KR20030090176A - Method of authenticating user's action by nomal or abnomal registration information - Google Patents

Abstract

PURPOSE: An authentication method using the double registration information is provided to generate an alarm for an emergency action internally by inputting the abnormal authentication information in case of the transaction by oppression or a threat. CONSTITUTION: A user registers the normal and the abnormal authentication information(S1). The authentication information inputted from the user is compared with the registered authentication information(S5). In case of an abnormal state, a preset alarm is generated or is informed to a constant place in order to take the action for the abnormal state(S8). The authentication information is a password, the fingerprint information, the vein information of a hand, or the iris information.

Description

Authentication method using dual registration information {Method of authenticating user's action by nomal or abnomal registration information}

The present invention relates to a method for authenticating a customer's request in various financial transactions or access security systems, and more specifically, by dividing the customer's authentication information into normal authentication information and abnormal authentication information and registering them in duplicate. The present invention relates to an authentication method using dual registration information that can authenticate with appropriate authentication information.

Generally, authentication information (eg, password or biometric information, etc.) is used in a financial transaction system or an access security system to confirm whether a customer is authorized or accessed. For example, a bankbook or a card used for banking transactions can be processed normally only when the customer enters a password registered at the time of card issuance or opening an account, and the access security system registers biometric information (fingerprint, vein, hand shape, iris, etc.) registered at the first entry. ) To allow access.

However, despite such authentication method, if the user is informed of the password due to intimidation or coercion or enters the biometric information, the system judges that it is normal and the transaction or entry is made despite the customer's desire. There is a problem that causes problems. In particular, in recent years, as the use of credit cards is generalized, a lot of damages are generated by threatening credit card holders to obtain passwords and taking credit cards to illegally withdraw cash or commerce.

The present invention has been proposed in order to solve the above problems, and divided into authentication information used for normal transactions and authentication information used in abnormal cases at the time of initial personal information registration and double registration, normal authentication information in the normal transaction In the case of input and transaction and transaction by coercion or intimidation, it provides an authentication method using dual registration information that inputs abnormal authentication information and looks like a transaction is made, but internally generates an alarm to trigger an emergency action. The purpose is.

1 is an overall configuration diagram of a dual registration management system according to the present invention,

2 is a flowchart illustrating a dual registration management procedure according to the present invention;

3 is an embodiment in which the present invention is applied to a financial account,

Figure 4 is an embodiment when the present invention is applied to the entrance security system.

☞ Explanation of symbols for main parts of drawing

102-1 to 102-n: terminal 110: communication network

120: server 124: customer DB

130: police station

In order to achieve the above object, the method of the present invention, authentication information registration step of registering the normal authentication information and abnormal authentication information for any user separately; An authentication information determining step of comparing the input authentication information with the registered authentication information to determine whether the user is in a normal state or an abnormal state; And if the determination result is an abnormal state, it characterized in that it comprises an alarm step for generating a preset alarm or notification to a specific place to take action according to the abnormal state.

That is, the present invention refers to the dual registration and management of personal information, to prevent abnormal transactions are made during financial transactions and access security to protect yourself from the risk of financial accidents. Here, 'normal transaction' is a natural transaction that reflects one's intention, and 'abnormal transaction' refers to a transaction contrary to one's intention, such as by coercion or coercion by an outsider, or through an agent. 'Transaction' means access control or financial services.

As described above, the present invention allows the contact of a pre-registered contact point to contact a pre-registered contact when the main building is in or out of a main house, or warns outsiders of illegal access to the main building and their residence. By verifying to the third party, the property and rights of the property owners are preserved, and the customer information is doubled by registering the authentication information for normal transactions and the authentication information for abnormal transactions in bank transactions and financial transactions using credit cards. To prevent financial transactions by burglary or coercion. For example, when a financial transaction is made by abnormal authentication information, the withdrawal person is immediately checked, the user can be identified through a communication method such as a mobile phone, or the security company is contacted to take appropriate measures. In addition, by operating the CCTV of the financial store to record the withdrawal to track the criminal later.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic diagram illustrating a configuration of a system for authenticating using dual registration information according to the present invention.

Referring to FIG. 1, in the system for the present invention, a server 120 managing customer information for a transaction or access and a terminal 102-1 to 102-n for processing a transaction and access to the communication network 110. The server 120 is connected to a database 124 that stores customer information, and a police station or a service company 130 is connected through a communication network 110 for emergency measures.

Terminals 102-1 to 102-n are one of a bank transaction terminal, an ATM, a fingerprint terminal, an iris terminal, and a vein recognition terminal according to the field to which the present invention is applied. Part. In the case of a bank terminal, a bank clerk may input it according to a transaction statement written by a customer, but in the case of an ATM terminal, a customer directly inputs it.

The communication network 110 may be a data communication network including the Internet, a public telephone network (PSTN), or the like, or may be implemented as a LAN in the case of an access security system installed in a specific area. The communication network 110 transmits data between the terminals 102-1 to 102-n and the server 120, and connects the security company or the police station 130 through a dedicated communication network or a public telephone network in an emergency.

The server 120 is a system for processing an authentication method using dual registration information according to the present invention, and inputs authentication information such as personal information, password, biometric information (fingerprint, vein, iris, etc.) from the customer at the time of initial customer registration. And store in the customer database 124. At this time, according to the present invention, both the authentication information used in normal transactions and the authentication information used in abnormality are registered as shown in Table 1 below.

division Customer ID Personal Information password Fingerprint Information Normal leh21 xxxxx 0123456 Left hand fingerprint Abnormal leh21 xxxxx 0011223 Right hand fingerprint

When registering customer information as shown in Table 1 above, the password for normal transactions and the password for abnormal transactions are set differently, and if the fingerprint information is registered differently and the password is to be disclosed by coercion, the secret information is used for abnormal transactions. The disclosure allows the server 120 to detect abnormalities in the transaction and take appropriate action.

That is, when a password or biometric information is received from the terminals 102-1 to 102-n during a transaction, it is compared with information of a pre-registered customer database to determine whether it is normal transaction information or abnormal transaction information. If the transaction information is processed normally, if the abnormal transaction information registered internally alerts to the police station or security company 130 to take appropriate measures.

Figure 2 is a flow chart illustrating a dual registration procedure according to the present invention, showing the information exchange order between the customer and the server.

Referring to FIG. 2, the customer inputs normal authentication information and abnormal authentication information to the server at the time of the first transaction and registers them in duplicate (S1). Such dual registration information of the customer is stored in the customer database (S2). If registration is completed normally, the customer is notified of the completion of registration (S3). When the customer enters the authentication information in the terminals (102-1 ~ 102-n) for the transaction in the registered state as described above, the server 120 reads the customer information from the database 124 of the customer entered authentication If the inputted authentication information is normal authentication information after comparing with the information, the transaction is processed normally. If the abnormal authentication information is notified to the security company 130, the abnormal transaction is processed (S4 to S9).

3 is an embodiment in which the present invention is applied to a bank account of a financial institution.

Referring to FIG. 3, when a new customer opens a bank account, the customer's transaction information is divided into normal transaction information and abnormal transaction information and registered twice (301 to 303). In the case of an existing trading customer, if the account is not a dual registration account, the transaction information can be registered twice as required by the customer. In bank transactions, transaction information includes passwords and digital signature authentication. For example, when managing with a password, a password to be used for normal transactions at the time of initial registration is registered as "1234", and the password for abnormal transactions is registered as "4321". At this time, the password system needs to be registered and managed in the same number system according to the decision of the financial sector. And In the case of management by digital signature authentication, the authentication information for normal transactions and the authentication information for abnormal transactions are registered in the same manner. When handwritten signature is required as the authentication information, the handwritten signature for normal transaction and the handwritten signature for abnormal transaction should be registered in the same way, and the software such as signature registration, modification, deletion, etc. can be inputted to the ATM terminal. The part must be added, and in hardware, an ATM terminal must be equipped with a device that a financial trader can sign directly. Such a function may basically use an input method using a touch screen of an ATM terminal. However, if an input method using a touch screen is impossible due to the characteristics of an ATM terminal, an auxiliary device may be used. And the input method follows the four-digit password system that is currently managed in the financial sector, and can be determined by respecting the free will of the financial trader by inputting the signature by separating each of the four digits or by overlapping the signature. The electronic signature input means can be applied to other electronic devices such as PDAs, digitally signable cell phones, desktop PCs, and notebook PCs.

As such, if the customer or agent inputs the transaction information for the transaction after registering the transaction information twice, if the transaction information is normal compared to the customer information of the pre-registered account, the normal procedure such as account transfer or cash withdrawal is required according to the customer's request. If the transaction information is abnormal, the trader secretly notifies the security company or the police station, and then photographs and monitors the trader through CCTV, and delays the transaction or processes it in an abnormal manner while preventing the trader from noticing it.

As described above, according to the present invention, when transaction information is forced to be disclosed due to coercion or intimidation, abnormal transaction information is disclosed to detect illegal traders dealing with abnormal transaction information and take appropriate measures without the knowledge of illegal traders. Doing so has the added benefit of keeping your customers safer.

4 is an embodiment when the present invention is applied to an entrance security system.

Referring to FIG. 4, after installing the access security system, the security authentication information is divided into security authentication information at normal time and security authentication information at abnormal time in the accessor registration process and registered in the security DB in duplicate. For example, in the case of fingerprint authentication, the thumb fingerprint is registered as security authentication information in the case of normal transaction by the person, and in the case of abnormal transaction, other fingerprints other than the thumb are registered as security authentication information. In the case of hand vein authentication, the right hand vein pattern is registered in case of normal transaction by the person, and in the case of abnormal transaction, the left hand vein pattern is registered. In the case of hand shape authentication, the right hand shape is registered in the normal transaction by the person, and in the case of abnormal transaction, the left hand shape is registered. In the case of iris authentication, the iris of the right eye is registered during normal transactions by the person, and in the case of abnormal transactions, the iris of the left eye is registered. In the case of the password management system using the Internet, it is classified into a password to be used for normal transactions and a password to be used for abnormalities.

In this case, after registering the normal security authentication information and abnormal security authentication information in normal cases, the normal security authentication information is authenticated and processed normally, and abnormal security in case of abnormality such as coercion or intimidation. By authenticating with the authentication information, the security system can recognize it and take appropriate action.

Referring to FIG. 4 again, after registering security authentication information in a security DB, security authentication information is input to an authentication terminal such as a fingerprint recognition device, an iris recognition device, a vein recognition device, etc. for access (S402, 403). In this case, normal security authentication information (eg, right-hand fingerprint or right-hand vein) is input, and abnormal security authentication information (eg, left-hand fingerprint or left-hand vein) is input.

The security (authentication) system compares the inputted authentication information with pre-registered information to perform normal operation if it is normal security authentication information, and generates an alarm after generating an alarm if it is abnormal security authentication information (404 to 407). ).

As described above, according to the present invention, when registering personal information (authentication information), the normal authentication information and the abnormal authentication information are registered separately, and the normal authentication information is input in the normal state and processed, and the abnormality is abnormal. By inputting authentication information, there is an advantage to prevent transactions or entry by coercion, coercion, or threat.

Claims (4)

An authentication information registration step of separately registering normal authentication information and abnormal authentication information for any user; An authentication information determining step of comparing the input authentication information with the registered authentication information to determine whether the user is in a normal state or an abnormal state; And And a warning step of generating a preset alarm or notifying a specific place and taking an action according to the abnormal condition when the determination result is an abnormal state. The method of claim 1, wherein the authentication information is any one of a password, fingerprint information, hand vein information, hand shape, and iris information. According to claim 1, The authentication method using the dual registration information, When applied to financial transactions, when a customer opens an account, he / she registers a normal password and an abnormal password, and if an abnormal password is entered, delays the transaction and photographs and monitors the trader. Authentication method. According to claim 1, The authentication method using the dual registration information, When applied to the access security system, the customer registers the biometric information using the biometric terminal and registers the normal security authentication information and abnormal security authentication information, and then inputs the normal security authentication information in case of abnormality and abnormal security authentication information in case of abnormality. Authentication method using dual registration information, characterized in that.