KR20140092556A - System and method for authentication and authorization via voice print and environmental information - Google Patents

Abstract

The present invention relates to a method for determining application usage authority based on voice print and environmental information. The method calls a specific application stored in a specific location by combining the voice print and a text line extracted from the voice of a human by a smart device and determines the range of content and a function for providing the application using the time information, a located space, and identification of a user. A series of authentication rules, which describe the voice print authentication procedure and the method thereof, stores the series of the authentication rules, which describes the voice print authentication procedure and the method thereof, in a database or the specific location of a web and determines the access authority of the user for each service capable of providing web applications, that the user of the smart devices including a smartphone and a PC wants to call or access, respectively in real time by referring to the authentication rules. The authentication rules include a process for referring to the rules, which control the application, the security level of the application, the affiliation of the application, and user information including time information, physical location information, and personal information, for transmitting a serial of text lines to a user terminal, and for transmitting the text lines to the authentication system by enabling the user to record the text lines with the voice. According to the present invention, the method is excellent in the security and the reliability by determining the access authority of the user for the service which provides the application based on the information of the application connected or called by the user, the voice print of the user, and the physical location, time information, and user information of the user terminal device in real time.

Description

SYSTEM AND METHOD FOR AUTHENTICATION AND AUTHORIZATION VIA VOICE PRINT AND ENVIRONMENTAL INFORMATION [0001]

In the present invention, when a smart device transmits a request for an application call to a specific place on the web by attaching a sign and a character string obtained from a user terminal device as a signature, the specific place analyzes the right scope of the attached gates, The present invention relates to space information for determining the acceptance and access authority of a request, and a gating-based authentication method.

Recently, smart devices have been developed and new types of applications (apps) have been developed and used. App is developed and used in various forms such as app for writing documents necessary for business, informative app for knowing subway or bus route and driving information, and app providing game.

The voice input device of the smart device enables the establishment of the user authentication rules and methods in a convenient, simple and reliable manner than the existing authentication method by using the technique of extracting the text and the character string from the user voice and the web related technology .

Especially, in order to clarify the responsibilities of decision-making around the finance-related apps, the recording of the conversation between the app users and the counselors is routine. Therefore, methods and systems different from those of the existing ones in terms of the convenience of the app users and the economics of the app provider Is required.

On the other hand, as a method of the prior art investigation, the title of the patent is designated as the right division, the name of the invention (design) is designated as the administrative disposition, and the name of the invention (design) Security), and abstract (voiced + sentence + recognition + identification) and (&) operation. In this paper, we investigate four cases with minimal similarity in terms of the present invention and its purpose, method and effect. Respectively.

Open No. 1020030063762 'User authentication device by voice' is a method of identifying a user by only a written statement stored in a database, but there is a risk of forgery and modulation. However, Syllable height information, and information of a user terminal for inputting a voice, which is technically advanced in that the risk of forgery and falsification is remarkably low.

Domestic Registration No. 1005578720000 " Method of judging whether the user is a debtor using the user voice authentication method on a telephone call " is to confirm the user identity through a telephone call. Therefore, Is progressive.

In Korean Patent No. 1011170010000 'Call restriction method of an illegal copy terminal through voice authentication in a mobile communication system', as described in claim 1, since the identification number of the user terminal and the voice database are used together, However, the method of the present invention for determining the range of available information and usable functions by reflecting position information, user's personal information, time information, and voice height information generated by the user terminal is more sophisticated and technically , And the effect of authentication for preventing forgery and falsification is excellent.

Korean Registration No. 1011810600000 " Speech recognition system and speaker authentication method using the same " is a method of identifying a user's identity by using a reference level of agreement between voice and sentence. The authentication method according to the present invention further reflects the space-time information and the personal information of the user and the user terminal, and each of the applications providing the information or the function to be used by the user determines the authentication method and procedure in real time It is technologically advanced than the existing patent.

An object of the present invention is to apply the access right of the user differently to apps and contents installed or transmitted in a specific place of the web including a smart device depending on when and where a smart card user's gates and gates are acquired The present invention also provides a user authentication server, system and method thereof.

The object is achieved by a smart device equipped with a GPS and a microphone, a gyroscope and a compass; An app installed in the user terminal or received from the web; And a user authorization decision server.

The above object is achieved by a method for receiving a voice from a user through a smart device, the smart device extracting a voice and a character string from the voice and calling an application having a name matching the extracted character string, The function of the user installed in the smart device or the function of the application installed in the smart device can be specified by determining the operation rights of the called application in accordance with rules established in advance based on the information.

The above object may be accomplished by a method comprising: registering a user's gateways and identities in a specific place; Storing a plurality of apps in a specific place; Storing a rule regarding usage of the application in a specific place; Calling a specific app stored in the specific place, with the gateways and strings extracted from the user's voice input as parameters of the user's smart device; Collecting user information stored in the smart device or a specific place by the application; And applying the rules stored in the specific place. The present invention can also be achieved by a method of determining an access authorization based on a text and space-time information.

Even if there is no separate authentication means such as an authorized certificate according to the present invention, the access or use right of the user to a function or content of a specific app is resiliently controlled based on the current position, time information, You can decide.

For example, it may be possible to prevent a game app from running at a school or after 10:00 pm, not allow viewing of specific data outside the company, But it is inevitable to make a call with a guide in the case of a financial service that requires authentication procedure by fostering.

The present invention enables various controls on a service provided by a specific application to a specific user even if there is no authentication procedure or a call procedure with a guide source by only rules established in advance with the voice input device of the user terminal device.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic diagram of a user information including a user authorization server according to an embodiment of the present invention,
FIG. 2 is a configuration diagram of a gull-gate based authentication system according to an embodiment of the present invention;
3 is a configuration diagram of a user terminal according to an embodiment of the present invention.
4 is an example of inputting voice to add the height information of the user voice to the identity authentication process,
FIG. 5 is a flowchart illustrating a process of determining a user's authorization and an access right based on a user's gender and user information.

Hereinafter, an application generation server and an application generation method according to embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The app of the present invention includes a native app installed in a user terminal, a web app transmitted from the web and operating in real time, and a hybrid app having both of the above two types of app characteristics.

The user terminal device 200 may include various devices capable of operating an application, and may include a PC having a camera 203, a notebook PC, a PMP, a handheld PC, a tablet PC, a smart phone, .

In the smart card-based authentication rule and method, the smart device is any one of a smart phone, a tablet, a smart TV, a PC, an IPTV, a navigation device, and an information communication terminal having a computer function.

In the authentication rule and method of the gender-based authentication, the specific place is any one of a smart device, a web site, an application market, a store, a content storage place, a web server, a web database server, a web application server, do.

1 is a schematic block diagram of user information and a gateways-based authentication system including a user authorization server according to the present invention; Fig. 2 is a block diagram of a gateways-based authentication system; and Fig. 3 is a block diagram of a user terminal.

A gates is a pattern of voices. It is a graph obtained by sampling a unique shape of a voice with a frequency analyzer. These gates are unique to each person and can be substituted for ID.

1 and 2, when the user requests the management server 300 to transmit a specific application by using the user terminal 200 in the space 100, Retrieves the application from the instance DB 20 of the external DB 310, searches the rule DB 25 for the rule designated by the application, and transmits the application and the rule to the user terminal device 200.

2, in order for the user to call a specific application through the application selection unit 10, the voice recognition unit 30 extracts a voiceprint from the voice of the user input through the user terminal 200, (35) extracts a character string from the voice and transmits it to the app selection unit (10). The app selecting unit 10 extracts an app having the extracted string as a name from the instance DB 20 and stores the appended information in the user DB information storage unit 40 and the position information collecting unit 45 and the time information collecting unit 50 The user information, the location information, the time information, and the operation rule of the application retrieved from the rule database 25, and then transmit the application to the user.

More specifically, the app selecting unit 10 searches the instance DB 20 for an application having the name of the string among the received parameters, and refers to the grammar DB 15 to attach the parameter The level, or the authority of the owner of the gates to access the application, by referring to the rule database 25 based on the instance name, the identity of the gates, and other parameters, By acquiring information on the method and procedure for changing the authority and transmitting the information to the called app, the app can later use the information to communicate a decision on a series of requests I can get off.

For example, if the user inputs a voice of 'car' to the terminal, the voice recognition unit 30 extracts the voice message from the voice, the voice recognition unit 35 extracts the text 'car' The time information collecting unit 50 collects the nationality 'Korea' of Hong Gil-dong and the location information collecting unit 45 collects the current location of ' Minute ' 00 seconds ' and may transmit the information to the app selection unit 10. [0050] The app selecting unit 10 refers to the gender DB 15 to determine that the owner of the gender is 'Hong Kil-dong', fetches an app of the name 'automobile' from the instance DB 20, It is possible to fetch the operating rule of the application from the rule database 25 using a unique identification code of the 'car' application, mount the fetched rule on the application, and then transmit the application to the terminal of Hong Gil Dong. The app itself can control various access and use rights and procedures and methods for changing the rights in using the functions and contents provided by the app.

The user terminal device 200 may also transmit information collected from the Timer, the GPS 205, the compass 204, and the gyroscope 204 to the management server 300.

The A place 100a, the B place 100b, and the C place 100c refer to different physical spaces and locations, and even if the same user calls the same app, And the access rights of the same user may differ depending on the time and place even after the application is called.

The application transmitted to the user terminal device 200 by the management server 300 obtains a specific rule from the rule DB 25 to determine access and usage rights for the transmitted application by the user, The app determines whether to perform an operation requested by the user and an additional user authentication method required to perform a specific operation.

In addition, in the above-mentioned rule, in a situation where the application does not provide the specific user with the use right for the specific function of the app at a specific place and time, the specific user may give the use right to the administrator or management system The administrator or system receiving the voice message confirms the user's voice and the identity of the user at the specific place with the contents and the voice mail of the voice message transmitted by the specific user, .

In FIG. 4, by adding the sound level information included in the voice inputted by the user to the identity authentication process, it is possible to prevent forgery by the recorded voice. Fig. 4 (a) is an example of inputting a 'Mugunghwa flower' voice in a triplet of high and low notes, and (b) a high note, a middle note, and a low note. The management server 300 requests the user terminal device 200 to match the character strings for authenticating the user to the scales designated by the user, and the user can pronounce the strings in accordance with the scale indicated by the management server 300, It is possible to significantly reduce the possibility of identity counterfeiting. Particularly, some of the song lyrics familiar to the user are advantageous in that the pronunciation and height can be easily controlled.

The above object can be accomplished by a method comprising: storing a user's name and identity in a specific place; Storing a plurality of apps in a specific place; Storing usage rules of each of the plurality of apps in a specific place; Collecting user information stored in a specific place; Calling a specific application and a usage rule stored in the specific place by using user information including a user's voiceprint and a character string; Requesting a user to perform a specific operation or function for the called application; And a step of the application using the rule and the user information to determine or update a usage right of a specific user for a service provided by the application.

Wherein the specific place is a place where the web can be accessed while being located inside or outside the smart device in storing the user's gateways and identities in the specific place, The authentication request can be restricted so that the application can request the identity authentication only for a specific place and a specific time zone in which the specific user terminal device 200 is located. For example, if the 'xx company' application is limited to the location of the company geographically with respect to the patent application readiness of the company, or limited to a specific time zone, the document can be browsed only with the computing device to which the GPS device is attached The document can not be read outside the company or outside the specific time zone.

The character string to be presented to the user for the gestural authentication is a name of an application to be called, and includes a dominant list or a scales, and the user transmits the character string to the authentication server The process can be applied to services requiring higher security. For example, in order to use the real-time profit and loss statement generation service of the '' xx enterprise '' app, the authentication system proposed by the authentication system may be required to read out the authentication string in a specific negative pitch order, System. ≪ / RTI >

In the step of storing a plurality of apps in a specific place, the name of each of the apps is the same as the content inputted by the user by voice, and each of the apps stores rules of the user authentication method and procedures thereof, Is a web app, a native app, or a hybrid app. For example, if the user inputs a voice called 'Woori Bank', the name of the app to be called by the user becomes 'Woori Bank'.

In the step of storing the usage rule of each of the applications in the specific place, the rule is set such that the application operating on the smart device receives, for each of the services provided by the app, the user's grooming information and user information and / The user terminal device 200 can store the rule regarding the information to be stored in the specific place including the user terminal device 200. [ For example, in case of the 'Woori Bank' app, the user authentication level requested in the case of the account inquiry service may be applied differently from the authentication level required for the real-time account transfer or the account transfer of a certain amount or more. The application can store a rule describing an authentication procedure for each service provided by the application in a specific place on the user terminal device 200 or the web where the application is installed.

In the step of the user collecting the smart information and / or the user information stored in the specific place, the user information stored in the specific place may be information generated or collected by hardware of the smart device, information generated or collected by the software, and / Or information collected from the user. For example, GPS information indicating specific latitude, longitude, and altitude values, Compass information indicating directions to the north and south, Gyroscope information indicating up, down, left and right, time information including day and date, Information of the terminal, OS information of the terminal, or information stored in the database of the user terminal device 200 correspond to such information.

In a step of calling a specific application and a usage rule stored in the specific place by using user information including a user's gateways and a character string, an application having a character string extracted from a voice as a signature is read from a specific place , But may utilize the user's location information, time information, and / or user information as additional parameters for application calling and user authentication. For example, when 'viewing' is input to the microphone in the form of voice in the user terminal device 200, among the plurality of applications stored in the specific place, an application having the name 'viewing' can be searched and presented. However, since there are a plurality of apps having the name 'city hall', it is possible to call up viewing apps of a specific city by using the location information of the user, and also, by using the used language information of the user terminal device 200, Or Korean version of the viewing app. Further, the type of service that the viewing application can provide may be different from the case where the market of the city calls and the case where one (1) of the viewing public officials calls, and the type of the service or the access right , The user's voiceprint information of the voice inputting the word " viewing " can be used.

A user inputs a touch input, a keypad input, a voice input, a motion input, a signal input from the network, a position input by GPS, And / or by means of time entry by a Timer. For example, the operation of shaking the user terminal device 200 from side to side may invoke a specific application or intend to start a specific function among the functions of the called application. Alternatively, the user terminal 200 may be set to start a specific process when the user terminal 200 enters a specific area or time zone, approaches a specific device or facility, or inputs specific information through a microphone or a keypad.

In the step of the application determining or updating the usage right of a specific user for the service provided by the application using the rule and the user information, the rule regarding the usage right is provided to the user without the additional authentication process The functions and content elements of the app, the functions and content elements for which additional voice input of the user is required, and the contents of the user voice input for additional authentication. For example, in the case of the function of viewing a specific document of the 'viewing application', if the disclosure is made to all users according to the kind of document, if the disclosure is made only to a civil servant of a certain rank or higher, In case of a specific document which can be read only by the market, it may be required to require additional password input in addition to the gates.

The rules defining the usage rights of the individual apps define the belonging information of the app, the security level or the usage right rating for using each service provided by the app, and the user information stored in the specific place by the user of the app And the security level may be the same as the normal security level mechanism. For example, the authority to use a specific service provided by an app expressing a specific 'bank' may be restricted to employees having a certain security level among the employees belonging to the bank, And the security level of the 'bank' employees for each service provided by the application.

10: App selection unit 15: Grammar DB
20: Instance DB 25: Rule DB
30: Voice recognition unit 35: Voice recognition unit
40: User information collecting unit 45: Position information collecting unit
50: Time information collecting unit 100: Location
200: user terminal device 201: input unit
202: microphone 203: camera
204: Gyro, Compass, Accelerometer 205: GPS
206: display screen 207: control unit of the user terminal
208: Internal DB 209: External device
300: management server 310: external DB

Claims (10)

Storing a user's gateways and identities in a specific place;
Storing a plurality of apps in a specific place;
Storing usage rules of each of the plurality of apps in a specific place;
Collecting user information stored in a specific place;
Calling a specific application and a usage rule stored in the specific place by using user information including a user's voiceprint and a character string;
Requesting a user to perform a specific operation or function for the called application; And
Determining or updating a usage right of a specific user for a service provided by the application using the rule and the user information;
The method comprising the steps of: (a) determining an access privilege based on a time and space information; The method according to claim 1,
Storing the user's < RTI ID = 0.0 > statement < / RTI &
The specific place is located inside or outside the smart device and is connectable by the web. In storing the rules regarding the authentication of the gates, it is possible for the specific app to display the specific place where the specific user terminal is located, Wherein the authentication request is limited so as to request authentication. 3. The method of claim 2,
The character string to be presented to the user for the gestural authentication is a name of an application to be called, and includes a dominant list or a scales, and the user transmits the character string to the authentication server The method comprising the steps of: (a) determining whether the user is authorized to access the application; The method according to claim 1,
The step of storing a plurality of apps in a specific place includes:
The name of each of the apps is the same as the content input by the user by voice. Each of the apps stores a rule relating to a user authentication method and a procedure thereof, and the app is a web app, a native app, or a hybrid app How to Determine App Authority based on Grammar and Spatiotemporal Information. The method according to claim 1,
Wherein the step of storing the usage rule of each of the plurality of apps in the specific place comprises:
The rule is that the application operating on the smart device saves the rules related to the user's gender information and user information and / or information to be input from the user in a specific place including the user terminal device A method for determining an access right of an app based on a text and space-time information. The method according to claim 1,
In the step of the user collecting the smart information and / or the user information stored in the specific place, the user information stored in the specific place may be information generated or collected by hardware of the smart device, information generated or collected by the software, and / Or information gathered from a user, and a method of determining an access right of an app based on a space-time and space-time information The method according to claim 1,
The step of calling a specific application and a usage rule stored in the specific place using user information including a user's voiceprint and a character string,
Using the sign as a signature, an app with a name extracted from the voice is called from a specific place, but the user's location information, time information, and / or user information are used as additional parameters for application calling and user authentication How to Determine Authority for App Usage Based on Grammar and Spatiotemporal Information The method according to claim 1,
A user inputs a touch input, a keypad input, a voice input, a motion input, a signal input from the network, a position input by GPS, And / or by means of time input by a timer. The method according to claim 1,
In the step of the application determining or updating the usage right of a specific user for the service provided by the application using the rule and the user information, the rule regarding the usage right is provided to the user without the additional authentication process A function and a content element of an application, a function and a content element requiring a user's additional voice input, and a content of a user voice input for additional authentication are defined. 10. The method of claim 9,
The rules defining the usage rights of the individual apps define the belonging information of the app, the security level or the usage right rating for using each service provided by the app, and the user information stored in the specific place by the user of the app Wherein the security level includes a security level, and the security level may be the same as a normal security level mechanism.

Images