KR20170141620A - Apparatus for authenticating password using image and method thereof - Google Patents

Abstract

Disclosed are an apparatus and a method for enabling a user to memorize a password for a long time by receiving a password from the user as an image, and providing the user with a converted image associated with the image of the password. According to one aspect of the present invention, the apparatus of the present invention comprises: a providing unit for providing an image having a selected password of a user for a screen output; a receiving unit for receiving a password setting request of the user including a partial image selected as the password of the user from the image output on a screen; a generating unit for generating unique and relevant information corresponding to the received partial image as password data of the user; a setting unit for storing the generated relevant information as the password data of the user to set the same as a password of the user; and an authentication unit for receiving a password authentication request of the user including the partial image, generating the received partial image as relevant information through the generating unit, and indicating that the authentication is successful when the generated relevant information is compared to preset password data, and corresponds thereto.

Description

[0001] APPARATUS AND AUTHENTICATING PASSWORD USING IMAGE [0002]

More specifically, the present invention is a password authentication technique, which receives an image from a user as a password, outputs a converted image of the password image to the screen, and performs an authentication process of a password in which a password image is remapped from the converted image of the screen And to a method and apparatus for providing the same.

Conventional authentication for confirming that the user is online includes a method of confirming a conventional ID / password, a method of providing unique information by a user's e-mail address or a mobile phone number, a method of confirming a user by receiving the unique information from a user, And how to verify the certificate.

In many cases, the ID / password scheme reuses an ID / password, which is mainly used by a user, for a plurality of authentications. Passwords are often used weakly in terms of strength, which is the least reliable method. The e-mail address sometimes becomes invalid after a lapse of time due to a change or the like. Also, confirming the cell phone number does not fit the anonymity service. In addition, the public key-based certificate is stored in the portable memory, and the user has to carry it at all times, so that the user can always lose the certificate.

In the conventional authentication described above, the user intends to enhance the security by setting the only information known only to the user as a password. A user generates a password "A" by inputting an alphanumerical key such as letters, numbers, special symbols, etc. based on information known only to himself / herself. Since the password "A" is the only thing unknown to the user, the user tends to use it for a plurality of authentications, thereby lowering the security. Actually, the user uses the password "A" set by himself / herself for various authentication such as login, membership, internet banking, etc. of a plurality of sites. Accordingly, when the password "A" of the user is hacked by the third party, the third party can input "A" as the password of the user at the time of various authentication and disguise it as the user.

Thus, the user is required to generate one unique password for one authentication. However, as the authentication of the user increases, it becomes difficult for the user to generate different passwords for each authentication. Also, if the user sets a unique password of 1: 1 for each authentication, it is easily lost because it confuses different passwords matched to a plurality of authentications.

Korean Patent No. 10-1381583 (Mar. 31, 201)

The present invention has been made in view of the above-described prior art, and it is an object of the present invention to provide an image to a user in order to set a password different from a password that has been used by a user, And an apparatus and method for authenticating an input password.

In addition, in order to prevent the user from forgetting the password set as the image, the password image conversion image is output to the screen, and the user can associate and remember the password image through the converted image on the screen.

According to an aspect, an apparatus for authenticating a password using an image includes at least one processor, a memory, and a program stored in the memory and executed by the processor, the program being output to a screen, A providing unit for providing an image in which a password is selected; A receiving unit for receiving a password setting request of a user including a partial image selected as a user's password in the image outputted on the screen; A generating unit for generating unique related information corresponding to the received partial images as password data of a user; A setting unit for storing the generated related information as password data of the user to set a password of the user; And generating the related information as the related information through the generation unit, comparing the generated related information with the preset password data, and if the authentication is successful, And an authentication unit for authenticating the user.

The providing unit provides an image divided into a plurality of regions so that the partial image segmented from the entire image output to the screen is selected by the user.

The apparatus further includes a conversion unit for converting the partial image received by the password setting request to generate a converted image, and for providing the generated converted image to be output to the screen.

The authentication unit receives the password authentication request after the converted image is displayed on the screen and confirmed by the user.

The generation unit uses the partial image as the related information.

The generating unit generates at least one piece of information among the matching information, which includes a location address, an image object, video or audio information, and meta information uniquely matching the partial image, as the related information.

The generation unit generates related information including the first related information corresponding to the partial image and the added second related information as password data of the user.

According to another aspect, a method for a device to authenticate a password using an image comprises the steps of: providing an image to be output to a screen, the user's password being selected; Receiving a password setting request of a user including a partial image selected as a user's password in the image outputted on the screen; Generating unique related information corresponding to the received partial image as password data of the user; Setting the password of the user by storing the generated related information as password data of the user; And generating the related information as the related information through the generation unit, comparing the generated related information with the preset password data, and if the authentication is successful, And authenticating.

According to an aspect of the present invention, an image is provided to a user to select a new image password that is not an existing alphanumeric password that the user has used for other authentication, so that it is different from an existing password set as information input by a user , And provides a setting of a unique image password corresponding to only one authentication.

According to another aspect of the present invention, by storing the related information mapped to the image password of the user as data of the password, the image password is independent of the user information, compared with the existing password based on the input information of the user, As the data becomes more independent of user information, the user's password is more secure from user information.

According to another aspect of the present invention, by storing relevant information corresponding to a user's image password as password data and judging that authentication is successful for a password input of a similar image having the same related information, Allowing similar images near the input image to be input when authenticating with a password, thereby providing the convenience of inputting a password to the user.

According to another aspect of the present invention, there is provided a method for providing a user with a converted image obtained by converting an image of a user password to a user through a screen in order to store a password image selected and unilaterally provided by a user, The user who receives the repetition of the memory prevents the user from forgetting the image password and allows the image to be retained for a long time.

BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate preferred embodiments of the invention and, together with the description of the invention below, And should not be construed as interpretation.
1 is a schematic configuration diagram of a system of the present invention.
2 is a schematic internal configuration diagram of the service providing server of FIG.
FIG. 3 and FIG. 4 are exemplary views of a screen of a user terminal for setting an image password according to the first embodiment of the present invention.
5 is an exemplary view of a screen of a user terminal for setting an address password according to a second embodiment of the present invention.
6 is a diagram illustrating a screen of a user terminal for setting a caption password according to the third embodiment of the present invention.
7 is an exemplary view of a screen of a user terminal for setting a meta information password according to the fourth embodiment of the present invention and a password of image information and additional information according to the fifth embodiment.
8 is a diagram illustrating an example of a screen of a user terminal for setting a preference password according to the sixth exemplary embodiment of the present invention.
9 is a schematic flowchart of a method for authenticating a password of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. Prior to this, terms and words used in the present specification and claims should not be construed as limited to ordinary or dictionary terms, and the inventor should appropriately interpret the concepts of the terms appropriately It should be interpreted in accordance with the meaning and concept consistent with the technical idea of the present invention based on the principle that it can be defined. Therefore, the embodiments described in the present specification and the configurations shown in the drawings are only the most preferred embodiments of the present invention and do not represent all the technical ideas of the present invention. Therefore, It is to be understood that equivalents and modifications are possible.

Figure 1 is a schematic block diagram of a system 100 of the present invention.

The password authentication service provided by the apparatus of the present invention can be applied to various online services such as portal service, internet banking, shopping, and games. That is, if the service authenticates the user through a password on-line, the service can be included in the service of the present invention. The authentication service of the password is accompanied by processing of inputting, storing and authenticating the user password by setting the password by the user.

The apparatus of the present invention can be implemented by at least one of the service providing server 110 and the user terminal 130 through a design change. That is, the apparatus of the present invention is implemented in any one of three forms such as the service providing server 110, the user terminal 130, or the service providing server 110 + the user terminal 130.

Accordingly, the authentication service of the password may be performed by the system 100 in a client-alone environment configured by the user terminal 130 or the system 100 in the client / server environment configured by the service providing server 110 and the user terminal 130 100). Hereinafter, it is assumed that the system 100 of the present invention is configured in a network-based client / server environment. Of course, in the system 100 of the client / server environment, the HW and SW resources required to provide the password authentication service can be appropriately distributed to the service providing server 110 and the user terminal 130 through design changes . For example, the input function, the processing function, the output function, and the storage function included in the HW and SW resources may be implemented in the service providing server 110 or the user terminal 130.

The system 100 includes a service providing server 110 that provides a password authentication service through a wired or wireless network and a user terminal 130 that receives the password authentication service from the server 110 .

The network typically includes a wired / wireless communication network capable of data communication using various protocols such as a public network such as the Internet, a private network, and a mobile communication network.

The service providing server 110 provides the content service of the web server to the user terminal 130 that has successfully authenticated the password since the web server is established and the user terminal 130 is connected to the web server.

The user terminal 130 is executed after the service application 131 is installed. The executed service application 131 receives the password authentication service from the server 110 and receives the content service after the user authentication is successful. For example, a computer device such as a desktop, a notebook, or a smart phone having a network function and a program execution function corresponds to the user terminal 130. [

Here, the service providing server 110 corresponds to an apparatus of the present invention based on a computer architecture including a memory (RAM), a processor (CPU), a recording medium (disk), a display device, an input device and a communication circuit. Of course, the user terminal 130 may also be implemented as an apparatus of the present invention.

The processor executes a program stored in the memory. That is, when the control program of the password authentication service provided by the service providing server 110 is loaded into the memory, the processor processes the function of the control program and provides the processing result to the application 131. Through the processing result, the user is provided with a password authentication service.

2 is a schematic internal configuration diagram of the service providing server 110 of FIG.

The service providing server 110 includes a providing unit 211, a receiving unit 212, a generating unit 213, a setting unit 214, a converting unit 215, and an authenticating unit 216. Each of the components 211 to 216 may be implemented as a program, stored in a memory, and executed by a processor. Through the design change, all or a part of the components 211 to 216 can be implemented as an application 131 and executed.

The providing unit 211 transmits an image for which a password is set to the application 131 according to a user's request. The image is a medium for receiving a password from a user. Here, the image may be a picture, a picture, a moving picture, and the like, and there is no particular restriction on the contents and format. The application 131 executes the received image file and can output data to the screen and the speaker according to the data format of the executed file. The providing unit 211 may provide a search service for the registered image. The user can also receive a unique image registered by the user from the providing unit 211 through the search.

The receiving unit 212 receives a request for setting a password including a partial image selected by the user as a password on the image output through the screen of the application 131 from the application 212. The user selects a part or a part of images constituting the entire image displayed on the screen in the application 131 as a password and requests the setting of the selected password.

The generation unit 213 generates the related information of the unique password using the password of the partial image received by the password setting request. The generation unit 213 can generate the related information with reference to the generation criterion of the related information set by the administrator. Then, the matching relation corresponding to the password selected by the user is applied, and specific matching information according to the application result is generated as the related information of the password.

Here, the matching information may be various. For example, the matching information may include some images selected as passwords by the user, information (e.g., location address, word, etc.) reminiscent of an image of the screen, information displayed on the screen Audio output information (e.g., dialogue, song lyrics, etc.), meta information of the image file, and the like. When the generation unit 213 is included in the application 131 by the design change, the receiving unit 212 can receive the password setting request including the related information from the application 131. [ Examples of respective pieces of related information will be described later with reference to Figs. 3 to 8. Fig.

The setting unit 214 stores the generated related information in the recording medium as password data of the user. The stored password data is referenced and compared for authentication of the password entered by the user.

Here, in the password of the image A in which the user requests setting of the password, the data of the stored password is related information of the A image. The relevance between the password of the image stored by the user and the related information of the password stored as the data of the password is not particularly limited.

Further, if the setting unit 214 processes the related information stored in the user's password as a hash function and stores the password data in the hash value, it is impossible to determine the user's input password from the hash value. Therefore, it is impossible for a third party who finds the hash value to input a password of the user and impersonate the user as a password attack.

The conversion unit 215 performs an image conversion process on some images received by the password setting request to generate a converted image. The image conversion process may include various processes for converting shading, color, resolution, and the like, and there is no particular limitation. The reason why the conversion unit 215 generates the converted image is to allow the user to check the converted image by checking the converted image through the screen of the application 131. The converted image is a hint image for reminding the user of the password by reminding some images before conversion. That is, each time the user views the converted image output to the screen by the application 131, the user reminds the entire image of the screen including the partial image and the partial image corresponding to the password. Repeating this association to the user makes it difficult for the user to forget the password.

Here, the converting unit 215 transmits the generated converted image to the application 131. [ Then, when the condition of the periodic or random event is satisfied during execution according to the display setting, the application 131 outputs the converted image to the screen at least once. It is also possible that the conversion unit 215 generates a plurality of candidate conversion images and selects a specific conversion image from the user.

By the design change, the conversion unit 215 can be implemented in the application 131. The application 131 transforms some images to generate transformed images, and stores the generated transformed images in the user terminal 130. Then, the application 131 can refer to the converted image locally stored in the user terminal 130 and output it to the screen.

The authentication unit 216 provides the application 131 with an image for the user to select a password as an input interface, receives a password input by the user, and receives an authentication request. Through the received input interface, the application 131 receives some images preset by the user as a password, and requests the authentication unit 216 for authentication.

Here, the authentication unit 216 converts the password of the user received through the password authentication request of the user into the related information of the password through the generation unit 213, and stores the converted related information in the password data stored in the recording medium And authentication processing is performed. If the comparison results match, password authentication is successful, and if not, it is a failure. The authentication unit 216 transmits the authentication result of success or failure to the application 131 and responds to the authentication request of the user. Thereafter, the application 131 that has been successfully authenticated can receive a service provided only from the service providing server 110 to the authenticated user.

When the authentication unit 216 receives the password-related information from the application 131 by the design change, the authentication unit 216 can compare the received related information with the password data stored in the recording medium.

As described above, the authentication service of the present invention is different in that the image is the input password of the user. The user is required to set a password in the image provided on the screen, so that the alphanumeric key input password that the conventional user has used is prevented from being reused in the authentication of the present invention. Although the number of passwords that can be combined by the alphanumeric key is limited, since passwords that can be combined by the image can not be counted by the image, the present invention increases the complexity of input compared to the key input method, thereby enhancing security.

Here, the conventional user tends to set common personal information such as a mobile phone number, a birthday, and an address, which are known only as the key input password, to a plurality of authentications. The password set by the tendency is very relevant to the user. If a third party arbitrarily generates a candidate password using the user's information and attempts a password attack, the user's password can be obtained. However, the present invention can separately generate password-related information for the password of the image selected by the user and store it as password data, thereby protecting the user's personal information. The image password of the present invention selected from the image provided by the user other than the conventional password keyed by the user is less relevant to the user than the conventional password. Furthermore, since the data of the password stored in the present invention is related information generated through the mapping relation from the irrelevant image password, the association with the user is further reduced as compared with the image password. Then, the password data, which is related information of the image password and the image of the present invention, is not related to the user since the user does not input his own information, and ensures the anonymity of the user.

In addition, since the user of the present invention is forced to set and input a password by receiving an image, the image password can be easily forgotten compared to the conventional alphanumeric key input password. Here, the present invention reminds the user that the password is stored by outputting the converted image to the screen of the application 131 so that the image password can be stored by the user for a long time.

Particularly, since the user of the present invention stores the partial image as a password, three images such as a whole image displayed on the screen, a partial image selected as a password from an image of the screen, and a converted image converted from a partial image are stored . This not only enhances memory by a factor of three, but also enhances password memories by more than three times by associating three images. Of course, when the converted image is outputted through the screen in the application 131, the user who is exposed to the visual stimulus of the converted image is provided with an opportunity to memorize the password. That is, the user can memorize the password every time the user views the converted image through the application 131, and can keep the memory for a long time.

3 and 4 are exemplary diagrams of screens of the user terminal 130 for setting image passwords according to the first embodiment of the present invention.

According to the first embodiment of the present invention, the generation unit 213 uses some image 410 selected by the user as a password as password data, which is related information of the password.

Referring to FIG. 3, it is assumed that the providing unit 211 transmits the load view image 300 to the application 131. The user can move to any desired position on the load view image 300 received by the application 131 and displayed on the screen. In addition, the load view image 300 is produced as a panoramic view, and the user can arbitrarily adjust the angle of the view point by operations such as dragging and sliding. The user moves to a preferred position such as home, work place, sightseeing spot, and the like via the image 300 of the application 131, and then presses a setting button 310.

Referring to FIG. 4, when the setting button 310 is pressed, the image 300 of the screen is divided into engraved images by a square grid. The user selects a particular piece of the image as the partial image 410 in the image 300. [ Some selected images 410 are passwords set by the user, and are images that are unique to the user and that are unique to the landmark, feature, or secret. The providing unit 211 may provide the application 131 with an image divided into a plurality of areas by a square grid, a puzzle pattern, or the like so that some images 410 can be selected.

When some image 410 is selected as a password by the user, the application 131 sends a password setting request including some images 410 to the server 110. The receiving unit 212 receives the password setting request from the application 131. The generation unit 213 treats some of the received images 410 as being generated as related information. That is, the received partial image 410 is related information of the password, and is password data stored in the DB. The setting unit 214 stores the password related information of the partial image 410 in the DB. The conversion unit 215 transforms some of the images 410 to generate a converted image 430 and transmits the generated converted image 430 to the application 131.

Then, the application 131 displays the converted image 430 on the screen according to the display condition set by the administrator or the user. For example, the user can set a display condition of the converted image 430 by setting a specific execution such as loading and ending of a program, personal information, a position of a screen, and the like. Then, whenever the display condition is satisfied, the application 131 outputs the converted image 430 to the screen.

Here, some images 410 that the user selects for a password setting request or authentication request are required to be the same. In particular, the password selected in the load view image 300 may fail authentication because the data of the image is different even if the position and angle of the viewpoint are slightly different. Thus, in order for the same partial image 410 to be selected by the user, the providing unit 211 provides the standardized image 300 as in FIG. In the normalized image 300 output to the screen, the user's view adjustment (e.g., angle, enlargement, etc.) is limited and some images 410 standardized with correct size and content can be selected.

5 is an exemplary view of a screen of a user terminal 130 that sets an address password according to the second embodiment of the present invention. The first embodiment described above can also be used in the following second embodiment. Specific differences of the second embodiment will be described as follows.

According to the second embodiment of the present invention, the generating unit 213 generates address information related to the image as the related information of the password, for the partial image 510 selected by the user as the password.

The application 131 selects a partial image 510 at a specific position from the image 500 received from the providing unit 211 and displayed on the screen, and requests the setting of the password. Then, the generating unit 213 generates unique address information matched with the partial image 510 included in the received password setting request by the conversion process. The setting unit 214 stores the generated address information in the DB as password data. The generated address information is information of a place and position reminded from the image.

Here, the user defines a specific image area in the image 500 and selects the defined area as a part of the image 510 at the time of setting and inputting the password. That is, some images 510 may be arbitrarily selected by the user in terms of position and size.

For reference, in the remaining embodiments of the present invention except for the first embodiment, each of the partial images 510 included in the image 500 of the screen may have the same related information. Accordingly, the user can be successfully authenticated by simply selecting some images 510 at the time of authentication request. This is because the authentication is determined to be successful even if the user inputs an approximate image as a password, thereby providing convenience to the user and providing efficiency of processing. If a comparison of the user input password and the stored password in the image password is required in the authentication process, the user has to pay attention to input the correct image as the password, so inputting is inconvenient and complicated image processing may be required.

FIG. 6 is a diagram illustrating a screen of a user terminal 130 for setting a caption password according to the third embodiment of the present invention. The first and second embodiments described above can also be used in the following third embodiment. Specific differences of the third embodiment will be described as follows.

According to the third embodiment of the present invention, the generating unit 213 uses information (e.g., subtitles, song lyrics, etc.) output from a file of the image 600 for a partial image 610 selected by a user as a password And generates the related information of the password.

Here, the user moves to a scene in which specific information is outputted from the image 600 received by the application 131 and displayed on the screen, selects a part of the image 610 from the image 600 of the corresponding scene, request. The user stops playback at a portion where a specific metabolism or lyrics is output during playback of a movie or a music video provided by the server and selects a portion of the image 610 on the screen where reproduction is stopped. Then, the generation unit 214 generates unique caption information or lyrics information matched to the partial image 610 included in the received password setting request by the conversion process. In the example of FIG. 6, the entire subtitle "Give me one more chance" matching the selected image 610 selected by the user may be generated as password related information and stored in the DB.

For reference, the image 600 of the screen is matched with the same output information. Then, each of the partial images 610 included in the image 600 of the screen is matched with the same output information. The user does not need to make an effort to input some images 610 correctly because the authentication can be successful even by simply selecting some images 610 at the time of authentication request.

FIG. 7 is an exemplary view of a screen of the user terminal 130 which sets the meta information password according to the fourth embodiment of the present invention, the image information according to the fifth embodiment, and the password of the additional information. The first to third embodiments described above can also be used in the following fourth and fifth embodiments. Specific differences between the fourth and fifth embodiments will be described as follows.

According to the fourth embodiment of the present invention, the generating unit 213 generates related information (e.g., title, author, author information, etc.) of related images . For reference, meta information may be referenced from a file in image 700. For the password data of the meta information, the service providing server 110 may provide a search service of the image file.

Here, the user sets a partial image 710 at a specific position as a password using the image 700 received by the application 131 and displayed on the screen. Then, the setting unit 214 generates unique meta information matched to the partial image 710 by the conversion process, in response to the password setting request including the partial image 710. [

According to the fifth embodiment of the present invention, the generating unit 213 generates the first image data 710 corresponding to the first image data 710, which is the related information of the password according to any one of the first to fourth embodiments, The second related information is added to the related information to generate the related information of the password. That is, in the case of the fifth embodiment, the password set and stored by the user is a partial image 710. However, the password data stored as the password related information is 'first related information + second related information'. Since the length of the related information is increased by the data length of the added second related information, security of the recorded password data can be further enhanced.

Here, the second related information may be personal information (e.g., the last four digits of the cell phone number) and words that are intuitively reminiscent of the partial image 710, and the like. The second related information may be the information that the generation unit 213 refers to the predetermined information or the input information of the user included in the password setting request information of the user received by the receiving unit 212. [

In the fifth embodiment, the receiving unit 212 receives the partial image 710 and is requested to be authenticated. The generating unit 213 generates related information including first related information and second related information corresponding to the received partial image 710. [ The authentication unit 216 compares the generated related information with pre-stored password data to authenticate.

Preferably, in the fifth embodiment, the setting unit 214 may combine the first related information and the second related information into one password data by hash processing and store the combined information in the DB. If the second related information is the user's personal information, it is impossible to deduce the personal information from the hash value, so that the personal information is protected.

On the other hand, it is also possible for the application 131 to perform hash processing by design change. When the application 131 performs the hash process, the application 131 receives the information of the partial image 710 and the password from the user, and hashs the first related information and the second related information using the input information. When a request for setting a password including a hash value is received from the application 131, the received hash value is stored in the DB as password data. Then, at the time of authentication, the authentication unit 216 compares the hash value received from the application 131 with the previously stored password data and authenticates.

8 is an exemplary diagram of a symbol password 830 according to the sixth embodiment of the present invention.

According to the sixth embodiment of the present invention, the second related information of the fifth embodiment becomes the symbol password 830. [ The first to fifth embodiments described above can also be used in the following sixth embodiment. The specific difference of the sixth embodiment will be described as follows.

For the setting of the password, the user selects some images 710 and the symbol password 830 in the application 131. The application 131 requests the setting of a password including the image 710 and the symbol password 830. The receiving unit 212 receives a request for setting a password from the application 131. The generating unit 213 generates related information including first related information matched with the received partial image 710 and second related information of the symbol password 830. [ The setting unit 214 stores the generated password related information in the DB as password data.

Here, the conversion unit 215 can generate the converted image 810 in which the symbol password 830 is displayed as shown in FIG. Therefore, when the application 131 outputs the converted image 810, the symbol password 830 is also output. That is, each time the display condition is satisfied, the user can confirm the converted image 810 and the symbol password 830 output through the application 131.

9 is a schematic flowchart of a method for authenticating a password of the present invention.

The user sets a password through the application 131 of the user terminal 110 in order to receive the service provided by the service providing server 110. In response to the user's request, the service providing server 110 transmits the image 300 for setting the user's password to the application 131 (S911).

The application 131 displays the image 300 received from the server 110 on the screen and selects a password for the user to memorize a part of the image 410 in which the password can be remapped from the image of the screen by the user, And transmits a password authentication request including a password to the server 110 (S931).

When the password setting of the user is requested, the server 110 receives the partial image 410 selected by the user as the password from the application 131 (S912). The server 110 generates related information of the received partial image 410 (S913). The server 110 stores the generated related information in the DB as password data (S914). Here, the related information of some image 410, which is a password set by the user, and some image 410 may be different. Then, the password data stored in the DB is compared with the password requesting the authentication by the user, and authentication is processed.

In step S913, the server 110 converts the related information matched to the partial image 410 by referring to the generation criterion of the related information set by the administrator. If the related information is some image 410 received from the application 131 according to the referenced generation criterion, the user stores the partial image 410 as a password while the information stored in the DB is information of the partial image 410 The first embodiment of the present invention).

Further, by the conversion process according to the referenced generation criterion, any one or more pieces of information among the position address, the image object, the video or audio information matched to the partial image 410, and the matching information including the meta information are generated as related information (Second to fourth embodiments of the present invention). At this time, the user stores some images 410 as passwords, but the password data stored in the DB is data related to some images 410 as data.

Furthermore, the server 110 further adds second related information to the first related information (the first to fourth embodiments of the present invention) generated by the generation criterion to generate related information, And the generated related information can be stored as password data (fifth and sixth embodiments of the present invention). The second related information may be information referred to by the server 110 or input information of the user. The password data of the first related information and the second related information may be combined information (e.g., a hash value).

When the password data is stored, the server 110 may convert the received image 410 to generate the converted image 430 and transmit the generated converted image 430 to the application 131. The application 131 outputs the received transformed image 430 to the screen according to the predefined display setting.

Here, when the transformed image 430 is generated in the user terminal 130, the application 131 generates the transformed image 430 (S932). The application 131 displays the generated transformed image 430 on the screen according to the condition of the display setting and provides it to the user (S933).

The user can memorize the entire image 300 and some images 410 every time the user views the converted image 430 output on the screen. That is, the output of the transformed image 430 provides a visual stimulus for the user to remember the password. Then, in order to use the service of the server 110, the user tries to authenticate through the application 131.

By the authentication attempt, the server 110 provides a password input page to the application 131 (S915). Here, the server 110 may provide an image or an input window to the application 131 so that the user can input an image password.

The server 110 receives an authentication request including a user input password from the application 131 (S916). The user input password includes some images 410 selected by the user. If the user is allowed to enter the second password, the user input password includes some image 410 and the second password.

When the user input password is received, the server 110 generates the related information of the password for the received user input password in the same manner as the step S913 (S917). Then, the server 110 compares the generated related information with the password data stored in the step S914, and judges that the authentication is successful if they match (S918). If there is a mismatch, the server 110 determines that authentication has failed. The server 110 transmits the result of the determined authentication processing to the application 131 (S919).

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. It goes without saying that various modifications and variations are possible within the scope of equivalence of the scope.

100: system 110: service providing server
130: user terminal 131: application

Claims (14)

An apparatus for authenticating a password using an image includes at least one processor, a memory, and a program stored in the memory and executed by the processor,
The program includes:
A providing unit outputting a screen and providing an image in which a user's password is selected;
A receiving unit for receiving a password setting request of a user including a partial image selected as a user's password in the image outputted on the screen;
A generating unit for generating unique related information corresponding to the received partial images as password data of a user;
A setting unit for storing the generated related information as password data of the user to set a password of the user; And
A password authentication unit for receiving a password authentication request of a user including the partial image, generating a part of the received image as related information through the generation unit, comparing the generated related information with predetermined password data, Authentication unit
/ RTI > The method according to claim 1,
Wherein the providing unit comprises:
Wherein the partial image is divided into a plurality of regions so that the partial image divided from the entire image output on the screen is selected by the user. The method according to claim 1,
Further comprising a conversion unit for converting the partial images received by the password setting request to generate a converted image and providing the generated converted image to be output to the screen. The method of claim 3,
Wherein,
Wherein the password authentication request is received after the converted image is displayed on the screen and confirmed by the user. The method according to claim 1,
Wherein the generation unit comprises:
And uses the partial image as the related information. The method according to claim 1,
Wherein the generation unit comprises:
And generates matching information including at least one of a location address, an image object, video or audio information, and meta information as the related information. The method according to claim 1,
Wherein the generation unit comprises:
And generates related information including the first related information corresponding to the partial image and the added second related information as the user's password data. A method for a device to authenticate a password using an image,
The method comprising the steps of: providing an image to be displayed on a screen, in which a user's password is selected;
Receiving a password setting request of a user including a partial image selected as a user's password in the image outputted on the screen;
Generating unique related information corresponding to the received partial image as password data of the user;
Setting the password of the user by storing the generated related information as password data of the user; And
A password authentication unit for receiving a password authentication request of a user including the partial image, generating a part of the received image as related information through the generation unit, comparing the generated related information with predetermined password data, Step
≪ / RTI > 9. The method of claim 8,
Wherein the providing step comprises:
Characterized in that the step of providing an image segmented into a plurality of regions so that the partial image segmented from the entire image output on the screen is selected by the user. 9. The method of claim 8,
After the receiving step,
Converting the partial images received by the password setting request to generate a converted image, and providing the generated converted image to be output to the screen. 11. The method of claim 10,
Wherein the authenticating comprises:
And receiving the password authentication request after the transformed image is displayed on the screen and confirmed by the user. 9. The method of claim 8,
Wherein the generating comprises:
And generating the partial image as the related information. 9. The method of claim 8,
Wherein the generating step comprises the steps of:
A location address, an image object, video or audio information, and matching information including meta information, as the related information. 9. The method of claim 8,
Wherein the generating comprises:
The related information including the first related information corresponding to the partial image and the added second related information is generated as the password data of the user.

Images