KR101319941B1 - User authentication system by using touch pattern - Google Patents

Abstract

A user authentication system according to the present invention includes an encryption table for storing random array key values, a password for detecting a random array key value according to a predetermined encryption variable from the encryption table and arranging a virtual keypad according to the detected random array key value. A processing unit, a display unit for displaying the randomly arranged virtual keypad and receiving a user's pattern password, a communication unit performing wireless communication with a transaction server, and a coordinate value and the encryption variable of the input pattern password through a communication unit. When the user authentication processing unit transmitting to the server and the coordinate values of the encryption variable and the pattern password are received from the terminal, decryption is performed according to the received information, and if the decrypted pattern password matches the previously stored pattern password of the user, the user authentication is performed. It is configured to include a transaction server to approve.
The present invention can be applied to financial transactions requiring a high level of security, such as mobile financial transactions using wireless communication, to prevent information from being exposed to people around the user, as well as encryption information by the developer or hacker of the corresponding service. By providing a double security device to prevent leaks, security is greatly improved by improving the easy-to-use pattern password input method.

Description

User Authentication System and Method using Touch Pattern {USER AUTHENTICATION SYSTEM BY USING TOUCH PATTERN}

The present invention relates to a user authentication system, and more particularly, to a user authentication system using a touch pattern.

Recently, with the development of wireless communication technology and information technology, various types of information devices such as personal computers, mobile phones, smart phones, tablet computers, financial automated terminals, automatic ticket issuing machines, and access control systems have been developed.

In particular, the smart phone and tablet computer markets are growing rapidly. The reason is that not only can you directly access the Internet using the wireless Internet, but also you can access various applications using various browsing programs. Smartphones and tablet computers do not have traditional mobile phones, including the ability to create their own, implement an interface that suits them through various applications, and share applications among smartphones with the same operating system (OS). It has advantages, and offers portability and portability not found in traditional desktop computers.

Such smart phones and tablet computers are input means for receiving information from a user, and generally include a virtual keypad (virtual keyboard) displayed graphically on a screen. In an online banking using a computer, an input device that displays a virtual keypad on a monitor and inputs personal information such as an account password or security card number by using a mouse is also an example of a virtual keypad (virtual keyboard).

Typically, a smartphone or tablet computer does not have a separate keyboard device, and displays a virtual keypad on a touch screen, and receives important personal information (ID, password, etc.) of the user through the virtual keypad. In addition, a smartphone or tablet computer is a password input method for user authentication, and widely uses a password input method using a touch pattern (for example, an Android-based smartphone or tablet computer). 1 is an exemplary diagram of a password input method using a conventional touch pattern.

However, an input method of touch inputting personal security information (ID, password, touch pattern, etc.) through the virtual keypad may be easily exposed to a nearby third party while the user inputs the information.

The virtual keypad of an IT device such as a smartphone is always kept visible so that a user may enter into a malicious third party's shoulder sniffing while entering personal security information (ID, password, touch pattern, etc.). There is a problem that can not be exposed as it is. In particular, a password using a touch pattern (hereinafter, referred to as a 'pattern password') has an advantage of being easy to remember and use, but it is also likely that the pattern of the password is easily exposed. For example, when entering a pattern password, the next person can easily identify the pattern password by simply watching from afar.

An object of the present invention is to provide a user authentication system and method using a touch pattern to determine the random arrangement key value by placing a separate encryption variable and to arrange the virtual keypad according to the determined random arrangement key value.

Additional features and advantages of the invention will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the invention. The objectives and other advantages of the present invention will be realized and attained by the structure particularly pointed out in the claims, as well as the following description and the annexed drawings.

The present invention can be applied to financial transactions requiring a high level of security, such as mobile financial transactions using wireless communication, to prevent information from being exposed to people around the user, as well as encryption information by the developer or hacker of the corresponding service. By providing a double security device to prevent leaks, security is greatly improved by improving the easy-to-use pattern password input method.

1 is an exemplary diagram of a password input method using a conventional touch pattern.
Figure 2 is an illustration of a user authentication system according to the present invention.
3 is a block diagram of a terminal according to the present invention;
4 illustrates a virtual keypad randomly arranged in accordance with the present invention.
5 illustrates an encryption table according to the present invention.
6 is a flowchart illustrating a user authentication method according to the present invention.

In order to achieve the above object, the user authentication system according to the present invention,

An encryption table for storing random array key values, an encryption processing unit for detecting a random array key value according to a predetermined encryption variable from the encryption table and arranging a virtual keypad according to the detected random array key value, and the randomly arranged virtual keypad A display unit configured to display and receive a pattern password of the user, a communication unit performing wireless communication with the transaction server, a user authentication processor for transmitting the coordinate value and the encryption variable of the input pattern password to the transaction server through the communication unit; When the coordinate value of the encryption variable and the pattern password is received from the terminal, decryption is performed according to the received information, and if the decrypted pattern password matches the user's previously stored pattern password, the transaction server for accepting user authentication is configured. do.

In order to achieve the above object, the user authentication method according to the present invention,

Randomly arranging each key of the virtual keypad according to a predetermined encryption variable, displaying the arranged virtual keypad, and if a pattern password of the user is input to the virtual keypad, the coordinate value of the input pattern password and the encryption Transmitting a variable to a transaction server; performing a decryption according to a coordinate value of the encrypted variable and the transmitted pattern password; and whether the decrypted pattern password matches a previously stored pattern password of the user; And a process of approving or rejecting user authentication according to the determination result.

The present invention primarily prevents the information from being exposed to people around the user in the process of inputting security information (for example, pattern password, etc.) to the virtual keypad. Secondly, the encryption process is performed by malicious developers or hackers. In order to prevent the encryption information from being leaked, an object of the present invention is to implement a user authentication system and a method of randomly arranging virtual keypads and applying encryption variables.

Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

Figure 2 is an illustration of a user authentication system according to the present invention, Figure 3 is a block diagram of a terminal according to the present invention.

As shown in FIG. 2, the user authentication system according to the present invention includes a terminal 100 and a transaction server 200, and the terminal 100 includes an encryption table 110 as shown in FIG. 3. ), The password processing unit 120, the display unit 130, the communication unit 150, and the user authentication processing unit 140.

The encryption table 110, also called an encryption sequence table, stores random array key values that allow the keys of the virtual keypad to be randomly arranged in a pattern of about 10,000 (or more). 5 is a diagram illustrating an encryption table according to the present invention.

The encryption table 110 may be provided by the terminal 100 and the transaction server 200 at the same time to decrypt the contents encrypted by the terminal 100 in the transaction server 200. However, if a developer (or a hacker) copies and encrypts the encryption table 110 for malicious purposes, hacking is possible.

In order to compensate for this security problem, the present invention newly adds an encryption variable that determines the number of random array key values of the encryption table 110 to arrange the virtual keypad.

The encryption processing unit 120 detects a random arrangement key value according to the encryption variable from the encryption table 110 and arranges a virtual keypad according to the detected random arrangement key value. Since the virtual keypad is arranged according to the random arrangement key value, each arrangement is displayed on the screen as a different arrangement.

4 illustrates a randomly arranged virtual keypad in accordance with the present invention.

As shown in Fig. 4, each key of the virtual keypad is assigned a different number (or character) or figure. The present invention arranges each key of the sequentially arranged virtual keypad according to the random arrangement key value stored in the encryption table 110.

The display unit 130 displays the randomly arranged virtual keypad and receives a pattern password of a user.

The user should remember the pattern of his / her registered password (hereinafter referred to as 'registration pattern password'). When a randomly arranged virtual keypad is displayed on the screen, the user must find the first key (number or figure) of the registered pattern password. Take out the first key and touch the same shape pattern as the starting point.

Since the display unit 130 forms a layered structure with a sensor for detecting a touch operation (hereinafter referred to as a touch sensor) (hereinafter referred to as a touch screen), the display unit 130 may be used as an input device as well as an output device. . The touch sensor may have the form of, for example, a touch film, a touch sheet, a touch pad, or the like.

If there is a touch input to the touch sensor, the corresponding signal (s) is sent to the touch controller (not shown). The touch controller processes the signal (s) and then transmits the corresponding data to the controller (not shown) or the user authentication processor 140. In response to the transmission of the touch controller, the user authentication processor 140 (or the controller) may know which area of the display 130 is touched.

The communication unit 150 performs wireless communication with the transaction server 200.

The communication unit 150 may include one or more components for wireless communication between the terminal 100 and a wireless communication system or wireless communication between the terminal 100 and a network in which the terminal 100 is located. For example, the communication unit 150 may include at least one of a mobile communication module, a wireless internet module, and a short range communication module.

The user authentication processor 140 transmits coordinate values (eg, 1, 7, 6) and the encryption variable of the input pattern password to the transaction server 200 through the communication unit 150.

When the transaction server 200 receives the coordinate values (eg, 1, 7, 6) of the encryption variable and the pattern password from the terminal 100, the transaction server 200 detects a random arrangement key value according to the encryption variable from the embedded encryption table. The virtual keypad is arranged according to the detected random arrangement key value, and a pattern shape (pattern shape) connecting the transmitted coordinate values (for example, 1, 7, 6) to the arranged virtual keypad is shown.

Thereafter, the transaction server 200 determines whether the pattern connecting the coordinate values matches the registration pattern password, and if the two patterns match, approve user authentication.

6 is a flowchart illustrating a user authentication method according to the present invention.

Referring to Figure 6, it will be described in detail the user authentication method according to the present invention.

The present invention, considering that the mobile financial transaction is a transaction using wireless communication, including RF (Radio Frequency) transaction, by including the encryption variable in the pattern password information transmitted to the transaction server 200, transaction server 200 user authentication When performing the operation, by determining the random arrangement key value according to the encryption variable and arranging the virtual keypad according to the determined random arrangement key value, the decryption will succeed if two consecutive hackings are not performed when the wireless communication channel is hacked. Security was greatly improved by disabling.

As shown in FIG. 6, when the user sets an encryption variable, the encryption processing unit 120 according to the present invention first detects a random arrangement key value from the encryption table 110 according to the set encryption variable. The virtual keypad is arranged according to the detected random arrangement key value. (S10) The encryption variable may not be set by the user and may be arbitrarily set.

The process of detecting a random arrangement key value according to the encryption variable (S10) may be divided into a sequential detection method and a non-sequential detection method.

First, the operation of the encryption processing unit 120 according to the sequential detection method,

The encryption processing unit 120 counts the order value 'no' of the encryption table 110 every time the random arrangement is performed (n ++), and applies encryption variables while maintaining the basic order. For example, if the current basic order counted in the encryption table 110 is 3 (the encryption variable is assumed to be '7'), the encryption processing unit 120 determines the encryption variable (' 7 ') is added to apply the 10th random array key value (RAQ_11) to perform the virtual keypad arrangement. When the next random array is performed (the encryption variable is assumed to be '12'), the order value is counted and the default order is 4, and the encryption processing unit 120 performs the 16th (4 + 12) random array. By applying the key value RAQ_17, the virtual keypad is arranged. In this example, the addition method adds the encryption variable to the basic order for the sake of understanding, but it can be a subtraction, multiplication, division, or a complex function.

Next, the operation of the encryption processing unit 120 according to the non-sequential detection method,

The encryption processing unit 120 of the out-of-order detection method does not separately count the order value 'no' of the encryption table 110 each time a random array is performed, and the order value of the random array previously performed is a basic order value. Save as. In this case, the "before" may be immediately before (before the first turn), but the setting may be changed to be before or after the second turn or the third turn.

For example, when the order value (eg '33') of a random array that was executed immediately before (the first order) is stored as the default order value (the encryption variable is assumed to be '7'), the encryption processing unit 120 Performs an arrangement of the virtual keypad by applying the 40th random array key value RAQ_41 by adding the encryption variable '7' to the basic order '33'. When the next random array is performed (the encryption variable is assumed to be '12'), the order value '40' will be the default order value, and the encryption processing unit 120 performs the 52nd (40 + 12) random order. By applying the array key value RAQ_53, the virtual keypad is arranged.

When the process S10 is completed, the display unit 130 displays the arranged virtual keypad on the screen. (S20) Then, a pattern password (touch pattern) is input from the user.

When the randomly arranged virtual keypad is displayed on the screen, the user finds the first key (number or figure) of the registered pattern password on the virtual keypad, and touches the pattern of the same shape with the first key as a starting point.

Thereafter, when the pattern password of the user is input to the virtual keypad, the user authentication processor 140 transmits the coordinate values (eg, 1, 7, 6) and the encryption variable of the input pattern password to the transaction server 200. . (S30 & S40)

The transaction server 200 receives coordinate values (eg, 1, 7, 6) of the encryption variable and the pattern password, and performs decryption according to the received information. (S50)

The transaction server 200 has the same encryption table 110 as the terminal 100, and detects a random array key value according to the received encryption variable from the embedded encryption table. The virtual keypad is arranged according to the detected random arrangement key value. The decryption process S50 of the transaction server 200 is performed in the same manner as the random arrangement key detection process S10 of the terminal 100.

The transaction server 200 displays a pattern shape (pattern shape) in which virtual keypads are arranged according to the detected random arrangement key value, and connects the transmitted coordinate values to the arranged virtual keypads, thereby providing coordinate values (eg, It is determined whether the pattern connecting 1, 7, 6 matches the registered pattern password of the user. (S60)

In order to determine whether the pattern connecting the coordinate values coincides with the registration pattern password of the user, the transaction server 200 first determines that the first coordinate value of the pattern connecting the coordinate values is the first coordinate value of the registration pattern password. It judges whether it matches (1st judgment). Then, it is determined (second determination) whether or not the shape (shape) of the pattern connecting the coordinate values matches the shape (shape) of the registration pattern password.

In both the first determination process and the second determination process, when indicating a result of matching, the transaction server 200 determines that the pattern connecting the coordinate values and the registration pattern password match.

If it is determined that the pattern connecting the coordinate values and the registration pattern password match, the transaction server 200 approves user authentication to allow access of the corresponding user. If the two patterns do not match, user authentication is denied, and access of the user is not allowed. (S80)

The user authentication system and method using the touch pattern according to the present invention may be implemented in hardware, it may also be implemented in an app (appl).

According to a hardware implementation, a user authentication app using the touch pattern may include application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), and FPGAs ( Field programmable gate arrays, processors, controllers, micro-controllers, microprocessors, and other electrical units for performing other functions may be implemented.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, May be constructed by selectively or in combination. Accordingly, the true scope of the present invention should be determined by the technical idea of the appended claims.

As described above, the present invention can be applied to financial transactions requiring a high level of security, such as mobile financial transactions using wireless communication, to prevent information from being exposed to people around the user, as well as the developer of the corresponding service. B. By providing a double security device to prevent the leakage of encrypted information by hackers, the security is greatly improved by improving the easy-to-use pattern password input method.

100: terminal 110: encryption table
120: password processing unit 130: display unit
140: user authentication processing unit 150: communication unit
200: trading server

Claims (7)

An encryption table 110 for storing random array key values;
An encryption processing unit (120) for detecting a random arrangement key value according to a predetermined encryption variable from the encryption table and arranging a virtual keypad according to the detected random arrangement key value;
A display unit 130 for displaying the randomly arranged virtual keypad and receiving a pattern password of a user;
Communication unit 150 for performing wireless communication with the transaction server;
A user authentication processor 140 for transmitting the coordinate value of the input pattern password and the encryption variable to a transaction server through a communication unit;
When the coordinate values of the encryption variable and the pattern password are received from the terminal, decryption is performed according to the received information, and if the decrypted pattern password matches the pre-stored pattern password of the user, the transaction server 200 approving the user authentication is performed. User authentication system comprising a. The method of claim 1, wherein the transaction server
When the coordinate values of the encryption variable and the pattern password are received from the terminal, a random array key value according to the encryption variable is detected from the embedded encryption table for decryption.
Arranging a virtual keypad according to the detected random arrangement key value,
And a pattern of connecting the transmitted coordinate values to the arranged virtual keypad. The method of claim 1, wherein the transaction server 200
Performing a first determination process of determining whether a first coordinate value of the decrypted pattern password matches a first coordinate value of a previously stored pattern password;
Performing a second determination process of determining whether a shape of the decrypted pattern password matches a shape of a previously stored pattern password;
And when the matched result is displayed in both the first and second determination processes, determining that the decrypted pattern password and the previously stored pattern password match. Randomly arranging each key of the virtual keypad according to a predetermined encryption variable;
Displaying the arranged virtual keypad;
When the pattern password of the user is input to the virtual keypad, transmitting a coordinate value of the input pattern password and the encryption variable to a transaction server;
Performing, at the transaction server, decrypting according to the coordinate values of the encryption variable and the transmitted pattern password;
Determining whether the decrypted pattern password matches a previously stored pattern password of the user;
And authenticating or rejecting user authentication according to the determination result. The method of claim 4, wherein the random arrangement process,
Detecting a random arrangement key value according to the predetermined encryption variable from an encryption table stored in a terminal;
And arranging a virtual keypad according to the detected random arrangement key value. The method of claim 4, wherein the decoding is performed.
Detecting a random arrangement key value according to the encryption variable from an encryption table stored in the transaction server;
Arranging a virtual keypad according to the detected random arrangement key value;
And displaying a pattern shape of connecting the transmitted coordinate values to the arranged virtual keypad. The method of claim 4, wherein the determining of whether the pattern password matches each other comprises:
A first determining step of determining whether a first coordinate value of the decrypted pattern password matches a first coordinate value of a previously stored pattern password;
A second determination step of determining whether the shape of the decrypted pattern password matches the shape of the previously stored pattern password;
And determining that the decrypted pattern password and the previously stored pattern password match when the first and second determination processes show a matched result.

Images