KR20040105089A - Method and Appratus for proving the identity using the piled written secret number - Google Patents

Abstract

PURPOSE: A method and a device for certifying identification using an overlapped written password through password/handwriting recognition are provided to make other person unable to discriminate the password and doubly certify the identification through the password/handwriting recognition, when a user writes the password for using a CD(Cash Dispenser) or entering a specified place. CONSTITUTION: An overlapped password recognition module(102) recognizes the inputted overlapped password as a graphic state. A password extracting module(103) extracts the password from the overlapped password. A handwriting extracting module(104) extracts handwriting from the overlapped password. A password comparing module(105) compares the extracted password with the password of an original copy. A handwriting comparing module(106) compares the extracted handwriting with the handwriting of the original copy.

Description

Identity and Appratus for proving the identity using the piled written secret number}

The present invention relates to an identity authentication method and apparatus using a superimposed password, and more specifically, to prove that a person having a legitimate qualification at the time of cash withdrawal in a cash dispenser or entering a specific place. The present invention relates to an identity authentication method and apparatus for disabling password identification by another person and authenticating the identity by recognizing the password itself and handwriting.

Various forms of authentication are used for depositing or withdrawing cash from a cash dispenser or accessing a place where access is restricted.To date, four or more digits of passwords have been used. Is fulfilling.

The password authentication method is a method of inputting by pressing a predetermined number key on the keypad or touch screen, but due to the problem that passwords are easy to be stolen by others, the use of the method of directly inputting a number by yourself is increasing. to be. The method of manually inputting a password has an advantage in that security is improved as compared to the conventional simple numeric input method because it is possible to compare the user handwriting as well as the authentication of the number itself.

However, since the handwriting of human beings is easy to imitate, there is a problem that security is easily disabled when a password is stolen. For example, if someone (for example, a bank employee) knows the password of a person's savings account, there is a possibility that they can rob their deposits by acquiring their own handwriting.

Therefore, it is required to prevent the number itself from being recognized when entering a password. This demand is equally required in all fields, such as withdrawal of bank deposits, credit cards for authenticating a person using a password, and door control devices requiring identity verification.

As another authentication method, it is known to withdraw deposits by entering different passwords in normal and abnormal situations, but this method is also weak in security, and there is a risk that the setting of a double password is exposed to strength. It is not widely used. Therefore, a highly secure authentication method is required.

The present invention has been made to solve the above problems, an object of the present invention is to directly enter a password to prove that the person with a legitimate qualification at the time of cash withdrawal at the ATM or when entering a specific place. It is to provide an identity authentication method and apparatus that makes it impossible to identify passwords and recognizes the password itself and handwriting to double-identify the identity.

1 is a perspective view of an automatic teller machine to which the identity authentication method of the present invention is applied;

2 is a schematic block circuit diagram of the ATM machine of FIG. 1;

3 is a flow chart illustrating an identity authentication method of the present invention;

4 is a block circuit diagram of the controller of FIG. 2;

5 is a superimposed password input state according to the present invention,

6 is an input state diagram using a dedicated pad for password input according to the present invention;

7 is a screen example showing an identity verification result;

8 is a conceptual diagram of a network to which the identification authentication method of the present invention is applied.

※ Explanation of symbols about main part of drawing ※

10: cash dispenser 12: display window

14a: Menu Button 14b: Numeric Input Window

16: Card input holder 18: Pad for password input

100: control unit 101: control module

102: overlapping password recognition module 103: password extraction module

104: handwriting extraction module 105: password comparison module

106: handwriting comparison module 110: memory unit

120: password input unit 130: input unit

140: LCD display unit 150: card reading unit

160: discharge unit 170: authentication database

180: audio output unit

The identity authentication method using the superimposed password of the present invention for achieving the above object is a method for authenticating the identity by inputting the user by directly inputting the password and recognizing it, wherein the original password for authentication is superimposed First step; A second step of storing the input overlapping password in an authentication database; A third step of outputting a menu screen when the password input request is called in the standby state; A fourth step of overlapping passwords and displaying them on a screen when a password is input; A fifth step of recognizing the displayed superimposed password; Extracting a password and a handwriting from the recognized superimposed password; A seventh step of comparing the numbers and the handwriting of the password with the original overlapping password; And an eighth step of displaying the authentication contents or rejecting the authentication according to the comparison result.

In addition, the identity authentication device of the present invention, in the device for the user to enter the password directly to recognize the identity by recognizing this, the control module for the device to control the entire device, and the input superimposed password in a graphical state Comparing the overlapping password recognition module for recognizing, the password extraction module for extracting the password from the overlapping password, the handwriting extraction module for extracting the handwriting from the overlapping password, and the password extracted by the password extraction module and the original password And a handwriting comparison module for comparing the handwriting extraction module and the handwriting of the original.

Hereinafter, an identity authentication method and apparatus of the present invention will be described in detail with reference to the accompanying drawings.

In the present invention, the authentication method for authenticating the identity using a conventional password prevents others from fundamentally recognizing the password and also prevents the handwriting from being used by using a superimposed password. to be. This identity authentication method can be applied to devices for entering and entering a password for identity authentication, such as an automatic teller machine, an entrance control device, and the like.

In the identity authentication method of the present invention as described above, referring to FIG. 3, in a device for authenticating an identity by directly inputting a password and recognizing the password, a first step of overlapping and inputting an original password for authentication is provided. ; A second step of storing the input overlapping password in an authentication database; A third step of outputting a menu screen when the password input request is called in the standby state; A fourth step of overlapping passwords and displaying them on a screen when a password is input; A fifth step of recognizing the displayed superimposed password; Extracting a password and a handwriting from the recognized superimposed password; A seventh step of comparing the numbers and the handwriting of the password with the original overlapping password; And an eighth step of displaying the authentication contents or rejecting the authentication according to the comparison result.

First, set a nested password to authenticate yourself. The password may be configured by the user as "4" or more digits (set to 4 characters for convenience of explanation). The password set as described above is described as a first step of the present invention by superimposing one digit or one space without describing four consecutive numbers as in the prior art (S1). The overlapping method can be nested in one digit or one space, or in four digits and then programmatically overlapped.

When the superimposed password in which the passwords are superimposed as described above is set, as the second step (S2) of the present invention, it is converted into a graphic form and stored. Storing the nested passwords graphically can be accomplished by the prior art. The storage of the overlapping password may be stored in an authentication database (for example, a bank or an authorized authority for identity assurance) of an authority that performs security authentication or transmitted to an authentication database of a corresponding device that directly performs authentication.

As the password of the overlapping graphic form as described above is difficult to identify the number with the naked eye, there is an effect that the theft by the internal staff is fundamentally prevented. In addition, the superimposed password may include not only numbers but also everything that a person can write by hand, such as Chinese characters, Hangul, figures, mathematical symbols, Braille, etc., collectively referred to as a password for convenience of explanation.

After the overlapping password is stored as above, the standby state is maintained. In this case, it is assumed that all of the authentication passwords are stored in the authentication database. The standby state means a standby state of an apparatus to which the method of the present invention is applied, for example, an ATM machine.

In the standby state as described above, as a third step of the present invention, if a specific person requests cash withdrawal and input of a password is required, a menu screen for inputting a password is output. The output of the menu screen is output and displayed on the LCD display of the device (S3).

According to the menu screen, the user inputs his password in a superimposed state. The superimposed input state of the password can be configured in various ways. For example, the window of the menu screen can be configured to input only one digit and four numbers can be entered in the same window sequentially, or four windows can be configured and one number can be entered in each window. .

In the former case, passwords are automatically superimposed, and in the latter case, the numbers entered are combined programmatically. This configuration choice can be flexibly applied depending on the apparatus to which the present invention is applied. Of course, it is obvious that password numbers can be entered and superimposed in other ways, and all such modifications and variations are included within the scope of the present invention.

As the fourth step of the present invention, each password inputted at the time of inputting the password is not displayed directly on the input window, but is displayed in a form superimposed on another display window (S4). When the password is displayed in this nested state, the user can check whether the nested password matches what he intended.

The overlapping password is displayed as described above, and the overlapping password is recognized by the corresponding device as the fifth step of the present invention (S5). This recognition is characterized by being recognized in graphic form. After being recognized in graphic form, as a sixth step of the present invention, the number and handwriting of the password are extracted from the superimposed password (S6).

Extraction of the number and handwriting as described above is performed by specific modules having a graphic recognition function. Extraction of numbers and handwriting can be done in the same way as, for example, 1) converting the superimposed passwords into a state that is easy to compare by arranging the outline, or 2) recognizing the actual superimposed numbers and the handwriting of each number. Can be. In the former case, the processing is simplified but security is inferior. In the latter, the process is complicated but the security is enhanced.

After the numbers and the handwriting are extracted from the superimposed passwords as described above, as a seventh step, they are compared with the superimposed superimposed password originals (S7). This comparison process is performed in accordance with the extraction process described above, respectively.

As a result of comparison with the original, if the password number of the superimposed password and the handwriting match, as an eighth step of the present invention, an authentication confirmation message is output. Thereafter, the following processing inputted through the menu screen is performed, for example, cash withdrawal or door opening.

However, if the result of the comparison does not match, a status of "deny" is displayed. Thereafter, the processing inputted through the menu screen is performed. As described above, when the "rejection" state is detected three or more times for the same user, the user can cope with the same method as stopping the deposit withdrawal or calling a security guard.

An embodiment of the apparatus to which the method of the present invention is applied as described above is described below.

1 is an external perspective view of a cash dispenser 10 conventionally used. On the front side, a card input holder 16 for reading a card (not shown) is installed at one side, and in the center there is a display window 12 on which a menu button 14a and a menu input window 14b are displayed. In the outlet 19 for dispensing money is provided.

In addition, in the present invention, a password input pad 18 for inputting a user by writing a password directly when the password is input may be installed. In the present invention, by using the display window 12 using the touch screen as well as the password input pad 18, the user directly inputs the password using a finger.

FIG. 2 is a schematic block circuit diagram of the cash dispenser 10 of FIG. As shown, the control unit 100 for controlling the cash dispenser 10 by using a control program and control data stored in the memory unit 110, and a password input unit for receiving a password in the same manner as writing the number directly ( 120, an input unit 130 for a user to input specific data and control commands, an LCD display 140 for displaying menu screens and information necessary for operation to the user, and a card reader for recognizing a card ( 150, an output unit 160 for dispensing money and a specification table requested by the user, an authentication database 170 for storing authentication information for user authentication, and a voice output unit for guiding the user by voice. And 180. The configuration of the block circuit diagram is limited to the cash dispenser 10 conventionally used, and it is obvious that the present invention can be changed according to the apparatus to which the present invention is applied.

4 is a block circuit diagram when used as an identity authentication device as one embodiment of the control unit 100 of FIG. The control unit 100 is used to recognize and compare the numbers and the handwriting for the numbers from the overlapping password, respectively. As shown, the control unit 100 includes a control module 101, a superimposed password recognition module 102 for recognizing the input superimposed password in a graphic state, and a password extraction module 103 for extracting a password from the superimposed password. And a handwriting extraction module 104 for extracting the handwriting from the superimposed password, a password comparison module 105 for comparing the password extracted by the password extraction module 103 with the original password, and the handwriting extraction module. And a handwriting comparison module 106 for comparing the handwriting of the original text with 104.

Application state of the present invention in the ATM (10) configured as described above is as follows. First, in order to perform the identity authentication method of the present invention, it is assumed that the overlapping password is stored in advance after being created by the user.

When the user passes the card input holder 16 to recognize the card for cash withdrawal, the card data is read by the card reader 150 to which the card input holder 16 is connected, and is input to the controller 100. . The controller 100 outputs a menu screen accordingly.

The menu displayed through the menu screen is a menu such as "inquiry", "cash withdrawal", bank transfer, etc. As described above, when the user selects a particular menu while the menu is displayed, the control unit 100 controls the corresponding menu. Output a submenu to process the menu In this process, authentication is required to confirm that the user is a legitimate holder.

According to the present invention, in the authentication operation as described above, the superimposed password is inputted without superimposing the password as in the prior art. An example of the input of the overlapping password is shown in FIGS. 5 and 6. 5 is input through the menu input window 14b of the conventional input window 12, and corresponds to the case of using a touch screen.

When inputting a password using a touch screen, it is preferable that the user directly inputs using a finger. This is because the thickness of the human finger tip is wrong, even if the handwriting is imitated, the thickness of the letter is different, there is an advantage that the forgery or modulation is difficult.

As shown in the figure, when the menu input window 14b for inputting a single digit is displayed, the user inputs the password by using a finger. The password input through the menu input window 14b is input to the controller 100 through the input unit 130. In order to accurately recognize the overlapping password at the time of input, it is preferable to display a reference point of the input as (+) on the screen or to separate the zone using the display line as the menu input window 14b, for example, 3X3.

In addition, through the voice output unit 180, "Please enter the first digit of the password in the menu input window now" through the voice output unit 180, "Enter the second digit of the password in the menu input window now. Please do the announcement. " It is apparent that such voice announcement may be variously changed according to the apparatus to which the present invention is applied.

In addition, in the case of FIG. 6, a password input pad 18 connected to the password input unit 120 is used, and a password may be connected and input to each of the separate compartments 22a. The password entered as described above is not actually displayed so that others cannot recognize the password. Instead, when the input of the password is completed, the overlapping password is displayed as shown in FIG.

The user can check the overlapping password and directly check whether the password he entered is similar to the original. In this process, if the overlapping password entered with the original shows a lot of difference, the user can directly cancel the overlapping password and enter it again.

After the input of the overlapping password is completed by the user and the overlapping password is displayed, the controller 100 recognizes the overlapping password as a graphic state. This recognition is performed by the overlapping password recognition module 102. After the overlapping password is recognized as a graphic state as described above, the password and the handwriting are extracted by the password extraction module 103 and the handwriting extraction module 104, respectively. After the extraction as described above, the password by the password comparison module 105 for comparing the extracted password and the original, and the handwriting extraction module 104 and the handwriting comparison module 106 for comparing the handwriting of the original password, respectively And handwriting are compared. The original overlapping password is stored in the authentication database 170 and used for comparison after being read by the control module 101.

As a result of comparing the superimposed password and the original superimposed password, if both the password and the handwriting match, the control unit 100 outputs a message "Password matches" as shown in FIG. 7 and outputs a menu for the next processing. The user sees the menu and selects and inputs a desired command. However, if either or both of the passwords and handwriting do not match, the comparison prints a message "Does not match" and waits for the next menu entry.

In the above description of the present invention has been given an example of a device used alone, as shown in Figure 8 can be controlled by connecting a plurality of ATMs 10 through the Internet communication network or dedicated warfare.

In this case, the authentication database 170 shown in FIG. 2 is located in the server 30, and in each of the ATMs 10, the original superimposition password of the specific person stored in the server 30 using the data communication module. Receives data and performs authentication. Alternatively, after receiving the overlapping password inputted from the cash dispenser 10 in the server 30 and performing an authentication operation, only the result may be transmitted to the corresponding cash dispenser 10. In this case, the automatic teller machine 10 may receive the result and output the result as shown in FIG. 7 or display a "deny" message.

In the above description of the present invention, the cash dispenser 10 is taken as an example, but in the case of the door management apparatus, it is apparent that the discharge unit 160 can be removed and used in FIG. 2. That is, in the state excluding the money dispensing unit 160, the password input unit 120, the input unit 130 receives the superimposed password, the card reader 150 confirms that the manager has a legitimate access authority And it can be configured in the same way as performing authentication using a password entered by the administrator.

According to the present invention as described above, it is impossible to identify the password of another person and recognize the password itself and the handwriting when the password is directly entered in order to prove that the cash dispenser at the automatic teller machine has a proper qualification when entering a specific place. It is effective in increasing security by authenticating identity.

Claims (10)

A device for authenticating an identity by inputting a user by directly inputting a password and recognizing it, A first step of overlapping and inputting an original password for authentication; A second step of storing the input overlapping password in an authentication database; A third step of outputting a menu screen when the password input request is called in the standby state; A fourth step of overlapping passwords and displaying them on a screen when a password is input; A fifth step of recognizing the displayed superimposed password; Extracting a password and a handwriting from the recognized superimposed password; A seventh step of comparing the numbers and the handwriting of the password with the original overlapping password; And an eighth step of displaying the authentication contents or rejecting the authentication according to the comparison result. The method of claim 1, Identity authentication method using a superimposed password characterized in that the authentication is performed by entering letters, figures, symbols, etc. instead of the password. The method of claim 1, The authentication method using the superimposed password, characterized in that the input of the overlapping password is configured to input only one digit of the window of the menu screen and sequentially input four numbers in the same window. The method of claim 1, The input of the overlapping password constitutes four windows, and the identification authentication method using the superimposed password, characterized in that the input of each of the numbers into each window. The method of claim 1, Identity authentication method using the superimposed password, characterized in that the authentication superimposition password and the input superimposition password is recognized in a graphic form. The method of claim 1, And extracting the superimposed password inputted in the sixth step by converting the superimposed password into an easy-to-comparison state to extract the superimposed password. The method of claim 1, The identification authentication method using the overlapping password, characterized in that the extraction in the sixth step is extracted by recognizing the password of the superimposed password and the handwriting of each number described in real overlap. The method of claim 1, The original authentication password using the superimposed password, characterized in that the original password is stored in the authentication database of the server located in the remote. The method of claim 1, The password input by the user in the fourth step is not displayed in the input window, when the input is completed, the identity authentication method using the overlapping password, characterized in that is displayed in a superimposed state on another display window. A device for authenticating an identity by inputting a user by directly inputting a password and recognizing it, A control module for controlling the entire apparatus by the apparatus, a superimposition password recognition module for recognizing the input superimposition password in a graphic state, a password extraction module for extracting a password from the superimposition password, and a handwriting extraction method from the superimposition password; A handwriting extraction module, a password comparison module for comparing the password extracted by the password extraction module and the original password, and a handwriting comparison module for comparing the handwriting extraction module and the handwriting of the original; Identity authentication device using the password described.