KR20030076479A - The Method of non-variable similarity code generation and key approach control using fingerprint template - Google Patents

Abstract

PURPOSE: A method for creating an unchangeable resemblance code from fingerprint information and a method for controlling key access using the same are provided to offer a high security by protecting a key with the unchangeable resemblance code and to offer the convenience by processing all processes with single fingerprint input. CONSTITUTION: If a fingerprint sensor is installed, the fingerprints are inputted and a quality of the fingerprints is examined(S103,S104). In case of a usable fingerprint, a characteristic point is extracted from an input fingerprint image and the new fingerprint information is generated through vector synthesis(S105). A hit pair is generated by selecting one from the generated fingerprint information and the input fingerprint information(S106). The unchangeable resemblance code is generated by applying a conversion filter to the hit pair(S107-S108). The key is encrypted by using the unchangeable resemblance code(S109). The characteristic point is stored by selecting one from the synthesized fingerprint information and the input fingerprint information(S110).

Description

The method of non-variable similarity code generation and key approach control using fingerprint template}

The present invention relates to a method of generating an invariant pseudocode in fingerprint information and a key access control method using the same. In particular, the present invention provides high security by protecting a key with an invariant pseudocode obtained from fingerprint information, and processes the entire process with a single fingerprint input. The present invention relates to a method of generating an invariant pseudocode from fingerprint information and a key access control method using the same.

In general, the fingerprint recognition device uses the fingerprint of the human body that cannot be forged, so that it can accurately check whether the user is present, and also need to carry separate identification means (for example, identification card, magnetic card, password, and stamp). There is a merit that it is convenient to use because there is no research on this.

1 is a flowchart illustrating a process of encrypting a private key using a conventional password.

As shown therein, step S11 of the user inputting a password, step S12 of checking whether the input password satisfies the condition, and an error message is output if the password entered as a result of the check does not meet the condition. Step (S13), and if the input password matches the condition, obtaining a digest value using a hash function (S14), and generating an encryption key that can be encrypted using the obtained digest value. Step S15, encrypting the key to be protected (S16), and storing the encrypted key in the storage system (S17).

Referring to the encryption process of the private key using the conventional password as described above is as follows.

First, when the user enters a password in step S11, it is checked whether the password entered in step S12 satisfies the condition. If the password entered as a result of the check does not meet the condition, that is, the password does not match, go to step S13 to output an error message and end the process.

On the other hand, if the input password matches the condition, the process proceeds to step S14 to obtain a digest value using a hash function, and generates an encryption key that can be encrypted using the obtained digest value in step S15. .

Then, the key to be protected is encrypted in step S16, and the encrypted key is stored in the storage system in step S17.

However, the conventional encryption method of the private key using a password, there is an inconvenience that the user must always remember the long password and type each time.

In particular, when using the password method, the user uses information related to himself in order to make it easier to remember. Therefore, the user is more likely to be exposed to an attacker and may be hacked through a brute force attack. It is implicated.

Therefore, in recent years, a method of controlling key access using biometric information (particularly, fingerprint information) that cannot be forged has been in the spotlight.

The conventional key access control method using fingerprint recognition is roughly classified into three types.

The first is to link the key and fingerprint information and bring the key stored in a secure storage location when the fingerprint is recognized.

The second method is to hide the key inside the fingerprint information, and to calculate the fingerprint information and the key using a bit conversion algorithm.

The third method is to use the input fingerprint information as an encryption key.

However, the first method of the conventional key access control method using fingerprint recognition has the disadvantage that the storage system can be hacked, and the second method can guarantee the safety if it finds the position of the bit conversion in the stored fingerprint information. In the third method, the biometric information cannot be updated. Therefore, once hacked, the user cannot use biometrics.

Accordingly, the present invention has been proposed in order to solve various problems occurring in the key access control method using the conventional fingerprint recognition as described above,

An object of the present invention is to provide a high security by protecting the key with an invariant pseudo code obtained from the fingerprint information, and to generate the invariant pseudo code from the fingerprint information to provide the convenience of processing the entire process with a single fingerprint input and It is to provide a key access control method.

"Invariant code generation in fingerprint information and key access control method using the same" according to the present invention for achieving the above object,

When encrypting, two fingerprints are stored and an invariant code is generated to encrypt and store the key. When decryption, the encrypted key is decrypted by generating an invariant like code when the user is authenticated by matching the stored fingerprint information.

That is, since the invariant code is generated using the two stored biometric information, even if the fingerprint information is hacked, the attacker cannot generate the invariant code and the user can update and use it.

1 is a flowchart showing a process of encrypting a private key using a conventional password,

FIG. 2 is a block diagram showing the configuration of a system to which an invariant like code is generated from fingerprint information and a key access control method using the same according to the present invention.

3 is a flowchart illustrating a method of encrypting a key by generating an invariant similar code from fingerprint information according to the present invention;

4 is a flowchart showing a method of decrypting a key by generating an invariant similar code from fingerprint information according to the present invention;

5 is a flowchart illustrating a process of encrypting and storing a private key when issuing a certificate by accessing a certificate issuing system according to the present invention;

6 is a flowchart illustrating a process of decrypting and signing a private key in the case of digital signature in the present invention;

7A and 7B are flowcharts illustrating a process of encrypting and decrypting files and folders in the present invention.

<Explanation of symbols for the main parts of the drawings>

100 ..... Fingerprint input unit

200 ..... fingerprint processing unit

500 ..... storage system

600 ..... constant code generation unit

700 ..... Encryption / Decryption

800 ..... User Authentication

1000 ..... Controls

Hereinafter, a preferred embodiment of the present invention according to the technical spirit as described above will be described in detail with reference to the accompanying drawings.

2 is a block diagram showing the configuration of a system to which the invariant similar code generation in the fingerprint information according to the present invention and a key access control method using the same are applied.

As shown therein, the fingerprint input unit 100 receiving the user's fingerprint by the fingerprint input device, the fingerprint processing unit 200 processing the fingerprint data input by the fingerprint input unit 100, the current situation and execution A monitor unit 300 for displaying results on a screen, a memory unit 400 storing information for processing, authenticating, and encrypting a fingerprint image, and a storage system unit for storing fingerprint information and personal information 500, an invariant pseudocode generator 600 for generating an invariant pseudocode for key access control from fingerprint information, an encryption / decryption unit 700 for performing encryption and decryption, an input fingerprint and a stored fingerprint. A user authentication unit 800 for authenticating a user by comparison, an electronic signature unit 900 for digitally signing using the generated invariant pseudo code, and the respective blocks are controlled for key access control. It consists of a controller 1000 that performs overall control operations.

The operation of the key access control system using the invariant pseudocode generation and the same using the fingerprint information thus constructed is as follows.

Since the operation of receiving a fingerprint and processing it is similar to a conventional fingerprint recognition system, a detailed description thereof will be omitted. Hereinafter, a process of generating an invariant similar code from fingerprint information to perform encryption and decryption, issuing a certificate, an electronic signature, and the like. The encryption / decryption action of files and folders will be described in detail below.

3 is a flowchart illustrating a method of encrypting a key by generating an invariant similar code from fingerprint information according to the present invention.

As shown in the drawing, the step of checking whether the fingerprint sensor is mounted (S101), and if the check result is not equipped with a fingerprint sensor outputting a non-registration message (S102); In the case of receiving a plurality of fingerprints and checking the quality of the received fingerprints (S103, S104), and in the case of the fingerprints that are available as a result of the quality check, feature points are extracted from the input fingerprint image and newly synthesized through vector synthesis. Generating fingerprint information (S105), generating a pair of hits by selecting one of the generated fingerprint information and the input fingerprint information (S106), and applying a transform filter to the generated hit pair. Generating a code (S107 to S108), encrypting a key using the generated invariant pseudo code (S109), and generating the invariant pseudo code. The information by which a synthesized fingerprint information and selecting one of the input fingerprint information, a step (S110) for storing the feature point.

The process of encrypting the key by generating an invariant similar code from the fingerprint information according to the present invention as described above will be described in more detail.

First, it is checked whether or not the fingerprint sensor is mounted in step S101. If the fingerprint sensor is not mounted as a result of the check, the controller proceeds to step S102 and outputs a non-registration message.

On the contrary, if the fingerprint sensor is installed and the fingerprint sensor is installed, the fingerprint sensor is moved to step S103 to receive N times (generally two or three times) of fingerprint input, and in step S104, the quality of the received fingerprint is checked. Check if it is a usable fingerprint.

If the fingerprint is available as a result of the check, the process proceeds to step S105 to extract a feature point from the input fingerprint image and generate new fingerprint information through vector synthesis.

In step S106, one of the synthesized fingerprint information and the input fingerprint information is selected and matched to generate a hit pair, and in steps S107 and S108, the generated hit pair is filtered by a transform filter, and the new information is an invariant pseudo code. Will generate

In addition, in step S109, the key is encrypted using the generated invariant pseudocode, and in step S110, one of the synthesized fingerprint information and the input fingerprint information, which is information used for generating the invariant pseudocode, is selected and a total of 2 The dog will be stored in the storage system.

4 is a flowchart illustrating a method of decrypting a key by generating an invariant similar code from fingerprint information according to the present invention.

As shown therein, a step (S201) of confirming whether the fingerprint sensor is mounted, outputting an unauthentication message when the fingerprint sensor is not mounted (S202), and confirming that the fingerprint sensor is mounted When the fingerprint is received (S203), and checking whether the input fingerprint and the stored fingerprint information match (S204), and if the check result and the input fingerprint and the stored fingerprint information does not match the user authentication A step of displaying a failure (S205), and if the check result and the input fingerprint and the stored fingerprint information is matched (S206), and converting and filtering the generated hit pair with a transform filter invariant similarity Generating a code (S208) and decrypting the key with the generated immutable pseudo code (S209).

The process of decrypting a key by generating an invariant like code from fingerprint information according to the present invention as described above will be described in more detail.

First, it is checked whether or not the fingerprint sensor is mounted in step S201. If it is confirmed that the fingerprint sensor is not mounted, the control proceeds to step S202 and outputs a message that cannot be authenticated.

On the contrary, when the fingerprint sensor is mounted as a result of the checking, the fingerprint is received once in step S203. In step S204, it is checked whether the input fingerprint and the stored fingerprint information match. If the check result does not match the input fingerprint and the stored fingerprint information, the control proceeds to step S205 to indicate a user authentication failure.

In addition, when the fingerprint received from the check result and the stored fingerprint information match, in step S206, a hit pair is generated, and in step S207 and S208, the generated heat pair is transformed and filtered by a transform filter to generate an invariant pseudo code. In step S209, the key is decrypted with the generated invariant pseudo code.

5 is a flowchart illustrating a process of encrypting and storing a private key when issuing a certificate by accessing a certificate issuing system according to the present invention.

As shown in the figure, the customer inputs a reference number and an authorization code for issuing a certificate (S301), selecting a private key protection method (S302), and the selected private key protection method are existing password protection methods. In the case of selecting the step of encrypting the private key with a password (S303), and if the selected private key protection method is biometric authentication step of checking whether the fingerprint sensor is mounted (S304), and if the check result the fingerprint sensor is mounted Selecting a certificate storage medium (S305), and after selecting the certificate storage medium to generate a private key and public key (S306), accessing a certificate issuing system (S307), and applying for certificate issuance Step (S308), the step of checking the reference number and authorization code (S309), the step of issuing the certificate (S310), the step of transmitting the issued certificate (S311), and generates an invariant pseudo code Comprises a step (S312) and a step (S313) for encrypting the private key to generate the code similar to the constant, step (S314) to store the biometric information of the issued certificate, the encrypted private key, the customer.

In the present invention, the process of encrypting and storing the private key in the case of issuing a certificate by accessing the certificate issuing system will be described in more detail as follows.

First, in step S301, the customer inputs a reference number and an authorization code for issuing a certificate, and in step S302, the private key protection method is selected. Here, the private key protection methods include a method of encrypting a private key using a password and a method of encrypting a private key by citing biometric information. If the private key protection method selected by the customer is an existing password protection method, the private key is encrypted in the same manner as the method of encrypting the private key using the existing password by moving to step S303.

Next, if the private key protection method selected by the customer is biometric authentication, go to step S304 to check whether the fingerprint sensor is installed. If the check result is not installed, return to step S302. Otherwise, when the fingerprint sensor is mounted, the process moves to step S305 to select a certificate storage medium.

Thereafter, in step S306, a private key and a public key are generated, and in step S307, the certificate issuing system is accessed, and in step S308, a certificate issuance is applied.

When the certificate issuance is applied, the reference number and the authorization code are checked in step S309. If the reference number and the authorization code are normal, the certificate is issued in step S310, and the certificate issued in step S311 is transmitted.

In step S312, an invariant pseudo code is generated, and in step S313, the private key is encrypted with the generated invariant pseudo code. In addition, in step S314, the issued certificate, the encrypted private key, and the biometric information of the customer are stored in the storage system.

6 is a flowchart illustrating a process of decrypting and signing a private key in the case of digital signature in the present invention.

As shown therein, a step of selecting a certificate (S401), a step of checking whether a fingerprint sensor is mounted after the certificate is selected (S402), and outputting an error message when the fingerprint sensor is not mounted as a result of the check. (S403), if the fingerprint sensor is installed as a result of the check, receiving a fingerprint (S404), comparing the received fingerprint with prestored fingerprint information (S405), and comparing the received fingerprint with the comparison result. Outputting a non-signature message if the pre-stored fingerprint information is different (S406); generating a non-similar code when the fingerprint received as a result of the comparison is identical to the pre-stored fingerprint information (S407); Decrypting the private key with the generated invariant code (S408), and performing an electronic signature (S409).

In the present invention made as described above, the process of decrypting and signing the private key will be described in more detail as follows.

First, a certificate is selected in step S401, and after the certificate is selected, it is checked whether a fingerprint sensor is installed in step S402. If the fingerprint sensor is not installed as a result of checking whether the fingerprint sensor is mounted, the process proceeds to step S403 and an error message is output. If the fingerprint sensor is mounted, the process goes to step S404 to receive the fingerprint.

Thereafter, in step S405, the received fingerprint and the prestored fingerprint information are compared. If the received fingerprint and the prestored fingerprint information are different, the process proceeds to step S406 and outputs a non-signature message.

On the contrary, if the fingerprint received from the comparison result and the pre-stored fingerprint information are the same, go to step S407 to generate an invariant pseudo code, and in step S408 the private key is decrypted with the generated invariant pseudo code, step S409 Will perform the digital signature.

7A is a flowchart illustrating a process of encrypting a file and a folder in the present invention.

As shown in the drawing, when a file or folder is selected, checking whether the fingerprint sensor is mounted (S501, S502), and if the check result does not mount the fingerprint sensor, outputting an error message (S503); In the case where the fingerprint sensor is installed as a result of the check, receiving a plurality of fingerprints and checking the quality of the received fingerprints (S504 and S505), and generating a constant pseudo code when the fingerprints are usable as a result of the quality inspection. (S506), encrypting a file or folder using the generated invariant pseudo code (S507), and storing fingerprint information and an encrypted file used to generate the invariant pseudo code (S508). .

The process of encrypting files and folders by generating an invariant similar code in the fingerprint information according to the present invention as described above will be described in more detail.

First, in step S501, a file or folder to be encrypted is selected. When a file or folder to be encrypted is selected, in step S502 it is checked whether or not the fingerprint sensor is mounted. If the check result is not equipped with a fingerprint sensor, go to step S503 to output an error message.

On the contrary, if the fingerprint sensor is installed as a result of checking whether the fingerprint sensor is installed, the fingerprint sensor is moved to step S504 to receive N times (generally two or three times) fingerprint input, and in step S505, the quality of the received fingerprint is checked. Check if it is a usable fingerprint.

If the fingerprint is available as a result of the check, the process proceeds to step S506 to extract feature points from the input fingerprint image and generate new fingerprint information through vector synthesis. Then, one of the synthesized fingerprint information and the input fingerprint information is selected and matched to generate a hit pair, and the generated hit pair is filtered by a transform filter to generate new information, an invariant similar code.

Thereafter, in step S507, the file or folder is encrypted using the generated invariant code. In step S508, one of the synthesized fingerprint information and the input fingerprint information, which is information used to generate the invariant code, is selected. A total of two fingerprint information and the encrypted file is stored in the storage system.

7B is a flowchart illustrating a process of decrypting a file and a folder in the present invention.

As shown therein, selecting an encrypted file (S601), checking whether a fingerprint sensor is mounted (S602), and outputting an error message when the fingerprint sensor is not mounted as a result of the checking ( S603), when the fingerprint sensor is installed as a result of the checking, receiving a fingerprint once (S604), checking whether the received fingerprint matches stored fingerprint information (S605), and receiving the check result. If the fingerprint and the stored fingerprint information does not match (S606) to display a message that can not be decrypted, and if the fingerprint received and the stored fingerprint information as a result of the check is matched to generate a hit pair and convert the generated hit pair Transforming and filtering the filter to generate an invariant pseudo code (S607), and decrypting a file encrypted with the generated invariant pseudo code (S608). Eojinda.

The process of decrypting a file by generating an invariant like code from fingerprint information according to the present invention as described above will be described in more detail.

First, if an encrypted file to be decrypted is selected in step S601, it is checked whether or not the fingerprint sensor is mounted in step S602. If it is confirmed that the fingerprint sensor is not mounted, the process moves to step S603 to output an error message.

On the contrary, if the fingerprint sensor is mounted as a result of the checking, the fingerprint is received once in step S604. In step S605, it is checked whether the input fingerprint and the stored fingerprint information match. If the check result does not match, the process moves to step S606 and outputs a non-encryption message.

In addition, when the fingerprint received from the check result and the stored fingerprint information match, a hit pair is generated in step S607, and the generated hit pair is transformed and filtered by a transform filter to generate an invariant pseudo code. The file encrypted with the generated invariant pseudo code is decrypted.

According to the present invention as described above, since the invariant pseudocode can be generated from the fingerprint information and the key access can be effectively controlled using the same, it can be easily applied to various parts such as certificate issuance, digital signature, file or folder encryption, and the like. It can be effective.

In addition, since the invariant similar code obtained from the user is not stored and can be encrypted and decrypted with a single fingerprint input, there is an effect of providing high security and convenience.

Claims (8)

In the method of controlling key access using fingerprint information, Receiving a plurality of fingerprints using a fingerprint sensor, and checking a quality of the received fingerprint, extracting a feature point from the input fingerprint image and generating new fingerprint information through vector synthesis; Generating a hit pair by combining the generated fingerprint information with the input fingerprint information; Generating an invariant pseudo code for key encryption by applying a transform filter to the generated hit pair; Encrypting a key using the generated invariant pseudo code; Selecting one of the synthesized fingerprint information and the input fingerprint information, which is information used for generating the invariant pseudo code, and storing a feature point. Control method. In the method of controlling key access using fingerprint information, Receiving a fingerprint and checking whether the received fingerprint matches stored fingerprint information; Displaying a user authentication failure when the input fingerprint and the stored fingerprint information do not match; Generating a hit pair if the fingerprint received from the check result matches the stored fingerprint information; Generating an invariant pseudo code for key decryption by transform-filtering the generated hit pair with a transform filter; And generating a constant similar code from the fingerprint information, comprising: decrypting the key with the generated similar pseudo code. In the method for controlling certificate issuance using fingerprint information, When the private key protection method is biometric authentication, selecting a certificate storage medium when a customer inputs a reference number and an authorization code for issuing a certificate; Generating a private key and a public key after selecting the certificate storage medium; When the customer accesses the certificate issuing system and then applies for certificate issuance, checking the reference number and authorization code entered by the customer, and if not, issuing a certificate and transmitting the certificate; Generating an invariant similar code for encrypting the generated private key; Encrypting the private key with the generated constant code; Generating an invariant pseudo code in the fingerprint information, characterized in that it comprises the step of storing the issued certificate, the encrypted private key, the customer's biometric information and key access control method using the same. The method of claim 3, wherein the invariant pseudo code generation is performed. Extract the feature points from the input fingerprint image to generate new fingerprint information through vector synthesis, create a hit pair by combining the generated fingerprint information with the input fingerprint information, and apply a transform filter to immutable for private key encryption. Invariant pseudo code generation from fingerprint information, characterized in that generating a similar code and key access control method using the same. In the method for controlling the electronic signature using the fingerprint information, When a certificate is selected and a fingerprint is input, comparing the input fingerprint with previously stored fingerprint information; Outputting a non-signature message if the fingerprint inputted as a result of the comparison and the previously stored fingerprint information are different; Generating an invariant similar code for decrypting a private key when the fingerprint inputted as a result of the comparison and the previously stored fingerprint information are the same; And decrypting the private key with the generated invariant code and performing an electronic signature. The method of claim 5, wherein the invariant pseudo code generation, Extract feature points from the input fingerprint image to generate new fingerprint information through vector synthesis, generate hit pairs by combining the generated fingerprint information with the input fingerprint information, and apply a transform filter to invariant for decryption of the private key. Invariant pseudo code generation from fingerprint information, characterized in that generating a similar code and key access control method using the same. In the method for encrypting files and folders using fingerprint information, When a file or folder to be encrypted is selected and a plurality of fingerprints are input, the quality of the input fingerprint is checked and the available fingerprints are extracted. The feature points are extracted from the input fingerprint image to generate new fingerprint information through vector synthesis. Generating a hit pair by combining the generated fingerprint information with the input fingerprint information and applying a conversion filter to generate an invariant pseudo code for encryption; Encrypting the selected file or folder using the generated invariant pseudo code; And storing the fingerprint information and the encrypted file or folder used to generate the invariant pseudo code, and the key access control method using the invariant similar code in the fingerprint information. In the method for decrypting files and folders using fingerprint information, Checking an encrypted file is selected, and if the fingerprint is input, checking whether the input fingerprint matches the stored fingerprint information; Displaying a non-decryption message when the fingerprint inputted as a result of the check and the stored fingerprint information do not match; Generating a hit pair and converting the generated hit pair with a transform filter to generate an invariant pseudo code if the input fingerprint and the stored fingerprint information match; And generating a constant similar code from the fingerprint information, characterized in that it comprises the step of decrypting the file encrypted with the generated similar pseudo code.