KR20080092778A - A method and system for authentication by videophone - Google Patents

Abstract

An authentication method and an authentication system are provided to improve user convenience by authenticating users using images of the users, which are taken by a portable video phone. An authentication system includes a communication relay(51), an image recorder(54), a video phone(10), a certified server(52), and a transmitter. The communication relay establishes and maintains a call between a questioner and a questionee. The image recorder transmits the call of the questioner to the communication relay with audio and video signals. The video phone couples video and audio signals with the call of the questionee and transmits the call to the communication relay. The certified server receives the call with the audio and video signals and stores the call as well as the audio and video signals as certification information. The transmitter transmits the certification information to the questioner or questionee.

Description

Authentication method and authentication system using video phone service {A method and system for authentication by videophone}

1 is a view showing the video phone and the authentication screen is performed the authentication method of the present invention

Figure 2 is a picture that the authentication provider provides authentication by speaking directly to the video telephone.

Figure 3 is a picture of the authentication provider provides authentication while listening and talking using earphones and microphone.

4 is an authentication data flow diagram in which an authentication provider and an authentication requestor authenticate through a communication relay station and store the same in the authentication requester's server.

5 is a notarized data flow diagram in which an authentication provider and an authentication requestor notarize through a communication relay station and a notary server and store them in the notary server.

6 to 8 are screen display units of video telephones showing embodiments of an authentication screen based on the authentication protocol.

FIG. 9 is a flowchart of an operation of performing the authentication flow of FIG. 4. FIG.

FIG. 10 is a flow chart of performing the notarization flow of FIG. 5.

[Description of reference numerals for the main parts of the drawings]

10: videophone 11: microphone 12: earphone

20: Answerer (or authentication provider) 21: Button input (or authentication input)

30: Question (or certification required) 31: Answer (or certification provided)

33: Recording device (or certified recording)

40: Questioner or Authenticator screen 41: Answerer or Certifier screen

42: pronunciation screen (answer) pronunciation screen 43: authentication request (question) pronunciation screen

51: communication relay station 52: notary server 72: authentication requester (questioner) server

53: Questioner (or certification requester) 54: Recording device (or certification request recording)

60: Questionnaire (certificate required) 61: Answer material (Certificate provided)

62: Notarization 63: Certification

81: What is the certification provider in the landscape protocol? 82: What is the certification requester in the landscape protocol?

83: Certification provider of vertical screen protocol 84: Certification requester of vertical screen protocol

The present invention relates to a technique for transmitting, recording and storing video and audio at the same time and using them as authentication data.

Authentication is the process of verifying the authenticity of a message or user. Among them, personal authentication involves direct authentication that directly uses the unique morphological or biochemical characteristics of an individual for authentication. It can be divided into indirect authentication that documents and personalizes the personal information of the individual without being face-to-face and receives it remotely.

In the direct authentication, fingerprints, irises, wrist veins, facial contours, etc., which are morphological characteristics of an individual, are processed by image information and input in advance, and then directly collated at a place requiring authentication. Practical systems are currently being developed.

Secondly, indirect authentication includes traditional document authentication through various certificates that have been used for a long time with human history, telephone authentication through voice recording of voice, and electronic authentication introduced with the latest Internet technology.

The type of document authentication is most of the methods using documents, that is, for example, issuance of an important certificate, such as a resident registration card, a license certificate, a certificate, and the like, and a seal certificate also plays such a role.

And telephone authentication. Telephone authentication is used for limited-use face-to-face authentication and authentication of actions. The current method is to record telephone conversations and use them as evidence of application. It is used in various fields such as application / termination of communication service or confirmation of purchase application of home shopping.

Finally, electronic authentication is similar to the document authentication method and is an indirect authentication technology that has recently developed. Electronic authentication is a method of verifying the identity of the other party by electronic information from a computer.It is information generated by an electronic signature generation key using asymmetric encryption to verify the identity of the person who created the electronic document and whether the electronic document has been changed. To acknowledge and certify that a document is unique.

Similar to the conventional document authentication, the electronic certificate is authenticated by an authorized certification authority by issuing an encrypted certificate for a person or authority registered with the certification authority, thereby verifying the authenticity of identity and communication contents.

Among the various authentication methods described above, the most obvious thing in identifying the identity and behavior of the authentication provider is direct authentication, especially face-to-face authentication, and it is preferable to perform the face-to-face authentication so that the authentication can be most reliably performed in all cases. In many cases, face-to-face authentication is not possible, such as being remote or unable to move due to an important task or illness, and even if this is not the case, a third party or a third party may be able to acknowledge the above authentication between the parties. There is a disadvantage in that it cannot be recorded effectively, and in addition, there are many cases in which the cost is more effective in terms of cost-effectiveness. Therefore, the type of authentication and the required authentication level (mainly indirect authentication method) are appropriately selected according to the needs. have.

In terms of the authentication method in terms of convenience for the authentication provider, indirect authentication, that is, telephone authentication or electronic authentication, is valid as much as possible, because the authentication provider can easily perform the visit or issue a certificate without any extra effort. This is because authentication can be provided.

Next, in terms of the convenience of the authentication requestor in the above authentication method, direct authentication (such as fingerprint stamping and telephone recording), which costs less, and indirect authentication using a government-guaranteed certificate (resident registration certificate, seal certificate). Etc.) is valid at the same time, because verification of the identity and certification of the certification provider can be easily and reliably obtained through a third-party trusted authority.

However, in today's complex society, the authentication method (mainly the direct authentication method) that considers only one convenience as described above is becoming more and more competitive. Therefore, the simpler and cheaper authentication method is maintained while maintaining the desired level of authentication reliability. Authentication method).

However, the most serious disadvantage of the indirect authentication method is that the authentication means is sometimes used by another person without the true consent of the authentication provider, or the authentication provider may deliberately transfer or neglect his own authentication to others.

In other words, most of the certification theft, such as proxy contract, proxy test, unauthorized approval, or deliberately granting certification to others, can occur. have.

In order to overcome the above drawbacks, the advantages of the simple and inexpensive indirect authentication method as described above are saved, but an authentication method having authentication reliability corresponding to direct authentication is required.

In addition, the authentication method that pursues the point that direct authentication and indirect authentication could not be performed at the same time can perform not only identification of the individual but also confirmation of the relevant event requiring authentication. Was required.

In order to solve the above problems, the present invention proposes a method for personal authentication on a mobile network by proposing a new authentication method utilizing the recording of call contents and the storing of the call time as a personal authentication among the various personal authentication methods. The purpose is to present it.

In order to achieve the object of the invention as described above, the authentication method of the present invention,

First, the authentication requestor becomes a questioner and the authentication provider becomes an answerer, and a call is established through a videophone; and then, the question of the questioner is expressed on the videophone by a screen or a sound or a combination of screen and sound; and Expressing the answer of the answerer to the video telephone in a screen and sound, and then storing the screen and sound or a combination of the screen and the sound expressed in the video telephone as authentication data, and finally, authenticating the authentication data to the authentication server. Registering on the main technical features are configured.

The storing of the authentication data from the above may further include storing the button input information and the storage time information of the answerer as necessary. The opening of the call may include a screen resolution, a recording resolution, and a standard sound quality of the video telephone. The method may further include storing a call establishment time or location information of the caller or base station information.

And the step of registering the authentication data in the authentication server, the current time of registration

The method may further include storing information together, even when the call is not abnormally terminated.

The above authentication method assumes that the authentication work is carried out only in a one-to-one relationship between the authentication requestor (questioner) and the authentication provider (responder), and the authentication data is usually retained entirely by the authentication requester. In other words, it can be referred to as an authentication requestor-centered authentication method that can be selectively delivered.

It is necessary to introduce a notary concept in order for both the authentication requester and the authentication provider to have equal rights, rather than the authentication requester-centered authentication method. In this case, the call established in the call establishment step is connected to the notary server. The step of adding may be added, and the step of storing the screen and sound or the combination of the screen and the sound expressed in the videophone as a notarized data and registering the notarized server may be performed instead of registering in the authentication server.

At this time, the button input information of the answerer may be registered in the notary server together with the notarized data, and the notary server may determine the screen resolution, the recording resolution, and the reference sound quality of the video telephone to which a call is to be established with its own authority.

Since the concept of time and location are very important in all authentication processes, the notary server, like the authentication server, also stores the time of call establishment or notarization server connection time as the notarized data, and is registered at the notarized server every time of storage. Current time information and call location information can be saved together.

Since the current time information and call location information can receive satellite absolute time information at different locations from the GPS satellites very precisely in seconds due to the characteristics of wireless mobile communication using satellites, the communication relay station and the authentication (notarization) server, authentication It can be an important evidence of behavior and evidence that both the requestor and the certification provider agree on.

The authentication data or notarization data registered in the authentication server or notary server contain the answers, consents, and conclusions of the authentication provider according to the specific request or suggestion of the authentication requestor, or the contract conditions. In the entire process of a question or contract, the successive actions of the certificate requester and the provider are stored as it is, preventing the theft or unauthorized use of the certificate.

Similar to the current time information and current location information, the stored file storing the authentication data or notarized data can clearly define the screen resolution, resolution, and reference sound quality according to a predetermined protocol in the initial call opening step or the notarization server connection step. The generated archives can also be important evidence of evidence and evidence that can be fully recognized by the state or by a nationally recognized authority.

Of course, in order to achieve all the above technical features, the standard of certification data is determined after the call is established, and the entire process of certification data is stored according to the specified standard, or the notarization data is stored and notarized according to the specified standard after the currency is opened. It is valid only when the call is maintained normally until the correct time / location information is input from the communication relay station. If the call is abnormally terminated in any of the above procedures, the authentication data or Notarized data is invalid, so the work should be canceled, but even if it is abnormally terminated in order to prevent another misconduct using it, a separate limited tag may be attached and stored as certified / notarized data. .

In order to represent the technical features of the present invention in more detail with reference to an example of the present invention included in the drawings will be described in more detail below.

However, the embodiments of the present invention or specific examples described below are just one example, and the components and coupling structures constituting the same are inherent in the technical features of the present invention. Note that it is not limiting.

1 is a view showing the video phone 10 and the authentication screen (40, 41) is carried out the authentication method of the present invention.

In the drawing, the video telephone is provided with a photographing apparatus 43 and a display screen to simultaneously transmit and receive images and sounds, and if necessary, separate microphones 11 and earphones 12 for smooth transmission and reception of sounds. It can be provided.

In the drawing, the actual transmission screen will be the authentication provider screen 41 and the actual reception screen will be the authentication requester screen 40.

The video telephone may have a built-in storage unit that integrates and stores the transmission screen, transmission sound, reception screen, and reception sound as authentication data according to a predetermined protocol, if necessary, but the storage unit is only temporary for transmission of authentication data. In many cases, the stored authentication data (= registered) is made in the authentication server 72 of FIG. 4.

The video telephone has a built-in transmission unit that can transmit the (temporarily stored or stored) authentication data to a communication base station or a notary server or a transmission partner in a predetermined standard file.

FIG. 2 is a diagram in which an authentication provider speaks directly to a video telephone and provides authentication. An answer (or authentication provider) 20 answers a question or authentication request 30 heard through a speaker built in the video telephone 10. Alternatively, while providing the authentication 30, it is possible to further transmit the authentication input 21 required to the interrogator (or authentication requestor) as needed.

All of the above processes are recorded by a microphone embedded in the video telephone and recorded by the photographing apparatus 33 which photographs the answering machine.

That is, in the drawing, sounds (including button function sounds) generated by the reference numerals 30, 31, and 21 are recorded, and the face of 20 and the sound of a pronounced mouth are recorded.

At this time, the accurate current time information and location information received from the communication base station or the satellite may also be stored together.

3 illustrates a case in which the earphone and the microphone are added in FIG. 2, in which case the voice of the authentication requestor 30 and the voice of the authentication provider 31 may be separately recorded.

4 shows an authentication data flow diagram in which an authentication provider and an authentication requestor authenticate through a communication relay station and store the same in a server of the authentication requestor.

The video recording device 54 which transmits the call of the interrogator 53 to the communication relay station by the screen or the sound or the combination of the screen and the sound is connected to the video telephone 10 of the answerer 20 via the communication relay station 51. .

Of course, the video telephone transmits the answerer's call to the interrogator through the communication relay station by combining the screen and the sound.

At this time, the interrogator 53 may be a test supervisor of the English test, a salesman of insurance products, anyone who can request confirmation of the identity and conduct of the other party, such as a loan officer of a financial company, is available and possessed Through the video recording device 54 requires a variety of actions and proofs and the entire process according to the authentication data is stored in the authentication server (72).

The authentication data 63 stored in the authentication server may be separately transmitted to the answerer (authentication provider) 20 after the authentication is completed.

At this time, the authentication server may further store time information at the time of storing the authentication data, and the communication relay station or the authentication server to deliver / store the call to the authentication server in accordance with the protocol recognized by a public authority. It can be equipped with a function to determine the screen resolution, shooting resolution and reference sound quality required for the call.

FIG. 5 is a more advanced model of FIG. 4, which replaces notarized servers with authentication data stored and used to store and use authentication data as intended by an authentication requestor.

That is, the overall structure is similar to that of FIG. 4, except that the communication server 51 receives the call as a screen or a sound or a combination of the screen and the sound, and stores a notarized data in place of the authentication server 72. The communication relay station further transmits all the contents of the call and the communication relay time information to the notary server.

The notary server stores and registers the contents and time information of the call as notarized data 62. However, the notary server 52 may be stored in the notary server 52 as a time point for storing the time information and position information.

Similarly to FIG. 4, the communication relay station or the notary server may further include a function of determining a screen resolution, a photographing resolution, and a reference sound quality required for a call in order to transmit or store the call.

6 to 8 are screen embodiments showing authentication screens based on a protocol of authentication (notarization) data to be stored in the authentication (notarization) server.

In FIG. 6, the vertical resolution of the screen may be represented by the number of pixels of (83) + (84), and the horizontal resolution of the screen may be represented by the number of pixels of (81) + (82). At this time, the screen space of (41) created by (83) and (81) becomes a screen containing the authentication provider or the answer provider's authentication, and this screen is recorded as a still image, most preferably a continuous screen, if necessary. In order that the provider's authentication statement can be surely matched through the provider's mouth, the mouth, that is, the authentication provision (answer) sound screen 42, needs to be accurately recorded and stored.

Similarly, the screen space of (40) created by (84) and (82) becomes a screen containing the authentication request or the authentication request of the questioner, and this screen is recorded as a still picture, most preferably a continuous picture, if necessary. It is necessary that the above-described mouth, that is, the authentication request (question) pronunciation screen 43, be recorded and stored correctly so that the request of the request of authentication of the requestor can be surely matched through the request of the caller.

Therefore, according to FIG. 6, the screen recorded by the photographing apparatus 33 in the video telephone 10 becomes (41), but the screen stored as authentication data or notarized data becomes (41) + (40).

7 is a case of taking the test using the authentication method of the present invention for the entire test time in order to prevent the surrogate test in the case of the English test, Figure 8 is that the salesman or counselor visits directly to create a contract when creating various contracts Rather, it is a case of authenticating a contract by verbally signing a contract displayed on the screen.

At this time, the screen of the authentication requestor (questioner) can be freely changed by adjusting the aspect ratio 84-82 as necessary within a predetermined protocol as shown in the drawing.

9 and 10 are flowcharts illustrating one example of performing the authentication flow of FIG. 4 and the notarization flow of FIG. 5, respectively.

9 and 10 simultaneously perform a step (90,100) of first checking whether the call and photographing apparatus conforms to the protocol at the start stage, and if the protocol does not comply with the protocol, transmits a non-authentication (notary) message to both parties (91,101). In the next step, the screen resolution, the photographing resolution, and the reference sound quality are determined according to the current authentication status.

FIG. 9 is specific to the authentication request and the authentication providing behavior between the questioner and the answerer using only the authentication server without the third notary, and assumes that all the authentication contents are stored in one call.

In order to store the authentication data in one call as above, a procedure for continuously checking the current connection maintenance state is required as shown in the reference numeral (97) .If all the questions and answers are terminated in a normal connection state, the end time is saved and authenticated. Can generate data.

Of course, in the above process, the questions and answers may be repeated between the drawings 94 and 95 and the information is confirmed by 97 through the recording process of 96.

FIG. 10 is a case where there is a notarization server unlike in FIG. 9, and notarization data is stored in multiple calls.

In the case of the authentication server that is fully controlled by the authentication requester as shown in FIG. 9, there is a fear that the authentication data may be edited if the call is not terminated once. However, if a notary public server as shown in FIG. 10 is introduced, as shown in FIG. At each step of the Q & A, the notary server can temporarily store the notarized data without creating a notary. Therefore, it can cope with notarized acts that can not be continued in the middle of the call or have a very long time.

Of course, in the above situation, the call may be cut off in the middle, so every time the question and answer step (103,104) is sent along with the time information at that time, and temporarily stored in the notary server. The time can be stored 107 and finally notarized 108.

While the embodiments of the present invention have been described in detail with reference to the accompanying drawings, the technical idea of the present invention is not limited to the above embodiments, and those skilled in the art may include the present invention. Various modifications and extension embodiments that are not included in the specification and drawings of the present invention may be further implemented as necessary by utilizing the technical idea that is present, but it is also clearly included in the scope of the technical idea uniquely possessed by the present invention. do.

The authentication method and authentication system of the present invention as described above is the most similar to the face-to-face direct authentication among the existing various authentication methods and guarantees the perfect authentication, and the convenience of authentication because it uses a mobile phone with high mobility and portability This is maximized and the field of application is very broad.

In particular, by simultaneously recording and recording all voice, screen, and button inputs, the situation at the time of authentication can be completely recorded so that both the validity of the authentication provider and the requirements of the authentication requester can be confirmed later. Therefore, it is possible to supplement the incomplete part of the phone authentication which relies only on voice recording at present, and it will be a universal authentication method that has excellent documentary status as documented recording document superior to document authentication and electronic authentication and also reduces the cost of issuing documents and certificates. Can be.

In addition, when conducting a test using a video phone using this certification technology, it can be free from problems such as proxy test in the Internet test, etc. And through certain contracts across other funds and loan products or e-commerce shopping, the potential for financial friction can be greatly reduced.

Claims (22)

A call of the questioner and the answerer is established through the video telephone; Expressing the question of the interrogator in the video telephone by a screen or a sound or a combination of a screen and a sound; Expressing the answer of the answerer in the video telephone on a screen and in sound; Storing the screen and sound expressed in the video telephone or a combination of screen and sound as authentication data; And Registering the authentication data with an authentication server; Authentication method using a video phone service comprising a. The method of claim 1, The storing of the authentication data may include storing the button input information and the storage time information of the answerer together. The method of claim 1, Registering the authentication data in the authentication server, the authentication method using a video telephone service further comprising the step of storing the current time information at the time of registration. The method of claim 1, Registering the authentication data in the authentication server, the authentication method using a video telephone service further comprising the step of storing the location information of the caller at the time of registration. The method of claim 1, The call establishment step further comprises the step of determining the screen resolution, shooting resolution and reference sound quality of the video telephone. The method of claim 1, The call establishment step further comprises the step of storing a call establishment time or communication relay station access time information. The method according to claim 3 or 4, Registering the authentication data in the authentication server, the authentication method using a video telephone service, characterized in that is performed temporarily even when the call is not normally terminated. A call of the questioner and the answerer is established through the video telephone; Connecting the opened call to a notary server; Expressing the question of the interrogator in the video telephone by a screen or a sound or a combination of a screen and a sound; Expressing the answer of the answerer to the video telephone in a screen and sound; Storing the screen and sound expressed in the video telephone or a combination of the screen and sound as notary data; Registering the notarization data with a notary server; And Passing the notary data to the questioner and the answerer; Authentication method using a video phone service comprising a. The method of claim 8, The step of connecting the call to a notary server, the method of using a video telephone service further comprising the step of determining the screen resolution, image resolution and reference sound quality of the video telephone in the step of being expressed in the video telephone. The method of claim 8, The step of connecting the call to a notary server, the authentication method using a video telephone service further comprises the step of storing the information on the opening time of the call or notarization server. The method of claim 8, In the storing of the notarized data, an authentication method using a video telephone service, characterized in that the button input information of the answerer and the current time information are stored with every storage time. The method of claim 8, In the storing of the notarized data, an authentication method using a video telephone service, characterized by storing the button input information of the answerer and the current location information at every storage time point. The method according to claim 11 or 12, wherein The step of registering the notarization data in the notarization server, the authentication method using a video telephone service, characterized in that is performed every step irrespective of whether or not normal termination of the call. In a telephone capable of transmitting and receiving video and sound at the same time, It includes a screen and a speaker that can simultaneously display the transmission screen and transmission sound and the reception screen and the reception sound, And a storage unit for storing the transmission screen and the transmission sound, the reception screen, and the reception sound as authentication data according to a preset protocol. And a transmission unit capable of transmitting the authentication data to a communication base station or a notary server or a transmission counterpart. The method of claim 14, And the storage unit stores an authentication system using a video telephone service, wherein the storage unit stores together current time information of each storage time point or storage end time point. A communication relay station which establishes and maintains the caller's and answerer's call; A video recording device for transmitting the caller's call to the communication relay station by a screen or a sound or a combination of a screen and a sound; A video telephone for transmitting the answerer's call to the communication relay station by combining screen and sound; And An authentication server receiving the call from the communication relay station as a screen or a sound or a combination of a screen and a sound and storing the call as authentication data; Authentication system using a video phone service comprising a. The method of claim 16, The authentication server is an authentication system using a video telephone service, characterized in that for storing the button input information of the answerer and the time and location information at the time of storing the authentication data. The method of claim 16, The communication relay station or the authentication server further comprises a function of determining a screen resolution, a shooting resolution, and reference sound quality required for a call in order to transmit or store the call to the authentication server. A communication relay station which establishes and maintains the caller's and answerer's call; A video recording device for transmitting the caller's call to the communication relay station by a screen or a sound or a combination of a screen and a sound; A video telephone for transmitting the answerer's call to the communication relay station by combining screen and sound; A notary server for receiving the call from the communication relay station as a screen or a sound or a combination of the screen and the sound and storing the call as notary data; And A transmission device for transmitting the notarized data to the questioner or the answerer; Authentication system using a video phone service comprising a. The method of claim 16 or 19, And the communication relay station further transmits communication relay time information and call location information to the notary server. The method of claim 19, The notary server authentication system using a video telephone service, characterized in that for storing the button input information of the answerer and the time and location information at the time of storing the notary data. The method of claim 19, The communication relay station or the notarization server further comprises a function of determining a screen resolution, a photographing resolution, and reference sound quality required for a call in order to deliver or store the call to the notary server.

Images