KR100759348B1 - Bio authentication system using smartcard and method thereof - Google Patents

Abstract

A system and a method for performing biometric authentication with a smart card are provided to prevent illegal appropriation of the biometric authentication by using a CRC(Cyclic Redundancy Check) or hashing, is identical with the additional feature information stored in the smart card. An authentication terminal(100) transmits the biometric feature information generated based on the biometric information received from a biometric information reader(10), and the additional feature information generated from a CRC or hashing result value of the biometric feature information, or a part of the biometric feature information to the smart card connected to a card reader(20). The smart card(200) compares the biometric feature information with the reference feature information if the additional feature information is not identical with the information of a feature information list. The smart card accumulates the additional feature information to the list and transmits authentication result information to the authentication terminal if the additional feature information is identical.

Description

Biometric authentication system and method using smart card {BIO AUTHENTICATION SYSTEM USING SMARTCARD AND METHOD THEREOF}

1A is a schematic structural diagram of a biometric authentication system according to a first embodiment of the present invention;

1B is a flowchart of a biometric authentication method according to the first embodiment;

2a is a schematic structural diagram of a biometric authentication system according to a second embodiment of the present invention;

2B is a flowchart of a biometric authentication method according to a second embodiment.

*** Explanation of symbols for the main parts of the drawing ***

10: biometric information reader 20: card reader

100: biometric terminal 110: biometric information generation unit

120: additional feature information generation unit 130: time information generation unit

140: control unit 200: smart card

210: first storage unit 220: second storage unit

230: control unit C: feature information comparison determination unit

In the conventional smart card (Smart Card), a method using a personal identification number (PIN) has been used as an identification method. This is a simple method of inputting the same number as a pre-registered number within a predetermined number of times by entering a four-digit number through a key input. In light of the recent expansion of the e-commerce sector, the security level that can be guaranteed through this type of authentication is extremely low.

Therefore, as a more advanced method for authentication, a biometric authentication method using image information (biometric information) such as a fingerprint, a face, an iris, and a blood vessel has attracted attention. Biometric information is a highly identifiable information that can be owned only by the user, and can effectively replace the conventional personal identification number based authentication method.

When looking at such a biometric authentication method, the biometric information obtained at the point of time when authentication is required is made by comparing the reference biometric information (reference, reference) of the smart card, which is performed in the smart card according to the position where the comparison is performed. It is roughly divided into a store-on-card (SOC) that is performed outside of a match-on-card (MOC) and a smart card.

In order to read the biometric information, a biometric information reader such as an image scanner is typically used, and the biometric information read therefrom is input to a terminal such as a computer and then subjected to image processing such as noise removal and restoration. Through the line drawing process, feature information (hereinafter referred to as bio feature information) about the biometric information is extracted and finally used for the authentication process.

Although the above-described biometric authentication method has an advantage of higher reliability than the conventional method, it is not considered when a malicious user acquires and uses the biometric information used in the previous authentication illegally, for example, through fingerprint collection. . Of course, in order to prepare for such a case, a complex method of using a personal identification number is used in the authentication process, but it can be guessed that it is useless in front of various technologies currently used for personal information leakage.

The present invention is a technical starting point for solving the above-described problems, focusing on the fact that the biometric information obtained through the biometric information reader has a predetermined range of differences with each acquisition. That is, the human body is not a rigid body, so that some deformation occurs. In particular, the human body is influenced by environmental conditions such as temperature, humidity, illuminance, and the like, and biological information obtained from the human body includes minute differences every time.

Therefore, the present invention separates the additional feature information from the bio feature information through CRC or hash and accumulates it in a smart card separately from the feature information (bio feature information) for basic bio information used in conventional biometric authentication, and then authenticates it. If the matching feature is newly compared with the additional feature information newly accumulated in the smart card, the authentication is rejected.

The features and advantages of the present invention will become more apparent from the following detailed description based on the accompanying drawings. In addition, when it is determined that the detailed description of the known function and its configuration related to the present invention may unnecessarily obscure the subject matter of the present invention, it should be noted that the detailed description is omitted.

The biometric authentication system and method disclosed in the present invention are divided into a first embodiment and a second embodiment. Both system configurations are the same, but in the first embodiment, the MOC method in which the comparison of authentication is performed in the smart card is performed, whereas the second embodiment is an SOC method performed in the authentication terminal rather than the smart card.

First, referring to FIG. 1A, the biometric authentication system according to the first embodiment includes a biometric information reader 10 and a card reader 20 that largely read biometric information such as a user's fingerprint, iris, face, and blood vessel. The authentication terminal 100 is connected, and the smart card 200.

The bio feature information generation unit 110 of the authentication terminal 100 generates bio feature information by processing bio information (image information) read from the bio information reader 10, where processing refers to a fingerprint. For example, this means extracting a plurality of characteristic values (feature values), and means reducing the amount of data of the biometric information. The biofeature information is a collection of a plurality of feature values, and usually does not exceed 1 [Kbyte: kilobyte] in size. As is well known, the more feature values constituting the biofeature information, the higher the accuracy of authentication. On the other hand, the processing time is long. Therefore, the number of feature values is preferably adjusted in consideration of the processing time.

In addition, the additional feature information generator 120 generates a result value, that is, additional feature information by performing an operation such as CRC or hash on the bio feature information. Each of the additional feature information generated by the additional feature information generation unit 120 has a difference value within a predetermined range as described above, and is used as important data in authentication. For reference, the additional feature information may be set as some information of the bio feature information.

The time information generation unit 130 generates time information together with biometric information acquisition. In this embodiment, the time information may be generated based on standard time (GMT) or may be generated based on local time. This time information is information for a so-called time stamp, which is to prevent illegal reuse of bio-feature information or additional feature information that has already been used.

The controller 140 controls the operation of these components 110 to 130, and transmits authentication request information including bio feature information, additional feature information, and time information to the smart card 200 through the card reader 20. And receives the authentication result information from the smart card.

On the other hand, the first storage unit 210 of the smart card 200 stores the user bio-feature information when the smart card is issued. At this time, since biometric information is the basic information of authentication, it is redefined as reference feature information for identification of terms.

The second storage unit 220 accumulates additional feature information transmitted from the authentication terminal 100 and validated. The additional feature information accumulated here may be stored in plural, which takes the form of a list (hereinafter, 'feature information list'). Since the size of the feature information list is limited by the capacity of the second storage unit 220, the number of additional feature information to be stored is preferably adjusted appropriately. Preferably, the additional feature information stored first is replaced. In addition, the second storage unit 220 may store time information transmitted from the authentication terminal 100.

The feature information comparing and determining unit C compares and determines whether the time information transmitted from the authentication terminal 100 has a value earlier than the time information previously stored in the second storage unit, and performs an authentication procedure if the feature information has the previous value. If it is not the previous value, it compares and determines whether the broadcasted additional feature information matches the additional feature information of the feature information list, and if it matches, stops the authentication procedure. If it does not match later, compare and determine whether the broadcasted bio-feature information matches the reference feature information of the first storage unit 210, and if so, generate authentication result information according to the matched additional feature information. It is stored in the second storage unit 220.

The controller 230 of the smart card 200 controls the components 210, 220, and C and transmits the authentication result information to the authentication terminal 100.

In the present invention, biometric authentication is based on three pieces of information. The first is time information generated when the biometric information is acquired from the user, the second is additional feature information, and lastly, biometric information. Here, authentication using time information may be selectively included, and what is clearly distinguished from conventional biometric authentication is that authentication through additional feature information is preceded before a basic authentication procedure using biometric information.

Hereinafter, an authentication method according to the first embodiment will be described with reference to FIG. 1B.

First, the authentication terminal 100 receives biometric information from the biometric information reader 10, generates time information (S101), and generates biometric information and additional feature information based on the biometric information (S103, 105).

Subsequently, the authentication terminal 100 transmits authentication request information including time information, biometric information, and additional feature information to the smart card 200 connected to the card reader 20 (S107). Here, the smart card 200 may be a contactless or contact type card, and the card reader 20 may be a device supporting both methods.

The smart card 200 extracts time information from the transmitted authentication request information and compares the time information with pre-stored time information (time information stored in the second storage unit) to determine whether the pre-stored time information has a previous value. (S109). If the determination result (S109) is the previous value, the authentication procedure is stopped and the authentication result information including the appropriate error message is transmitted to the authentication terminal 100. If not, the second storage unit (as shown in step S111 of the drawing) The time information is stored. In the present embodiment, steps S109 and S111 may be omitted because they are additional steps for increasing the reliability of authentication.

After the time information is stored, the smart card 200 compares and determines whether the additional feature information broadcasted in the authentication request information is consistent with the additional feature information (feature information list) stored in the form of a list in the second storage unit. S113). If the determination result is matched information, the broadcasted additional feature information is previously used additional feature information, so it is regarded as illegal authentication, and the procedure is stopped, and the authentication result information including an error message is transmitted to the authentication terminal 100. do.

On the other hand, as a result of the determination in step S113, if there is no matching additional feature information, it is regarded as valid authentication and the smart card 200 compares whether the broadcasted bio-feature information matches the reference feature information of the first storage unit 210 and Judgment (S115), if matched, transmits the authentication result information including an approval message (a message indicating that the authentication has been performed correctly) to the authentication terminal 100 and stores the broadcasted additional feature information in the feature information list or It is updated (S117). On the other hand, if there is no match, the authentication result information including the error message is transmitted to the terminal (S119).

When the number of information (formerly additional feature information) included in the feature information list in step S117 exceeds the preset number, the additional feature information of the list stored first is deleted and then the valid additional feature information is stored.

For convenience of description, the above-described steps S101 to S119 are described as being terminated once. However, the steps S101 to S119 may be easily repeated several times through setting of the authentication terminal 100, such as entering a password within a predetermined number of times. There will be.

Hereinafter, a second embodiment of the SOC method according to the present invention will be described with reference to FIGS. 2A and 2B. Prior to this, the member numbers described in the structural diagram of FIG. 2A are identically assigned to the member numbers of FIG. 1A.

2A is a diagram showing the technical configuration of the second embodiment. Referring to this, the biometric authentication system according to the second embodiment includes the authentication terminal 100 connected to the biometric information reader 10 and the card reader 20 that read the biometric information of the user as in the first embodiment; And it consists of a smart card (200). As outlined, since the system of the present embodiment is an SOC system, the feature information comparing and determining unit C is included in the authentication terminal 100 unlike the first embodiment.

Referring to the feature information comparison determination unit (C) with a focus, the feature information comparison determination unit (C) is the time information generated by the time information generation unit 130 is stored in the second storage unit 220 of the smart card 200 Comparing and determining whether the previous value has a value earlier than the previously stored time information, if the previous value has been stopped, the authentication process is stopped. Comparing and determining whether it matches the additional feature information of the feature information list stored in the unit, and if it matches, the authentication procedure is stopped. On the other hand, if there is no match, the bio-feature information generated by the bio-feature information generating unit 110 compares and determines whether it matches the reference feature information stored in the first storage unit 210 of the smart card 200. If the determination result is matched, the generated additional feature information is stored in the second storage unit 220.

The authentication method according to the second embodiment will be described in detail with reference to FIG. 2B as follows.

The authentication terminal 100 receives the biometric information of the user acquired through the biometric information reader 10 as in the first embodiment, generates time information, and based on the biometric information, the biofeature information and the additional feature information. Are generated (S201, S203, S205).

Subsequently, the authentication terminal 100 receives the prestored time information from the smart card 200 in the second storage unit 220 and determines whether the authentication terminal 100 has a value earlier than the generated time information (S207). If so, stop the authentication process. If it is not the previous value, the generated time information is transmitted to the smart card 200 and stored in the second storage unit 220 (S209). In this case, step S207 and step 209 may be omitted as in the first embodiment because they have additional characteristics for increasing the reliability of authentication.

After operation S209, the authentication terminal 100 receives the feature information list (stored additional feature information) previously stored in the second storage unit 220 from the smart card 200, and the additional feature information generated in step S205 is received. Comparing and determining whether this information matches the list (S211), if there is matching information, the procedure is stopped, if there is no matching information, the authentication terminal 100 from the smart card 200 to the first storage unit 210; Receive the stored reference feature information and compare and determine whether it matches the bio-feature information generated in step S203 (S213), and if the match is determined, the generated additional feature information (valid additional feature information) smart card ( In operation S215, the control unit 200 transmits the information to the feature information list of the second storage unit 220 and transmits the information to the feature information list of the second storage unit 220.

Since the procedure after step S215 will be similar or the same as the conventional authentication procedure, description thereof will be omitted.

According to the present invention as described above, it is possible to prevent illegal theft of biometric information, and to increase the reliability of biometric authentication.

As described above and described with reference to a preferred embodiment for illustrating the technical idea of the present invention, the present invention is not limited to the configuration and operation as shown and described as such, it departs from the scope of the technical idea It will be apparent to those skilled in the art that many modifications and variations can be made to the present invention without this. Accordingly, all such suitable changes and modifications and equivalents should be considered to be within the scope of the present invention.

Claims (16)

Based on the biometric information of the user received from the biometric information reader 10, and generated as a result value of a calculation, such as CRC or hash or partial information of the biometric information based on the biometric information Authentication terminal 100 for transmitting the additional feature information to the smart card connected to the card reader 20; And If the additional feature information does not match the information of the previously stored feature information list, compare the bio-feature information with the previously stored reference feature information, and if so, accumulate the additional feature information in a list form. Smart card 200 for transmitting the authentication result information according to the authentication terminal 100; Biometric authentication system using a smart card comprising a. The method according to claim 1, The authentication terminal 100 generates time information when receiving biometric information from the biometric information reader 10, The smart card 200 receives the time information and transmits the authentication result information including an error message to the authentication terminal 100 when the time information is earlier than the previously stored time information. Biometric authentication system using a smart card, characterized in that for storing information. The method according to claim 1, The authentication terminal 100, A biometric feature information generating unit 110 generating biometric feature information composed of a plurality of feature values from the biometric information; An additional feature information generator 120 for generating additional feature information based on the bio feature information; And A controller 140 for controlling them; Biometric authentication system using a smart card comprising a. The method according to claim 3, The authentication terminal 100, A time information generator 130 generating time information at the time of obtaining the biometric information based on a standard time (GMT) or a local time; Biometric authentication system using a smart card, characterized in that it further comprises. The method according to claim 1, The smart card 200, A first storage unit 210 for storing reference feature information which is biometric feature information when issuing a smart card; A second storage unit 220 accumulating valid additional feature information in a list format; And Comparing the additional feature information transmitted from the authentication terminal 100 with the accumulated additional feature information of the second storage unit, and if it does not match, the biological feature information transmitted from the authentication terminal 100 is the first storage unit. A feature information comparison determination unit (C) for comparing and determining whether or not conformity with the standard feature information and generating authentication result information according thereto; And A control unit 230 for controlling them; Biometric authentication system using a smart card comprising a. The method according to claim 5, The feature information comparison determination unit (C), If the time information received from the authentication terminal 100 is not the previous value than the pre-stored time information, the biometric authentication system using a smart card, characterized in that for storing the received time information in the second storage unit 220 . An authentication terminal 100 connected to the biometric information reader 10 and the card reader 20 that reads the biometric information of the user, and generates biometric information composed of a plurality of feature values based on the biometric information; As a biometric authentication method using the smart card 200 connected to the card reader 20, The authentication terminal 100 receives biometric information to generate biometric information, and generates additional feature information including a result value of a calculation such as CRC or hash or partial information of the biometric information based on the biometric information. Generating and transmitting the smart card to the smart card 200; The smart card 200 compares and determines whether the received additional feature information matches the accumulated additional feature information, and if so, stops the authentication process and displays authentication result information including an error message. A second process of transmitting to 100); And If the determination result of the second process does not match, the smart card 200 compares and judges whether the received bio-feature information matches the pre-stored reference feature information, and if so, the received additional feature information. A third step of accumulating in a list format and transmitting the authentication result information to the authentication terminal 100 accordingly; Biometric authentication method using a smart card comprising a. The method according to claim 7, The authentication terminal 100 of the first process further includes the step of receiving biometric information and simultaneously generating time information, and converting the generated time information into the smart card 200 together with the biometric information and the additional feature information. Send, The smart card 200 of the second process determines whether the received time information has a value earlier than the previously stored time information before comparing and determining the received additional feature information. If it stops the authentication process and transmits the authentication result information including the error message to the authentication terminal 100, and if not the previous value biometric authentication method using a smart card, characterized in that for storing the received time information . The method according to claim 7, The additional feature information is a biometric authentication method using a smart card, characterized in that composed of some information of the bio-feature information. An authentication terminal 100 connected to the biometric information reader 10 and the card reader 20 that reads the biometric information of the user, and generates biometric information composed of a plurality of feature values based on the biometric information; As a biometric authentication system consisting of a smart card 200 connected to the card reader 20, The authentication terminal 100 generates additional feature information consisting of a result value of a calculation such as a CRC or a hash or some information of the bio feature information based on the bio feature information. The authentication terminal 100 receives the accumulated additional feature information from the smart card 200, compares and determines whether it matches with the generated additional feature information, and if so, stops the authentication process, and if it does not match Receiving the standard feature information from the smart card to determine whether it matches the bio-feature information, if it matches, the generated additional feature information is stored in the smart card 200 in the form of a list of the living body using a smart card Authentication system. The method according to claim 10, The authentication terminal 100 generates time information when receiving biometric information from the biometric information reader 10, receives pre-stored time information from the smart card 200, and stores the generated time information in the pre-stored time. If the value is earlier than the information, the authentication process is stopped, and if it is not the previous value, the biometric authentication system using the smart card, characterized in that for storing the generated time information in the smart card (200). The method according to claim 10, The authentication terminal 100, Biometric feature information generating unit 110 for generating biometric feature information from the biometric information; An additional feature information generator 120 for generating additional feature information based on the bio feature information; Comparing whether the accumulated additional feature information received from the smart card 200 and the generated additional feature information match, stops the authentication procedure and generates an error message if there is a match. Receives the pre-stored reference biometric information from the card to compare and determine whether it matches the generated biometric information, and if it matches, accumulates the generated additional feature information in the smart card 200 in a list format. Information comparison determination unit (C); And A control unit 130 for controlling them; Biometric authentication system using a smart card comprising a. The method according to claim 12, The authentication terminal 100 includes a time information generation unit 130 for generating time information at the time of obtaining biometric information based on a standard time (GMT) or a local time; More, The feature information comparing and determining unit C stops the authentication process if the generated time information is earlier than the pre-stored time information received from the smart card 200, and if not the previous value, the generated time information is read. Biometric authentication system using a smart card, characterized in that stored in the smart card (200). A biometric authentication method using a biometric information reader 10 for reading a user's biometric information, an authentication terminal 100 connected with a card reader 20, and a smart card 200 connected with the card reader, The authentication terminal 100 receives biometric information to generate biometric information, and generates additional feature information including a result value of a calculation such as CRC or hash or partial information of the biometric information based on the biometric information. Generating a first process; A second step of receiving, by the authentication terminal 100, the additional feature information accumulated from the smart card 200 and comparing and determining whether the authentication feature matches the generated additional feature information, and stopping the authentication procedure if it matches; And As a result of the determination of the first process, if it does not match, the authentication terminal 100 receives the pre-stored reference feature information from the smart card 200, compares and determines whether it matches the bio-feature information, and if it matches, A third step of the authentication terminal 100 accumulating the generated additional feature information in the smart card 200 in a list format; Biometric authentication method using a smart card comprising a. The method according to claim 14, The authentication terminal 100 of the first process further includes generating biometric information and time information at the same time. The authentication terminal 100 of the second process determines whether the generated time information has a value earlier than previously stored time information of the smart card 200 before comparing and determining additional feature information. If the previous value, the authentication process is stopped, and if not the previous value biometric authentication method using a smart card, characterized in that for storing the generated time information in the smart card (200). The method according to claim 14, The additional feature information is a biometric authentication method using a smart card, characterized in that composed of some information of the bio-feature information.

Images