KR20190014678A - The method for adjusting user authentication level based on biometric information by user - Google Patents

Abstract

The present invention relates to a method for adjusting a user authentication level based on biometric information by a user, comprising the following steps: receiving an input for setting a security level; setting a reference similarity to a similarity value corresponding to the received security level; receiving user biometric information; deciding a comparative similarity between the received user biometric information and pre-stored user biometric information; and performing user authentication by using the decided comparative similarity and the set reference similarity. The security level can be adjusted through a terminal.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a method for adjusting a user authentication level based on biometric information by a user,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for adjusting a user authentication level based on biometric information by a user, and more particularly, to a method for enabling a user to adjust a security level appropriately for a usage environment.

As interest and research on system security have been actively developed, interest in user authentication has been increasing day by day.

As a conventional method for user authentication, a method using a password has been widely used. The password input method means a method of authenticating a user by allowing a user to input a password composed of numbers, characters, or a combination thereof registered in advance.

However, such a password method has a problem in that the security is not high and damages such as leakage of personal information are worried. For this reason, there has been a method of authenticating a user by using biometric information such as fingerprint, iris recognition, and speech recognition, which are more secure.

A method for authenticating a user using biometric information is performed by comparing the similarity between biometric information of a user stored in advance and biometric information of a newly inputted user.

When the degree of similarity of the biometric information is set high in the device performing the user authentication, the security level is high. However, in the case of the fingerprint, the biometric information completely identical with the biometric information of the stored user due to dirt, In this case, user authentication can not be performed properly.

On the other hand, if the similarity degree of the biometric information is set low in the device, the security level is low, but if the biometric information such as the fingerprint is not completely the same, the user authentication can be performed.

However, the conventional biometric authentication method has a problem that the security level can not be adjusted because the similarity between the biometric information is fixed to the device that performs user authentication.

Thus, there is a need for a method by which the user can directly adjust the security level for user authentication.

(KR) Korea Patent No. 10-0620627

It is an object of the present invention to provide a method by which a user can directly adjust a security level related to user authentication and provide an interface by which a user can directly adjust a security level have.

It is still another object of the present invention to provide a method of adjusting a user authentication level that can set different security levels using a plurality of biometric information.

The technical objects of the present invention are not limited to the above-mentioned technical problems, and other technical subjects not mentioned can be clearly understood by those skilled in the art from the following description.

According to an aspect of the present invention, there is provided a method of adjusting a user authentication level by a user, the method including receiving a security level setting input, setting a reference similarity to a similarity value corresponding to the received security level, A step of receiving biometric information of a user, a step of determining comparative degrees of similarity between the biometric information of the received user and biometric information of a previously stored user, and user authentication using the determined comparative similarity and the set reference similarity , And the security level is adjustable via the terminal.

According to an embodiment of the present invention, performing the user authentication may accept the authentication if the comparison similarity value is equal to or greater than the reference similarity value.

According to an embodiment of the present invention, performing the user authentication may deny authentication if the comparison similarity value is less than the reference similarity value.

The biometric information according to an embodiment of the present invention may be at least one of a fingerprint, iris, and voice information, and the type of the biometric information may be determined by receiving a security type setting from the terminal.

When the biometric information according to the embodiment of the present invention is a combination of a plurality of biometric information, the types of the first biometric information and the second biometric information, and the respective security levels can be received and set through the terminal, Setting the first reference similarity degree of the first biometric information and the second reference similarity degree of the second biometric information to the similarity value corresponding to the received security level, Wherein the step of determining a first similarity degree between the first biometric information of the received user and the first biometric information of a previously stored user includes the steps of determining a first comparative degree of similarity between the received biometric information of the user and the biometric information of the user Wherein the step of determining the second comparison similarity comprises: comparing the first comparison similarity and the second comparison similarity with the first reference similarity and the second comparison similarity; And performing user authentication using the second reference similarity.

The step of performing the user authentication according to an embodiment of the present invention may further include a step of performing authentication when the first comparative similarity value is equal to or greater than the first reference similarity value or the second comparative similarity value is equal to or greater than the second reference similarity value, As shown in FIG.

The step of performing the user authentication according to an exemplary embodiment of the present invention may include: if the first comparison similarity value is less than the first reference similarity value and the second comparison similarity value is less than the second reference similarity value, Rejecting the request.

A method for adjusting a user authentication level based on a biometric information by a user according to an embodiment of the present invention includes receiving a request for setting a security level for user authentication from a user and updating information required for user authentication according to the request, Receiving the user's biometric information, and performing user authentication based on the updated information and the received biometric information, wherein the security level can be set by a user in an arbitrary range.

In a user authentication apparatus including a processor, a storage, a memory, a NIC, and a BUS according to an exemplary embodiment of the present invention, the processor executes a biometric information based user authentication level adjustment program by a user, And a level adjustment program, wherein the user authentication level adjustment program includes an operation of receiving a security level setting input, an operation of setting a reference similarity to a similarity value corresponding to the received security level, an operation of receiving a user's biometric information An operation for determining a comparative degree of similarity between the biometric information of the received user and the biometric information of a previously stored user and an operation for performing user authentication using the determined comparative similarity and the set reference similarity, It is possible.

According to the above-described method for adjusting the user authentication level based on the biometric information by the user, the security level can be set according to the situation of the user, so that it is possible to achieve the effect that the convenience of the user can be improved.

FIG. 1 is a flowchart illustrating a method of adjusting a user authentication level based on a biometric information according to an embodiment of the present invention. Referring to FIG.
FIG. 2 illustrates an interface for adjusting a user authentication level through a terminal according to an embodiment of the present invention. Referring to FIG.
FIG. 3 is an exemplary diagram illustrating user authentication based on iris recognition according to an embodiment of the present invention. Referring to FIG.
Fig. 4 is a diagram for explaining the tine acceptance rate and the rejection rate.
FIG. 5 illustrates a process of setting a low security level according to an embodiment of the present invention. Referring to FIG.
6 is a diagram illustrating a process of setting a security level to a high level according to an embodiment of the present invention.
7 is a flowchart illustrating a method of performing user authentication using a plurality of biometric information according to an embodiment of the present invention.
8 is a flowchart illustrating a process of performing user authentication using a plurality of biometric information according to a security level set by a user according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention, and the manner of achieving them, will be apparent from and elucidated with reference to the embodiments described hereinafter in conjunction with the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. To fully disclose the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

Unless defined otherwise, all terms (including technical and scientific terms) used herein may be used in a sense commonly understood by one of ordinary skill in the art to which this invention belongs. Also, commonly used predefined terms are not ideally or excessively interpreted unless explicitly defined otherwise.

Also, the singular forms herein may include plural forms unless specifically stated in the text. It is noted that the terms "comprises" and / or "comprising" used in the specification are intended to be inclusive in a manner similar to the components, steps, operations, and / Or additions.

The terms used in this specification are defined as follows.

Fingerprint Recognition

A technique of confirming the identity of a person using a fingerprint pattern. A sensor for acquiring still fingerprint information such as an optical or a semiconductor type and a sensor for acquiring fingerprint information by scraping the finger as if scraping the card

Iris Recognition

Technique to verify the identity of a person using various patterns in a circular iris formed near the pupil in front of the eye

Enrollment

The process of defining the biometric information together with the user's ID in the biometric system for biometric authentication / verification or identification

Extraction

A process of obtaining a biometric sample from biological source information

Matching

A process of measuring the similarity between the feature point extracted from the inputted biometric information sample and the biometric reference information

Matching Score

A value indicating the degree of similarity as a result of matching

Reference value

A criterion for determining matching / mismatch by comparing the information between the stored reference biometric information of the user and the biometric information of the inputted user

Standard similarity

Similarity to user-configured security level through user interface

Comparative similarity

The feature point extracted from the inputted biometric information sample is compared with the reference biometric information of the stored user, and the similarity

FIG. 1 is a flowchart illustrating a method of adjusting a user authentication level based on a biometric information according to an embodiment of the present invention. Referring to FIG.

A subject who performs user authentication using biometric information and receives a security level setting input may be an electronic device equipped with a program or application for performing user authentication according to an embodiment of the present invention. The electronic device according to an exemplary embodiment of the present invention may be a server combined with a plurality of computing devices, a desktop PC, a tablet PC, a smart phone, and the like, but may be a general purpose computing device.

Meanwhile, according to another embodiment of the present invention, the input device may be physically separated from the device performing the user authentication. In this case, the device performing the user authentication can receive the security level setting input through wired / wireless communication and perform the user authentication.

The biometric information based user authentication level adjustment method according to an embodiment of the present invention receives a security level setting input (S110). The security level may mean the degree of security set for each content requiring a user authentication and a transaction.

For example, if you require user authentication to perform an e-commerce transaction on a particular Web site, the security required by the transaction may be high, but if you unlock your smartphone when you are home The degree of security required in a transaction is not a problem. That is, the security level must be set differently depending on the situation requiring user authentication, and an interface for adjusting the security level is needed.

If an unnecessarily high security level is set, the recognition rate may be lowered as the False Rejection Ratio (FRR) increases, and if a lower security level is set if necessary, a False Acceptance Ratio (FAR) The fingerprint of the authenticated user may be erroneously determined even though the fingerprint of another user is input. The original rejection rate and the other acceptance rate will be described in more detail below.

When the security level is set, the reference similarity may be set to the similarity value corresponding to the received security level (S120). The reference similarity according to an exemplary embodiment of the present invention corresponds to a security level set by a user through a user interface.

Meanwhile, the user interface according to an embodiment of the present invention can be implemented through an application installed in the terminal, and the terminal is an electronic device for performing the user authentication described above.

FIG. 2 illustrates an interface for adjusting a user authentication level through a terminal according to an embodiment of the present invention. Referring to FIG.

An apparatus for inputting a security level setting according to an embodiment of the present invention may be a smartphone as shown in FIG. Referring to FIG. 2, an interface for adjusting a security level is provided in an application installed in a smart phone, and the user can directly adjust the security level from 0% to 100%. The security level displayed on the interface may be expressed as a percentage (%) as the value of the similarity degree, or may be displayed stepwise as 'low, medium, high'.

For example, when the user sets the security level to 70% (or medium) through the interface of the terminal, the reference similarity may be set to 70%, which is the similarity value corresponding to the security level.

Thereafter, the biometric information of the user can be received (S130). The biometric information of the user can be received through a sensor or the like included in the computing device performing the user authentication method. The biometric information according to an embodiment of the present invention includes iris, fingerprint, voice information, .

FIG. 3 is an exemplary diagram illustrating user authentication based on iris recognition according to an embodiment of the present invention. Referring to FIG.

An image of the user's eye region necessary for performing the iris verification procedure can be acquired by the iris image capturing apparatus 300. [ Meanwhile, the iris capturing device 300 shown in FIG. 3 may correspond to an apparatus for performing user authentication.

The user can take the iris image capturing apparatus 300 to the eye region of the user while gripping the iris image capturing apparatus 300 and photograph the iris image. However, the iris imaging device 300 may be implemented in other forms other than the embodiment shown in FIG.

For example, the iris photographing apparatus 300 may be fixedly installed in a predetermined space so that the user can approach the iris photographing apparatus 300 to photograph the image.

In the security level setting interface according to an exemplary embodiment of the present invention, not only the security level but also specific biometric information among various types of biometric information such as iris, fingerprint, voice information, have.

For example, when the set biometric information is a fingerprint, the biometric information may be received from a sensor that scans the fingerprint. When the set biometric information is iris, the biometric information may be a sensor for capturing an iris image, Lt; / RTI >

Then, the comparative degree of similarity between the biometric information of the received user and the biometric information of the previously stored user may be determined (S140), and the user authentication may be performed using the determined comparative similarity and the set reference similarity (S150).

Here, the previously stored biometric information may be biometric information previously registered by the user for user authentication. In addition, the previously stored biometric information according to an embodiment of the present invention may be stored together with an identifier such as an ID for identifying the user.

Hereinafter, a method of adjusting a user authentication level based on a biometric information by a user will be described in detail. First, a False Acceptance Ratio (FAR) and a False Rejection Ratio (FRR) will be described first .

FIG. 4 is a view for explaining the other acceptance rate and the rejection rate, FIG. 5 is a diagram for explaining a process of setting a lower security level, and FIG. 6 is a diagram for explaining a process of setting a higher security level.

In performing user authentication using biometric information such as a fingerprint or an iris, the feature points of the corresponding biometric information are used. The similarity distribution of the biometric information authentication based on the feature points has a form as shown in FIG.

In the graph shown in FIG. 4, the x-axis represents a matching score obtained by scoring the degree of similarity between minutiae extracted from the input biometric information samples and minutiae points of previously registered biometric reference information. and the y axis represents the number of users having the similarity degree.

At this time, the first graph 410 shows the distribution of the matching scores of the biometric information that does not coincide with the previously registered biometric information, and the second graph 420 shows the distribution of the matching scores of the biometric information matching the previously registered biometric information .

Also, the reference value 430 means a matching score that is a reference for determining whether the inputted sample information is matched with the previously registered biometric reference information.

As shown in FIG. 4, there is necessarily an overlapping portion between the first graph 410 and the second graph 420 in determining matching or mismatching using the matching score obtained by scoring the degree of similarity between the minutiae points. .

For example, although the first region 440 corresponding to the left side of the reference value 430 in FIG. 4 is the same person, it is determined that the similarity between the previously registered biometric reference information and the inputted biometric information is calculated to be low, It is called False Rejection Ratio (FRR).

On the other hand, even though the second region 450 corresponding to the right side of the reference value 430 is a different person, the similarity between the previously registered biometric reference information and the inputted biometric information may be calculated to be higher than the reference value 430 This is called FAR (False Acceptance Ratio).

In the case of user authentication using biometric information, most cases are for the purpose of security. As shown in FIG. 4, if the acceptance rate of the other person is high, the result is fatal.

However, if the reference value 430 is located on the right side of the graph shown in FIG. 4 for the purpose of enhancing security, the rejection rate of the user becomes high, resulting in inconvenience to the user.

Therefore, it is necessary to set the optimum reference value 430 according to the degree of security. In one embodiment of the present invention, the optimal reference value 430 may be set by adjusting the security level through the user interface installed in the terminal.

According to an embodiment of the present invention, the reference similarity value may correspond to the reference value 430. [ Therefore, if the reference similarity degree is set to be low as shown in FIG. 5, the reference value 430 is adjusted to the first area 440, so that the false rejection rate becomes low and the other user acceptance rate becomes high, thereby lowering the security level.

On the other hand, as shown in FIG. 6, if the reference similarity degree is set high, the reference value 430 is adjusted to the second region 450 so that the false rejection rate becomes high and the other user acceptance rate becomes low, thereby increasing the security level.

On the other hand, the comparative similarity value may be determined as an average of the matching scores of the first graph 410 and the second graph 420. However, the method of determining the similarity value is not limited to the average but can be calculated by various statistical methods.

If the security level is set high, the acceptance rate of the other person approaches 0%, but the rejection rate of the user increases and the convenience of the user is lowered.

Accordingly, a user authentication method capable of adjusting the security level according to the purpose of the content by setting the security level to a higher level in the case of the content requiring the highest level of security and lowering the security level in the case of the content requiring more convenience of the user Is required.

7 is a flowchart illustrating a method of performing user authentication using a plurality of biometric information according to another embodiment of the present invention.

Another embodiment of the present invention describes a method for adjusting the security level of biometric information when user authentication is performed using a plurality of biometric information.

The first biometric information among the plurality of biometric information according to another embodiment of the present invention is the fingerprint information of the user and the second biometric information is the iris information.

According to another embodiment of the present invention, a first security level for the first biometric information and a second security level setting input for the second biometric information may be received (S710).

According to another embodiment of the present invention, the first security level and the second security level may be input through the interface installed in the terminal.

According to another embodiment of the present invention, the first security level can be set to 50%, and the second security level can be set to 80%.

Since the first biometric information corresponding to the fingerprint is biometric information having a high rejection rate due to the moisture contained in the fingerprint or the foreign substance adhering to the fingerprint, the second biometric information corresponding to the iris is hardly deformed due to external environmental factors The self-rejection rate is relatively low.

Therefore, by setting the first security level for the fingerprint information to be as low as 50% and the first security level for the iris information to be relatively high as 80%, it is possible to set the first security level with respect to the user authentication You can adjust the security level.

Upon receiving the respective security level setting inputs, the first and second reference similarities may be set as similarity values corresponding to the received first and second security levels, respectively (S720).

For example, if the reference value 430 for determining the first reference similarity is set to the degree of similarity when the other acceptance rate is 0, the second biometric information is used to lower the original rejection rate .

If the reference value 430 for determining the first reference similarity degree is set to the similarity degree when the other acceptance rate is 0, the second reference similarity degree may be set to the similarity degree when the true rejection rate is 0 in order to lower the false rejection rate.

After receiving the first biometric information and the second biometric information of the user (S730), the first comparative degree of the first biometric information of the user and the first biometric information of the previously stored user is determined (S740) A second comparison similarity degree between the second biometric information of one user and the second biometric information of the previously stored user is determined (S750).

Finally, the user authentication is performed using the first comparison similarity and the second comparison similarity, the first reference similarity, and the second reference similarity (S760).

8 is a flowchart illustrating a process of performing user authentication using a plurality of biometric information according to a security level set by a user according to an embodiment of the present invention.

First, the user receives a setting input including the first security level and the second security level through the terminal (S810), and sets the first reference similarity and the second reference similarity respectively (S820 and S830).

A method for performing user authentication using the first comparison similarity and the second comparison similarity, the first reference similarity, and the second reference similarity is as follows.

If the first comparison similarity value is equal to or greater than the first reference similarity value or the second comparison similarity value is equal to or greater than the second reference similarity value (OR condition), the authentication can be accepted.

On the other hand, if the first comparison similarity value is less than the first reference similarity value and the second comparison similarity value is less than the second reference similarity value (AND condition), the authentication can be rejected.

That is, if only the biometric information of one of the first biometric information or the second biometric information is equal to or larger than the reference value (reference similarity degree) with the previously registered reference biometric information, the user authentication is accepted.

On the other hand, if both the first biometric information and the second biometric information are similar to each other, the user authentication can be performed by rejecting the user authentication if the similarity (comparison similarity) is less than the reference value (reference similarity).

At this time, the first biometric information may be fingerprint information, and the second biometric information may be iris information. Generally, it is very rare that the plurality of pieces of biometric information of a user whose biometric information is not registered are all similar to a plurality of pieces of biometric information of an authenticated user that has been registered in advance.

Therefore, the fingerprint information is less secure than the authentication method using the iris information. However, since the recognition rate is high and the error rate is low, the user convenience can be achieved. Therefore, if the security level is set to the lowest rating, the user authentication is performed using only the fingerprint information will be.

As described above, different biometric information used for user authentication according to the security level can achieve not only user convenience but also optimum security.

9 is a block diagram of a user authentication apparatus according to an embodiment of the present invention.

A user authentication apparatus 900 according to an embodiment of the present invention includes a processor 910, a memory 920, a storage 930, a NIC 940, and a BUS 950. It should be understood by those skilled in the art that the components shown in FIG. 9 are only related to the present embodiment, and that other general components other than the components shown in FIG. 9 may be further included Able to know.

Processor 910 may execute a biometric information based user authentication level adjustment program by the user. However, the present invention is not limited to this, and may be implemented to execute another program.

The storage 930 stores an execution file and other resource files of the biometric information-based user authentication level adjustment program by the user.

A biometric information-based user authentication level adjustment program by a user according to an embodiment of the present invention includes an operation for receiving a security level setting input, an operation for setting a reference similarity to a similarity value corresponding to the received security level, An operation for receiving biometric information, an operation for determining a comparative degree of similarity between the biometric information of the received user and the biometric information of a previously stored user, and an operation for performing user authentication using the determined comparative similarity and the set reference similarity .

And an operation for receiving a security level setting input according to an embodiment of the present invention includes receiving an adjusted security level through an interface installed in the user authentication apparatus 900. [

The memory 920 loads the user authentication program using the complex biometric information. The user authentication program using the complex biometric information loaded in the memory 920 is executed by the processor 910. [

Other computing devices can be connected to the network interface (NIC) 940, and the bus 950 is connected to the processor 910, the memory 920, the storage 930, and the like to serve as a data movement path.

Meanwhile, the above-described method can be implemented in a general-purpose digital computer that can be created as a program that can be executed by a computer and operates the program using a computer-readable recording medium. In addition, the structure of the data used in the above-described method can be recorded on a computer-readable recording medium through various means. The computer-readable recording medium includes a storage medium such as a magnetic storage medium (e.g., ROM, floppy disk, hard disk, etc.), optical reading medium (e.g., CD ROM,

It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed methods should be considered from an illustrative point of view, not from a restrictive point of view. The scope of the present invention is indicated by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

Claims (9)

Receiving a security level setting input;
Setting a reference similarity to a similarity value corresponding to the received security level;
Receiving biometric information of a user;
Determining a comparative degree of similarity between the biometric information of the user and the biometric information of the user;
And performing user authentication using the determined comparison similarity and the set reference similarity,
Wherein the security level is adjustable through a terminal. The method according to claim 1,
Wherein the performing the user authentication comprises:
And if the comparison similarity value is greater than or equal to the reference similarity value, accepting the authentication.
The method according to claim 1,
Wherein the performing the user authentication comprises:
And if the comparison similarity value is less than the reference similarity value, the authentication is rejected.
The method according to claim 1,
Wherein the biometric information is at least one of fingerprint, iris, and audio information,
Wherein the type of the biometric information is determined by receiving a security type setting from the terminal. The method according to claim 1,
When the biometric information is a combination of a plurality of biometric information,
A first security level for the first biometric information and a second security level for the second biometric information can be received and set via the terminal,
Wherein the step of setting the reference similarity comprises:
Setting a first reference similarity degree of the first biometric information and a second reference similarity degree of the second biometric information to a similarity value corresponding to the first security level and the second security level respectively,
Wherein the step of determining the comparative similarity comprises:
Determining a first comparative degree of similarity between the first biometric information of the received user and the first biometric information of the previously stored user, and
Determining a second comparison similarity between the second biometric information of the received user and the second biometric information of the previously stored user,
Wherein the performing the user authentication comprises:
And performing user authentication using the first comparison similarity and the second comparison similarity using the first reference similarity and the second reference similarity.
6. The method of claim 5,
Wherein the performing the user authentication comprises:
And accepting authentication if the first comparison similarity value is equal to or greater than the first reference similarity value or the second comparison similarity value is equal to or greater than the second reference similarity value, Adjustment method.
6. The method of claim 5,
Wherein the performing the user authentication comprises:
And rejecting the authentication if the first comparison similarity value is less than the first reference similarity value and the second comparison similarity value is less than the second reference similarity value, Adjustment method.
Receiving a request for setting a security level related to user authentication from a user;
Updating information necessary for user authentication according to the request;
Receiving biometric information of the user; And
Performing the user authentication based on the updated information and the received biometric information,
Wherein the security level is set by a user in a certain range.
A user authentication device comprising a processor, a storage, a memory, a NIC, and a BUS,
Wherein the processor executes a biometric information based user authentication level adjustment program by a user,
Wherein the storage stores the user authentication level adjustment program,
Wherein the user authentication level adjustment program comprises:
An operation for receiving a security level setting input;
An operation of setting a reference similarity as a similarity value corresponding to the received security level;
An operation for receiving biometric information of a user;
An operation for determining a degree of similarity between the received biometric information of the user and the biometric information of the user; And
And performing an operation for performing user authentication using the determined comparison similarity and the set reference similarity,
Wherein the security level is adjustable.

Images