KR101445816B1 - Method of providing image-based user authentication, an authorization server, a terminal, and computer-readable recording medium for the same - Google Patents

Abstract

The present invention relates to a user authentication method based on an image and, more specifically, to an image-based user authentication method configured to provide an image-based user authentication scheme rather than a text-based user authentication method, an authentication server, a terminal, and a computer-readable recording medium.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an image-based user authentication method, an authentication server, a terminal device, and a computer-readable recording medium. 2. Description of the Related Art [0002]

The present invention relates to an image-based user authentication method.

A conventional user authentication method is a text-based authentication method in which a user is authenticated by inputting authentication information such as an ID and a password, a public certificate, and an OTP (One Time Password).

Since the authentication information such as the ID / password, the official certificate, and the OTP used in the conventional user authentication method is short in length, the conventional user authentication method has a problem in that the conventional user authentication method has inherent security risks such as hacking and leakage There is a problem.

In addition, when the length of the authentication information is made long because of such a problem, there is a problem that it is difficult for the user to memorize the authentication information.
Such prior art documents include 'Mutual authentication system between user and server using mobile device, method and recording medium' (Patent Application No. 10-2007-0016251) and 'Integrated authentication processing system and control method' Patent Application No. 10-2008-0099425).

SUMMARY OF THE INVENTION In view of the foregoing, it is an object of the present invention to provide an image-based user authentication method rather than a text-based user authentication method.

In order to achieve the above object, in one aspect, the present invention provides an image processing apparatus including an authentication reference information storage unit for storing reference image related information corresponding to a reference image or a reference image as user authentication reference information, An authentication request receiving unit for receiving image related information from the user terminal as authentication request information, and an authentication processing unit for comparing the authentication request information with the authentication request information and performing an authentication process for the user according to the comparison result to provide.

According to another aspect of the present invention, there is provided a method for a server to perform user authentication, comprising the steps of: storing authentication reference information corresponding to a reference image or reference image, An authentication request receiving step of receiving the corresponding image related information from the user terminal as the authentication request information, and an authentication processing step of comparing the authentication request information with the authentication request information and performing an authentication process for the user according to the comparison result Provides a way to perform user authentication.

According to still another aspect of the present invention, there is provided an image processing apparatus including an authentication request unit for transmitting image-related information corresponding to an image or an image as authentication request information to a server, and an authentication- And a terminal for performing user authentication including an authentication processing result receiving unit received from a server.

According to another aspect of the present invention, there is provided a method for a terminal to perform user authentication, the method comprising: an authentication request step of transmitting image related information corresponding to an image or an image to the server as authentication request information; And an authentication processing result receiving step of receiving an image-based authentication processing result based on the request information from the server.

According to still another aspect of the present invention, there is provided a recording medium on which a program for executing a method for performing user authentication is recorded, comprising: a function of transmitting image related information corresponding to an image or an image as authentication request information to a server; A program for implementing a function of receiving an image-based authentication processing result based on stored authentication reference information and authentication request information from a server is provided and a computer-readable recording medium is provided.

As described above, according to the present invention, it is possible to provide an image-based user authentication method rather than a text-based user authentication method.

This has the effect of significantly reducing the possibility of security incidents through leakage or hacking of authentication information.

According to the present invention, as authentication information (authentication reference information, authentication request information) to be transmitted to a server for image-based user authentication, it is not necessary to burn the corresponding image file, There is an effect of providing a user authentication method having high security while reducing the amount of data transmission by transmitting a hash value.

1 is a schematic diagram of a system for performing user authentication according to an embodiment of the present invention.
2 is a block diagram of a server for performing user authentication according to an embodiment of the present invention.
3 is another block diagram of a server for performing user authentication according to an embodiment of the present invention.
4 is a diagram illustrating an example of the generation of image related information according to a transmission information type in order to perform user authentication according to an embodiment of the present invention.
5 is a flowchart of a method for performing user authentication according to an embodiment of the present invention.
6 is a flowchart illustrating a method of performing a user authentication by a server according to an exemplary embodiment of the present invention.
7 is a block diagram of a terminal for performing user authentication according to an embodiment of the present invention.
8 is a flowchart illustrating a method of performing user authentication by a terminal according to an exemplary embodiment of the present invention.

Hereinafter, some embodiments of the present invention will be described in detail with reference to exemplary drawings. It should be noted that, in adding reference numerals to the constituent elements of the drawings, the same constituent elements are denoted by the same reference symbols as possible even if they are shown in different drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

In describing the components of the present invention, terms such as first, second, A, B, (a), and (b) may be used. These terms are intended to distinguish the constituent elements from other constituent elements, and the terms do not limit the nature, order or order of the constituent elements. When a component is described as being "connected", "coupled", or "connected" to another component, the component may be directly connected to or connected to the other component, It should be understood that an element may be "connected," "coupled," or "connected."

1 is a schematic diagram of a system for performing user authentication according to an embodiment of the present invention.

A method of performing user authentication according to an exemplary embodiment of the present invention is a method of providing image-based user authentication instead of a text form, An authentication request receiving step of receiving, as authentication request information, image related information corresponding to an image or an image, from the user terminal 110; comparing the authentication reference information with the authentication request information, And an authentication processing step of performing authentication processing for the user according to the comparison result.

As an example of performing the user authentication, a method for performing authentication of a user by the terminal 110 includes an authentication request step of transmitting image related information corresponding to an image or an image to the server 100 as authentication request information, Based authentication processing result based on the authentication reference information stored in the storage unit 100 and the authentication request information from the server 100. [

The server 100 may further include a metadata extraction unit 310 for extracting metadata from the reference image or the image. The metadata extraction unit 310 extracts metadata from the extracted metadata using a hash function And a hash value generating unit 320 for generating a hash value.

In the present specification, the term "Metadata" may mean attribute information of an image, and may include general information of an image, image information, peripheral-related information such as a camera, and the like.

Specifically, the above-mentioned metadata is general information of an image, and includes image information such as title, subject, rating, tag, description, author, date taken, program name, acquisition date, copyright, item type, And the like.

In addition, the image information may include information such as an image ID, an image size, a width, a height, a horizontal resolution, a vertical resolution, a bit level, a compression ratio, a resolution unit, a color representative,

Camera, camera model, f-stop, exposure time, ISO (International Standardization Organization) sensitivity, exposure bias, focal length, maximum aperture, metering mode, subject distance, Flash model, flash model, camera serial number, contrast, brightness, light source, exposure program, saturation, sharpness, white balance, brightness analysis, digital zoom , A camera related to image generation such as an EXIF (Exchangeable Image File Format) version, and the like.

Accordingly, in the present specification, the meta data of the reference image or the metadata of the image may be the respective attribute information mentioned above, or information obtained by combining two or more attribute information.

The terminal 110 may include a general PC such as a general desktop or a notebook computer, and may include a mobile terminal such as a smart phone, a tablet PC, a PDA (Personal Digital Assistants), and a mobile communication terminal. But should be broadly interpreted as any electronic apparatus capable of communicating with the server 100. [

The above-described server 100 has the same hardware configuration as that of a typical Web server, a web application server, or a WAP server. However, as described in detail below with reference to FIG. 2, a software module that is implemented in any language such as C, C ++, Java, PHP, .Net, Python, Ruby, (Module).

In addition, the server 100 may be connected to an unspecified number of clients (including the terminal 110) and / or other servers via the network 120, whereby the server 100 performs operations of the client or other server A computer system for receiving a request and deriving a result of the operation, or computer software (server program) installed for such a computer system.

In addition to the above-described server programs, the server 100 may also include a broad concept including a series of application programs running on the server 100 and, in some cases, various databases built in or outside the server 100 It should be understood.

Here, the database may mean a collection of data structured by managing data such as information or data for use by a server or another device, and may mean a storage medium storing an aggregate of such data.

Such a database may include a plurality of databases classified according to a data structure, a management method, and the like.

In some cases, the database may include a database management system (DBMS), which is software that allows the user to add, modify, delete, etc. information or data.

In addition, the server 100 can store and manage content, various information, and data in a database. Here, the database may be implemented inside or outside the server 100.

The server 100 may use a server program that is variously provided according to an operating system such as DOS, Windows, Linux, UNIX, or Macintosh to general server hardware Typical examples include a Web site used in a Windows environment, an Internet Information Server (IIS), Apache, Nginx, and Light HTTP used in a UNIX environment.

The network 120 is a network for connecting the server 100 and the terminal 110 and may be a closed network such as a LAN (Local Area Network) or a WAN (Wide Area Network) ). ≪ / RTI > Herein, the Internet includes various services existing in the upper layer of the TCP / IP protocol such as HyperText Transfer Protocol (HTTP), Telnet, File Transfer Protocol (FTP), Domain Name System (DNS), Simple Mail Transfer Protocol (NFS), and Network Information Service (NIS), which are used in the Internet.

In addition, when the terminal 110 includes a mobile terminal such as a smart phone, a tablet PC, a PDA (personal digital assistant), and a mobile communication terminal, the network 120 may be a wireless access network such as a mobile communication network or a WiFi As shown in FIG.

A method for performing user authentication according to an embodiment of the present invention briefly described above will be described in more detail below.

2 is a block diagram of a server 100 that performs user authentication according to an embodiment of the present invention.

Referring to FIG. 2, a server 100 for performing user authentication according to an embodiment of the present invention includes an authentication reference information storage unit 110 for storing reference image related information corresponding to a reference image or a reference image, An authentication request receiving unit 220 for receiving the image related information corresponding to the image or the image from the terminal of the user as the authentication request information, the authentication request receiving unit 220 for comparing the authentication request information with the authentication request information, And an authentication processing unit 230 for performing authentication processing for the authentication information.

The above-described reference image related information may be, for example, metadata of a reference image or a reference hash value for metadata of a reference image, and the image related information may be metadata of the image, And may include a hash value for the metadata.

The meta data of the reference image or the metadata of the image may include attribute information of the above-mentioned image, general information of the image, image information, peripheral-related information such as a camera, and the like, Or may be information obtained by combining two or more pieces of attribute information.

The reference hash value or the hash value may mean a pseudo random number obtained by hashing the above-mentioned metadata using a hash function.

Meanwhile, the authentication reference information may be stored at the time of user registration or even after user registration, or may be transmitted and stored at the time of authentication processing. That is, the authentication reference information may be stored before the authentication processing unit 230 compares the authentication reference information with the authentication request information.

The authentication reference information may be transmitted from the terminal 110 transmitting the authentication request information and stored in the authentication reference information storage 210 and transmitted from a terminal different from the terminal 110 transmitting the authentication request information May be stored.

3 is another block diagram of a server 100 that performs user authentication according to an embodiment of the present invention.

Referring to FIG. 3, a server 100 for performing user authentication according to an embodiment of the present invention includes a metadata extraction unit 310 for extracting metadata of a reference image or metadata of an image from a reference image or an image, As shown in FIG.

In addition, the server 100 for performing user authentication according to an embodiment of the present invention may use a hash function or a hash value from the metadata of the reference image or the image, And a hash value generator 320 for generating a hash value.

For example, when the authentication reference information or the authentication request information is a reference image or an image, the metadata extracting unit 310 extracts the above-mentioned metadata from the reference image or image, It can be used as information.

For example, the hash value generator 320 may generate a reference hash value or a hash value using the metadata extracted by the metadata extractor 310, If the reference information or the authentication request information is metadata, a reference hash value or a hash value may be generated based on the reference information or the authentication request information.

The metadata extraction unit 310 and / or the hash value generation unit 320 may be included in the server 100 or may be a server included in the server 100 according to an authentication processing method, a metadata extraction subject, a hashing (See Fig. 4). Fig.

On the other hand, the length of the reference image related information or the image related information may be determined differently according to the authentication level level.

For example, the reference image-related information or the image-related information may include a hash value obtained by hashing metadata or metadata, and if the level of the authentication level is low, The data length of the related information can be shortened, and if the level of the authentication level is high, the data length of the related information can be long. The level of the authentication level or the length of the data corresponding to the level of the authentication level may be a predetermined value. That is, differential authentication can be performed by varying the data length of the related information differently according to the authentication level.

In addition, the length of the reference image related information or the image related information mentioned above may be configured to be longer than the length of the information used in the non-image authentication method.

For example, the non-image authentication method is an authentication method that does not use image or image related information including user authentication based on a password, authentication using an OTP (One Time Password), authentication using a public certificate, .

That is, the length of the reference image related information or the image related information is longer than the length of the information used in the above-mentioned non-image authentication method, so that the security of the user authentication is higher than the non-image authentication method .

The above-described authentication processing unit 230 may compare the authentication reference information with the authentication request information, and perform the authentication process for the user according to the comparison result.

For example, the authentication processing unit 230 selects one or more of the reference image, the metadata of the reference image, and the reference hash value as the authentication reference information, compares the selected authentication reference information with the corresponding authentication request information , And if the information matches, the user authentication can be regarded as successful.

That is, the authentication processing unit 230 may compare the reference image with the image, compare the meta data of the reference image with the meta data of the image, and may compare the reference hash value with the hash value. Further, not only one of the pieces of information can be selected and compared, but also the user authentication can be processed by comparing two or more pieces of information with each other.

For example, a method of comparing the authentication reference information and the authentication request information will be described in detail. The comparison between the reference image and the image is performed through an image matching technique such as detecting an object through image processing and comparing similarities between the two images The comparison of the meta data of the reference image and the metadata of the image or the reference hash value and the hash value can be made by comparing the values of the meta data with the reference hash value.

The above-mentioned image matching technique is one example, and various techniques related to image matching such as image matching using an outline in an image or image matching using a color space content comparison are applied variously as well as similarity comparison through object detection It will be possible.

In addition, various techniques for determining the identity of data may be used for comparison of metadata or hash values.

4 is a diagram illustrating an example of the generation of image related information according to a transmission information type in order to perform user authentication according to an embodiment of the present invention.

Referring to FIG. 4A, when the reference image or image type information is transmitted from the terminal 110, the subject of metadata extraction and hash value generation may be the server 100 have.

When the meta data of the reference image or the metadata type information of the image is transmitted from the terminal 110, the main body of the metadata extraction becomes the terminal 110, and the subject of the hash value generation is the server 100 ). Meanwhile, when information of a hash value type is transmitted from the terminal 110, the main body of the metadata extraction and hash value generation may be the terminal 110.

The terminal 110 may transmit only one of the transmission information types or may combine two or more types of transmission information.

Referring to FIG. 4B, the terminal 110 includes at least one of a reference image, a reference image metadata, and a reference hash value as authentication reference information and transmits the authentication reference information to the server 100 can do.

In addition, the authentication request terminal 110 may include at least one of an image, an image metadata, and a hash value as authentication request information and transmit the authentication request information to the server 100.

The terminal 110 transmitting the authentication reference information and the authentication request information may be the same terminal 110 or a separate terminal 110. [

The authentication processing unit 230 may perform the authentication process by comparing the authentication reference information and the authentication request information by the same transmission information type. That is, the user can be authenticated using the above-described image matching method or a method of determining data identity.

5 is a flowchart of a method for performing user authentication according to an embodiment of the present invention.

5, the server 100 for performing user authentication according to an embodiment of the present invention performs authentication processing as an additional authentication procedure after determining whether a separate authentication procedure for the user has been performed (S500) S502).

That is, for example, as shown in FIG. 5, the server 100 determines whether a separate authentication procedure for the user has been performed (S500) and, if a separate authentication procedure has been performed, (S502). ≪ / RTI >

In addition, the authentication process of the present invention may be performed only when the user authentication is successful through a separate authentication process, but the authentication process of the present invention may be further performed even if the user authentication fails through a separate authentication process.

The above-described separate authentication procedure may be a non-image-based authentication procedure or an image-based authentication procedure. Further, the separate authentication procedure may be performed in a separate authentication server, or may be performed in the authentication processing unit 230. [

The determination of whether or not the separate authentication procedure is performed (S500) may be performed by the authentication processing unit 230 or may be determined by another determination unit.

The above-described separate authentication procedure may be performed only once, depending on the level of authentication corresponding to the authority of the user, or may be performed two or more different authentication procedures depending on the setting.

The above-described authentication process (S502) is performed as a secondary authentication after a separate authentication procedure is performed, thereby enhancing the security of authentication.

Hereinafter, a method of providing user authentication according to an embodiment of the present invention described above with reference to FIGS. 1 to 5 will be briefly described again.

FIG. 6 is a flowchart of a method by which the server 100 performs user authentication according to an embodiment of the present invention.

Referring to FIG. 6, a method according to an exemplary embodiment of the present invention for performing a user authentication of a server 100 includes the steps of: receiving authentication reference information corresponding to a reference image or a reference image, An authentication request receiving step (S502) of receiving image related information corresponding to an image or an image from the user terminal (110) as authentication request information, comparing the authentication reference information with the authentication request information, And an authentication processing step (S604) for performing authentication processing for the user according to the comparison result.

In the authentication reference information storage step S600, the server 100 may extract and store the metadata or generate and store a reference hash value according to the type of the authentication reference information.

For example, when the reference image is stored, the server 100 may extract and store metadata based on the reference image, generate and store a reference hash value obtained by hashing the metadata, One or more of image, metadata, and hash values may be stored and used as authentication reference information.

In the authentication request receiving step S602, the server 100 extracts metadata or generates a hash value from the metadata according to the type of the information received from the user terminal 110, As authentication request information.

In the authentication processing step S604, the server 100 compares the authentication reference information with the authentication request information by comparing the reference image and the image, the meta data of the reference image and the meta data of the image or the reference hash value It is possible to compare the hash values, determine whether they are the same, and process the user's authentication.

In addition, the above-described extraction of metadata and generation of hashing values may be performed in the authentication processing step S604 and used as authentication reference information or authentication request information, respectively.

Although the method of performing the user authentication according to the embodiment of the present invention has been described above with reference to FIG. 6, it should be understood that the present invention is not limited to the above- Depending on the implementation method, the procedure of each step may be changed, two or more steps may be integrated, or one step may be performed in two or more steps.

7 is a block diagram of a terminal 110 that performs user authentication according to one embodiment of the present invention.

Referring to FIG. 7, a terminal 110 for performing user authentication according to an exemplary embodiment of the present invention includes an authentication request unit (not shown) for transmitting image related information corresponding to an image or an image to the server 100 as authentication request information 710) and an authentication processing result receiving unit 720 for receiving an image-based authentication processing result based on the authentication reference information and the authentication request information stored in the server 100 from the server 100.

The authentication request unit 710 may transmit authentication request information to the server 100 as an additional authentication procedure after a separate authentication procedure for the user is performed.

For example, the authentication requesting unit 710 may perform a separate user authentication process with an image-based or non-image-based authentication process, and send authentication request information to the server 100 through an additional authentication process, As shown in FIG.

In addition, the authentication request unit 710 may transmit at least one of image metadata or image metadata as image related information, including at least one of a hash value obtained by hashing the metadata.

Specifically, for example, when transmitting the authentication request information, the authentication request unit 710 may transmit an image, extract metadata from an image and transmit metadata, or may have a hashing function And may transmit a hash value. It may also transmit information including one or more of image, metadata, and hash values.

For example, the authentication request unit 710 may transmit meta data or a hash value instead of transmitting an image, and may reduce the load of the network 120 by reducing the amount of data to be transmitted It is possible.

The above-described authentication processing result receiving unit 720 compares the authentication reference information stored in the server 100 with the authentication request information transmitted from the terminal 110, and performs an image-based authentication process The server 100 can receive the processing result and perform the authentication.

The terminal 110 may include a general PC such as a general desktop or a notebook computer, and may include a mobile terminal such as a smart phone, a tablet PC, a PDA (Personal Digital Assistants), and a mobile communication terminal. But should be broadly interpreted as any electronic apparatus capable of communicating with the server 100. [

FIG. 8 is a flowchart illustrating a method of performing user authentication by the terminal 110 according to an exemplary embodiment of the present invention.

Referring to FIG. 8, a method for performing user authentication by the terminal 110 according to an exemplary embodiment of the present invention includes: receiving authentication request information for transmitting image related information corresponding to an image or image to the server 100 as authentication request information; And an authentication process result reception step S802 for receiving an image-based authentication process result based on the authentication reference information and the authentication request information stored in the server 100 from the server 100 in step S800.

In the authentication request step S800, the terminal 100 includes at least one of an image, an image metadata, and a hash value obtained by hashing metadata of an image as authentication request information, ). ≪ / RTI >

Although the method of performing the user authentication by the terminal 100 according to the embodiment of the present invention has been described above with reference to FIG. 8, it is only for convenience of description, It is possible to change the procedure of each step according to the implementation method, or to integrate two or more steps or to perform one step in two or more steps separately.

The above-described method of performing the user authentication of the terminal 100 can be implemented by a program and recorded in a computer-readable recording medium. As one example, the method for performing the above-described user authentication may be implemented as part of a game client program that is programmed and installed on the terminal 110. [

The program for executing the method for performing the user authentication described above includes a function of transmitting image related information corresponding to an image or an image to the server 100 as authentication request information, Based authentication processing result based on the information from the server 100 is executed.

The method for performing the user authentication according to the embodiment of the present invention described above can be applied to an application installed in the terminal 110 (which may be included in a platform installed in the terminal or included in an operating system, ) And can be executed by an application that is compatible with the operating system of the terminal 110 and installed directly on the terminal 110 through an application providing server such as an application store server, an application or a Web server related to the service That is, a program). Here, the operating system of the terminal 110 may be an operating system such as a window installed on a general PC such as a desktop, a Macintosh, or Linux, or installed in a mobile terminal such as a smart phone or a tablet PC iOS, Android, Windows Mobile and other mobile-specific operating systems.

In this regard, the user authentication method according to the above-described embodiment of the present invention is implemented as an application (i.e., a program) installed in the terminal 110 or directly installed by the user, Lt; / RTI >

The program implementing the method for performing the user authentication according to the embodiment of the present invention includes a function of transmitting image related information corresponding to an image or an image to the server 100 as authentication request information, And performs functions such as receiving from the server 100. In addition to this, all the functions corresponding to the method of performing user authentication according to the embodiment of the present invention described above with reference to FIG. 8 can be executed.

Such a program may be recorded on a recording medium that can be read by a computer and executed by a computer so that the above-described functions can be executed.

In order to execute a method for a computer to read a program recorded on a recording medium and perform user authentication implemented in the program, the above-mentioned program may be stored in a storage medium such as C, C ++, JAVA, Or a code encoded in a computer language such as a computer language.

The code may include a function code related to a function or the like that defines the functions described above and may include an execution procedure related control code necessary for the processor of the computer to execute the functions described above according to a predetermined procedure.

In addition, such code may further include memory reference related code as to what additional information or media needed to cause the processor of the computer to execute the aforementioned functions should be referenced at any location (address) of the internal or external memory of the computer .

In addition, when a processor of a computer needs to communicate with any other computer or server, etc., to perform the above-described functions, the code may be stored in a computer's communication module (e.g., a wired and / ) May be used to further include communication related codes such as how to communicate with any other computer or server in the remote, and what information or media should be transmitted or received during communication.

The functional program for implementing the present invention and the related code and code segment may be implemented by programmers in the technical field of the present invention in consideration of the system environment of the computer that reads the recording medium and executes the program, Or may be easily modified or modified by the user.

Also, the computer-readable recording medium on which the above-described program is recorded may be distributed to a computer system connected via a network so that computer-readable codes can be stored and executed in a distributed manner. In this case, one or more of the plurality of distributed computers may execute some of the functions presented above and send the results of the execution to one or more of the other distributed computers, The computer may also perform some of the functions described above and provide the results to other distributed computers as well.

As described above, the computer-readable recording medium on which the program for executing the method for performing the user authentication according to the embodiment of the present invention is recorded may be a ROM, a RAM, a CD-ROM, a magnetic tape, Floppy disks, and optical media storage devices.

In addition, a computer-readable recording medium storing an application that is a program for executing a method for performing user authentication according to an embodiment of the present invention includes an application store server, an application or a web server (Such as a hard disk) included in an application provider server (Web server), or the like, or may be an application providing server itself, another computer storing the program or a storage medium thereof have.

A computer capable of reading a recording medium on which an application, which is a program for executing a method for performing user authentication according to an embodiment of the present invention, can be read includes not only general PCs such as general desktops and laptops but also smart phones, PDAs (Personal Digital Assistants), mobile communication terminals, and the like, and it should be interpreted as all devices capable of computing.

If a computer capable of reading a recording medium storing an application, which is a program for executing a method for performing user authentication according to an embodiment of the present invention, is a smart phone, a tablet PC, a PDA (Personal Digital Assistants) The mobile terminal can download and install the application from an application providing server including an application store server, a web server, and the like. In some cases, after being downloaded from the application providing server to a general PC, Lt; RTI ID = 0.0 > mobile terminal. ≪ / RTI >

The image-based user authentication method according to an embodiment of the present invention described above can be used for user authentication required in providing a game service, and can be used in various authentication fields such as a financial settlement service .

In addition, the image-based user authentication method according to an embodiment of the present invention described above may be configured such that a text-based user authentication procedure (i.e., a non-image-based user authentication procedure) It may be applied to the authentication procedure. That is, it can be used as a supplementary means of the conventional user authentication method.

As described above, according to the present invention, it is possible to provide an image-based user authentication method other than a text-based user authentication method (i.e., a non-image-based user authentication method). This has the effect of significantly reducing the possibility of security incidents through leakage or hacking of authentication information.

In addition, according to the present invention, as authentication information (authentication reference information, authentication request information) to be transmitted to the server 100 for image-based user authentication, the file of the image is not transmitted, Or a hash value of the metadata, thereby providing a user authentication method having high security while reducing the data transmission amount.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiments, it is to be understood that the invention is not limited to the disclosed embodiments. That is, within the scope of the present invention, all of the components may be selectively coupled to one or more of them. In addition, although all of the components may be implemented as one independent hardware, some or all of the components may be selectively combined to perform a part or all of the functions in one or a plurality of hardware. As shown in FIG. The codes and code segments constituting the computer program may be easily deduced by those skilled in the art. Such a computer program can be stored in a computer-readable storage medium, readable and executed by a computer, thereby realizing an embodiment of the present invention. As a storage medium of the computer program, a magnetic recording medium, an optical recording medium, or the like can be included.

It is also to be understood that the terms such as " comprises, "" comprising," or "having ", as used herein, mean that a component can be implanted unless specifically stated to the contrary. But should be construed as including other elements. All terms, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise defined. Commonly used terms, such as predefined terms, should be interpreted to be consistent with the contextual meanings of the related art, and are not to be construed as ideal or overly formal, unless expressly defined to the contrary.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas falling within the scope of the same shall be construed as falling within the scope of the present invention.

Claims (12)

An authentication reference information storage unit for storing reference image or reference image related information corresponding to the reference image as user authentication reference information;
An authentication request receiving unit for receiving image or image related information corresponding to the image from the terminal of the user as authentication request information; And
An authentication processing unit for comparing the authentication reference information and the authentication request information with each other and for performing authentication processing for the user according to the comparison result,
Lt; / RTI >
The data length of the reference image related information or the image related information is determined based on the authentication level, and when the level of the authentication level is low, the data length of the reference image related information or the image related information is shortened, The data length of the reference image related information or the image related information becomes long when the level is high. The method according to claim 1,
Wherein the reference image related information comprises:
A reference hash value for the meta data of the reference image or the meta data of the reference image,
The image-
A hash value for the metadata of the image or the metadata of the image. 3. The method of claim 2,
Further comprising a metadata extracting unit for extracting metadata of the reference image or metadata of the image from the reference image or the image. 3. The method of claim 2,
And a hash value generator for generating the reference hash value or the hash value from the metadata of the reference image or the metadata of the image using a hash function Features a user authentication server. 3. The method of claim 2,
The meta data of the reference image,
Attribute information on the reference image, or attribute information on two or more reference images,
The metadata of the image includes:
Wherein the attribute information is information obtained by combining attribute information on the image or attribute information on two or more images. The method according to claim 1,
The authentication processing unit,
Wherein the authentication processing is performed as an additional authentication procedure after determining whether a separate authentication procedure for the user is performed or not. In a method for a server to perform user authentication,
An authentication reference information storage step of storing reference image or reference image related information corresponding to the reference image as user authentication reference information;
An authentication request receiving step of receiving image or image related information corresponding to the image from the terminal of the user as authentication request information; And
And an authentication processing step of comparing the authentication reference information and the authentication request information with data of the same type and performing authentication processing for the user according to the comparison result,
The data length of the reference image related information or the image related information is determined based on the authentication level, and when the level of the authentication level is low, the data length of the reference image related information or the image related information is shortened, And the data length of the reference image related information or the image related information is lengthened when the level is high. An authentication request unit for transmitting an image or image-related information corresponding to the image to the server as authentication request information; And
An authentication processing result receiving unit for receiving, from the server, an image-based authentication processing result based on the authentication reference information stored in the server and the authentication request information,
Lt; / RTI >
The data length of the reference image related information is determined based on the authentication level, the data length of the image related information is determined based on the authentication level, The data length of the reference image related information or the image related information is shortened and the data length of the reference image related information or the image related information becomes long when the level of the authentication level is high. 9. The method of claim 8,
The authentication request unit,
Wherein the authentication request information is transmitted to the server as an additional authentication procedure after a separate authentication procedure for the user is performed. A method for a terminal to perform user authentication,
An authentication request step of transmitting an image or image-related information corresponding to the image as authentication request information to a server; And
And an authentication processing result receiving step of receiving an image-based authentication processing result based on the authentication reference information stored in the server and the authentication request information from the server,
The data length of the reference image related information is determined based on the authentication level, the data length of the image related information is determined based on the authentication level, The data length of the reference image related information or the image related information is shortened and the data length of the reference image related information or the image related information becomes long when the level of the authentication level is high. A recording medium on which a program for executing a method for performing user authentication is recorded,
A function of transmitting an image or image-related information corresponding to the image to the server as authentication request information; And
Based authentication processing information based on the authentication reference information stored in the server and the authentication request information from the server,
The data length of the reference image related information is determined based on the authentication level, the data length of the image related information is determined based on the authentication level, The data length of the reference image related information or the image related information becomes short, and when the level of the authentication level is high, a program in which the data length of the reference image related information or the image related information becomes long is recorded, Lt; / RTI > 8. The method of claim 7,
Wherein the reference image related information corresponding to the reference image or the reference image is transmitted from the terminal transmitting the authentication request information or from another terminal and stored.

Images