KR100353730B1 - Apparatus and method for protection of stolen fingerprint data in fingerprint authentication system - Google Patents

Abstract

The present invention extracts and stores a unique value (u / v) from fingerprint data that has been successfully authenticated, and then compares the fingerprint data by comparing the extracted u / v with the fingerprint data to be stored in the log storage unit. It is to provide a fingerprint authentication system and method for determining whether the theft.

Fingerprint authentication system for determining whether the fingerprint data is stolen according to the present invention, the fingerprint input unit for inputting the user's fingerprint, the image processing unit for extracting fingerprint data from the fingerprint image input to the fingerprint input unit, by the image processing unit U / v extracting unit for extracting u / v from the extracted fingerprint data, comparing the u / v extracted by the u / v extracting unit with u / v stored in the log storage unit after fingerprint authentication is successful If u / v equal to u / v of the fingerprint data inputted through is stored in the log storage unit, the input fingerprint data is regarded as stolen fingerprint data, and the fingerprint data passed from the stolen fingerprint search unit Fingerprint authentication unit for authentication, the fingerprint authentication unit is configured to include a fingerprint data storage unit for storing the fingerprint data for performing authentication.

Description

Apparatus and method for protection of stolen fingerprint data in fingerprint authentication system

The present invention relates to a fingerprint authentication system and method for distinguishing stolen fingerprint data. More specifically, a unique value (u / v) is extracted and stored from fingerprint data that has been successfully authenticated using a hash function, and then u / v is extracted using the same function from fingerprint data that attempts authentication. The present invention relates to a fingerprint authentication system and method for determining whether the fingerprint data is stolen by comparing with the stored u / v.

Among the biometric systems, the fingerprint recognition system is a fingerprint recognition system that has a very high reliability in economic installation cost and security, and has been verified by the unique characteristics of the unique person based on hundreds of years of global application cases. In particular, since the system can be miniaturized, mobility and space utilization are very high. In particular, with the development of networks these days, with the growing interest in security and privacy, fingerprint identification technology as a personal authentication method is developing into the most prominent technology field among image recognition technologies. Such fingerprint recognition technology can be applied to various applications, and it is possible to perform high-speed recognition processing so that the recognition confirmation speed does not exceed 0.1 sec.

However, a highly knowledgeable programmer or hacker can leak fingerprint data in various ways, such as copying a fingerprint data file by hacking into the fingerprint recognition system, and if the fingerprint data is leaked, serious security problems may occur. Can be.

An object of the present invention is a method for solving the above problems, by using a hash function to extract and save u / v from the fingerprint data successful authentication, and then extracted using the same function from the fingerprint data attempting u The present invention provides a fingerprint authentication system and method for determining whether fingerprint data is stolen by comparing / v with stored u / v.

1 is a system configuration according to the present invention.

2 is a method flow diagram of the present invention.

<Description of Drawing>

Fingerprint input unit 1, image processing unit 3, u / v extractor 5, theft fingerprint search unit 7, log storage unit 8, fingerprint authentication unit 9, fingerprint data storage unit 10

summary

The present invention has a basic concept of determining whether the fingerprint data is stolen by comparing a unique value (u / v) of the fingerprint data extracted using a hash function.

The unique value is a hash code value extracted from a hash function, and will be described with u / v in the following description.

In general, even for the same fingerprint, fingerprint data requiring authentication generates different fingerprint data each time it is input. In other words, fingerprint data that requires authentication can never be used again. If the same fingerprint data as previously used fingerprint data is used, it may be regarded as stolen or copied fingerprint data.

As described above, the probability that the u / v extracted through the hash function according to the present invention are equal to each other is almost zero. Therefore, according to the present invention, it is possible to determine whether the fingerprint data is stolen by comparing the fingerprint data u / v whose integrity is extracted through the hash function.

Description of the fingerprint authentication system and method for determining whether the fingerprint data is stolen according to the present invention is as follows.

System configuration

According to the present invention, the u / v is extracted from the fingerprint data that has been successfully authenticated and stored, and the u / v extracted from the fingerprint data attempting authentication is then compared with the stored u / v to determine whether the fingerprint data is stolen. The configuration of the fingerprint authentication system will be described in detail with reference to FIG.

First, as shown in Fig. 1, the present invention is constructed as follows.

The fingerprint authentication system for determining whether the fingerprint data is stolen includes a fingerprint input unit (1) for inputting a user's fingerprint, an image processing unit (3) for extracting fingerprint data from the fingerprint image input to the fingerprint input unit (1), and U / v extractor 5 for extracting u / v from the fingerprint data extracted by the image processor 3, and fingerprint authentication with u / v extracted by the u / v extractor 5 If u / v equal to u / v of the fingerprint data input through comparison with the u / v stored in the log storage unit 8 is stored in the log storage unit 8, the input fingerprint data is the stolen fingerprint data. The fingerprint detection unit 7, the fingerprint authentication unit 9 for authenticating the fingerprint data passed from the theft fingerprint search unit 7, and the fingerprint authentication unit 9 to perform authentication It consists of a fingerprint data storage unit 10 in which data is stored.

In the above configuration, u / v is extracted through a hash function.

Hash function is one of the important cryptographic techniques used in the field of information security. It generates a secure output bit string of a certain length for any input data bit string. It is applied to digital signature and information integrity verification. have. This is expressed as a formula as follows.

In the above formula, x is input data (variable length message), and y is output data (fixed length bit string) obtained through the hash function, that is, u / v in the present invention.

And the biggest feature of the hash function is that it cannot predict the input bit stream with the calculated result (output bit stream). In other words, if any character in the bit string of the input data is changed, the resulting value (output bit string) is also changed. Therefore, the data generated by the modulation and hacking of data that may occur during transmission on the network using the characteristics of the hash function is used. It can be seen whether the modulation of the.

Therefore, the probability that the u / v extracted from two non-identical fingerprint data is the same is almost close to '0'. In addition, u / v in the present invention is so small that it hardly affects the whole system.

The hash function can be used to check the integrity of the information.Integrity verification calculates u / v of desired information and keeps it safe. By comparing, you verify the integrity of the information. The integrity verification of the information according to the present invention can be solved by itself on the fingerprint data extraction algorithm.

1, the stolen fingerprint search unit 7 retrieves the stored u / v from the log storage unit 8 after successful fingerprint authentication, and extracts the new u / v extracted by the u / v extractor 5; If u / v equals to the log storage unit 8, the new u / v is considered to have been used once before and is regarded as stolen fingerprint data.

The fingerprint authentication unit 9 for authenticating the fingerprint data passed from the theft fingerprint retrieval unit 7 is usually based on the fingerprint data of the fingerprint data storage unit 10 in which the fingerprint data passed the authentication is stored. Perform authentication.

As described above, the present invention extracts u / v of the input fingerprint data through a hash function, and then determines whether the fingerprint data is stolen by comparing u / v through the theft fingerprint search unit 7.

Method of the invention

A fingerprint authentication method for determining whether the fingerprint data is stolen according to the present invention will be described in detail with reference to FIG. As described with reference to FIG. 1, first, the step of storing u / v extracted from the fingerprint data having succeeded in fingerprint authentication in the log storage unit 8 is preceded, followed by the following steps.

A fingerprint input step [100] for inputting a user's fingerprint, an image processing step [102] for extracting fingerprint data from the fingerprint image input in the fingerprint input step [100], and a fingerprint extracted in the image processing step [102] U / v extracting step [106] for extracting u / v from data, u / v extracted in the u / v extracting step [106] and u / v stored in the log storage unit 8 after successful fingerprint authentication U / v comparison step [108] to compare with the above, the u / v comparison step [108] as a result of the same u / v u / v of the fingerprint data is passed through the authentication u stored in the log storage unit 8 If the fingerprint data is in / v, the input fingerprint data is regarded as stolen fingerprint data, and the authentication data is rejected in the authentication rejection step [110] and the u / v comparison step [108]. Fingerprint authentication step for performing the normal authentication from [112].

In the above method, the fingerprint data information extracted by the image processing unit 3 can be used in the server-client system (network PC [104]) or the local system (local PC [104 ']), and the server-client system. Transmits to the network PC [104] by the normal transmission protocol.

As described in the system configuration, the above u / v is extracted through the hash function, and the extracted new u / v is the same as the u / v stored in the log storage unit 8 after successful fingerprint authentication. Theft fingerprint search unit 7 determines whether theft is present or not.

Here, the probability that the u / v extracted through the hash function from two fingerprint data that are not identical are almost equal to '0' in the characteristics of the hash function. Therefore, in the present invention, it is possible to know whether the fingerprint data is stolen by comparing the fingerprint data u / v extracted from the hash function.

As a result of the above u / v comparison, if the same u / v exists, the authentication is denied because the fingerprint data is stolen [110], if the same u / v does not exist, the fingerprint data storage unit 10 Normal fingerprint authentication is performed by the fingerprint authentication unit 9 from the stored fingerprint data [112]. In order to authenticate other fingerprint data, u / v extracted from the fingerprint data having passed the authentication is stored in the log storage unit 8 [114].

As described above, the present invention extracts a unique value (u / v) from the input fingerprint data through a hash function, and then compares the u / v with the stored u / v in the previous authentication step. After the determination, the normal fingerprint authentication step is performed only when there is no matching u / v.

According to the present invention, a security problem due to theft of fingerprint data when the fingerprint data is transmitted through a network which is not secured or stolen of fingerprint data stored in the local PC can be greatly reduced.

Claims (4)

After extracting the unique value (u / v) from the fingerprint data that has been successfully authenticated and storing it in the log storage unit, the u / v extracted from the fingerprint data that attempts to be authenticated is compared with the u / v stored in the log storage unit. A fingerprint authentication system for determining whether fingerprint data is stolen, Fingerprint input unit for inputting the user's fingerprint, An image processor for extracting fingerprint data from the fingerprint image input to the fingerprint input unit; A u / v extractor for extracting u / v from the fingerprint data extracted by the image processor; The u / v extracted by the u / v extracting unit and the u / v of the fingerprint data input through the comparison with the u / v stored in the log storage after successful fingerprint authentication are stored in the log storage unit. If stored in the stolen fingerprint data is regarded as stolen fingerprint data, Fingerprint authentication unit for authenticating the fingerprint data passed from the theft fingerprint search unit, And a fingerprint data storage unit configured to store fingerprint data for performing authentication, wherein the fingerprint authentication unit distinguishes stolen fingerprint data. The fingerprint authentication system of claim 1, wherein a hash function is used to extract u / v from fingerprint data. A method performed in the system configured as claimed in claim 1, comprising extracting and storing a unique value (u / v) from fingerprint data that has been successfully authenticated, and recording u / v extracted from fingerprint data attempting subsequent authentication. Fingerprint authentication method for determining whether the fingerprint data is stolen compared to A fingerprint input step of inputting a user's fingerprint, An image processing step of extracting fingerprint data from the fingerprint image input in the fingerprint input step; U / v extraction step for extracting u / v from the fingerprint data extracted in the image processing step, A u / v comparison step of comparing the u / v extracted in the u / v extraction step with the u / v stored in the log storage after successful fingerprint authentication; If the u / v equal to the u / v of the fingerprint data input as a result of the u / v comparison step is in the u / v stored in the log storage unit after authentication passes, the input fingerprint data is regarded as stolen fingerprint data and rejected the authentication. Deny step, And a fingerprint authentication step of performing authentication from the stored fingerprint data if the same u / v does not exist as a result of the u / v comparison step. 4. The fingerprint authentication method of claim 3, wherein a hash function is used to extract u / v from fingerprint data.