KR20040052661A - A method and apparatus for offering user access control using muti-biometric authentication based on network - Google Patents

Abstract

PURPOSE: A method for controlling the network based entry management using a multi-biometric certification technology and a device for executing the same are provided to remarkably enhance security by making a user provide a fingerprint to a fingerprint certification device and offer a voice to a microphone, and making a central certification server finally judge identification through each result. CONSTITUTION: A multi-biometric certification terminal(100) and a lock(400) are installed to a place for controlling entry. A multi-biometric registering terminal(500) registers the voice and the fingerprint of a user by installing to the center. The central certification server(200) certifies/registers the voice/fingerprint data by exchanging a message with the multi-biometric terminal and the multi-biometric registering terminal through a TCP/IP(Transmission Control Protocol/Internet Protocol) network. A database server(300) stores/provides the voice and the fingerprint of the registered user.

Description

Network-based access management control method using multiple biometric authentication technology and apparatus for performing the same {A METHOD AND APPARATUS FOR OFFERING USER ACCESS CONTROL USING MUTI-BIOMETRIC AUTHENTICATION BASED ON NETWORK}

The present invention relates to an access management control security and device using a biometric authentication technology, at the same time to increase the security by simultaneously using two or more biometric authentication technology, in particular the speaker authentication technology using voice and the fingerprint authentication technology using a fingerprint. In addition, the present invention relates to a method and apparatus for reducing user inconvenience caused by system failure.

Recently, in order to protect valuable assets in the home or company, the introduction of a system using biometric authentication technology in addition to the existing access card or password input access management system is being actively considered. This is more urgently needed along with the enhancement of residential space and the increasing need for security of intellectual property in the company. High reliability and ease of use are also considered as important factors.

Due to the occurrence of an incident that violates the safety of electronic financial transactions, such as cash card, phone banking and internet banking accidents, there is concern about the user's trust in electronic financial transactions and the promotion of financial business efficiency by activating electronic financial transactions. have.

There are many types of biometric authentication technologies for fingerprints, irises, faces, hands, and voices, and the risk of loss and theft is small, thus providing a convenient and significant level of security. There is no guarantee of sex. Each biocharacteristic may have variations caused by environmental factors, time changes, or inadvertent biomarkers, and consideration of such variations naturally involves a small probability of passing others who are not themselves. Reducing the tolerance for these mutations in order to minimize the involvement of others can lead to the inconvenience of being rejected despite being yourself.

In addition, all equipment or systems have the possibility of failure, and if the access management system relies on one method, it may cause inconvenience to the user or, conversely, if the security process is omitted to avoid this, the security may be broken.

The present invention has been designed to solve the above problems, the user requesting access provides a voice to the device for fingerprint authentication and at the same time provide a voice through the microphone and the central authentication server collects each result The final decision is whether to significantly increase security.

It is another object of the present invention to minimize the inconvenience caused by additional authentication process by simultaneously performing the other authentication process after one biometric authentication in the above authentication process and at the same time security by the remaining authentication process when one authentication device fails By performing the process on a more strict basis, it is inconvenient to prevent access and, conversely, to prevent security weakness due to the omission of the authentication process.

Still another object of the present invention is to provide a function of pre-registering fingerprints and voices of users for performing the above authentication process.

1 is a view showing the overall configuration of the access management system using multiple biometric authentication technology according to an embodiment of the present invention.

2 is a diagram showing the configuration of a terminal device for multiple biometric authentication according to an embodiment of the present invention.

Figure 3 is a view showing the position and shape of the authentication request button in the terminal device for multiple biometric authentication according to an embodiment of the present invention.

Figure 4 is a flow chart schematically showing the flow of a procedure for performing a multi-biometric authentication service when a user access request according to an embodiment of the present invention.

FIG. 5 is a flowchart schematically illustrating a flow of a procedure for performing a biometric authentication service when a fingerprint processing device error occurs when a user accesses or requests a user according to an exemplary embodiment of the present invention. FIG.

6 is a flowchart schematically illustrating a flow of a procedure for performing a biometric authentication service when a voice processing device error occurs when a user access request according to an exemplary embodiment of the present invention.

7 is a diagram illustrating a configuration of a terminal device for multiple biometric registration according to an embodiment of the present invention.

8 is a flowchart schematically illustrating a flow of a procedure of performing a voice registration service when a user registers a request according to an exemplary embodiment of the present invention.

9 is a flowchart schematically illustrating a flow of a procedure for performing a fingerprint registration service when a user registers a request according to an exemplary embodiment of the present invention.

In order to achieve the above object, the present invention is located in the central biometric authentication terminal device 100 and the security device 400, which is installed in a place for access control to perform voice, fingerprint registration for a user's new or changed use Multiple bio-registration terminal device 500, multiple biometric terminal device 100 and multiple bio-registration device device 500 and multiple bio-registration terminal device 500 to exchange voice and fingerprint data through a TCP / IP network. It includes a central authentication server 200 for performing authentication and registration, DB server 300 for storing and providing a registered user voice, fingerprint.

Now with reference to the drawings for a preferred embodiment of the present invention will be described in detail.

1 is a view showing the overall configuration of the access management system using multiple biometric authentication technology. For user authentication, voice and fingerprint information of a user must be registered first, and the registered information is stored in the DB server 300 and used when necessary.

2 is a view showing the internal configuration of the multi-biometric terminal device with the connection to the test device. It consists of two largely independent devices, the voice processing device 110 and the fingerprint processing device 120, each of which receives an authentication request signal from the authentication request button 130 and starts its operation. After the voice or fingerprint data transfer to the responsible for the guidance and control device 400 according to the result. The voice processing apparatus 110 includes a built-in microphone 111 for inputting a user's voice, a speaker 112 for outputting guide voice, a voice processing module 113 for converting and processing the input voice digitally, and a center. Communication module 115 in charge of communication with the server, and the CPU 114 for controlling and determining all operations of each module. The fingerprint processing apparatus 120 includes a fingerprint input device 121 for scanning an image of a fingerprint through a transparent panel, a fingerprint processing module 122 for converting and processing the input fingerprint image into digital, and communication with a central server. The communication module 124 in charge of the control, and the CPU 123 for controlling and determining all operations of each module. The signal of the authentication request button 130 is transmitted to each CPU of the voice processing device 110 and the fingerprint processing device 120. As shown in FIG. It is designed to transmit signals automatically, eliminating the need for a separate sensor or button operation.

4 is a flowchart schematically illustrating a flow of a procedure for performing a multi-biometric authentication service upon user access request according to an exemplary embodiment of the present invention.

When the user's finger is placed on the window of the fingerprint input device 121, an authentication request signal is transmitted to the voice processing device 110 and the fingerprint processing device 120 (S100). At this time, the fingerprint processing device 120 displays an image of the fingerprint. Input (S120-1) and the voice processing apparatus 110 inputs the user's voice to answer, such as "Hong Gil-dong" according to the guide voice (S110) in the speaker 112 (S120) The processing proceeds at the same time on each device. At this time, the input fingerprint and voice of the user is transmitted to the central server 200 together with the identification number of the terminal device (S130, S130-1) and the voice recognition whether any of the target users registered in advance as a user of the terminal device It is found (S140). One of the features of the present invention is that it finds the corresponding user by performing voice recognition on the voice spoken for voice authentication without inputting a separate user identification number. Then, after loading the voice feature of the corresponding user (S150) and performing voice authentication (S160) to calculate the result value according to the voice authentication (S170) and at the same time loading the fingerprint feature of the user (S150-1) fingerprint authentication In operation S160-1, a result value according to fingerprint authentication is calculated (S170-1). Thereafter, the central server 200 adds up each result value to make a final determination (S180) and transmits the determination result to the voice processing device and the fingerprint processing device (S190). If the authentication is successful, the voice processing device 110, "Welcome. Hong Gil-dong" while the guide voice is output (S200), the fingerprint processing device 120 sends an operation signal to the lock device 400 opens the door ( S210). In the case of authentication failure, the voice processing device 110 outputs a guide voice such as "Sorry. Authentication failed" (S200) and does not send any operation signal from the fingerprint processing device 120 to the locker 400 ( S210).

FIG. 5 is a flowchart schematically illustrating a flow of a procedure for performing a biometric authentication service when a fingerprint processing device error occurs when a user accesses or requests a user according to an exemplary embodiment of the present invention.

When the user's finger is placed on the window of the fingerprint input device 121, even when an error occurs in the fingerprint processing device 120, the authentication request button 130 is a separate device, so the authentication request signal is transmitted to the voice processing device 110 (S300). In the voice processing apparatus 110, the speaker 112 inputs a voice of a user who answers like “Hong Gil Dong” along with a guide voice such as “Who are you?” (S310) (S320). At this time, the input user's voice is transmitted to the central server 200 together with the identification number of the terminal device (S330) and finds out by voice recognition whether any of the target users are registered in advance as a user of the terminal device (S340). Thereafter, the voice feature of the corresponding user is loaded (S350), and then voice authentication is performed (S360) to calculate a result value according to voice authentication (S370). Thereafter, the central server 200 makes a final determination according to the result of each voice authentication (S380) and transmits the determination result to the voice processing apparatus (S390). If the authentication is successful, the voice processing device 110, "Welcome. Hong Gil-dong" while the guide voice is output (S400) to open the door to send the operation signal to the lock device (S410). In the case of authentication failure, the voice processing device 110 outputs a guide voice such as "Sorry. Authentication failed" (S400) and does not send any operation signal to the key device 400 (S410).

6 is a flowchart schematically illustrating a flow of a procedure for performing a biometric authentication service when a voice processing device error occurs when a user access request according to an exemplary embodiment of the present invention.

When the user's finger is placed on the window of the fingerprint input device 121, the authentication request signal is transmitted to the fingerprint processing device 120 (S500). The fingerprint processing device 120 inputs an image of the fingerprint (S510). Proceed. At this time, the input fingerprint image is transmitted to the central server 200 together with the identification number of the terminal device (S520), and the fingerprint authentication is performed by loading the features of the target persons who are registered as users of the corresponding terminal device one by one (S530). (S540). Accordingly, if there is a matched target through the fingerprint authentication result calculation (S550) and the determination (S560), a success result is transmitted to the fingerprint processing device (S570) and the fingerprint processing device 120 operates as the locker device 400. Opens the door by sending a signal (S580). If there is no match, a failure result is transmitted to the fingerprint processing apparatus (S571), and only a failure buzzer sounds from the fingerprint processing apparatus 120 (S581), and no operation signal is sent to the key device 400.

7 is a diagram illustrating a configuration of a terminal device for multiple biometric registration according to an embodiment of the present invention.

The terminal device for registration is almost similar to the terminal device for authentication, but the difference is that it is located at the central management place together with the central authentication server 200 and is used when a new user is generated or when the registration is changed by a user's request. There is no 130 and is driven and operated through communication with a program module for registration of the central authentication server 200 without interlocking with the lock device 400.

8 is a flowchart schematically illustrating a flow of a procedure of performing a voice registration service in a user registration request according to an exemplary embodiment of the present invention.

User voice registration is started by driving the voice registration program module of the central authentication server 200 (S610). When a confirmation button is pressed after the identification number input (S620) and the user identification number input (S630) of the multi-biometric authentication terminal device required by the program, the registration command request is transmitted to the voice processing device 510 (S640). The voice processing apparatus 510 exports the guide voice according to the registration (S650), receives the user's voice input (S660), and delivers it back to the central authentication server (S670). In the case of voice authentication, the more the user's voice is received at the time of registration, the performance is stabilized. It is determined whether it is necessary (S680). If additional voice is required, the registration command request is repeated (S640), otherwise the user voice feature is registered (S690) and terminates.

9 is a flowchart schematically illustrating a flow of a procedure for performing a fingerprint registration service in a user registration request according to an exemplary embodiment of the present invention.

The user fingerprint registration is started by driving the fingerprint registration program module of the central authentication server 200 (S710). When a confirmation button is pressed after the identification number input (S720) and the user identification number input (S730) of the multi-biometric terminal device required by the program, the registration command request is transmitted to the fingerprint processing device 520 (S740). The fingerprint processing apparatus 520 emits an input request buzzer according to registration such as a "beep" sound (S750), receives a user fingerprint input (S760), and delivers it back to the central authentication server (S770). In the case of fingerprint authentication, when only the fingerprint for one finger is used at the time of registration, an unusable situation may occur due to fingerprint damage, so extra fingerprint registration is appropriate and the central authentication server 200 determines whether it is more necessary according to the set value. Will be (S780). If additional fingerprint is required, the registration command is repeated from the request (S740), otherwise the user fingerprint feature is registered (S790) and ends.

According to the present invention, it is possible to minimize errors due to a single biometric authentication method, reduce user inconvenience due to system failure, and obtain an intangible secure key without risk of loss and theft through a single fingerprint and voice registration process. have.

Claims (11)

In the access control method and apparatus using biometric authentication technology, at the same time by combining two or more biometric authentication technologies, in particular speaker authentication technology using voice and fingerprint authentication technology using fingerprint at the same time to increase the security and the system failure Multiple biometric access control method and device characterized in that to reduce the user inconvenience. According to claim 1, The system is located in the multi-person biometric terminal device 100 and the security device 400, which is installed in a place for access control, centrally located to perform voice, fingerprint registration for new or changed use of the user Send and receive messages with the multiple biometric terminal device 500, the multiple biometric terminal device 100 and the multiple biometric terminal device 500 through a TCP / IP network, and receive voice and fingerprint data to authenticate voice and fingerprints. And a central authentication server 200 for performing registration, and a DB server 300 for storing and providing registered user voices and fingerprints. According to claim 1, wherein each of the independent voice processing device 110 and fingerprint processing device 120 is composed of a central authentication server 200 to send and receive messages through the TCP / IP network from the authentication request button 130 The multi-biometric terminal device 100, characterized in that driven by receiving the authentication request signal to control the lock device according to the final result According to claim 1, wherein each of the independent voice processing device 510 and fingerprint processing device 520 is composed of a registration request command from the central authentication server 200 through the TCP / IP network to receive the input of voice or fingerprint Multi biometric terminal device 500, characterized in that for performing the input data back to the central authentication server The method of claim 3, wherein the authentication request button 130 is positioned at the lower end of the transparent fingerprint input window of the fingerprint input device 121 to automatically output an authentication request signal when the user places a finger. Method of driving a terminal device, characterized in that to drive the authentication terminal 100 only if necessary and eliminate the need In the access control method and apparatus using biometric authentication technology, at the same time by combining two or more biometric authentication technologies, in particular speaker authentication technology using voice and fingerprint authentication technology using fingerprint at the same time to increase the security and the system failure Multiple biometric access control method and device characterized in that to reduce the user inconvenience. In the procedure of performing a multi-biometric authentication service when a user access request, multi-biometric authentication method characterized in that the input and transmission of the voice and fingerprint, and the authentication is performed at the same time. In the procedure of performing a multi-biometric authentication service when a user access request, multi-biometric authentication method characterized in that the security is increased by collecting the final authentication result of each authentication for the voice and fingerprint. In the procedure of performing the multi-biometric authentication service when a user accesses a request, the user recognizes who is the user by performing voice recognition on the voice of the user spoken for voice authentication without inputting a separate user identification number. A method of performing a multi biometric authentication service, characterized in that for loading a user's voice feature and fingerprint feature. In the procedure of performing a multi-biometric authentication service when a user access request, the method of performing a multi-biometric authentication service, characterized in that operated by the voice processing device (110) without interruption of service when an error occurs in the fingerprint processing device (120). In the procedure of performing a multi-biometric authentication service when a user access request, the method of performing a multi-biometric authentication service, characterized in that operated by the fingerprint processing device (120) without interruption of service when an error occurs in the processing device (110).