KR100974814B1 - Method for Authenticating a Living Body Doubly - Google Patents

Abstract

The present invention relates to a dual biometric authentication method, comprising: performing first biometric authentication by matching first biometric information provided from a user with first biometric information of a user previously stored in a first storage medium; As a result of biometric information authentication, if the first biometric information provided from the user and the first biometric information stored in the first storage medium are matched and authenticated, the second biometric information provided from the user is stored in the second biometric information of the user. Providing the second storage medium operating means.

Dual, biometric, authentication

Description

Two-factor biometric authentication method

Figure 1 extracts the first biometric information and the second biometric information of the biometric authentication customer, and generates the first biometric information and the second biometric information, etc. according to the biometric authentication interworking conditions, the first storage medium and the second storage medium Simple diagram of a biometric information registration system to store in.

2 is a simple flowchart illustrating a process of storing first biometric information and second biometric information in a first storage medium and a second storage medium through a biometric information registration system.

FIG. 3 is a simplified diagram of a dual biometric authentication system comprising a first storage medium possessed by a biometric customer, a second storage medium present on the network, and one biometric authentication unit.

4 is a simplified diagram of a dual biometric authentication system consisting of a second storage medium possessed by a biometric customer, a first storage medium present on the network, and one biometric authentication unit.

FIG. 5 is a simplified diagram of a dual biometric authentication system comprising a first storage medium possessed by a biometric customer, a second storage medium present on the network, and two biometric authentication units.

FIG. 6 is a simplified diagram of a dual biometric authentication system comprising a second storage medium possessed by a biometric customer, a first storage medium present on the network, and two biometric authentication units.

7 is a simple flow diagram for a dual biometric authentication process.

<Description of main parts of drawing>

100: biometric information registration system 105: biometric authentication information generation unit

110: biometric authentication interworking conditions D / B 115: biometric authentication information processing unit

120: first biometric information extraction unit 125: biometric information registration unit

130: second biometric information extraction unit 135: biometric authentication service provider

140: first storage medium 145: first biometric information

150: second storage medium 155: second biometric information

160: biometric customer

According to the present invention, a first biometric information authentication is performed by matching first biometric information provided from a user with first biometric information of a user previously stored in a first storage medium, the first biometric information authentication result, and When the first biometric information received and the first biometric information stored in the first storage medium are matched and authenticated, the second biometric information provided from the user is transferred to the second storage medium operating means previously stored in the user's second biometric information. It relates to a dual biometric authentication method comprising the step of providing.

Biometric authentication is an automated means of verifying and verifying the identity of each person by measuring each person's physiological and / or behavioral characteristics. Fingerprints, hand shapes, iris recognition, voice verification, face Recognition, signature verification, retinal recognition, keyboard input features, palm prints, veins, and DNA.

Such biometric authentication has almost no risk of loss, theft, oblivion, or duplication due to external factors, and has features and advantages that enable tracking of security breaches.

However, existing biometric authentication stores the biometric information of the biometric customer in a specific storage medium (eg, a server on a network) of the biometric service provider, thereby exploiting biometric information and data, tracking biometric customer activity, and privacy. Due to the infringement of the, despite the many features and advantages of the above-mentioned biometric authentication has not been activated.

Therefore, recently, in order to overcome the problems of the existing biometric authentication, a method of storing biometric information of a biometric authentication customer in a storage medium (for example, an IC chip card) that can be carried by the customer has been proposed.

However, since the biometric authentication method is performed by the biometric authentication unit mounted in the terminal device, the biometric service provider does not directly participate in the biometric authentication process, and if the terminal device is abused, the biometric authentication service There is a problem that providers have to doubt the integrity of biometric authentication.

Recently, a method of dividing biometric information of a biometric authentication customer, storing some of the biometric information in a storage medium possessed by the biometric authentication customer, and storing the rest in a storage medium of the biometric authentication service provider has been proposed. Application No.:10-2001-0047576)

However, the biometric authentication method as described above also has a problem that the biometric authentication service provider does not directly participate in the biometric authentication process to doubt the integrity of the biometric authentication when the location where the divided biometric information is combined and authenticated is realized in the terminal device. Is still present, and if the location where the divided biometric information is combined and authenticated is realized at the server of the biometric authentication service provider, problems such as the possibility of abuse of the biometric information and data cannot be solved at the source.

An object of the present invention to solve the above problems, the first biometric information provided from the user and matching the first biometric information of the user previously stored in the first storage medium and performing the first biometric information authentication, As a result of the first biometric information authentication, if the first biometric information provided from the user and the first biometric information stored in the first storage medium are matched and authenticated, the second biometric information provided from the user is converted to the second biometric information of the user. It provides a dual biometric authentication method comprising the step of providing to the stored second storage medium operating means.

The dual biometric authentication method according to the present invention comprises the steps of: performing first biometric information authentication by matching first biometric information provided from a user with first biometric information of a user previously stored in a first storage medium; As a result of the information authentication, if the first biometric information provided from the user and the first biometric information stored in the first storage medium are matched and authenticated, the second biometric information provided from the user is stored in the second biometric information of the user. Providing to the storage medium operating means.

According to the present invention, the dual biometric authentication method, by matching the second biometric information of the user and the second biometric information of the user previously stored in the second storage medium in the second storage medium operating means, the user's second Characterized in that it further comprises the step of performing biometric information authentication.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to a user's or operator's intention or custom. Therefore, the definition should be based on the contents throughout the present title.

In addition, although the present invention deals with dual biometric authentication using the first biometric authentication and the second biometric authentication, those with ordinary knowledge in the technical field to which the present invention belongs may have a triple, quadruple, and fold It can be clearly appreciated that it can be extended to multiple biometric authentication, which is expanded to, for example, but it is omitted in the present invention because such an extension process may obscure the gist of the present invention.

1 extracts the first biometric information and the second biometric information of the biometric customer 160 and generates the first biometric information 145 and the second biometric information 155 according to the biometric authentication interworking conditions. The biometric information registration system 100 is stored in the first storage medium 140 and the second storage medium 150.

Referring to FIG. 1, the biometric information registration system 100 cooperates with the biometric information generation unit 105 to register a biometric information of a biometric customer 160 (eg, biometric information type selection and / or biometric authentication interworking information). The biometric information registration unit 125 for controlling and / or managing the determination), the at least one biometric information extraction unit 305 capable of extracting at least two or more biometric information from the biometric authentication customer 160, and The extracted at least two pieces of biometric information are generated in the first storage medium 140 and the second storage medium 155 by generating the first biometric information 145 and the second biometric information 155 through a biometric authentication interworking condition. The biometric information registration system 100 stores the biometric information registration system 100. The biometric information registration system 100 generates the biometric information registration system 100 using the first storage medium 140 and the second storage medium 155, respectively. Biometric authentication To be saved.

The biometric information registration unit 125 is a biometric registration system 100 that the biometric authentication service provider 135 provides to the biometric authentication customer 160 for biometric information registration, and is installed in a store of the biometric authentication service provider 135, Or installed at a location accessible to the biometric information generation unit through at least one or more network devices including the Internet.

The biometric information registration unit 125 provides the biometric information generation unit 105 with information for selecting the biometric information type and / or information for determining the biometric authentication interworking condition provided by the biometric information generation unit 105. And a function of controlling and / or managing the at least one biometric information extraction unit 305, and a function of notifying at least one or more information generated during the biometric information registration process to the biometric customer 160, and the like. To perform.

The biometric information extraction unit 305 is an apparatus and / or system capable of extracting at least one or more biometric information from biometric information of the biometric customer 160 through biometrics, and controls and / or the biometric information registration unit 125. Or it receives the management, and extracts the biometric information of the biometric authentication customer 160 and serves to provide to the biometric authentication information generation unit 105.

It is apparent that the number, function, and features of the biometric information extraction unit 305 depend on the type and feature of biometric information extracted from the biometric customer 160. For example, if the first biometric information extracted from the biometric customer 160 is a right thumb thumb, and the second biometric information is a left thumb thumb, the biometric information extractor 305 may include one fingerprint information extraction device and / or Or as a system. In addition, if the first biometric information extracted from the biometric customer 160 is a right hand fingerprint and the second biometric information is a right iris, the biometric information extraction unit 305 may use one fingerprint information extraction device and / or system (= The first biometric information extraction unit 305 and one iris information extraction device and / or system may be used.

The biometric authentication information generation unit 105 may be configured to at least one biometric authentication linkage condition (for example, the first biometric information 145) determined by the biometric customer 160 through the biometric information registration unit 125. Biometric authentication using the encryption key inputted by the user) using a biometric authentication interworking condition, or a specific matrix of the first biometric information extracted from the first biometric information 145 using the biometric authentication interworking condition). The biometric authentication information processing unit 115 for generating the first biometric authentication information 145 and the second biometric authentication information 155 based on the interlocking condition D / B 110 and the biometric authentication interlocking conditions determined as described above. It consists of.

The biometric authentication interworking condition D / B 110 of the biometric information generating unit 105 includes at least one biometric authentication interlocking condition for interlocking the first biometric information 145 and the second biometric information 155. As a D / B, a relationship between the first biometric information 145 and the second biometric information 155 and a rule for interworking with the first biometric information 145 and the second biometric information 155 may be used. Is stored. When the biometric customer 160 determines at least one biometric authentication interlock condition stored in the biometric authentication interlock condition D / B 110 through the biometric information registration unit 125, the biometric information processing unit 115 determines the biometric information. The first biometric information 145 and the second biometric information 155 are generated by interlocking the first biometric information and the second biometric information acquired from the at least one biometric information extraction unit 305 based on the authentication interlocking condition. do.

The biometric information processing unit 115 of the biometric information generating unit 105 may be obtained from at least one biometric information extracting unit 305 based on at least one biometric authentication interworking condition determined by the biometric customer 160. The first biometric information 145 and the second biometric information 155 are generated by interlocking the first biometric information with the second biometric information, and the biometric authentication information processing unit 115 processes and generates the first biometric information. The first biometric information 145 is stored in the first storage medium 140, and the second biometric information 155 is stored in the second storage medium 155.

The first storage medium 140 and the second storage medium 155 are at least one storage medium that can be carried and / or carried by the biometric customer 160 and at least one or more operated by the biometric service provider 135. The first storage medium 140 and the second storage medium 155 are not duplicated. For example, if the first storage medium 140 is selected as at least one storage medium that can be carried and / or carried by the biometric customer 160, the second storage medium 150 can be configured by the biometric service provider 135. When the second storage medium 150 is selected from at least one biometric server operated by the biometric service provider 135, the first storage medium 140 may be biometric. The authentication customer 160 is selected as at least one storage medium that may be carried and / or portable.

2 illustrates a process of storing the first biometric information 145 and the second biometric information 155 in the first storage medium 140 and the second storage medium 150 through the biometric information registration system 100. Here is a simple flow chart.

The biometric customer 160 generates the biometric authentication information through the biometric information registration unit 125 and types of the first biometric information and the second biometric information to be stored in the first storage medium 140 and the second storage medium 150. A method of storing biometric information generated from the biometric information (eg, the first biometric information 145 is stored in a storage medium possessed by the biometric customer 160, and the second biometric information 155 is stored on a network. Server) and the first biometric information 145 and the second biometric information 155 through the biometric authentication interworking condition D / B 110 of the biometric information generation unit 105. By determining the interworking condition of 205, the biometric information registration process proposed by the present invention is started.

Through the above process, the type and storage method of the first biometric information and the second biometric information are selected, and a biometric authentication interworking condition for interlocking the first biometric information 145 and the second biometric information 155 is determined. When the biometric information generation unit 105 requests the biometric authentication customer 160 to register the first biometric information through the biometric information registration unit 125, the biometric authentication customer 160 requests the first biometric information extraction unit ( The first biometric information is extracted through the 120 and transferred to the biometric information generation unit 105 (210).

When the first biometric information of the biometric authentication customer 160 is extracted from the first biometric information extraction unit 120 as described above, the biometric authentication information generation unit 105 authenticates the validity of the first biometric information. The validity of the first biometric information is that the authentication confirms whether the biometric information is unique to the invariant and / or biometric customer 160 whose identity can be identified through biometrics, and that the extracted biometric information is It is to check whether it can be used repeatedly in the biometric authentication process of the present invention.

If the validity of the first biometric information is not authenticated in the process (215), the biometric authentication information generation unit 105 notifies the first biometric information to be extracted again through the biometric information registration unit 125, and the biometric authentication customer. 160 repeats the first biometric information registration process as described above.

On the other hand, if the validity of the first biometric information is authenticated in the process (220), the biometric information generating unit 105 processes the first biometric information through the biometric information processing unit 115 (225). In the preferred embodiment of the present invention, the process of processing the first biometric information extracted from the first biometric information extraction unit 120 by the biometric authentication information generator 105 may include the first biometric information extracted as described above (eg, Biometric information in the form of images) in the form of binary data (eg, matrix form).

When the process of extracting the first biometric information is completed as described above, the biometric authentication information generation unit 105 requests the biometric authentication customer 160 to register the second biometric information through the biometric information registration unit 125 and performs biometric authentication. The customer 160 extracts the second biometric information through the second biometric information extraction unit 130 and transmits the second biometric information to the biometric authentication information generation unit 105 (230).

When the second biometric information of the biometric authentication customer 160 is extracted from the second biometric information extraction unit 130 as described above, the biometric authentication information generation unit 105 authenticates the validity of the second biometric information. The validity of the second biometric information is that the authentication confirms whether the biometric information is unique to the invariant and / or biometric customer 160 whose identity can be identified through biometrics, and that the extracted biometric information is It is to check whether it can be used repeatedly in the biometric authentication process of the present invention.

If the validity of the second biometric information is not authenticated in the process (235), the biometric authentication information generation unit 105 notifies the second biometric information to be extracted again through the biometric information registration unit 125, and the biometric authentication customer. 160 repeats the second biometric information registration process as described above.

On the other hand, if the validity of the second biometric information is authenticated in the process (240), the biometric information generating unit 105 processes the second biometric information through the biometric information processing unit 115 (245). In the preferred embodiment of the present invention, the process of processing the second biometric information extracted from the second biometric information extraction unit 130 by the biometric authentication information generator 105 may include the extracted first biometric information (eg, Biometric information in the form of images) in the form of binary data (eg, matrix form).

When both the first biometric information and the second biometric information are extracted from the biometric customer 160 through the above-described process, and encoded through a series of processing, the biometric authentication information generating unit 105 may include the biometric information processing unit. The biometric authentication linkage condition determined by the biometric authentication customer 160 is extracted from the biometric authentication linkage condition D / B 110 through 115, and the first biometric information and the first biometric information and the first biometric information are based on the extracted biometric linkage condition. In operation 250, the first biometric authentication information 145 and the second biometric authentication information 155 are generated by interlocking the biometric information.

When the biometric information processing unit 115 generates the first biometric information 145 and the second biometric information 155 to which the biometric authentication interworking conditions are applied, the biometric information generating unit 105 performs the first biometric authentication. The information 145 is stored in the first storage medium 140 selected by the biometric customer 160 (255), and the second storage medium 150 selected by the biometric customer 160 in the second biometric information 155 is selected. (260).

Through the above process, the biometric information generation unit 105 normally stores the first biometric information 145 in the first storage medium 140, and the second biometric information ( If the 155 is stored normally, the biometric information generation unit 105 processes and / or generates at least two or more biometric information extracted from the biometric customer 160 and biometric information into biometric information for generating biometric information. In operation 265, all the information generated in the process is deleted. As a result, the first biometric information 145 and the second biometric information stored in the first storage medium 140 and the second storage medium 150 may be the only means for authentication of the biometric customer 160. have.

Hereinafter, a preferred embodiment of the dual biometric authentication system according to the present invention will be described. However, the following implementation method is only for the preferred several of the various implementation methods that can be presented by the present invention, those skilled in the art to which the present invention belongs based on the dual biometric authentication system 3 It is clear that one can infer that it can be extended to multiple biometric authentication systems to which more than one biometric information is applied.

According to the present invention, the dual biometric authentication system extracts a first storage medium 140 in which first biometric information 145 is stored, and first biometric information 145 from the first storage medium 140. The first storage medium interface 310, the second storage medium 150 in which the second biometric information 155 is stored, and the second biometric information from the second storage medium 150. The second storage medium interface 315, which is a means for extracting 155, the first biometric information for performing the first biometric authentication and the second biometric information for the second biometric authentication, from the biometric customer 160; At least one biometric authentication that performs first biometric authentication and / or second biometric authentication through the biometric information extraction unit 305 to be extracted and the first biometric information 145 and the second biometric information 155. Characterized in that it comprises a portion 300.

3 illustrates a dual biometric authentication system including a first storage medium 140 possessed by a biometric customer 160, a second storage medium 150 existing on a network, and one biometric authentication unit 300. For a simple drawing.

3A illustrates a storage medium (eg, a portable IC chip, a wireless terminal, etc.) possessed by the biometric customer 160 as the first storage medium 140, and the storage medium on the network (eg, Using the biometric authentication information D / B mounted in the biometric authentication server operated by the biometric authentication service provider as the second storage medium, the first storage medium interface 310 (eg, the IC chip if the first storage medium is an IC chip) The terminal device) is equipped with the biometric information extraction unit 305, the biometric authentication unit 300 and the like.

In performing the first biometric authentication through (a) of FIG. 3, the biometric authentication unit 300 receives the first biometric information 145 from the first storage medium 140 through the first storage medium interface 310. Extract the first biometric information, extract the first biometric information from the biometric customer 160 through the biometric information extraction unit 305 linked with the first storage medium interface 310, and then perform the first biometric authentication. Conduct. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (a) of FIG. 3, the biometric authentication unit 300 receives the second biometric information 155 from the second storage medium through the second storage medium interface 315 on the network. Extract second biometric information from the second biometric information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (for example, 2) extract the second biometric information from the biometric authentication information 155, and extract the second biometric information from the biometric customer 160 through the biometric information extraction unit 305 interoperating with the first storage medium interface 310 Second biometric authentication is performed.

3B illustrates a storage medium (eg, a portable IC chip, a wireless terminal, etc.) possessed by the biometric customer 160 as the first storage medium 140, and a storage medium (eg, A biometric authentication server operated by a biometric authentication service provider is used as the second storage medium 150, and the biometric information is stored in the first storage medium interface 310 (e.g., an IC chip terminal device if the first storage medium is an IC chip). The extraction unit 305 is mounted, and the biometric authentication unit 300 or the like is mounted on the second storage medium interface 315 (eg, a biometric authentication server operated by a biometric authentication service provider).

In performing the first biometric authentication through (b) of FIG. 3, the biometric authentication unit 300 extracts the first biometric authentication information 145 from the first storage medium 140 through a network to display the first biometric information. Extract the first biometric information of the biometric authentication customer 160 from the biometric information extraction unit 305 linked to the first storage medium interface 310, the biometric authentication unit 300 determines the first biometric information. The first biometric authentication is performed based on these. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (b) of FIG. 3, the biometric authentication unit 300 receives the second biometric authentication information 155 from the second storage medium 150 through the second storage medium interface 315. Extract the second biometric information from the second biometric authentication information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (for example, encrypt the biometric authentication interworking condition as the decryption key). After extracting the second biometric information from the second biometric authentication information 155, the second biometric authentication customer 160 of the biometric authentication customer 160 from the biometric information extraction unit 305, which is linked to the first storage medium interface 310 via a network When the biometric information is extracted, the biometric information extraction unit 305 extracts the second biometric information from the biometric customer 160 and performs a second biometric based on the second biometric information.

3C illustrates a storage medium (eg, a portable IC chip, a wireless terminal, etc.) possessed by the biometric customer 160 as the first storage medium 140, and a storage medium (eg, A biometric authentication server operated by a biometric authentication service provider is used as the second storage medium 150, and the biometric information is stored in the first storage medium interface 310 (e.g., an IC chip terminal device if the first storage medium is an IC chip). The extraction unit 305 is mounted, and the biometric authentication unit 300 is mounted on a network (for example, a VAN).

In performing the first biometric authentication through (c) of FIG. 3, the biometric authentication unit 300 on the network uses the first biometric information (from the first storage medium 140 through the first storage medium interface 310). If the first biometric information of the biometric authentication customer 160 is extracted through the network from the biometric information extraction unit 305 interworking with the first storage medium interface 310, the biometric authentication unit 300 extracts the biometric authentication unit 300. First biometric authentication is performed based on the first biometric information. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (c) of FIG. 3, the biometric authentication unit 300 on the network extracts the second biometric information 155 from the second storage medium 150 through the network. Extracting second biometric information from the second biometric information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (eg, second biometric authentication encrypted using the biometric interlocking condition as a decryption key) After extracting the second biometric information from the information 155, the second biometric information of the biometric authentication customer 160 is extracted from the biometric information extraction unit 305, which is linked to the first storage medium interface 310 via a network. If so, the biometric authentication unit 300 on the network performs a second biometric authentication based on the second biometric information as described above.

4 is a simplified diagram of a dual biometric authentication system comprising a second storage medium possessed by a biometric customer 160, a first storage medium 140 present on a network, and one biometric authentication unit 300. Drawing.

In FIG. 4A, a storage medium on the network (eg, biometric authentication information D / B mounted on a biometric authentication server operated by a biometric authentication service provider) is used as the first storage medium 140, and a biometric customer ( If the storage medium (e.g., portable IC chip, wireless terminal, etc.) possessed by the 160 is used as the second storage medium, and the second storage medium interface 315 (e.g., the second storage medium is an IC chip), the IC chip The terminal device) is equipped with the biometric information extraction unit 305, the biometric authentication unit 300 and the like.

In performing the first biometric authentication through (a) of FIG. 4, when biometric authentication is started through the second storage medium interface 315, the biometric authentication unit 300 performs the first storage medium interface 310 on the network. First biometric information is extracted by extracting the first biometric information 145 from the first storage medium 140 through the biometric information extractor 305 linked to the second storage medium interface 315. The first biometric information is extracted from the authentication customer 160 to perform the first biometric authentication. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (a) of FIG. 4, the biometric authentication unit 300 receives the second biometric information 155 from the second storage medium 150 through the second storage medium interface 315. Extract the second biometric information from the second biometric authentication information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (for example, encrypt the biometric authentication interworking condition as the decryption key). Extracting the second biometric information from the second biometric information 155) and extracting the second biometric information from the biometric customer 160 through the biometric information extractor 305 linked to the second storage medium interface 315. To perform a second biometric authentication.

4B illustrates a storage medium on the network (eg, a biometric authentication server operated by a biometric authentication service provider) as the first storage medium 140 and possessed by the biometric customer 160. (E.g., a portable IC chip, a wireless terminal, etc.) is used as the second storage medium 150, and a living body is stored in the second storage medium interface 315 (e.g., an IC chip terminal device if the first storage medium is an IC chip). The information extraction unit 305 is mounted, and the biometric authentication unit 300 or the like is mounted on the first storage medium interface 310 (eg, a biometric authentication server operated by a biometric authentication service provider).

In performing the first biometric authentication through (b) of FIG. 4, if the biometric authentication is started through the second storage medium interface 315, the biometric authentication unit 300 uses the first storage medium interface 310. The first biometric information 145 is extracted from the first storage medium 140 to extract the first biometric information, and the biometric customer (from the biometric information extraction unit 305 interlocked with the second storage medium interface 315). When the first biometric information of 160 is extracted and transmitted through the network, the biometric authentication unit 300 performs a first biometric authentication based on the first biometric information. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (b) of FIG. 4, the biometric authentication unit 300 accesses the second storage medium interface 315 through a network to the second biometric authentication from the second storage medium 150. Extracting information 155 and extracting the second biometric information from the second biometric information 155 based on the biometric authentication linkage condition extracted in the first biometric authentication process (for example, decrypting the biometric linkage condition) Extracting the second biometric information from the second biometric information 155 encrypted using the key; and extracting the second biometric information from the biometric authentication customer 160 through the biometric information extraction unit 305 linked with the second storage medium interface 315. 2 biometric information is extracted to perform second biometric authentication.

4 (c) shows a storage medium (e.g., a biometric authentication server operated by a biometric service provider) as a first storage medium 140, and the storage medium owned by the biometric customer 160 (see FIG. For example, a portable IC chip, a wireless terminal, or the like is used as the first storage medium 140, and the biometric information is stored in the second storage medium interface 315 (e.g., an IC chip terminal device if the first storage medium is an IC chip). The extraction unit 305 is mounted, and the biometric authentication unit 300 is mounted on a network (for example, a VAN).

In performing biometric authentication through (C) of FIG. 4, if biometric authentication is started through the second storage medium interface 315, the biometric authentication unit 300 uses the first storage medium interface 310. The first biometric authentication information 145 is extracted from the first storage medium 140, and the biometric authentication information of the biometric customer 160 is transmitted through the network from the biometric information extraction unit 305 linked to the second storage medium interface 315. When the biometric information is extracted, the biometric authentication unit 300 performs a first biometric authentication based on the first biometric information. According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication.

In performing the second biometric authentication through (C) of FIG. 4, the biometric authentication unit 300 on the network extracts the second biometric information 155 from the second storage medium 150 through the network. Extracting the second biometric information from the second biometric authentication information 155 based on the biometric authentication interworking condition extracted in the first biometric authentication process (for example, the second biometric authentication information encrypted using the biometric interlocking condition as the decryption key). After extracting the second biometric information at 155, if the second biometric information of the biometric authentication customer 160 is extracted from the biometric information extraction unit 305 interworking with the second storage medium interface 315 through the network, the second biometric information is extracted. The biometric authentication unit 300 on the network performs the second biometric authentication based on the second biometric information.

5 is a simplified diagram of a dual biometric authentication system comprising a first storage medium 140 possessed by a biometric customer 160, a second storage medium present on a network, and two biometric authentication units 300. Drawing.

More specifically, FIG. 5 uses a storage medium (eg, a portable IC chip or a wireless terminal, etc.) possessed by the biometric customer 160 as the first storage medium 140, and uses a storage medium (eg, a biometric) on a network. If the biometric authentication information D / B mounted in the biometric authentication server operated by the authentication service provider is used as the second storage medium 150, and the first storage medium interface 310 (eg, the first storage medium is an IC chip) When the biometric information extraction unit 305, the first biometric authentication unit 500, and the like are mounted on the IC chip terminal device, and the second biometric authentication unit 505 is mounted on the second storage medium interface 315. It is about.

In performing the first biometric authentication through FIG. 5, the first biometric authentication unit 500 extracts the first biometric information 145 from the first storage medium 140 through the first storage medium interface 310. Extracts the first biometric information, extracts the first biometric information from the biometric customer 160 through the biometric information extraction unit 305 interworking with the first storage medium interface 310, and performs the first biometric authentication .

According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication. In addition, the biometric authentication interworking condition is transmitted to the second biometric authentication unit 505 through the network for the second biometric authentication.

Further, according to the present invention, in the transfer of the biometric authentication interworking condition from the first biometric authentication unit 500 to the second biometric authentication unit 505 as described above, the biometric authentication interworking condition is the first biometric authentication unit 500. And the second biometric authentication unit 505 is encrypted and securely transmitted through at least one or more security standards and encryption algorithms promised.

In addition, according to the present invention, in the transfer of the biometric authentication interworking condition from the first biometric authentication unit 500 to the second biometric authentication unit 505 as described above, various additional information (for example, credit) together with the biometric authentication interworking conditions Full card payment) can be delivered together.

In performing the second biometric authentication through FIG. 5, the second biometric authentication unit 505 extracts the second biometric information 155 from the second storage medium 150 through the second storage medium interface 315. The second biometric information is extracted from the second biometric information 155 based on the biometric authentication interworking condition transmitted after the first biometric authentication unit 300 performs the first biometric authentication, and the first storage medium. The second biometric information is extracted by extracting the second biometric information from the biometric customer 160 through the biometric information extraction unit 305 linked to the interface 310.

6 illustrates a dual biometric authentication system including a second storage medium 150 possessed by a biometric customer 160, a first storage medium 140 present on a network, and two biometric authentication units 300. For a simple drawing.

More specifically, FIG. 6 uses a storage medium on the network (eg, biometric authentication information D / B mounted in a biometric authentication server operated by a biometric service provider) as the first storage medium 140, and uses the biometric customer 160. Uses a storage medium (for example, a portable IC chip, a wireless terminal, etc.) possessed by the second storage medium, and the first biometric authentication unit 500 is mounted on the first storage medium interface 310. This is a case where the biometric information extraction unit, the second biometric authentication unit 505, and the like are mounted on the second storage medium interface 315 (for example, the IC chip terminal device if the first storage medium is an IC chip).

In performing the first biometric authentication through FIG. 6, the first biometric authentication unit 500 extracts the first biometric information 145 from the first storage medium 140 through the first storage medium interface 310. The first biometric information is extracted, and the first biometric information is extracted by extracting the first biometric information from the biometric customer 160 through the biometric information extraction unit linked to the second storage medium interface 315.

According to the present invention, a biometric authentication interworking condition is extracted in the first biometric authentication process, and the biometric authentication interlocking condition provides a means for performing a second biometric authentication. In addition, the biometric authentication interworking condition is transmitted to the second biometric authentication unit 505 through the network for the second biometric authentication.

Further, according to the present invention, in the transfer of the biometric authentication interworking condition from the first biometric authentication unit 500 to the second biometric authentication unit 505 as described above, the biometric authentication interworking condition is the first biometric authentication unit 500. ) Is encrypted and securely transmitted through at least one or more security standards and encryption algorithms promised between the second biometric authentication unit 505.

In addition, according to the present invention, in the transfer of the biometric authentication interworking condition from the first biometric authentication unit 500 to the second biometric authentication unit 505 as described above, various additional information (for example, credit) together with the biometric authentication interworking conditions Full card payment authorization) can be delivered together.

In performing the second biometric authentication through FIG. 6, the second biometric authentication unit 505 extracts the second biometric authentication information 155 from the second storage medium 150 through the second storage medium interface 315. The second biometric information is extracted from the second biometric information 155 based on the biometric authentication interworking condition transmitted after the first biometric unit 500 performs the first biometric authentication, and the second storage medium. The second biometric information is extracted by extracting the second biometric information from the biometric customer 160 through the biometric information extraction unit linked to the interface 315.

7 is a simple flow diagram for a dual biometric authentication process.

More specifically, FIG. 7 illustrates a common method of performing dual biometric authentication through a dual biometric authentication system such as FIGS. 3, 4, 5, and 6, and the like. Is omitted. However, it is apparent to those skilled in the art that the process of FIG. 7 can easily infer a specific method that is actually applied to FIGS. 3, 4, 5, and 6.

When the dual biometric authentication process according to the present invention is started, the biometric authentication unit 300 extracts the first biometric information 145 from the first storage medium 140 through the first storage medium interface 310 ( 700, the first biometric information of the biometric customer 160 stored in the first storage medium 140 is extracted through the biometric information registration process from the extracted first biometric information 145 (705). .

When the first biometric information 145 of the biometric customer 160 is extracted from the first biometric information 145 as described above, the biometric authentication unit 300 performs biometric authentication through the biometric information extraction unit 305. First biometric information of the same type as the first biometric information stored in the first storage medium 140 is extracted from the biometric information of the attempted biometric customer 160 (710).

As described above, when the first biometric information is extracted from the first biometric information 145 and the first biometric information is extracted from the biometric customer 160 through the biometric information extraction unit 305, the biometric authentication unit 300 is extracted. In step 715, first biometric authentication is performed based on the first biometric information.

If the first biometric authentication fails in the process (720), the biometric authentication unit 300 transmits the biometric authentication failure information to the biometric authentication service provider 135, and ends the dual biometric authentication process proposed by the present invention. (725).

On the other hand, if the first biometric authentication succeeds (730), the biometric authentication unit 300 generates a biometric authentication interworking condition generated from the first biometric authentication result as described above or included in the first biometric authentication information 145. Extract 735 and extract second biometric information 155 from the second storage medium 150 via the second storage medium interface 315 (740).

When the second biometric authentication information 155 is extracted from the second storage medium 150 as described above, the biometric authentication unit 300 performs the second biometric based on the biometric authentication interworking condition extracted in the first biometric authentication process. The second biometric information of the biometric customer 160 stored in the second storage medium is extracted from the authentication information 155 through the biometric information registration process (745).

As described above, when the second biometric authentication information 155 of the biometric authentication customer 160 is extracted from the second biometric authentication information 155 through the biometric authentication interworking condition, the biometric authentication unit 300 performs biometric information through the biometric information extraction unit. The second biometric information of the same type as the second biometric information stored in the second storage medium 150 is extracted from the biometric information of the biometric customer 160 attempting authentication (750).

As described above, when the second biometric information is extracted from the second biometric information 155, and the second biometric information is extracted from the biometric authentication customer 160 through the biometric information extracting unit, the biometric authentication unit 300 determines the first biometric information. Second biometric authentication is performed based on the biometric information (755).

If the second biometric authentication fails in the process (760), the biometric authentication unit 300 transmits the biometric authentication failure information to the biometric service provider 135, and ends the dual biometric authentication process proposed by the present invention. .

On the other hand, if the second biometric authentication succeeds (765), the biometric authentication unit 300 generates dual biometric authentication success information based on the first biometric authentication result and the second biometric authentication result as described above. 135, 770;

When the double biometric authentication success information is transmitted from the biometric authentication unit 300 as described above, the biometric authentication service provider 135 provides various additional services based on biometric authentication to the corresponding biometric authentication customer 160 (775). The type of supplementary service includes all kinds of services that the biometric authentication service can provide to the biometric authentication customer 160.

According to the present invention, a first storage medium for storing and managing first biometric information of a biometric customer, a second storage medium for storing and managing second biometric information of the biometric customer, and a second storage medium provided from the biometric customer The first biometric authentication is performed by matching the first biometric information with the first biometric information stored in the first storage medium, and the predetermined biometric authentication is interworked between the first biometric information and the second biometric information based on the first biometric authentication result. Extracting the condition information, extracting the second biometric information stored in the second storage medium using the bio-integrated condition information, and extracting the extracted second biometric information and the second biometric information provided from the biometric customer. A dual biometric authentication system for matching and performing second biometric authentication, and types of first biometric information and second biometric information for dual biometric authentication; Setting a biometric authentication interworking condition for interlocking the first and second biometric authentication information, acquiring the set first biometric information and the second biometric information from the biometric authentication customer, according to the set biometric authentication interlocking condition Generating the first biometric information and the second biometric information by interworking the first biometric information with the second biometric information, storing the first biometric information on a first storage medium, and performing the second biometric authentication. Storing the information in a second storage space, when the biometric authentication of the biometric authentication customer is performed, extracting the first biometric information from the first storage medium to generate first biometric information, and Extracting the biometric information to perform a first biometric authentication; and extracting a biometric authentication interworking condition from the first biometric authentication result and / or the first biometric information Extracting the second biometric information from the second storage medium to generate the second biometric information, and extracting the second biometric information of the biometric customer using the biometric authentication interworking condition and the second biometric authentication. By providing a dual biometric authentication method comprising the step of performing, there is an advantage that can solve the problems such as the possibility of exploitation of biometric information and data that has emerged previously.

Claims (2)

In the dual biometric authentication method of the first authentication device and the second authentication device connected through a communication network, The first authentication device stores the first biometric information of the user in a first storage medium, and receives the first biometric information matching the first biometric information stored in the first storage medium from the user. Authenticating the first biometric information in comparison with; When the first biometric information is authenticated, the first authentication device receives second biometric information from the user and stores second biometric information to be compared with the second biometric information on a second storage medium. Providing to the second authentication device; And The second authentication device receives the second biometric information from the first authentication device, and compares the received second biometric information with second biometric information stored in the second storage medium to perform the second biometric information. Dual biometric authentication method comprising the step of authenticating the information. delete

Images