KR101289969B1 - Apparatus and method for processing authentication - Google Patents

Abstract

The present invention relates to a user authentication processing technology, the authentication processing apparatus according to an embodiment of the present invention, authentication information storage unit for storing the authentication information for the combination of the key corresponding to the number of key input and the number of key input for each number of times And an input unit for receiving an authentication request from at least one key sequentially selected by the user, and an input time of the at least one selected key to determine an effective key corresponding to the number of key inputs and the number of key inputs for each number of times. A valid key determination unit, an authentication request information generation unit for generating authentication request information using a combination of the valid keys, and an authentication processing unit for processing authentication for the user by comparing the authentication request information with the authentication information Include. Accordingly, it is possible to reduce the damage caused by password hacking by increasing the number of attempts to hack passwords.

Description

Authentication processing apparatus and its method {APPARATUS AND METHOD FOR PROCESSING AUTHENTICATION}

The present invention relates to a technology for processing user authentication, and more particularly, to a technology for processing authentication request information into which a plurality of keys are input.

Among user authentication processing techniques, password (or password) techniques are authenticated by entering a password for the user's own ID for access control in a manner generally used in the client-server model. However, this method is vulnerable to password transmission exposure, password retransmission, and server authentication information attack. And if you want to perform a secret communication with the user has a problem such as the need to generate a separate key.

Password cracking is only part of the problem with passwords, because passwords themselves are a security problem. Most users today require multiple passwords, but can't remember them all. Thus, because a password is reused in many places, every password only has security for the weakest of the places it is used. If a third party learns one of a user's passwords, it is likely that the user tries to use that password elsewhere.

In addition, password technology is used for user authentication in daily life such as door locks and safes. The user sets and uses a password that only the user knows. However, the number of passwords that can be set by the user is limited, and third-party users can easily find out the password by using key button sounds that are generated by physically pressing the key buttons, or the relative worn state of the key buttons included in the password. There is a problem. In the related art, a technique of setting a key button sound as one thing and a technique of implementing a key button with a touch pad have been introduced, but security is still weak due to the simplicity of password combination. The background technology of the present invention is disclosed in Korean Unexamined Patent Publication No. 2011-0046004 (2011. 05. 04 publication).

SUMMARY OF THE INVENTION The present invention has been made in an effort to provide an authentication processing apparatus, an authentication processing method, and an authentication processing system for processing authentication for a password using a plurality of key inputs simultaneously input.

An authentication processing apparatus according to an embodiment of the present invention, the authentication information storage unit for storing the authentication information for the combination of the key corresponding to the number of key input and the number of key input for each number of times, and at least one sequentially selected by the user An input unit for receiving an authentication request from a key, a valid key determination unit for detecting an input time of the selected at least one key, and determining a valid key corresponding to the number of key inputs and the number of key inputs for each number of times; An authentication request information generation unit for generating authentication request information using a combination, and an authentication processing unit for processing the authentication for the user by comparing the authentication request information and the authentication information.

In addition, when a plurality of keys are selected at the same time, the valid key determining unit compares the time between a key selected last among the plurality of keys and a key deselected first among the plurality of keys with a preset valid time, The key for which the key selection is maintained for the validity time may be determined as the valid key.

The apparatus may further include a normalization unit for normalizing the generated authentication request information in ascending or descending order.

The apparatus may further include an encryption unit for encrypting the generated authentication request information with a one-way function and transmitting the encrypted authentication request information to the authentication processing unit. The authentication processing unit may decrypt the encrypted authentication request information.

The display apparatus may further include a display unit which displays the authentication processing result of the authentication processing unit by voice or video.

In the authentication processing method according to an embodiment of the present invention, receiving an authentication request from at least one key sequentially selected by a user, and detecting an input time of the selected at least one key, the number and number of key inputs Determining a valid key corresponding to the number of key inputs for each key; generating authentication request information by using the combination of the valid keys; and corresponding to the predetermined number of key inputs and the number of key inputs for each number of times. And processing authentication for the user in comparison with authentication information for a combination of keys.

Such an authentication processing apparatus and an authentication processing method according to the present invention increases the number of attempted attempts to hack passwords by processing authentication for passwords using a plurality of key inputs simultaneously, thereby preventing damages caused by password hacking. Can be reduced.

1 is a block diagram of an authentication processing device according to an embodiment of the present invention;
2 is a flow chart of an authentication processing method according to another embodiment of the present invention;
FIG. 3 is an exemplary diagram for describing inputting a plurality of keys simultaneously in the input unit according to FIG. 1.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. The terms used are terms selected in consideration of the functions in the embodiments, and the meaning of the terms may vary depending on the user, the intention or the precedent of the operator, and the like. Therefore, the meaning of the terms used in the embodiments to be described later, according to the definition when specifically defined herein, and if there is no specific definition should be interpreted as meaning generally recognized by those skilled in the art.

1 is a block diagram of an authentication processing apparatus according to an embodiment of the present invention, Figure 2 is a flow chart of the authentication processing method according to FIG.

1 and 2, the authentication processing apparatus 100 includes an authentication information storage unit 110, an input unit 120, a valid key determination unit 130, an authentication request information generation unit 140, and an authentication processing unit 150. ), A normalization unit 160, an encryption unit 170, and a display unit 180. The authentication information storage unit 110 is a store in which authentication information set in advance in the authentication processing apparatus 100 is stored. The authentication information includes key combination number and key combination information corresponding to the number of key inputs. The authentication information refers to a password, password, password, and identification code collectively including at least one of symbols, letters, and numbers.

Here, the number of key inputs refers to the number of key inputs input at preset time intervals. For example, if the authentication information is ([1], [2], [3], [4]), a total of four key inputs are required. The number of key inputs per number means the number of key inputs that can be input for each number. For example, if the authentication information is ([1], [2, 3, 4], [5, 9], [4]), the number of keystrokes is four, and one keystroke is It can be seen that, in the second time, three key inputs are set, in the third time, two key inputs are set, and in the fourth time, one key input is set. The authentication information refers to a combination of keys corresponding to the number of key inputs and the number of key inputs for each number.

The input unit 120 includes an input device such as a touch pad and a keyboard, and receives an authentication request from at least one key sequentially selected by the user (S200). In this case, when the input unit 120 is a touch pad, both a pressure sensitive and a capacitive touch pad can be used. The input unit 120 may receive at least one of a symbol, a letter, and a number, and in this case, may receive a plurality of key inputs. That is, a plurality of keys may be selected and input at one time of input. In addition, the input unit 120 may be configured in the form of a piano keyboard. In this case, the unique key information corresponding to each key may be set in the piano keyboard, or the unique sound information may be set. For example, when the user selects a plurality of keys at the same time, a unique sound corresponding to each key is generated, and each sound is combined to generate new sound information. The authentication processing apparatus 100 may determine the authentication request information by analyzing the frequency of the sound information generated by the input unit 120. Hereinafter, with reference to FIG. 3, a user will simultaneously input a plurality of keys.

FIG. 3 is an exemplary diagram for describing inputting a plurality of keys simultaneously in the input unit according to FIG. 1.

Referring to FIG. 3, for example, when the input unit 120 is configured with ten keypads consisting of '0' through '9' and '12' consisting of '*' and '#', authentication information ([1 ], [0, 5, 6], [3, 4], [8]), the second number of key inputs must enter the numbers '0', '5' and '6' simultaneously. The input unit 120 may recognize a plurality of key inputs at the same time. In this case, three key inputs input at a second time are recognized as [0, 5, 6]. The user can select multiple keys at the same time using one or both hands. For example, if you have a long keyboard, such as a keyboard, you can select multiple keys at the same time using both hands.In the case of a relatively small portable terminal such as a mobile phone, selecting multiple keys at the same time is one hand. It is possible.

Referring back to FIGS. 1 and 2, next, the valid key determination unit 130 detects an input time of at least one key selected from the input unit 120, and thus corresponds to the number of key inputs and the number of key inputs for each number of times. The key is determined (S210). In this case, the key input time means a reference time for determining the number of key inputs and the number of key inputs for each number, and the valid key means a determined key input. Since the input unit 120 can recognize a plurality of key inputs at the same time, it is necessary to distinguish whether the key input selected by the user is a different number of inputs or a plurality of key inputs within the same number of times. For example, the key input received from the input unit 120 is (5, 3, 2, 1, 9, 8, 4), and the authentication information stored in the authentication information storage unit 110 is ([5], [3]. , 2, 1], [9], [8, 4]), the user inputs all the key information included in the authentication information, but the key input is ([5, 3] ], [2, 1, 9], [8], [4]), and thus authentication fails.

Specifically, the valid key determination unit 130 may determine the valid key in the following manner. When a plurality of keys are selected at the same time, the valid key determination unit 130 compares the time between the latest selected key among the plurality of keys and the first deselected key among the plurality of keys with a preset valid time, The key for which key selection is maintained is determined as a valid key. For example, a valid key according to a key input time of a key selected in FIG. 3 will be described with reference to Table 1 below.

t1 t2 t3 t4 t5 t6 t7 t8 0 ─ ─ ─ ─ ─ 5 ─ ─ ─ ─ ─ 6 ─ ─ ─ ─ ─ ─

In Table 1, the vertical axis (0, 5, 6) means the key, the horizontal axis (t1 ~ t8) means the time for each section, '-' means that the key is selected in the section. In this case, key input [0] was selected for t1 to t5, key input [5] was selected for t2 to t6, and key input [6] was selected for t3 to t8. The valid key determination unit 130 compares the time between 't3 to t5', which is the time between the last selected key input [6] and the first deselected key input [0], to a preset valid time. If the valid time is less than or equal to the 't3 ~ t5' time, the key input entered in the same number is recognized as ([0, 5, 6]), and the valid time is greater than the 't3 ~ t5' time, and the 't2 ~' If t5 'is equal, the key input entered the same number of times is recognized as ([0, 5]). The valid key determination unit 130 outputs the determined valid key to the authentication request information generation unit 140.

Next, the authentication request information generation unit 140 generates authentication request information by using a combination of valid keys determined by the valid key determination unit 130 (S220). The authentication request information is final key input information recognized according to a user's key input, and refers to information compared with authentication information stored in the authentication information storage unit 110. For example, in the valid key determination unit 130, the first time the key input [5], the second time the key input [3, 2, 1], the third time the key input [9], the fourth time If the key input [8, 4] is determined to be a valid key, the authentication request information generation unit 140 lists ([5], [3, 2, 1], [9], [8, 4]) as one list. Combination to generate the authentication request information. The authentication request information generating unit 140 outputs the generated authentication request information to the authentication processing unit 150.

Next, the authentication processing unit 150 compares the authentication request information input from the authentication request information generation unit 140 with the authentication information stored in the authentication information storage unit 110 to process authentication for the key input user (S230). . The authentication processor 150 analyzes the number of key inputs and the number of key inputs for each number of authentication request information, and analyzes the combination data of the corresponding keys to determine whether they match the authentication information. For example, the authentication information is the number of key inputs four times, one input once, three inputs twice, two inputs three times, and one key input four times, each time The key data can be set to [1] once, [5, 6, 9] twice, [4, 6] three times, and [3] four times. In this case, the authentication request information does not match the number of key inputs as ([1], [5, 6], [9, 4, 6, 3]), or ([1], [5, 6], [ 9, 4, 6] and [3]), if the number of key inputs per number does not match, authentication may not be allowed without comparing key data.

Meanwhile, the authentication processing apparatus 100 of the present invention may further include a normalization unit 160. The normalization unit 160 is connected to the authentication request information generation unit 140 and the authentication processing unit 150, and normalizes the authentication request information generated from the authentication request information generation unit 140 in ascending or descending order, so as to authenticate the authentication processing unit 150. Will output When the key inputs input to the input unit 120 are a plurality of key inputs selected at the same time, the order of the key data input at the same number of times may vary depending on the case. For example, when [5, 7, 8] of the authentication information is set to be selected at the same time, the user's key selection may be input in the order of [5, 8, 7] or [8, 7, 5]. . Even if the user presses at the same time, if you press several keys at the same time, there is a time difference between them. Accordingly, the normalization unit 160 sorts the key input data input in the corresponding number in ascending or descending order. In the above example, even if the user inputs in the order of [8, 7, 5] and normalizes in ascending order, the data of [5, 7, 8] is recognized as input.

On the other hand, the authentication processing apparatus 100 of the present invention may further include an encryption unit 170. The encryption unit 170 is connected to the authentication request information generating unit 140 and the authentication processing unit 150, and encrypts the authentication request information generated by the authentication request information generating unit 140 in one-way function to the authentication processing unit 150. Will be sent. In this case, the authentication processor 150 may decrypt the encrypted authentication request information. A one-way function is a function that is easy to compute but hard to find. In other words, it is a difficult function to get the input given the result. Public key cryptography has a one-way function, with only a few exceptions.

One-way functions usually use the Data Encryption Standard (DES) algorithm. DES can be thought of as a function that outputs 8 bytes of ciphertext when 8 bytes of data and 8 bytes of key are input. In general, the encryption algorithm can be used as a one-way function. When using DES as a one-way function, a predetermined constant is encrypted using a password as a key and the result is stored in a password file. For example, on a UNIX system, there is a file called / etc / passwd that contains the password and all the information the system needs for each user. You can access the / etc / passwd file, but the password part of the file's contents is handled by crypt, which is a one-way function, making it almost impossible to decrypt even after reading it.

In addition, the encryption unit stores the authentication information in an external server connected to the network by the authentication processing device 100 of the present invention, and in case of authentication processing to prepare for hacking that may occur during the process of transmitting the authentication request information to the network. Can be encrypted.

Meanwhile, the authentication processing apparatus 100 of the present invention may further include a display unit 180. The display unit 180 is connected to the authentication processing unit 150 to display an authentication process result by voice or video. For example, when the authentication request information according to the key input input by the user does not match the authentication information, a warning sound may be generated, a re-entry guide voice message may be generated, or a re-input text message may be generated. In addition, it is also possible to provide an integrated sound message, voice message, text message. Thus, the user can easily determine whether his key input is successful.

The authentication processing apparatus 100 of the present invention may be combined with a fingerprint recognition device, an iris recognition device, a voice recognition device, an RF tag recognition device, or the like. For example, where enhanced security is required, in addition to the fingerprint recognition device, the iris recognition device, the voice recognition device, and the RF tag recognition device, an additional authentication processing device 100 of the present invention can be provided to build a multiple security system. have.

Meanwhile, embodiments of the present invention can be implemented by computer readable codes on a computer readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored.

Examples of the computer-readable recording medium include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device and the like, and also a carrier wave (for example, transmission via the Internet) . In addition, the computer-readable recording medium may be distributed over network-connected computer systems so that computer readable codes can be stored and executed in a distributed manner. And functional programs, codes, and code segments for implementing the present invention can be easily deduced by programmers skilled in the art to which the present invention pertains.

Such authentication processing apparatus 100 and the authentication processing method according to the present invention increases the number of attempted attempts to hack passwords by password authentication using a plurality of key inputs simultaneously inputted to password hacking. It can reduce the damage caused.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, Therefore, the present invention should be construed as a description of the claims which are intended to cover obvious variations that can be derived from the described embodiments.

100: authentication processing unit 110: authentication information storage unit
120: input unit 130: valid key determination unit
140: authentication request information generation unit 150: authentication processing unit
160: normalization unit 170: encryption unit
180:

Claims (10)

An apparatus for processing authentication for a user requesting authentication through a plurality of keys,
An authentication information storage unit for storing authentication information about a combination of keys corresponding to the number of key inputs and the number of key inputs for each number of times;
An input unit configured to receive an authentication request from at least one key sequentially selected by a user;
A valid key determination unit for sensing an input time of the selected at least one key and determining a valid key corresponding to the number of key inputs and the number of key inputs for each number of times;
An authentication request information generation unit generating authentication request information using the combination of the valid keys;
A normalizer for normalizing the generated authentication request information in ascending or descending order:
An encryption unit for encrypting the generated authentication request information with a one-way function and transmitting the encrypted authentication request information to the authentication processing unit; And
An authentication processing unit for decrypting the encrypted authentication request information and comparing the authentication request information with the authentication information to process authentication for the user;
The valid key determination unit,
When a plurality of keys is selected, the time difference between the selection time of the most recently selected key of the plurality of keys and the release time of the first deselected key of the plurality of keys is compared with a preset valid time,
If the time difference is equal to or longer than the valid time, the selected plurality of keys are determined to be valid keys. If the time difference is shorter than the valid time, the selected key is the most out of the plurality of keys except for the most recently selected key among the plurality of selected keys. And a time difference between a selection time of a late selected key and a release time of the first deselected key and the valid time. delete delete delete The method of claim 1,
And a display unit for displaying the authentication processing result of the authentication processing unit by voice or video. In the method for processing authentication for a user requesting authentication through a plurality of keys,
Receiving an authentication request from at least one key sequentially selected by a user;
Determining an effective key corresponding to the number of key inputs and the number of key inputs for each number of times by sensing an input time of the selected at least one key;
Generating authentication request information using the combination of the valid keys;
Normalizing the generated authentication request information in ascending or descending order:
Encrypting the generated authentication request information with a one-way function and transmitting the encrypted authentication request information to the authentication processing unit; And
Decrypting the encrypted authentication request information and comparing the authentication request information with the authentication information to process authentication for the user;
Determining the valid key,
When a plurality of keys are selected, comparing a time difference between a selection time of the most recently selected key of the plurality of keys and a release time of the first deselected key of the plurality of keys with a preset valid time; and
If the time difference is equal to or longer than the valid time, the selected plurality of keys are determined to be valid keys. If the time difference is shorter than the valid time, the selected key is the most out of the plurality of keys except for the most recently selected key among the plurality of selected keys. And comparing a time difference between a selection time of a late selected key and a release time of the first deselected key with the valid time. delete delete delete The method according to claim 6,
And displaying the result of the authentication processing by voice or video.

Images