WO2017030210A1

WO2017030210A1 - User authentication method using graphic otp

Info

Publication number: WO2017030210A1
Application number: PCT/KR2015/008573
Authority: WO
Inventors: 김민수
Original assignee: 김민수
Priority date: 2015-08-18
Filing date: 2015-08-18
Publication date: 2017-02-23

Abstract

The present invention relates to a user authentication method using a graphic OTP capable of authenticating a user in a manner whereby when user authentication is performed through ID and password authentication, after inputting the ID of the user, the user can be authenticated by matching a key icon and a password, selected by the user, from among a plurality of images provided by a server. When the user performs authentication by matching a user key image to a hole key image through a group of rearranged images generated one time for each authentication performed, the present invention provides a GOTP authentication method with enhanced security by performing additional authentication security according to an input pattern of the user.

Description

User Authentication Using Graphical OTP

The present invention relates to a user authentication method using a graphic OTP, and more specifically, in the case of user authentication through ID and password authentication, after selecting the user's ID key icon selected from the plurality of images provided from the server The present invention relates to a user authentication method using a graphic OTP which can authenticate a user by matching a password with a password.

Graphic One Time Password (GOTP) is one of Graphical One Time Password (OTP), which uses the graphic interface to display the distance between images arranged on the screen. As you type, the password you use is the input value that changes along with the array of images that change each time.

Through the graphical interface, the user can obtain a significant improvement in the ease of memory and the validity of the memory and secure the security. However, in actual use, input values and passwords are managed separately by simply using the direction keys without recognizing OTP, and are safe from shoulder surfing, phishing and pharming. ) Can be prevented.

It is often uncomfortable to be behind someone when using a password key or cash machine attached to the entrance. The reason is that I am concerned about my password being exposed. The person standing behind will also feel uncomfortable. GOTP is a technology that can eliminate these inconveniences, that is, technology developed to securely enter a password no matter who is watching from behind.

In general, the GOTP transmits one or more graphic images to the user terminal, and the user inputs coordinate values through the keyboard to virtually move a predetermined matching image by checking the transmitted images.

That is, the user selects one or more images corresponding to his key instead of the password and stores them in the authentication server. Then, when performing GOTP for user authentication, the authentication server arranges the images by transmitting the image set in which the additional images and other additional images stored by the user in a predetermined position to the user terminal. The user checks the image set displayed on the terminal and inputs a coordinate shift value for matching the image selected by the user with the image using the keyboard.

The matching value input is transmitted from the terminal to the authentication server to check whether the coordinate shift value is correct. If the input coordinate shift value is correct, the corresponding user is allowed to access.

The authentication method using GOTP receives a movement route from the user's private key image to the hall key image among the image groups displayed on the user's terminal as a direction key, compares it with the movement route calculated by the authentication server or the terminal, and matches the user. This is how to allow access.

However, all the conventional GOTP authentication methods are used for the second authentication, and it is difficult to apply to the existing password which is substantially the first authentication.

In addition, when hooking, phishing, and pharming an image and keyboard input transmitted to a hacker attempting illegal hacking from a password used for existing primary authentication, user authentication information is likely to be exposed.

To solve this problem, there is a method of inputting the path by using the cursor key or the mouse click without using the coordinate value of the image by using GOPT, but this is applicable only to a simple password, so it is applied to the general password using all the key values on the keyboard. It is difficult to do so, because the image on the screen does not move, it is difficult to make a mistake or intuitively determine whether the user inputs the input process, and there is a problem that causes inconvenience to the user.

On the other hand, the conventional GOTP authentication method has a problem that if the user key image and the hall key image is exposed by various causes, all authentication means are exposed to require a separate authentication method to supplement the security level.

The present invention devised to solve the problems of the prior art as described above, when the user first inputs the ID when the user authentication, and transmits the image selected by the user from the server to the terminal, a new image array is formed and transmitted and the user formed image If the password is input to the authentication image selected from the above, and the password is input to the server, the server calculates the password input by the user using the shift value and the image array of the server and checks whether the ID matches the password. By implementing the authentication method in a manner, an object of the present invention is to provide a user authentication method using a graphic OTP to prevent the password is exposed from network hooking, phishing and pharming and keylog.

In addition, an object of the present invention is to provide a user authentication method using a graphic OTP to improve the security of the GOTP authentication through the pattern (propensity) of the GOTP authentication input of each user.

According to an aspect of the present invention, there is provided a user authentication method using a graphic OTP, comprising: (A) a server receiving a graphic OTP authentication request signal from a user terminal to generate a synchronization code; (B) generating a rearranged image group of a new arrangement including a user key image and a hall key image by changing the order of images stored by the user using the generated synchronization code by the server; (C) the server transmitting the generated rearranged image group to the user's terminal and outputting the generated rearranged image group on the user terminal; (D) the server randomly selecting one or more of the means set as authentication supplement means; (E) receiving, by the user terminal, an input pattern set as a password input movement path and an authentication supplement means, and comparing the input movement path with the position of the authentication image on the rearranged image group arrangement to determine whether to be authenticated; (F) the user terminal transmitting the authentication status and the input pattern to the server; (G) the server reading the authentication values of the authentication supplement means selected in the step (D); (F) comparing, by the server, the input pattern with the authentication value to determine whether to perform additional authentication; (H) the server transmits the additional authentication to the user terminal, and if the additional authentication is approved, and is achieved by a user authentication method using a graphic OTP performed by accumulating and storing the input pattern. .

In this case, the authentication value may be a range value including a tolerance range in the cumulative average value of the input pattern input by the user.

The authentication supplement means may be configured to include a drag path and a drag speed.

In addition, the authentication supplement means, when the user terminal is provided with a touch panel, it may be configured to include a touch pressure.

The user authentication method using the graphic OTP of the present invention transmits the server to the user terminal by using a new sequence of image arrays composed of unique images selected by the user, so that the user can check whether a fake site is safe from phishing, Since the image arrangement is variable every moment, the image corresponding to the password is moved to match the icon, so the movement deviation is also variable, so it is not exposed to hooking or peeping, which can prevent illegal theft of GOTP. Supports a method of moving and matching a password-expression image and an authentication image, which has a remarkable and advantageous effect of preventing errors in user input.

In addition, the present invention improves the security of the GOTP authentication according to the personal preference of the user since additional authentication supplement is performed according to the input pattern as well as whether the GOTP authentication value is matched through the pattern (propensity) of the GOTP authentication input of each user. It has the advantage of being.

1 is a flow chart illustrating a user authentication method using a graphic OTP in accordance with the present invention.

2 to 7 show an embodiment according to the invention.

According to an aspect of the present invention, there is provided a user authentication method using a graphic OTP, comprising: (A) a server receiving a graphic OTP authentication request signal from a user terminal to generate a synchronization code; (B) generating a rearranged image group of a new arrangement including a user key image and a hall key image by changing the order of images stored by the user using the generated synchronization code by the server; (C) the server transmitting the generated rearranged image group to the user's terminal and outputting the generated rearranged image group on the user terminal; (D) the server randomly selecting one or more of the means set as authentication supplement means; (E) receiving, by the user terminal, an input pattern set as a password input movement path and an authentication supplement means, and comparing the input movement path with the position of the authentication image on the rearranged image group arrangement to determine whether to be authenticated; (F) the user terminal transmitting the authentication status and the input pattern to the server; (G) the server reading the authentication values of the authentication supplement means selected in the step (D); (F) comparing, by the server, the input pattern with the authentication value to determine whether to perform additional authentication; (H) the server may transmit the additional authentication to the user terminal, and if the additional authentication is approved, accumulating and storing the input pattern may be performed.

The terms or words used in this specification and claims are not to be construed as being limited to their ordinary or dictionary meanings, and the inventors may appropriately define the concept of terms in order to best describe their invention. It should be interpreted as meaning and concept corresponding to the technical idea of the present invention based on the principle that the present invention.

Therefore, the embodiments described in the specification and the drawings shown in the drawings are only the most preferred embodiment of the present invention and do not represent all of the technical idea of the present invention, various modifications that can be replaced at the time of the present application It should be understood that there may be equivalents and variations.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a flowchart illustrating a user authentication method using a graphic OTP according to the present invention. Referring to FIG. 1, a graphic OTP authentication request signal is received from a user's terminal to generate a synchronization code (S100), and the order of images stored by the user is changed by using the generated synchronization code. A rearranged image group is generated (S110).

Thereafter, the generated rearranged image group is transmitted to the user's terminal and output on the user terminal (S120).

In this case, the image group includes a user key image and a hall key image. That is, the user performs authentication by selecting an image set by the user as a password among the user keys and dragging and matching the image set by the user as the hole key.

Therefore, the user touches and drags his user key image to move to the hole key image set by the user. Of course, the user key may be set in plural.

On the other hand, after performing the step 120, the server randomly selects one or more of the means set as the authentication supplement means (S130).

At this time, the authentication supplement means is a complementary means set to increase the security effect of the GOTP authentication, in the present invention will be described with an example that the touch pressure, the drag path and the drag speed is set as the complement means.

That is, when the user accumulates and stores the input pattern for each user during the GOTP authentication according to the present invention, and the randomly selected authentication security means among the stored touch pressure, the drag path or the drag speed has a difference value of more than a predetermined deviation, No authentication is allowed.

As described above, when the user selects a user key image on the user user terminal and performs an input of dragging and moving the hole key image, the user terminal receives a password input movement path (S140). In this case, the user terminal receives not only a simple input path of the password but also an input pattern set as the authentication supplement means. That is, in the embodiment of the present invention, the user terminal receives the touch pressure, the drag path, and the drag speed.

Thereafter, the user terminal determines whether to authenticate by comparing the movement path and the position of the authentication image on the rearranged image group arrangement (S150).

The user terminal transmits the determination result of the step 150 and the input pattern to the server (S160).

Next, the server receiving the determination result of the step 150 and the input pattern reads the authentication value of the authentication supplement means selected in step 120 (S170). In this case, the authentication value means an average value of the accumulated stored values of the input pattern input by the corresponding user, and more precisely, the authentication value may be a range value including the tolerance range.

In addition, the server compares the supplementary means authentication value (range) with the authentication supplement means measured value received from the user terminal to determine whether additional authentication (S180).

Next, the server transmits the additional authentication to the user terminal, and if the additional authentication is approved, and stores the supplementary measure measurement value (S190).

That is, in the present invention, when the user first receives an ID and transmits the GOTP image selected by the user from the server to the terminal, a new image array is formed and transmitted and the user moves the password to the selected authentication image among the formed images. After inputting to the server and sending it to the server, the server calculates the password entered by the user using the moving value and the image array of the server, and then implements an authentication method by checking whether the ID and password match. Prevents passwords from being exposed from phishing, pharming, and keylogs

In addition, the present invention is configured to perform additional authentication by checking the input pattern of the user as the authentication supplement means, by performing additional authentication by random selection of a plurality of authentication supplement means, any one of the user input pattern Even if the change is made, the authentication can be allowed in accordance with multiple authentication attempts.

That is, when the user use terminal is changed (particularly, when the size of the terminal is changed in the case of a mobile terminal), some of the existing input patterns may be changed. At this time, the authentication may be performed by randomly selecting an authentication supplement means that has not changed according to a plurality of authentication start-ups. As the input values are accumulated and stored, the stored value of the accumulated input pattern is changed and according to the new input pattern. Additional authentication may be performed.

And since the additional authentication by the authentication supplement means is made in the server, and the accumulated input pattern of the user is not stored in the user terminal, not only can the data for additional authentication be prevented from being replaced by the replacement of the terminal, Even when a user terminal relatively vulnerable to security is hacked, security may be stably secured by additional authentication.

2 to 7 show an embodiment according to the present invention. 2 to 7, in the user authentication method using the graphic OTP of the present invention, a value for moving the graphic OTP authentication request signal using an ID or a personal identification code may be both an authentication icon or a password.

In addition, the present invention may use various types of personal authentication values such as social security number, i-pin, account number, etc., instead of the password to be used, and the user may proceed to mix the image array for each character in the matching process by moving the authentication icon. .

The shuffler of the present invention can shuffle the values used for the password, and additionally display the numbers so as to confirm the movement deviation in the password.

The authentication icon of the present invention can be used for numbers, letters, and the like, and can be expected to have an advertisement effect by attaching an advertisement window to the authentication page, and can also watch a video advertisement after authentication.

The present invention can encrypt the movement value, and includes a mouse heel, a keyboard number, a direction key, and the like in the movement method, and transmits the security key to the user terminal for enhanced security and transmits the authentication value together to confirm that the user is a registered user. It may be.

Therefore, in the user authentication method using the graphic OTP according to the present invention, by transmitting to the user terminal from the server using a new sequence of images consisting of only the unique image selected by the user, the user can check whether or not a fake site from phishing It is safe and the image array is variable every moment, so the image corresponding to the password is moved to match the icon, so the movement deviation is also variable, so it is not exposed to hooking or peeping, which can prevent illegal theft of GOTP. Since a user's terminal supports a method of moving and matching an image in which a password is expressed and an authentication image, an error in user input can be prevented in advance.

Although the present invention has been shown and described with reference to the preferred embodiments as described above, it is not limited to the above embodiments and those skilled in the art without departing from the spirit of the present invention. Various changes and modifications will be possible.

According to the present invention, in the case of authenticating a user through ID and password authentication, a user inputs a user's ID, and then a graphic OTIF that can authenticate the user by matching a key icon selected by the user and a password among a plurality of images provided by the server. The present invention relates to a user authentication method using the present invention. When the user performs authentication by matching a user key image with a hole key image through a one-time generated rearranged image group, additional authentication security is performed according to a user input pattern. By providing security enhanced GOTP authentication method, GOTP authentication value of each user is not only matched through the pattern (propensity) of GOTP authentication, but additional authentication supplement is performed according to the input pattern. There is an advantage that the security of authentication is improved.

Claims

In the user authentication method using a graphic OTP,

(A) the server receiving the graphic OTP authentication request signal from the user terminal to generate a synchronization code;

(B) generating a rearranged image group of a new arrangement including a user key image and a hall key image by changing the order of images stored by the user using the generated synchronization code by the server;

(C) the server transmitting the generated rearranged image group to the user's terminal and outputting the generated rearranged image group on the user terminal;

(D) the server randomly selecting one or more of the means set as authentication supplement means;

(E) receiving, by the user terminal, an input pattern set as a password input movement path and an authentication supplement means, and comparing the input movement path with the position of the authentication image on the rearranged image group arrangement to determine whether to be authenticated;

(F) the user terminal transmitting the authentication status and the input pattern to the server;

(G) the server reading the authentication values of the authentication supplement means selected in the step (D);

(F) comparing, by the server, the input pattern with the authentication value to determine whether to perform additional authentication;

And (H) the server transmitting the additional authentication to the user terminal, and if the additional authentication is approved, accumulating and storing the input pattern.
The method of claim 1,

The authentication value is,

A user authentication method using a graphic OTP, characterized in that the range value including the tolerance range in the cumulative average value of the input pattern input by the user.
The method according to claim 1 or 2,

The authentication supplement means,

A user authentication method using a graphic OTP comprising a drag path and a drag speed.
The method of claim 3, wherein

The authentication supplement means,

If the user terminal is provided with a touch panel, the user authentication method using a graphic TP, characterized in that it comprises a touch pressure.