KR20050094303A - Method and apparatus for processing of password authentication - Google Patents

Abstract

The present invention relates to a password authentication processing system and a method thereof, wherein a password screen for processing authentication is generated by using unique number information assigned to a wireless terminal carried by a user and password information of the user, and the authentication device generates a wireless terminal. By processing the password authentication through the password screen generated by the user, by processing the password authentication of the authentication device through a wireless terminal carried by the user, without the use of a separate password module, such as a smart card, password authentication by the addition of a simple software module To improve security by using a password value for password authentication by combining user password information and unique number information of the wireless terminal.

In addition, by displaying a password screen for processing password authentication through a wireless terminal in the form of a picture to prevent piracy and theft of time at the source, password authentication through the wireless terminal only in the adjacent area of the authentication device that processes password authentication This prevents the theft of the unique number information and the user password of the wireless terminal.

Description

Apparatus and method for processing password authentication {method and apparatus for processing of password authentication}

The present invention relates to an apparatus for processing password authentication and a method thereof, and more particularly, unique number information and password information of a user assigned to a wireless terminal carried by a user who wants to receive a unique function of the authentication device through password authentication. The present invention relates to a device and a method for processing password authentication with enhanced security by processing password authentication in combination.

The encryption method of a general wireless terminal may be divided into a method of directly inputting a password by a user and a method of using an encryption module such as a smart card.

First, a cryptographic module such as a smart card can be classified according to its use and function. The contactless smart card, the contact smart card, the RF card, and the magnetic film using the information of the magnetic film and the memory and the microchip are built in. Various barcodes are printed, and the barcode information can be read by a reader and used as a card.

Such a cryptographic method using a card may occur when another person's card is illegally copied and used.

In other words, the encryption method using the same encryption module as the current card, user information that can not determine the identity of the user due to theft, loss or duplication, such as smart cards, magnetic cards, IC cards, RF proximity cards, etc. In most cases, the first security information is used, and the second security information is a level that confirms the user's existence only by confirming the password through the keypad. When the card is lost or the password is exposed, the system is secured. There is a problem that can not be.

In particular, when a card is used, a method of simply storing a user's identification code in a memory of the card is used, and thus, when a user's card is stolen or lost, the user's identification code is easily exposed and its duplication is easy.

In addition, the method of using a cryptographic module such as a card has a problem in that additional cost is generated because the cryptographic module must be added separately.

In addition, there is a problem in that the user directly inputs the password so that others can easily verify and steal the user's password.

Therefore, the present invention was devised to solve the above problems, and generates a password screen for processing authentication using the unique number information assigned to the wireless terminal carried by the user and the password information of the user. It is an object of the present invention to provide an apparatus and method for processing cryptographic authentication with improved security through a cryptographic screen generated by a wireless terminal.

A terminal for processing a password authentication according to an aspect of the present invention for achieving the above object, the keypad for providing an input signal according to the user's selection, the unique number information of the terminal in accordance with the input signal provided from the keypad, Generate at least one insertion point by generating a password coordinate according to the value of one area of the set password information, set the unique number information, a password value according to the value of one area of the preset password information, the insertion point selected from the password coordinates And a control unit for generating a password screen by inserting a password figure set according to the password value.

In addition, the terminal for processing the password authentication according to the present invention further includes a display unit for displaying a password screen generated by the control unit.

In addition, the control unit of the terminal for processing the password authentication according to the present invention, the encryption coordinate unit for generating the password coordinates in accordance with the unique number information and the preset password information in accordance with the input signal provided from the keypad, Select at least one insertion point from the password coordinates generated by the coordinate unit, and set a password value using the unique number information and one area value of the preset password information, the password according to the password value at the selected point in the password coordinates It includes a password pattern unit for inserting the figure to generate the password information.

The cryptographic coordinate unit according to the present invention extracts unique number information and one region value of password information, sets different coordinate axis values of the cryptographic coordinates, and selects one region value from each axis value of the generated cryptographic coordinates. It is characterized by the mutual inversion.

In addition, the encryption pattern unit according to the present invention, at least one or more insertion points in the encryption coordinates generated by the encryption coordinate unit, and selects a predetermined number of points from each of the selected insertion point as the pattern prohibited point encryption figure according to the encryption value Without inserting, insert a cryptographic figure according to the password value set at each insertion point except the pattern prohibition point among each selected insertion point, insert the cryptographic figure according to the password value, and a predetermined area excluding the selected insertion point in the password coordinates. It is characterized by inserting a fake code figure into.

In addition, the terminal for processing the password authentication according to the present invention further comprises a signal processing unit for generating an authentication request signal including the unique number information of the terminal according to the input signal provided from the keypad and wirelessly transmits to the base station.

On the other hand, the authentication device for processing password authentication according to another aspect of the present invention, an input unit for providing a password signal according to the password information input from the user, a scan for scanning the password screen displayed on the user terminal to provide a password signal When the authentication request signal including the unique number information is received from the user terminal through the base station, processing the password authentication of the user using a password signal input through the input unit and the unique number information included in the authentication request signal. And a central processor configured to generate the reference information for the user and, when the password information according to the encryption signal provided from the scan unit matches the reference information, process password authentication for the user.

In addition, the authentication device for processing password authentication according to the present invention generates a password coordinate according to the unique number information and the value of one region of the password information, select at least one or more insertion points in the password coordinates, and to each selected insertion point It further includes a decryption unit for providing the scan signal according to the scan unit.

In addition, the password authentication processing system according to another aspect of the present invention, wirelessly transmits an authentication request signal including the unique number information according to the user's selection, and transmits the password information using the unique number information and the preset password information. A base station that generates a terminal and displays cryptographic information, and when an authentication request signal is wirelessly received from the terminal, identifies an authentication device according to the location of the wireless terminal and transmits an authentication start signal including unique number information to the authentication device. And an authentication device for processing password authentication according to the password information displayed at the terminal by using the password information input from the user and the unique number information when the authentication start signal is received from the base station.

In addition, the password authentication processing system according to the present invention manages user password information corresponding to the unique number information of the terminal, and when the authentication start signal is transmitted from the base station, retrieves the user password information corresponding to the unique number information to identify the unique number. The apparatus further includes an authentication server for transmitting the authentication start signal including the information and the user password to the authentication device.

On the other hand, the method for processing the password authentication according to another aspect of the present invention, the terminal generating the password coordinates in accordance with the unique number information and the predetermined area information of the preset password information according to the user's selection, Selecting at least one insertion point from the cryptographic coordinates to determine a pattern to insert the cryptographic figure; generating a cryptographic value according to the unique number information and the value of one region of the password information; and the cryptographic value according to the determined pattern. And inserting an encryption figure according to the method to generate an encryption screen, and displaying the generated encryption screen.

In the method of processing password authentication according to the present invention, generating the coordinate coordinates, extracting the unique number information and one area value of the password information, and the encryption coordinates by setting the extracted values as different coordinate axis values. Generating and selecting one area value of each axis value of the generated cryptographic coordinates to replace each other.

In addition, in the method for processing cryptographic authentication according to the present invention, the determination of the pattern to insert the cryptographic figure, at least one or more insertion points are selected from the generated cryptographic coordinates, a predetermined number of points from each of the selected insertion point pattern prohibition point It includes the step of selecting.

In addition, in the method for processing password authentication according to the present invention, generation of a password screen may include inserting an encryption figure according to a password value set at each insertion point except for a pattern prohibition point among each selected insertion point, and according to the password value. And inserting the cryptographic figure into the predetermined region except for the insertion point selected in the cryptographic coordinates.

In the method for processing password authentication according to the present invention, generating a password value may include extracting one area value of one piece of unique number information and one piece of password information and selecting it as a first reference value; Extracting one region value of other information and selecting the second reference value as a second reference value, and mixing each selected reference value to generate a cipher value.

In addition, the method for processing password authentication according to another aspect of the present invention, if the authentication request signal including the unique number information is transmitted from the user terminal to the base station, receiving the password information from the user, and unique number information And setting reference information, which is type information and sequence information of a cryptographic figure for processing password authentication according to one area value of the password information, and generating password coordinates according to the unique number information and one area value of the password information. Determining an insertion point into which an encryption figure for processing password authentication is inserted; scanning an encryption screen displayed on the user terminal; and types of encryption figures displayed on the insertion point identified in the scanned encryption screen. Grasping the information and the sequence information; When meet the specified criteria information, and a step of processing a password authentication with the user terminal.

In the method of processing the password authentication according to the present invention, the step of identifying the insertion point of the cryptographic figure may include extracting the unique number information and one region value of the password information, and setting the cryptographic coordinates as different coordinate axis values of the cryptographic coordinates. Generating at least one insertion point from among the axis values of the generated cryptographic coordinates, selecting at least one insertion point from the generated cryptographic coordinates, and selecting a predetermined number of selected insertion points. Identifying a point excluding the pattern prohibition point as an insertion point.

In addition, the method for processing password authentication according to another aspect of the present invention, the terminal wirelessly transmits an authentication request signal including the unique number information to the base station according to the user's selection, the terminal unique number information and Generating and displaying password information by using preset password information, when the base station receives an authentication request signal from the terminal, checking the authentication device according to the location of the terminal, and identifying the unique number by the base station to the verified authentication device. Transmitting an authentication start signal including the information, and the authentication device processes the password authentication according to the password information displayed on the terminal using the unique number information included in the authentication start signal from the base station and the password information input from the user. It includes a step.

In addition, the method for processing password authentication according to another aspect of the present invention, the terminal wirelessly transmits an authentication request signal including the unique number information to the base station according to the user's selection, the terminal unique number information and Generating and displaying cryptographic information using preset password information; when the base station receives an authentication request signal from the terminal, determining a location of the authentication device according to the location of the terminal; And transmitting the authentication start signal including the unique number information to the authentication server, and the authentication server searches for the user password information corresponding to the unique number information, and the authentication start signal including the unique number information and the user password information. Is transmitted to the authentication device, and the authentication device is included in the authentication start signal transmitted from the authentication server. Which comprises the step of using a unique number information, user password information, password authentication process in accordance with the encryption information to be displayed on the terminal.

In addition, the method for processing password authentication according to another aspect of the present invention, when the terminal inputs the password information changed according to the user's selection, the authentication request including the password information and the unique number information that the terminal is changed Transmitting a signal to the authentication server, generating password information using the changed password information and the unique number information, displaying the password information, and authenticating the password information corresponding to the unique number information by the authentication server. Changing the password information included in the request signal, and transmitting, by the authentication server, the changed password information and the unique number information to the authentication device.

Hereinafter, a password authentication processing system and a method thereof according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating a configuration of an authentication cipher processing system according to a preferred embodiment of the present invention.

Referring to FIG. 1, the authentication encryption processing system includes a wireless terminal 100, an authentication device 200, and a base station 300.

The wireless terminal 100 and the base station 300 are wirelessly connected, and the base station 300 and the authentication device 200 are connected through the network 1.

In this case, the network 1 to which the authentication device 200 and the base station 300 are connected may be a wired network or a wireless network.

The wireless terminal 100 generates an authentication request signal according to a user's selection, transmits the authentication request signal to the base station 300, generates a password screen using previously stored password and unique number information of the user, and generates the generated password screen. Display.

In this case, the wireless terminal 100 preferably stores the password information of the user while the user registers to receive authentication from the authentication device 200.

In addition, the authentication request signal generated by the wireless terminal 100 includes unique number information allocated to the wireless terminal 100.

Hereinafter, the detailed description of the present invention describes a case of processing a password authentication using an ESN (Electric Serial Number) number of the wireless terminal 100, but using a terminal assigned with unique number information such as other MAC address. When using the unique number information of the terminal, it can be seen that the same.

When the base station 300 transmits an authentication request signal from the wireless terminal 100, the base station 300 determines the location of the wireless terminal 100 to identify the authentication device 200 for which the wireless terminal 100 requests authentication.

In addition, the base station 300 transmits an authentication start signal including unique number information, that is, ESN number information of the wireless terminal 100, to the verified authentication device 200 through the network 1.

That is, the base station 300 manages the location information of each authentication device 200 included in its wireless jurisdiction area (Cell), and when the authentication request signal is transmitted from the wireless terminal 100, the corresponding wireless terminal 100. Determine the location of the check the adjacent authentication device 200.

The base station 300 transmits an authentication start signal including the ESN number information of the wireless terminal 100 to the verified authentication device 200.

At this time, the operator of the authentication cryptographic system preferably grasps the location information of each authentication device 200 included in the wireless jurisdiction cell (Cell) of each base station 300, and set the base station 300.

2 is a block diagram illustrating a configuration of a wireless terminal according to a preferred embodiment of the present invention.

Referring to FIG. 2, the wireless terminal 100 according to the present invention includes a display unit 120, a wireless interface unit 130, a keypad 110, and a central control unit 140. The generator 141 and the signal processor 142 are included.

The password generator 141 includes a password coordinate unit 141a and a password pattern unit 141b.

The keypad 110 includes a plurality of numeric buttons and special buttons, and provides an input signal according to a user's button selection.

In this case, the keypad 110 provides an authentication signal when the user selects an authentication button among the special buttons.

When the authentication signal is provided from the keypad 110, the central control unit 140 generates an authentication request signal including the ESN information, transmits the authentication request signal to the base station 300, and generates a password screen according to a preset program. The display signal according to the encryption screen is provided to the display unit 120.

The wireless interface unit 130 interfaces the authentication request signal generated by the central controller 140 to be transmitted to the base station 300 by wireless.

The display unit 120 displays the encryption screen according to the display signal provided from the central controller 140.

That is, when an authentication signal is transmitted from the keypad 110, the signal processing unit 142 of the central controller 140 generates an authentication request signal including the ESN information of the wireless terminal 100 and then, via the air interface unit 130. The base station 300 transmits.

In addition, the password generation unit 141 generates a password screen using pre-stored user password information from which the authentication signal is transmitted from the keypad 110 and unique number information of the corresponding wireless terminal 100, that is, ESN information.

The encryption coordinate unit 141a generates the coordinates of the encryption screen using the password information and the ESN information, and the encryption pattern unit 141b is a picture defined in a specific coordinate of the encryption coordinates generated by the encryption coordinate unit 141a, that is, the password. Insert a figure.

In this case, the password information of the user used by the password coordinate unit 141a and the password pattern unit 141b is number information stored in the wireless terminal 100 when the user is authenticated to use the authentication device 200.

In addition, the central control unit 140 provides the display unit 120 with a display signal according to the encryption screen generated by the encryption pattern unit 141b inserted into the encryption coordinates.

The cipher coordinate unit 141a of the cipher generator 141 generates coordinates to be used for the cipher screen using the password information and the ESN information set by the user.

In the following detailed description of the present invention, a case where 32 bits of ESN information and 32 bits of password information are used will be described.

3 is a view for explaining the ESN information applied to the present invention.

As shown in FIG. 3, the ESN information includes an MFR code field, a spare field, and a serial number field.

The MFR code field stores an 8-bit value according to the manufacturer of the wireless terminal 100, and the serial number field stores unique number information of the wireless terminal 100.

Hereinafter, in the detailed description of the present invention, a case where ESN information is 'B0AA0451 (hexadecimal)' and password information is 'E32F6920 (hexadecimal)' will be described with an example.

When the ESN information of the wireless terminal 100 is converted into binary, it is '10110000101010100000010001010001' (binary), and when the user's stored password information is converted into binary, it becomes '11100011001011110110100100100000 (binary)'.

One area of each piece of information is used as a value for the cryptographic coordinates 141a to generate cryptographic coordinates, and the value of the other area is plotted on the cryptographic coordinates generated by the cryptographic coordinates 141a. Can be used in patterns to insert.

For example, if the lower 16-bit value of each information is used to generate the cryptographic coordinates, and the upper 16 bits are used in the pattern for inserting the cryptographic figure, the cryptographic coordinate unit 141a uses' 0000010001010001, the lower 16-bit value of the ESN information. And '0110100100100000', the lower 16 bits of the password, are extracted.

The cipher coordinate unit 141a uses the lower 16-bit value of the ESN information as the Y-axis coordinate of the cipher coordinates, and uses the lower 16-bit value of the password information as the X-axis coordinate of the cipher coordinates.

Similarly, the cryptographic coordinate unit 141a may use the lower 16-bit value of the ESN information for the X-axis coordinates of the cryptographic coordinates and the lower 16-bit value of the password information for the Y-axis coordinates of the cryptographic coordinates.

4A, 4B, and 4C are diagrams for describing cryptographic coordinates generated according to a preferred embodiment of the present invention.

As shown in FIG. 4, the cryptographic coordinate unit 141a sets the X-axis coordinate value of the cryptographic coordinates to the lower 16-bit value of the ESN information, and sets the Y-axis coordinate value to the lower 16-bit value of the password information.

In this case, as shown in FIG. 4, the cryptographic coordinates having a straight line shape may be generated, or the cryptographic coordinates having another curved line or call shape may be generated.

The cryptographic coordinates unit 141a exchanges the bit values of the even columns in the lower 16-bit values of the extracted ESN information and the bit values of the odd columns in the lower 16-bit values of the password information. You can do that.

As shown in FIG. 4B, the cryptographic coordinates unit 141a selects even column bit values of the X axis coordinate values and odd column bit values of the Y axis coordinate values, thereby converting the even column bit values of the X axis coordinate values to Y. It sets the even column bit value of the axis coordinate and the odd column bit value of the Y axis coordinate value to the odd column bit value of the X axis coordinate.

As illustrated in FIG. 4C, the cryptographic coordinate unit 141a generates cryptographic coordinates generated by inverting even column bit values of the X axis coordinates and odd column bit values of the Y axis coordinates.

In addition, the cryptographic coordinate unit 141a selects and replaces the odd column bit values of the X axis coordinate values and the even column bit values of the Y axis coordinates, or replaces the bits with a predetermined magnification of the X axis coordinate values and the Y axis coordinate values. You can create cryptographic coordinates by choosing each coordinate value and swapping each other according to a value or other rule.

Meanwhile, the encryption pattern unit 141b sets a pattern for placing the encryption figure in the encryption coordinates generated by the encryption coordinate unit 141a to insert the encryption figure.

5 is a diagram for explaining an encryption figure according to a preferred embodiment of the present invention.

Each encryption figure shown in FIG. 5 is an encryption figure based on a hexadecimal number according to an embodiment, and may use an encryption figure according to other binary techniques according to a user's convenience or security.

And, it is preferable to make the encryption figures according to each encryption value different.

In addition, the encryption pattern unit 141b sets an encryption value by extracting an upper 16 bit value of the ESN information and an upper 16 bit value of the password information.

According to an example, the encryption pattern unit 141b extracts '101100001010101', which is the upper 16 bit value of the ESN information, and '1110001100101111', which is the upper 16 bit value of the password information.

In order to set a high security cipher value, the cipher pattern unit 141b selects one bit value of each bit value and inverts each other.

That is, the encryption pattern unit 141b selects even column bit values of the upper 16 bit values of the ESN information and odd column bit values of the upper 16 bit values of the password information to replace each other. The bit value is '1111000110111111', and when it is converted to hexadecimal, it becomes 'F1BF (hexadecimal)'.

In addition, the upper 16-bit value of the password information is '1011001000101010', and when it is converted to hexadecimal, it becomes '6105 (hexadecimal)'.

The encryption pattern unit 141b converts the upper 16 bits of the ESN information into hexadecimal, and converts the upper 16 bits of the password information into hexadecimal. Insert it.

That is, the encryption pattern unit 141b inserts each number of '6105 (hexadecimal)' between the numbers of 'F1BF (hexadecimal)', and generates a password value of 'F611B0F5 (hexadecimal)'.

In addition, the encryption pattern unit 141b selects a position to insert each generated encryption value into the encryption coordinates.

6A, 6B, 6C, and 6D are diagrams for explaining that an encryption pattern unit inserts an encryption figure according to a preferred embodiment of the present invention.

As shown in FIG. 6A, the cryptographic pattern unit 141b selects a point at which the X-axis of the cryptographic coordinates intersect a predetermined coordinate value of the Y-axis as a position to insert the cryptographic figure.

For example, when selecting a point at which the coordinate value of each axis intersects '1' as a position to insert an encryption figure, the encryption pattern unit 141b may select 18 points from each point of all coordinates.

At this time, the encryption pattern unit 141b may set the upper left of the encryption coordinates as a starting point.

In addition, the encryption pattern unit 141b may select one point or a plurality of points among the selected points for inserting the encryption figure as the pattern prohibition point.

As illustrated in FIG. 6A, the encryption pattern unit 141b may select, for example, a point of a multiple of 3 from the first starting point as the pattern prohibition point.

In addition, the encryption pattern unit 141b may select a pattern prohibition point according to a setting.

As shown in FIG. 6B, the cryptographic pattern unit 141b is a coordinate recognition point for allowing the authentication device 200 to correctly recognize the cryptographic coordinates among the points selected as the pattern prohibition points. You can select the right and left stop pattern prohibition points and the bottom right last pattern prohibition point.

In addition, the encryption pattern unit 141b inserts an encryption figure according to the generated encryption value at each point except for the pattern prohibition point among the points selected to insert the encryption figure.

As illustrated in FIG. 6C, the encryption pattern unit 141b inserts an encryption figure corresponding to each number of the generated encryption value 'F611B0F5 (hexadecimal)' into each selected point to generate an encryption screen.

In addition, the password pattern unit 141b inserts a fake password figure into the password screen in order to duplicate the password screen and prevent leakage of the password information.

As shown in FIG. 6D, the encryption pattern unit 141b positions the encryption figure according to the generated encryption value at a selected point, and randomly inserts the disguised encryption figure in the encryption screen.

In this case, it is preferable that the encryption pattern unit 141b inserts the camouflage cryptographic figure in an area excluding each coordinate point selected to insert the cryptographic figure when the camouflage cryptographic figure is inserted.

That is, the cryptographic pattern unit 141b randomly inserts the camouflage cryptographic figure at the 18 points where the coordinate values of each axis intersect with '1', that is, the pattern area except for the pattern prohibition point and the pattern insertion point. do.

In addition, the encryption pattern unit 141b inserts a camouflage encryption figure and transmits a display signal according to the completed encryption screen to the display unit 120.

The display 120 displays an encryption screen according to the display signal transmitted from the encryption pattern unit 141b of the central controller 140.

As shown in FIG. 6E, the display 120 displays a figure specifying a start point at the upper left side, and displays a figure specifying the end point at the lower right side.

In addition, the display 120 displays an encryption figure and a fake encryption figure according to a display signal transmitted from the central controller 140.

7 is a block diagram illustrating a configuration of an authentication device according to a preferred embodiment of the present invention.

Referring to FIG. 7, the authentication device 200 according to the present invention includes a network interface unit 240, a central processing unit 250, a scanning unit 220, and an input unit 230. Decryption unit 251 is included.

The network interface unit 240 receives an authentication start signal including the ESN information of the wireless terminal 100 transmitted from the base station 300.

When the authentication start signal is received through the network interface unit 240, the central processing unit 250 transmits a scan start signal to the scan unit 220.

When the scan start signal is transmitted from the central processing unit 250, the scan unit 220 scans an encryption screen displayed through the display unit 120 of the wireless terminal 100 and provides an encryption signal according to the encryption screen.

In addition, when the authentication start signal is received, the central processing unit 250 transmits a visible or audible signal to the output unit 210 that allows a user to recognize a password input, and the output unit 210 outputs from the central processing unit 250. Outputs visible or audible information requesting password input according to the transmitted visible or audible signal.

The input unit 230 provides a password signal according to the password information input by the user.

The decryption unit 251 uses the authentication start signal including the ESN information of the wireless terminal 100 received through the network interface unit 240 and the coordinates of the encryption screen using the password signal provided from the input unit 230. Create

In addition, the decryption unit 251 checks the point where the wireless terminal 100 is to insert the cryptographic figure in the generated cryptographic coordinates and reads only the cryptographic figure inserted in the corresponding point.

The decryption unit 251 generates an encryption coordinate as shown in FIG. 4A which is the same as the coordinate generated by the wireless terminal 100, and performs the same process by performing each process performed by the wireless terminal 100 to insert an encryption figure. Select the coordinates.

That is, the decryption unit 251 generates the cryptographic coordinates and selects each point to insert the cryptographic figure as shown in FIG. 6A.

Then, the decryption unit 251 grasps the encryption figure inserted at each point of the encryption coordinates generated according to the encryption signal transmitted from the scan unit 220.

In addition, the decryption unit 251 uses the ESN information of the wireless terminal 100 and the type information of the encryption figure to be inserted into the encryption screen in the wireless terminal 100 using the password information input by the user 230. And order information of the cipher figure as reference information.

Then, the decryption unit 251 determines whether the type information of the cryptographic figure and the sequence information of the cryptographic figure grasped from the cryptographic signal are the same as the type information of the cryptographic figure and the order information of the cryptographic figure, which are generated reference information. If it is the same, password authentication of the user through the wireless terminal 100 is processed, and if it is not the same, authentication of the user is not processed.

Meanwhile, when the decryption unit 251 processes authentication of the user, the central processing unit 250 provides a function that the user intends to use through the authentication device 200.

For example, when the authentication device 200 is an automatic tellex machine (ATM), the central processing unit 250, when the decryption unit 251 processes the user's authentication, through the output unit 210. The user outputs visual or audible information for selecting a desired task and amount, and processes the task and amount input by the user through the input unit 230.

That is, when the user selects the cash withdrawal task through the input unit 230 and selects the amount, the central processing unit 250 provides the user with the amount selected by the user.

8 is a block diagram illustrating a configuration of an authentication cipher processing system according to another embodiment of the present invention.

Referring to FIG. 8, the authentication encryption processing system includes a wireless terminal 100, an authentication device 200, an authentication server 400, and a base station 300.

The wireless terminal 100 generates an authentication request signal according to a user's selection, transmits the authentication request signal to the base station 300, generates a password screen using previously stored password and unique number information of the user, and generates the generated password screen. Display.

In this case, the authentication request signal includes ESN information that is unique number information of the wireless terminal 100.

When the base station 300 transmits an authentication request signal from the wireless terminal 100, the base station 300 determines the location of the wireless terminal 100 to identify the authentication device 200 for which the wireless terminal 100 requests authentication.

In addition, the base station 300 transmits an authentication request signal including the ESN information of the wireless terminal 100 that transmitted the authentication request signal to the authentication server 400.

The authentication server 400 stores and manages the ESN information of the registered wireless terminal 100 and the password information set by the user of the wireless terminal 100, and when the authentication request signal is transmitted from the base station 300, the ESN is transmitted. The authentication start signal including the information and the user password information of the wireless terminal 100 is transmitted to the authentication device 200.

In addition, the authentication device 200 processes authentication of the encryption screen displayed by the wireless terminal 100 using the ESN information and the password information transmitted from the authentication server 400.

In addition, when the user of the wireless terminal 100 wants to process password authentication by changing password information, the user inputs the password information to be changed through the keypad 110 of the wireless terminal 100 and selects a special button. do.

The signal processor 142 of the wireless terminal 100 generates an authentication request signal including the changed password information and the ESN information, and transmits the generated authentication request signal to the base station 300.

The base station 300 transmits an authentication request signal transmitted from the wireless terminal 100 to the authentication server 400.

The authentication server 400 registers password information and ESN information included in the authentication request signal transmitted from the base station 300, and transmits an authentication start signal including the password information and ESN information to the corresponding authentication device 200.

The wireless terminal 100 generates and displays a password screen using the changed password information and the ESN information, and the authentication device 20 uses the password information and the ESN information included in the authentication start signal to display the wireless terminal 100. It handles the password authentication that is displayed in.

9 is a flowchart for explaining the flow of a method for password authentication processing through a wireless terminal according to a preferred embodiment of the present invention.

Referring to FIG. 9, first, a user selects a specific button of the keypad 110 of the wireless terminal 100 in an adjacent area of the authentication device 200 to perform a password authentication process through the wireless terminal 100.

The keypad 110 of the wireless terminal 100 provides an input signal to the central controller 140 according to a user's selection, and the signal processor 142 of the central controller 140 generates an authentication request signal including ESN information. To transmit to the base station 300 (S 1).

In addition, the base station 300 determines the location of the wireless terminal 100 that transmits the authentication request signal and identifies the authentication device 200 to which the wireless terminal 100 intends to perform authentication processing.

The base station 300 transmits an authentication start signal including ESN information of the corresponding wireless terminal 100 to the identified authentication device 200 (S 2).

That is, the base station 300 manages the location information of each authentication device 200 included in its wireless jurisdiction area (Cell), and when the authentication request signal is transmitted from the wireless terminal 100, the corresponding wireless terminal 100. Determine the location of the check the adjacent authentication device 200.

At this time, the operator of the authentication cryptographic system preferably grasps the location information of each authentication device 200 included in the wireless jurisdiction cell (Cell) of each base station 300, and set the base station 300.

On the other hand, the central control unit 140 of the wireless terminal 100 generates and displays a password screen for processing the authentication password (S 3).

That is, the cryptographic coordinate unit 141a of the wireless terminal 100 generates a cryptographic screen according to a preset program, ESN information and password information, and the cryptographic pattern unit 141b includes a preset program on the generated cryptographic screen; The encryption figure insertion point is selected according to the ESN information and the password information, the encryption figure is inserted into the selected insertion point to generate an encryption screen, and the display signal is provided to the display unit 120.

The display unit 120 displays the encryption screen according to the display signal provided from the central controller 140.

In addition, the central processing unit 250 of the authentication device 200 outputs a visible or audible signal through which the user can recognize the password input through the output unit 210, and the input unit 230 is based on the password information input by the user. The password signal is provided to the central processing unit 250 (S 4).

The decryption unit 251 of the central processing unit 250 generates the cryptographic coordinates using the ESN information included in the authentication start signal and the password information input through the input unit 230, and encrypts at each point of the corresponding cryptographic coordinates. Select the cryptographic figure insertion point to be inserted.

In addition, the decryption unit 251 provides a scan signal to the scan unit 220 to read the encrypted figure displayed at the selected encryption figure insertion point.

The scan unit 220 reads an encryption figure displayed at a corresponding encryption coordinate according to a scan signal provided from the decryption unit 251 and provides an encryption signal to the decryption unit 251 (S 5).

At this time, the authentication device 200 should read the encryption screen displayed on the wireless terminal 100 correctly.

10 is a view for explaining reading the encryption screen according to a preferred embodiment of the present invention.

Referring to FIG. 10, the scan unit 220 of the authentication device 200 may include a contact plate 221 contacting the display unit 120 of the wireless terminal 100, and a display unit contacting the contact plate 221. The image reading unit 222 reads the encrypted screen displayed at 120.

The contact plate 221 is in close contact with the display unit 120 of the wireless terminal 100 in order to allow the image reading unit 222 to correctly read the encrypted screen displayed on the display unit 120 of the wireless terminal 100. It is preferably configured to be made of a transparent material so as to transmit the password screen displayed on the display unit 120.

In addition, the image reading unit 222 reads an encryption figure according to the encryption coordinates of the encryption screen displayed on the display unit 120 in contact with the access plate 221 and provides an encryption signal to the central processing unit 250.

In this case, the predetermined distance (focusing distance) between the image reading unit 222 and the contact plate 221 may correctly read the entire screen of the display unit 120 in close contact with the contact plate 221. It is desirable to set the optimum distance as much as possible.

In addition, it is preferable to allow the image reading unit 222 to automatically adjust a predetermined separation distance (focusing distance) so that the entire screen size of the display unit 120 varies according to various kinds of the wireless terminal 100. .

Meanwhile, the decryption unit 251 uses the ESN information of the wireless terminal 100 and the type information of the encryption figure to be inserted into the encryption screen in the wireless terminal 100 using the password information input by the user through the input unit 230. And reference information including order information of an encrypted figure.

Then, the decryption unit 251 determines whether the type information of the cryptographic figure and the sequence information of the cryptographic figure, which are grasped from the scan signal, are the same as the type information of the cryptographic figure and the order information of the cryptographic figure, which are generated reference information ( S6), if the same, the password authentication of the user through the wireless terminal 100 is provided to provide a unique function of the authentication device (S7).

On the other hand, the decryption unit 251 does not process the user's password authentication unless the type information and the order information of the figure of the figure identified from the scan signal are the same as the reference information (S 8).

That is, when the authentication device 200 is an automatic tellex machine (ATM), the central processing unit 250, when the decryption unit 251 processes the authentication of the user, the user through the output unit 210 It outputs visual or audible information for selecting a desired task and amount, and processes the task and amount input by the user through the input unit 230.

In addition, if the user's password authentication is not processed through the wireless terminal 100, the authentication device 200 outputs a message indicating that the password authentication has not been processed through the output unit 210, and the user again outputs the wireless terminal. Attempt password authentication via 100.

11 is a flowchart for explaining the flow of a method for authentication processing through a wireless terminal according to another embodiment of the present invention.

Referring to FIG. 11, a user accesses an adjacent area of the authentication device 200 and selects a specific button of the keypad 110 of the wireless terminal 100 to perform a password authentication process through the wireless terminal 100.

The wireless terminal 100 generates an authentication request signal including the ESN information according to a user's selection and transmits the authentication request signal to the base station 300 (S 10).

Then, the base station 300 transmits the authentication request signal transmitted from the wireless terminal 100 to the authentication server 400 (S 11).

The authentication server 400 retrieves a user password of the wireless terminal 100 corresponding to the ESN information included in the authentication request signal transmitted from the base station 300 and transmits the user password to the corresponding authentication device 200 (S 12).

That is, when the authentication server 400 transmits the authentication request signal through the base station 300 while managing the user password corresponding to the ESN information of the wireless terminal 100, ESN information and ESN information of the wireless terminal 100; The authentication start signal including the password information corresponding to the transmission to the authentication device (200).

In this case, the base station 300 may determine the location of the wireless terminal 100 to identify the authentication device 200, and transmit the location of the corresponding authentication device 400 to the authentication server 400.

That is, the base station 300 manages the location information of each authentication device 200 included in its wireless jurisdiction area (Cell), and when the authentication request signal is transmitted from the wireless terminal 100, the corresponding wireless terminal 100. Determine the location of the adjacent authentication device 200 to check the location of the corresponding authentication device 400 and transmits to the authentication server (400).

The central processing unit 250 of the authentication device 200 generates the cryptographic coordinates using the ESN information and the user password information included in the authentication start signal, and selects a cryptographic figure insertion point at which the cryptographic figure is to be inserted at each point of the corresponding cryptographic coordinates. Choose.

In addition, the decryption unit 251 includes ESN information of the wireless terminal 100 and user password information, and includes information on the type of the encrypted figure to be inserted into the encrypted screen in the wireless terminal 100 and the order information of the encrypted figure. Generated as reference information (S 13).

On the other hand, the central control unit 140 of the wireless terminal 100 generates and displays a password screen for processing password authentication (S 14).

That is, the cryptographic coordinate unit 141a of the wireless terminal 100 generates a cryptographic screen according to a preset program, ESN information and password information, and the cryptographic pattern unit 141b includes a preset program on the generated cryptographic screen; The encryption figure insertion point is selected according to the ESN information and the password information, the encryption figure is inserted into the selected insertion point to generate an encryption screen, and the display signal is provided to the display unit 120.

The display unit 120 displays the encryption screen according to the display signal provided from the central controller 140.

In addition, the decryption unit 251 provides a scan signal to the scan unit 220 to read the encrypted figure displayed at the selected encryption figure insertion point.

The scan unit 220 reads an encryption figure displayed at a corresponding encryption coordinate according to a scan signal provided from the decryption unit 251 and provides an encryption signal to the decryption unit 251 (S 5).

Then, the decryption unit 251 of the authentication device 200 is the same as the type information of the encrypted figure and the sequence information of the encrypted figure which are the reference information generated from the type information of the encrypted figure and the sequence information of the encrypted figure identified from the scan signal. If it is determined whether or not (S 16), and if the same, the password authentication of the user through the wireless terminal 100 is processed to provide a unique function of the authentication device (S 17).

On the other hand, the decryption unit 251 does not process the user's password authentication unless the type information and the order information of the figure of the figure identified from the scan signal are the same as the reference information (S 18).

Although the present invention has been described in detail only with respect to the described embodiments, it will be apparent to those skilled in the art that various modifications and changes are possible within the technical spirit of the present invention, and such modifications and modifications belong to the appended claims.

As described above, according to the present invention, the following effects can be obtained.

First, by processing the password authentication of the authentication device through a wireless terminal carried by the user, it is possible to effectively handle password authentication by the addition of a simple software module without using a separate encryption module such as a smart card.

Secondly, by using the password value for password authentication by combining the user password information and the unique number information of the wireless terminal, password authentication can be maintained through a unique password value for each user, thereby improving security.

Third, there is an effect of preventing illegal copying and theft of time by displaying a cryptographic screen for processing password authentication in a metaphysical picture form through a wireless terminal.

Fourth, by processing the password authentication through the wireless terminal only in the adjacent area of the authentication device that processes the password authentication, there is an effect that it is possible to prevent the theft of unique number information and user password of the wireless terminal.

BRIEF DESCRIPTION OF THE DRAWINGS Fig. 1 is an overall block diagram illustrating a configuration of an authentication cryptographic processing system according to a preferred embodiment of the present invention.

2 is a block diagram illustrating a configuration of a wireless terminal according to a preferred embodiment of the present invention.

3 is a view for explaining the ESN information applied to the present invention.

4A, 4B, and 4C are diagrams for explaining cryptographic coordinates generated in accordance with a preferred embodiment of the present invention.

5 is a diagram for explaining an encryption figure according to a preferred embodiment of the present invention.

6A, 6B, 6C, and 6D are diagrams for explaining that an encryption pattern unit inserts an encryption figure according to a preferred embodiment of the present invention.

7 is a block diagram illustrating a configuration of an authentication device according to a preferred embodiment of the present invention.

8 is a block diagram illustrating a configuration of an authentication encryption processing system according to another embodiment of the present invention.

9 is a flowchart for explaining the flow of a method for authentication processing through a wireless terminal according to a preferred embodiment of the present invention.

10 is a view for explaining reading a password screen according to an embodiment of the present invention.

11 is a flowchart for explaining the flow of a method for authentication processing through a wireless terminal according to another embodiment of the present invention.

<Explanation of symbols for main parts of the drawings>

1: network 100: wireless terminal

110: keypad 120: display unit

130: wireless interface unit 140: central control unit

141: password generation unit 141a: password coordinate unit

141b: encryption pattern section 142: signal processing section

200: authentication device 210: output unit

220: scan unit 230: input unit

240: network interface unit 250: central processing unit

251: decryption unit 300: base station

400: authentication server

Claims (33)

In the terminal processing password authentication, A keypad for providing an input signal according to the user's selection; According to an input signal provided from the keypad, at least one insertion point is selected by generating an encryption coordinate according to the unique number information of the terminal and a region value of preset password information, and selecting at least one insertion point, and the unique number information and the preset number. And a controller configured to set a password value according to one area value of password information, and insert a password figure set according to the password value into an insertion point selected from the password coordinates to generate a password screen. The method of claim 1, wherein the control unit, An encryption coordinate unit for generating encryption coordinates according to the unique number information and one region value of preset password information according to an input signal provided from the keypad; Select at least one insertion point from the cryptographic coordinates generated by the cryptographic coordinates unit, and set a cryptographic value using the unique number information and one area value of the preset password information, and at the point selected from the cryptographic coordinates And a cryptographic pattern unit configured to generate cryptographic information by inserting cryptographic figures according to the cryptographic value. The method of claim 2, wherein the encryption coordinate unit, And extracting the unique number information and one region value of the password information and setting the extracted unique number information and different coordinate axis values of the cipher coordinates. The method of claim 3, wherein the encryption coordinate unit, Terminal for processing the password authentication, characterized in that for selecting the one area value of each axis value of the generated password coordinates and mutually inverted. The method of claim 2, wherein the encryption pattern unit, At least one insertion point is selected from the encryption coordinates generated by the encryption coordinate unit, and a predetermined number of points are selected as the pattern prohibition point from each of the selected insertion points, thereby not inserting an encryption figure according to the encryption value. A terminal for processing password authentication. The method of claim 5, wherein the encryption pattern unit, And inserting an encryption figure according to the set password value into each insertion point except the pattern prohibition point among the selected insertion points. The method of claim 6, wherein the encryption pattern unit, And inserting a cryptographic figure according to the cipher value, and inserting a camouflage cryptographic figure into a predetermined region except the selected insertion point in the cipher coordinates. The method of claim 1, wherein the encryption pattern unit, Among the unique number information and the password information, one region value of one information is extracted and selected as a first reference value, one region value of other information is extracted and selected as a second reference value, and the respective reference values are mixed. (mix) a terminal for processing password authentication, characterized in that the setting of the password value. The method of claim 1, And a signal processing unit for generating an authentication request signal including unique number information of the terminal according to an input signal provided from the keypad and transmitting the generated authentication request signal to a base station wirelessly. The method of claim 9, wherein the base station, And receiving the authentication request signal from the terminal, transmitting an authentication start signal including the unique number information to an authentication device that performs authentication processing according to the location of the terminal. The method of claim 1, wherein the unique number information, And at least one of electric serial number (ESN) information of the terminal or MAC (Media Access Control) address information of the terminal. The method of claim 1, And a display unit configured to display the password screen generated by the controller. In an authentication device that handles password authentication of a user, An input unit for providing a password signal according to the password information input from the user; A scan unit configured to scan an encryption screen displayed on the user terminal and provide an encryption signal; When the authentication request signal including the unique number information is received from the user terminal through the base station, the password authentication of the user is processed using the password signal input through the input unit and the unique number information included in the authentication request signal. And a central processing unit for generating password information, and if the password information according to the password signal provided from the scan unit is matched with the reference information, a central processing unit for processing password authentication for the user. Certified devices. The method of claim 13, Decryption by generating encryption coordinates according to the unique number information and one region value of the password information to select at least one insertion point from the encryption coordinates, and provides a scan signal according to each selected insertion point to the scanning unit An authentication device for processing password authentication, characterized in that it further comprises a unit. The method of claim 13, wherein the decryption unit, And generating reference information which is type information and order information of an encrypted figure according to the unique number information and one region value of the password information, and the type information and order information of the encrypted figure according to the encrypted signal provided from the scan unit. If the criterion information is met, the authentication device for password authentication, characterized in that for processing the password authentication of the user of the wireless terminal. The method of claim 13, wherein the decryption unit, Among the unique number information and the password information, one region value of one information is extracted and selected as a first reference value, one region value of other information is extracted and selected as a second reference value, and the respective reference values are mixed. and the reference information is set to a cipher value generated by mixing. The method of claim 11, wherein the unique number information, And at least one of ESN (Electric Serial Number) information of the terminal or MAC (Media Access Control) address information of the terminal. In the password authentication processing system, A terminal for wirelessly transmitting an authentication request signal including unique number information according to a user's selection, generating password information using the unique number information and preset password information, and displaying the password information; A base station for identifying an authentication device according to a location of the wireless terminal and transmitting an authentication start signal including the unique number information to the authentication device when an authentication request signal is wirelessly received from the terminal; And an authentication device that processes password authentication based on password information input from the user and password information displayed on the terminal by using the unique number information when an authentication start signal is received from the base station. The method of claim 18, The user password information corresponding to the unique number information of the terminal is managed, and when the authentication start signal is transmitted from the base station, the user password information corresponding to the unique number information is retrieved to include the unique number information and the user password. And an authentication server for transmitting the authenticated authentication start signal to the authentication device. The method of claim 19, wherein the authentication server, If the changed password information is included in the authentication request signal transmitted from the terminal, the user password information corresponding to the unique number of the terminal is changed, and the changed password information and the authentication including the unique number information are included. And a start signal to the authentication device. In the method for the terminal to process the password authentication, Generating, by the terminal, cryptographic coordinates according to unique number information and one region value of preset password information according to a user's selection; Determining a pattern into which a cryptographic figure is to be inserted by selecting at least one insertion point from the generated cryptographic coordinates; Generating a cipher value according to the unique number information and a value of one region of the password information; Generating an encryption screen by inserting an encryption figure according to the encryption value according to the determined pattern; Displaying the generated password screen. The method of claim 21, wherein generating the cryptographic coordinates, Extracting the unique number information and one region value of the password information, and generating cipher coordinates using the extracted values as different coordinate axis values; And inverting each other by selecting an area value among each axis value of the generated cryptographic coordinates. The method of claim 21, wherein the determination of the pattern to insert the encryption figure, Selecting at least one or more insertion points from the generated encryption coordinates, and selecting a predetermined number of points from each of the selected insertion points as a pattern prohibition point. The method of claim 21, wherein the creation of the password screen, Inserting an encryption figure according to the set encryption value into each insertion point except the pattern prohibition point among the selected insertion points; Inserting a cryptographic figure according to the cipher value, and inserting a fake cryptographic figure in a predetermined region except the selected insertion point in the cryptographic coordinates. The method of claim 21, wherein generating the password value, Extracting an area value of one piece of information among the unique number information and the password information and selecting the first reference value as a first reference value; Extracting an area value of other information among the pieces of information and selecting the second reference value as a second reference value; And mixing each of the selected reference values to generate a cipher value. The method of claim 21, wherein the unique number information, And at least one of electric serial number (ESN) information of the terminal or MAC (Media Access Control) address information of the terminal. In the method by which the authentication device handles password authentication, Receiving password information from the user when an authentication request signal including unique number information is transmitted from the user terminal to the base station; Setting reference information which is type information and order information of an encryption figure for processing encryption authentication according to the unique number information and the value of one region of the password information; Generating encryption coordinates according to the unique number information and the value of one region of the password information, and identifying an insertion point into which an encryption figure for processing encryption authentication is inserted; Scanning a cryptographic screen displayed on the user terminal; Identifying type information and order information of an encrypted figure displayed on the identified insertion point on the scanned encryption screen; And processing password authentication through the user terminal when the identified type information and order information of the encrypted figure match the set reference information. The method of claim 27, wherein the reference information, Password authentication, characterized in that the unique number information, the first reference value extracted from one region of one of the password information and the second reference value extracted from one region of the other information is mixed and generated How to handle it. 28. The method of claim 27, wherein determining the insertion point of the cryptographic figure, Extracting the unique number information and one region value of the password information and generating cipher coordinates as different coordinate axis values of the cipher coordinates; Selecting one area value among each axis value of the generated cryptographic coordinates and mutually inverting each other; Selecting at least one insertion point from the generated cryptographic coordinates, and identifying a point excluding a predetermined number of pattern prohibition points from each of the selected insertion points as an insertion point; Way. A method for processing cryptographic authentication in a system comprising a base station wirelessly connected to a terminal and an authentication device connected to the base station and a network, Transmitting, by the terminal, an authentication request signal including unique number information to the base station wirelessly according to a user's selection; Generating and displaying encryption information by the terminal using the unique number information and preset password information; When the base station receives an authentication request signal from the terminal, checking an authentication device according to a location of the terminal; Transmitting, by the base station, an authentication start signal including the unique number information to the verified authentication device; Encrypting authentication according to the authentication device using the unique number information included in the authentication start signal from the base station and password information input from the user, and performing password authentication according to the password information displayed on the terminal. How to deal. A method for processing password authentication in a system including a base station wirelessly connected to a terminal, an authentication server and an authentication device connected to a network with the base station, Transmitting, by the terminal, an authentication request signal including unique number information to the base station wirelessly according to a user's selection; Generating and displaying encryption information by the terminal using the unique number information and preset password information; When the base station receives an authentication request signal from the terminal, determining a location of the authentication device according to the location of the terminal; Transmitting, by the base station, an authentication start signal including location information of the authentication device and the unique number information to the authentication server; Retrieving, by the authentication server, user password information corresponding to the unique number information, and transmitting an authentication start signal including the unique number information and the user password information to the authentication device; A password authentication process comprising the authentication device processing password authentication according to the password information displayed on the terminal by using the unique number information included in the authentication start signal transmitted from the authentication server and the user password information Way. The method of claim 31, wherein When the terminal inputs password information changed according to a user's selection, transmitting, by the terminal, an authentication request signal including the changed password information and unique number information to the authentication server; Generating, by the terminal, encryption information by using the changed password information and the unique number information, and displaying the encryption information; Changing, by the authentication server, password information included in the authentication request signal with password information corresponding to the unique number information; And transmitting, by the authentication server, the changed password information and the unique number information to the authentication device. The method of claim 31, wherein the authentication server, And registering the user who wants to process password authentication through the authentication device, and managing unique number information of the terminal for each user and password information corresponding to each unique number information.