Requesting re-entry if the center point is absent, and if it is determined that the center point is present, determining whether the position is suitable within an area where the center point is designated; Calculating a direction angle of the left and right ridges based on a coincidence point through which the ridges pass through a straight line by drawing a straight line to the left and right with respect to the center point if the position of the fingerprint is appropriate; Determining whether the tilt due to the left and right average direction angles falls within a preset tilt error range based on a normal direction of the fingerprint image; Selecting and encrypting the fingerprint if the slope falls within an error range, and authenticating the fingerprint by accessing a server; Decrypting the fingerprint data and confirming an administrator's identity through the decrypted data when the server is connected to the server; Denying administrator access if the administrator's identity is not confirmed, and terminating the administrator registration process; If the administrator's identity is confirmed, the administrator checking whether the user connected to the firewall is a registered user; Checking whether it is suitable as the registered user and deleting the user data if it is not suitable as the registered user; And registering the user data if the user is suitable as the registered user, and permitting access thereof.