KR20160144534A - Iris Scan USB Device using an OTP Function and Controlling Method for the Same - Google Patents

Abstract

The present invention relates to an iris recognition universal serial bus (USB) device and a method of controlling the same, which includes: a first step of acquiring an iris image of a user through a camera module unit provided in a USB device, numerically- encrypting the iris image, and registering the iris image as information on a user iris in a memory, by a control module unit in the first use stage; a second step of numerically encrypting the input iris information when the iris information of the user is inputted in real time after the first process and then performing the first authentication by comparing the numerically encrypted iris information previously registered in the memory with the numerically encrypted iris information; a third step of generating, by the control module unit, a one-time password (OTP) after the first iris authentication in the second process and displaying the OTP to be displayed externally, and performing a second authentication for set equipment through the OTP. As described above, according to the present invention, the camera module and the iris module are mounted in the USB, and OTP authentication and complex password authentication are performed in multiple stages after the first authentication through the iris information registered in the USB in the set equipment authentication, so that locking releasing of the equipment is complexly determined. Strong device security can be implemented through USB. Accordingly, there is no fear that iris information and compound encryption information will be hacked even if USB is lost, so the security for data embedded in the USB is excellently exhibited.

Description

Technical Field [0001] The present invention relates to an iris recognition USB device using an OTP function,

The present invention relates to an iris recognition USB device using an OTP function and a control method thereof. More particularly, the present invention relates to an iris recognition USB device that performs OTP authentication and complex password authentication in a multi- The present invention relates to an iris recognition USB device using an OTP function that performs robust device security through USB, and a control method thereof.

2. Description of the Related Art In general, a system for providing online information on various fields via a remote data communication network to a plurality of subscribers through at least one host server has been widely expanded due to the recent development of information communication technologies. In particular, as the above information communication technology is applied to the financial industry, most of the financial transactions (or payment settlement) and various service industries, which have been performed in the face-to-face manner, Industry. As the non-face-to-face type financial transaction (or payment settlement) and the online service industry are gradually activated as described above, security problems such as anonymity of the online and security flaws in the communication protocol are increasing rapidly. (Non-face-to-face) financial transactions (or payment settlement) and online services are based on a method of resolving anonymity by confirming a real name, complementing deficiencies in communication protocols, and using an encryption / decryption based security protocol. At this time, in the above-described online financial service, a disposable authentication key method called one time password (OTP) is widely used for on-line security authentication.

1, it is assumed that all the information processed in the financial transaction including the ledger entry is managed and stored, the personal authentication information for personal authentication is registered and stored, and then the online network A host server (71) for processing the authentication signal of the accessing terminal (70);

And an OTP generator 72 for generating a one-time password for personal authentication when a user of the terminal 70 performs an online financial transaction through the host server 71.

In the conventional security service personal authentication device, when the user accesses the corresponding Internet site for financial transaction in his / her terminal 70, the host server 71 recognizes the access of the terminal 70 And displays the initial menu screen on the terminal 70. [ When the user of the terminal 70 selects the necessary financial transaction screen on the initial menu screen, the host server 71 transmits an authentication screen for authentication of the financial transaction and displays it on the terminal 70. Then, the user of the terminal 70 generates the one-time password by driving the OTP generator 72 previously registered in the host server 71, and transmits the generated one-time password to the authentication screen. Accordingly, the host server 71 compares the inputted one-time password (OTP) with the previously registered one-time password (OTP), and when the authentication is performed, the host server 71 processes the set financial transaction and stores it in the ledger.

However, since the conventional security service personal authentication device as described above registers and issues the OTP generator for generating the disposable secret number only to the host server of the corresponding financial institution, the OTP generator is lost when the OTP generator is exposed by hacking or the like, There is a problem that the security risk of causing financial accidents is greatly increased because the financial information of the lost person including the self-certification is easily accessed.

SUMMARY OF THE INVENTION Accordingly, the present invention has been made in order to solve the problems of the related art as described above, and it is an object of the present invention to provide a multi- The present invention provides an iris recognition USB device using an OTP function that performs robust device security through USB, and a control method thereof.

In the present invention as described above, a mirror is installed in an external body of a USB device, and a cold mirror having a built-in camera is installed in the mirror, thereby enabling the pupil of the authenticator to be easily positioned in the cold mirror without any special operation. And to provide an iris recognition USB device using the OTP function and its control method which can significantly increase the success rate.

According to another aspect of the present invention, there is provided a USB connector for connecting an input / output signal to a USB body frame, the USB connector having a USB connector inserted into one end of a body of the device, Wealth;

A mirror member installed on an outer surface of the USB body frame portion so as to illuminate a user's face;

A cold mirror member installed in a circular shape in a predetermined area of the mirror member so that the iris authentication is scanned in an optimal state when the pupil of the authenticator is positioned in the circle;

A camera module for photographing an iris image of an authenticator placed in a circle of the cold mirror member by installing a camera on a rear portion of the cold mirror member;

An iris module for analyzing the real time iris image picked up by the camera module and numerically encrypting the real time iris image;

And an OTP generation and comparison authentication program which is installed inside the USB body frame unit and generates or compares an OTP signal synchronized with time information, and stores iris image data which is numerically encrypted by the iris module unit A memory unit for storing personal authentication information composed of numerical values, letters or symbols designated by the user for additional authentication;

The iris information is firstly authenticated based on the iris comparison information previously stored in the memory unit, and then the OTP authentication is performed. After the OTP authentication, the OTP information synchronized with the real time time information is added There is provided an iris recognition USB device using an OTP function including a control module unit for controlling whether or not the equipment is unlocked by performing an authentication procedure again with additional encrypted authentication information formed by combining user authentication information previously set by a user .

According to still another aspect of the present invention, there is provided a method of controlling an image capture apparatus, the method comprising: acquiring a user's iris image through a camera module unit included in a USB device, digitally encrypting the image, and registering the user's iris information in a memory;

A second step of numerically encrypting the input iris information when the iris information of the user is inputted in real time after the first process and then performing the first authentication by comparing the numerically encrypted iris information previously registered in the memory with the numerically encrypted iris information;

A third step of generating a disposable password (OTP) after the first iris authentication in the second process and displaying the disposable password (OTP) to be displayed externally, and performing a second authentication through the one-time password (OTP) And a control method of the iris recognition USB device using the function.

According to the present invention, the camera module and the iris module are mounted in the USB, and the OTP authentication and the complex password authentication are performed in multiple steps after the first authentication through the iris information registered in the USB in the set device authentication, It is very effective to secure the security of the built-in data in USB because it does not have to worry about iris information and compound encryption information being hacked even if USB is lost. .

In addition, according to the present invention as described above, a mirror is installed outside the USB, and a cold mirror with a camera is installed in a specific area of the mirror. Then, the authenticator places its face on the mirror for iris authentication, The iris information of the authenticator can be easily scanned without any additional device, thereby maximizing the success rate of the iris recognition.

1 is an explanatory view for explaining an example of a conventional security service personal authentication apparatus;
2 is an explanatory view schematically illustrating a USB device according to the present invention;
3 is an explanatory view schematically explaining the outline of the iris recognition USB device using the OTP function according to the present invention.
4 is an explanatory view schematically explaining the use process of the USB device of the present invention.
5 is a flowchart of the present invention.

Hereinafter, preferred embodiments of an iris recognition USB device using the OTP function according to the present invention will be described with reference to the accompanying drawings.

However, the present invention is not limited to the embodiments of the iris recognition USB device using the OTP function according to the present invention described here, but may be embodied in other forms. Rather, the embodiments disclosed herein are provided so that the disclosure can be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. Like reference numerals designate like elements throughout the specification. It is to be understood that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification. The term " comprises " And / or "comprising" does not exclude the presence or addition of one or more other elements, steps, operations, and / or elements.

Example

FIG. 2 is an explanatory diagram schematically illustrating a USB device according to the present invention, FIG. 3 is an explanatory view schematically illustrating the outline of an iris recognition USB device using the OTP function according to the present invention, Fig. 5 is a flowchart of the present invention. Fig.

2, an iris recognition USB device using an OTP function according to an embodiment of the present invention includes:

The USB slot 2 of the devices 1 and 1A-N is inserted into the USB slot 2 of the PC 1A, the notebook 1B, the smartphone 1C, the TV 1D and the server 1N, And a signal interface unit 4 installed inside the body for interfacing the input / output signals with the set communication method. The USB body frame unit 5, which forms the body of the USB, Wow;

A mirror member (6) installed on an outer surface of the USB body frame part (5) to illuminate a user 's face;

A cold mirror member (7) installed in a circular shape in a certain region of the mirror member (6) so that the iris authentication is scanned in an optimal state when the pupil of the authenticator is located in the circle;

A camera module unit 9 for photographing an iris image of an authenticator placed in a circle of the cold mirror member 7 by installing a camera 8 on the rear side of the cold mirror member 7;

An iris module 10 for analyzing the real-time iris image picked up by the camera module 9 and then numerically encrypting and outputting the real-time iris image;

And an OTP generation and comparison authentication program which is installed inside the USB body frame unit 5 and generates or compares an OTP signal synchronized with time information. The iris module unit 10 performs numeric encryption processing A memory unit 12 that stores iris image data and personal authentication information composed of numerals, letters, or symbols designated by the user for additional authentication, and stores various information processed by the USB device 11; ;

The iris module 10 performs the first authentication based on the iris comparison information previously stored in the memory unit 12, performs the OTP authentication, and further real-time time information The control module unit 13 for controlling whether or not the equipment 1 is unlocked by proceeding with the authentication process again with the additional encrypted authentication information formed by combining the OTP information synchronized with the user and the compound encryption information preset by the user .

The USB device 11 is also provided with a battery (not shown) including a control module unit 13 and supplying operating power to each component.

Also, a keypad 14 including various buttons for inputting a user's control signal may be installed on one side of the USB device 11.

The memory unit 12 is implemented as a flash memory.

Since the USB device 11 according to the present invention has the iris, OTP, and complex encryption security functions built in the memory unit 12, even if the memory is forcibly decomposed or hacked from the outside, the previously stored iris, OTP, It is implemented so that it can not access the equipment (1) or the built-in information at all as long as the authentication information matching the composite encryption information is not input.

The USB unit 11 according to the present invention will be described in more detail. The memory unit 12 is configured to generate a one-time password (OTP) according to the function control of the control module unit 12, A button 15 for requesting the generation of a disposable password (OTP) is provided on a keypad 14 provided on one side of the outer body of the unit 5, and a small display 15 for displaying the generated disposable password (OTP) Is installed on one side of the outer body of the USB body frame unit 5, and then the disposable password can be implemented only when it passes the iris authentication process. Further, the control module unit 13 receives additional encryption authentication information composed of compound encryption information composed of numeric values, letters, or symbols designated by the user for additional tertiary authentication after OTP authentication from the user in advance, 12).

The USB body frame unit 5 wirelessly processes the multi-step authentication request signal received through the equipment 1, for example, the PC 1A, the smartphone 1C, or the wireless communication network 16 The wireless module unit 17 can be built so that the multi-step remote authentication process can be performed, so that the multi-step remote authentication process can be performed using the wireless communication method.

The control module unit 13 further includes an OTP automatic discard function for discarding the OTP inherent key when the OTP authentication fails for a predetermined number of times or more. Here, the OTP inherent key refers to an argument value for generating an OTP. Generally, OTP is generated in a time synchronization manner through an OTP inherent key. Therefore, when the OTP inherent key is discarded, the OTP authentication function is deleted.

 The mirror member 6 provided on the USB body frame 5 is made of acrylic material and can be hard coated to prevent scratches. Silver deposition is formed for mirror effect, and IR The LED part can be excluded from the deposition. In addition, the cold mirror member 7 may have a diameter of about 8 pie, for example, for iris positioning, and may be printed in black to enhance the reflectance.

Furthermore, the camera module unit 9 blocks only the infrared band, for example, the wavelength band of 700 nm or less (visible band blocking) so that the iris wrinkles can be photographed.

In addition, the USB body frame unit 5 is provided with LEDs 18 of various colors to inform internal authentication procedures on its outer surface.

Next, the control method of the present invention having the above-described configuration will be described.

As shown in FIG. 4, in the initial state S1, the control module acquires a user's iris image through a camera module unit included in the USB device and encrypts the user's iris image, (S2) < / RTI >

Encrypting the input iris information when the user's iris information is input in real time after the first process (S2), comparing the input iris information with numerically-encrypted iris information previously registered in the memory unit, and executing first authentication (S3);

A third process of generating a disposable password (OTP) after the first iris authentication in the second process (S3) and controlling the display module to be displayed to the outside and executing the second authentication through the disposable password (OTP) S4.

In the third step S4, the control module 13 generates a one-time password (OTP) and presents it to the security application or the gold authentication application program of the device 1 in real time to automatically execute an authentication procedure And an execution step.

In the third step S4, the control module 13 combines the personal authentication information preset by the user with the OTP information synchronized with the real-time time information after the second authentication through the one-time password (OTP) And a multi-step authentication step of controlling the unlocking state of the device 1 by proceeding to the third authentication process again after configuring the encryption authentication information.

In the third step S4, the control module attaches the multi-step authentication request signal received through the equipment 1, for example, the PC 1A, the smartphone 1C, or the wireless communication network 16 to the built- And a multi-step remote authentication step of performing a multi-step remote authentication process.

In other words, when the USB device 11 is used for the first time, the control module unit 13 acquires the iris image of the user through the camera module unit 9 provided in the USB device 11, And registers the iris information of the user in the memory unit 12 afterwards. In the iris registration process as described above, the iris registration function is set through the keypad 14, and the registered person places his / her face on the mirror member 6 of the USB body frame unit 5, The USB device 11 is moved such that the pupil is located in the circle of the cold mirror member 7 formed inside the mirror member 6. [ At this time, if the pupil of the person to be registered is located only in the original shape of the cold mirror member 7, the camera 8 located on the rear side of the cold mirror member 7 scans the iris image correctly. The iris image of the registrant scanned as described above is numerically encrypted by the iris module unit 10 and then registered in the memory unit 12 as iris information of the user.

After the registration process, if the user accesses the financial institution server 1N via the equipment 1, for example, the PC 1A or the smartphone 1C to perform the Internet banking or performs the site security authentication procedure, The USB connector 3 of the device 11 is inserted into the USB slot 2 of the equipment 1 such as the PC 1A or the USB slot 2 of the smartphone 1C. The control module unit 13 of the USB device 11 is connected to the CPU or control module (not shown) of the equipment 1 via the USB connector 3 and the signal interface unit 4. [

In this process, after the user sets the iris authentication function through the keypad 14 for authentication, the user's face is placed on the mirror member 6 of the USB body frame unit 5, and at the same time, The USB device 11 is moved so as to be located in the circle of the cold mirror member 7 formed inside the mirror member 6. [ At this time, when the pupil of the authenticator is positioned in the original shape of the cold mirror member 7, the camera 8 located on the rear side of the cold mirror member 7 accurately scans the iris image and inputs it to the iris module unit 10. The iris image of the authenticator thus scanned is numerically encrypted by the iris module 10 and then input to the control module 13. Then, the control module unit 13 compares the inputted numeric-value encrypted iris information with numerically-encrypted iris information pre-registered in the memory unit 12 to perform primary authentication. In this process, the control module 13 outputs an authentication failure signal to the outside when the iris of the authenticator is not authenticated. However, when the iris of the current authenticator is authenticated, the control module unit 13 loads the OTP generation program stored in the memory unit 12 to generate a one-time password (OTP) And displays the disposable password (OTP) on the display 15 so as to be displayed externally. The user of the equipment 1 then transmits the disposable password (OTP) displayed on the display 15 to the authentication number 1 of the Internet banking on the equipment 1, such as the PC 1A or the smartphone 1C, It is entered into the request screen or the site security authentication request screen to execute the secondary authentication.

Here, if the secondary authentication is set to the automatic execution function, the control module unit 13 generates a one-time password (OTP) and transmits the generated one-time password (OTP) to the security application It can be presented to the authentication application program in real time to automatically execute the authentication procedure.

If the third authentication function is set in the second authentication process, the control module unit 13 checks whether the current authenticator has previously registered the numeric value, the character or the symbol To be input. At this time, when the current authenticator inputs the composite encryption information, the control module unit 13 composes it into the additional encryption authentication information by combining it with the OTP information generated at the current time, and then transmits the same OTP information to the memory unit 12 again for comparison. And the encrypted encryption information including the numeric value, the character or the symbol designated by the user, which is stored in advance, is stored in the same manner as described above. In this case, if the authentication fails in the third authentication process, the control module unit 13 may perform an internet banking process on the device 1, for example, the PC 1A or the smartphone 1C, Immediately stop the process or the execution of the task. However, if the authentication is successful in the third authentication process, the control module unit 13 may perform an internet banking process or a site security process on the device 1, for example, the PC 1A or the smartphone 1C, Or execute the task execution normally.

During the authentication process, when the multi-level authentication request signal is received through the equipment 1, for example, the PC 1A, the smartphone 1C, or the wireless communication network 16, It is possible to process the wireless signal through the wireless module unit 17 and execute the remote authentication procedure in multiple stages in the same manner as the authentication process.

In addition, during the above process, if the OTP authentication fails more than a preset number of times, the control module unit 13 performs an OTP automatic discard function to discard the OTP inherent key, so that an argument value for generating an OTP is no longer generated The OTP authentication function is deleted because the OTP can not be generated in a time synchronization manner.

In addition, the camera module unit 9 blocks only the infrared ray band, for example, the wavelength band of 700 nm or less (visible ray band cutoff) so that the iris wrinkles can be photographed. The LEDs 18 of various colors provided on the outer surface of the USB body frame unit 5 inform the outside of the internal authentication procedure in real time.

In another embodiment of the present invention, the USB device 11 of the present invention is authenticated through the iris authentication instead of the login information of the web site of the financial institution, for example, And can be used as a device for freely conducting financial settlement. That is, the USB device 11 of the present invention can be used as a personal ID card using iris information. First, after connecting the USB device 11 of the present invention to the USB slot 2 of the PC 1A, It is possible to freely inquire, send money, and make financial settlement after completing the identity verification through iris authentication in place of the personal ID and password which are used.

The USB device 11 of the present invention may be connected to a USB slot 2 of an ATM device 1N or an ATM device 1N or may be connected to a communication channel using an NFC 19 method, The USB device 11 of the present invention is tagged to the ATM device 1N after completion of the identity authentication through the iris authentication through the USB device 11 of the present invention as requested, And can also be used for ATM equipment transactions of financial institutions. At this time, when the iris information is used, the iris authentication result value is used only for communication, that is, the iris authentication information is not stored in the financial institution server but stored in the USB device 11 of the present invention, Only the result of the comparison is used. In this case, the USB device 11 of the present invention, which has been issued at the time of registration of the financial transaction without using the existing ID and password, can be easily connected to the USB port after the iris authentication and easily logged in to the ATM device, PC, (Login) and can proceed the remittance and settlement.

1, 1A-N: Equipment 2: USB slot
3: USB connector 4: Signal interface section
5: USB body frame part 6: Mirror member
7: Cold Mirror member 8: Camera
9: camera module section 10: iris module section
11: USB device 12: memory unit
13: Control module part 14: Keypad
15: Display 16: Wireless communication network
17: wireless module part 18: LED
19: NFC

Claims (10)

A USB body frame unit provided at one end of the body for inserting and connecting the USB device into the USB slot of the device and interfacing the input / output signals with the set communication method by providing a signal interface unit inside the body;
A mirror member installed on an outer surface of the USB body frame portion so as to illuminate a user's face;
A cold mirror member installed in a circular shape in a predetermined area of the mirror member so that the iris authentication is scanned in an optimal state when the pupil of the authenticator is positioned in the circle;
A camera module for photographing an iris image of an authenticator placed in a circle of the cold mirror member by installing a camera on a rear portion of the cold mirror member;
An iris module for analyzing the real time iris image picked up by the camera module and numerically encrypting the real time iris image;
And an OTP generation and comparison authentication program which is installed inside the USB body frame unit and generates or compares an OTP signal synchronized with time information, and stores iris image data which is numerically encrypted by the iris module unit A memory unit for storing personal authentication information composed of numerical values, letters or symbols designated by the user for additional authentication;
The iris information is firstly authenticated based on the iris comparison information previously stored in the memory unit, and then the OTP authentication is performed. After the OTP authentication, the OTP information synchronized with the real time time information is added And a control module unit for controlling whether or not the equipment is unlocked by repeating the authentication procedure with the additional encryption authentication information formed by combining the personal authentication information set by the user in advance. The method according to claim 1,
Wherein the body frame unit includes a wireless module unit for performing a multi-step remote authentication process by wireless signal processing of a multi-step authentication request signal received from a device including a PC, a smart phone or a wireless communication network Iris recognition USB device. The method according to claim 1,
Wherein the control module further comprises an OTP automatic discard function for discarding the OTP inherent key when the OTP authentication fails for a predetermined number of times or more. The method according to claim 1,
The iris recognition USB device using the OTP function is characterized in that the device is an ATM device of a financial institution. 5. The method according to any one of claims 1 to 4,
The iris recognition USB device may be connected to a USB slot of an ATM device of a financial institution or may be connected to a communication channel by an NFC and then authenticated by iris authentication through the iris recognition USB device as requested by the ATM device And then the financial transaction is executed after the iris recognition USB device is tagged to the ATM device. A first process of acquiring a user's iris image through a camera module unit provided in a USB device and numerically encrypting the user's iris image and registering the user's iris information in a memory unit when the control module module is used for the first time;
A second step of numerically encrypting the input iris information when the iris information of the user is inputted in real time after the first process and then performing the first authentication by comparing the numerically encrypted iris information previously registered in the memory with the numerically encrypted iris information;
A third step of generating a disposable password (OTP) after the first iris authentication in the second process and displaying the disposable password (OTP) to be displayed externally, and performing a second authentication through the one-time password (OTP) Method for controlling iris recognition USB device using the function. The method according to claim 6,
The third step may further include an automatic authentication execution step of generating a one-time password (OTP) by the control module and presenting the OTP in real time to the security application or the gold authentication application program of the device to automatically execute the authentication procedure. Method for controlling iris recognition USB device using the function. The method according to claim 6,
In the third process, the control module combines the OTP information synchronized with the real-time time information after the second authentication through the one-time password (OTP) to configure the additional encryption authentication information by combining the personal authentication information preset by the user Further comprising a multi-step authentication step of controlling whether or not the device is unlocked by performing a third authentication process again. ≪ RTI ID = 0.0 > [10] < / RTI > The method according to claim 6,
In the third step, a multi-step remote authentication step of performing a multi-step remote authentication process by wireless signal processing of a multi-step authentication request signal received through an equipment including a PC, a smart phone or a wireless communication network, And controlling the iris recognition USB device based on the OTP function. The method according to claim 6,
After the first process, the iris recognition USB device connects to a USB slot of an ATM device of a financial institution or connects a communication channel by NFC;
A second step of completing identity authentication using iris authentication through the iris recognition USB device as the authentication information is requested by the ATM device after the first step;
Further comprising a third step of tagging the iris recognition USB device to an ATM device and then performing a financial transaction set up after the second step.

Images