KR101467544B1 - Apparatus and method for processing user authentication - Google Patents

Abstract

A user authentication processing apparatus according to the present invention includes a memory for storing a user authentication application and a processor for executing the user authentication application, wherein the memory places a plurality of characters on a matrix table, A numeric code table in which two different numbers are arranged at different positions in the direction of the number and at least two characters to be used in the numeric code table set by the user and a numeric password among numerals located in the row direction and column direction of the characters Wherein the processor displays a numeric password table in which characters and numerals are randomly arranged according to a first setting when the user authentication application is executed, According to the first setting The decryption information is generated by decoding the position information of the numeral cipher to be matched with the character matched to the numeral and the numeral cipher to be matched to the numeral cipher table based on the result of comparing the decipher information with the cipher information stored in the memory And performs authentication processing.

Description

[0001] APPARATUS AND METHOD FOR PROCESSING USER AUTHENTICATION [0002]

The present invention relates to an apparatus and a method for processing a user authentication.

The mobile environment is rapidly becoming more sophisticated and universal. Mobile environment refers to the hardware, software, network, and service environment in which mobile devices such as notebooks, cell phones, smart phones, and tablet PCs are related. The mobile environment has the advantage that the function of the fixed device can be used without any place and time. However, since it can be used not only in a personal place, but also in a public place, there is a disadvantage that the possibility of leakage of a password or a password for user authentication processing increases.

Especially, the technology development against the shoulder surfing attack is insufficient. In the conventional technology, the password or the password setting is directly inputted or displayed on the screen of the mobile device, and the possibility of the leakage is very high. The password setting using the pattern or the like causes the user to make an error due to difficulty in memorizing as the security becomes higher.

Therefore, it is necessary to develop technology for user authentication processing with high security in preparation for shoulder surfing attack.

In this regard, Korean Patent Laid-Open Publication No. 10-2011-0003027 (entitled " A system and method for inputting password using alpha-numeric matrix ") discloses a method of inputting alphabetic characters - Provides a password input system and method using an alphanumeric matrix that can prevent keylogging attacks and shoulder surfing attacks by inputting a new metric matrix character as a final password.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems of the conventional art, and it is an object of the present invention to provide an apparatus and method for processing a user authentication configured by a matrix capable of generating an OTP password.

According to an aspect of the present invention, there is provided a user authentication processing apparatus including a memory for storing a user authentication application and a processor for executing the user authentication application, A numeric value cipher table in which two numbers different from each other in the row direction and the column direction are arranged at different positions for each character and at least two characters to be used on the numeric value cipher table set by the user, Wherein the processor stores cryptographic information including a position of a numeral to be designated by a numeral cipher among numbers located in a row direction and a column direction of the character, and the processor, when executing the user authentication application, A randomly arranged numeric password table Then, the number corresponding to the user's password input is applied to the numeric password table according to the first setting, and the decryption information is generated by decoding the character matched to the corresponding number and the positional information of the numeric password to be matched with the corresponding character , And performs authentication processing based on a result of comparison between the decryption information and the encryption information stored in the memory.

According to another aspect of the present invention, there is provided a method of processing a user authentication using a user authentication processing apparatus, the method comprising: storing password information to be used on a numeric password table; Displaying a numeric password table in which letters and numbers are randomly arranged according to a setting, applying a number corresponding to a user's password input to a numeric password table according to the first setting, Decrypting the positional information of the numeric cipher to be matched with the cipher information to generate decryption information, and performing authentication processing based on a result of comparing the decryption information and the pre-stored cipher information, wherein the numeric cipher table includes a plurality of Let the characters be placed on the matrix table, and for each character in the row and column directions Wherein the password information is at least two or more characters to be used on the numeric password table set by the user and a numeric password among numbers located in the row direction and column direction of the character The location information of the number to be stored.

According to an embodiment of the present invention, an OTP can be generated by randomly displaying letters and numbers in a numeric password table composed of a matrix so as to generate a numeric password matched with character and position information set by a user .

According to an embodiment of the present invention, a user inputs an indirect numeric password extracted through a numeric password table composed of a matrix of numeric passwords matched with preset character and position information, Leakage can be prevented.

1 is a configuration diagram of a user authentication processing apparatus according to an embodiment of the present invention.
2 is a diagram for explaining an example of password information setting.
3 is a view for explaining an example of numeric password input through a numeric password table.
4 is a flowchart illustrating a user authentication processing method using a user authentication processing apparatus according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "comprising ", it means that it can include other elements as well, without departing from the other elements unless specifically stated otherwise.

1 is a configuration diagram of a user authentication processing apparatus according to an embodiment of the present invention.

At this time, in the embodiment of the present invention, it is assumed that the user authentication processing apparatus 100 is a mobile device (for example, a smart phone).

Although FIG. 1 shows configurations for user authentication processing using a matrix table according to an embodiment of the present invention, other processing units (not shown) may be further included depending on the type of the apparatus.

Also, the user authentication processing device 100 may be implemented as a portable terminal or a computer. Here, the portable terminal is, for example, a portable communication device with guaranteed portability and mobility, such as a Personal Communication System (PCS), a Global System for Mobile communications (GSM), a Personal Digital Cellular (PDC) PDA (Personal Digital Assistant), IMT (International Mobile Telecommunication) -2000, Code Division Multiple Access (CDMA) -2000, W-Code Division Multiple Access (W-CDMA), WiBro (Wireless Broadband Internet) Phone, a smart pad, and the like, for example. In addition, the computer may include, for example, a notebook computer, a desktop computer, a laptop computer, a tablet PC, and the like, each of which is equipped with a WEB Browser.

A user authentication processing apparatus 100 according to an embodiment of the present invention includes a memory 110 and a processor 120. [

The memory 110 stores a user authentication application. The memory 110 also includes a numeric encryption table in which a plurality of characters are arranged on a matrix table and two different numbers are arranged at different positions in the row direction and the column direction for each character, At least two characters and at least two characters to be used in the encryption table, and cryptographic information including position information of a numeral to be designated by a numeric cipher among numbers located in the column direction.

In this case, the numeric encryption table is a table made up of mxn matrices, in which one row direction of each row and one row direction of each column are arranged with two numbers located on the upper side and the lower side, and one row and column You can place characters in the excluded rows and columns.

For example, in the case of a matrix table composed of 6 x 6 matrices, numbers can be arranged in one column of each row and one row in each column as one row direction of each column. In this case, the numbers may be two pairs of numbers located on the left upper side and the lower right side respectively. On the other hand, characters can be arranged in rows and columns excluding the first row and first column in which numbers are arranged. Here, the characters may include alphabets, Hangul characters, Chinese characters, symbols, etc., and a plurality of characters including characters designated by the user when arranging the characters may be arbitrarily arranged. That is, the numeric password table may be a form in which a numeral is arranged in the first row and first column of the 6 x 6 matrix table, and characters are arranged in the remaining rows and columns.

The numeric password table is for generating a numeric password for OTP (One Time Password) through the location information of a number to be designated by two or more characters and a numeric password designated by the user. That is, the memory 110 may store location information of two or more characters and numbers set by the user as password information, and may store a numeric password table for generating a numeric password matched with the password information. The password information is an indirect password that can input a number for OTP, not a fixed number, and it is easy to memorize and can protect the shoulder surfing attack. A more detailed description thereof will be described later with reference to Fig.

The processor 120 executes a user authentication application. When executing the user authentication application, the processor 120 displays a numeric password table in which letters and numbers are randomly arranged according to the first setting, and displays a number corresponding to the user's password input as a number And generates decryption information by decoding the position information of the numeral cipher to be matched with the corresponding number and the numeric cipher to be matched with the corresponding numeral, and based on the result of comparing the decryption information and the cipher information stored in the memory 110 And performs authentication processing.

For example, the processor 120 may display a numeric password table in which characters and numbers are randomly arranged after executing the user authentication application. Further, it is possible to grasp the positional information of the letters and numbers on the numeric password table displayed through the numbers inputted by the user, and the positional information of the recognized letters and numbers is stored in the memory 110, that is, the password information stored by the user And the position information of the number. If they match, the security according to the user authentication approval can be released, or if not, the security state according to the user non-authentication can be maintained. A more detailed description thereof will be described later with reference to FIG.

In addition, the processor 120 sequentially displays a numeric password table in which letters and numbers are randomly arranged according to the second setting after the display of the numeric password table in which letters and numbers are randomly arranged according to the first setting, The number corresponding to the password input is applied to the numeric password table corresponding to the first setting and the numeric password table corresponding to the second setting to decode the character matched to the numeric value and the positional information of the numeric code to be matched to the character Decryption information can be generated.

For example, when two or more characters stored as password information are set, one setting per character, that is, n-th settings per n characters can be set. That is, a numeric password table corresponding to one character is displayed to decode the input numeral, another numeric password table corresponding to another character is displayed, the input numeral is decoded, and decryption information is synthesized to perform authentication processing . A more detailed description thereof will be described later with reference to FIG.

2 is a diagram for explaining an example of password information setting.

At this time, in the embodiment of the present invention, it is assumed that the user authentication processing apparatus 100 is a mobile device (for example, a smart phone).

First, the cipher information includes position information of at least two letters and numbers. In other words, it may include at least two characters to be used on the numeric encryption table, and position information of a numeral to be designated by numeric cipher among numbers located in the column direction and column direction of the character. Therefore, the character setting area 201 for setting a character and the position setting area 202 for inputting the position information of a number can be displayed, so that the user can input characters and position information.

The character setting area 201 can set two characters. As shown in FIG. 2, the alphabet 'D' and the alphabet 'H' may be set to letters. In this example, the character setting area 201 for setting two characters is shown, but the number of character settings is not limited.

The location setting area 202 can set two pieces of location information per character. This is the positional information designating the numbers located in the row direction and the column direction of the characters. For example, when the position information of the character 'D' is set to the upper left side and the upper left side, the first upper left side indicates the number located on the upper left side among the numbers located in the row direction of the character 'D' It may be to point to the upper left corner of the numbers in the column direction of 'D'. When the position information of the character 'H' is set to the left upper side and the right lower side, the upper left side indicates the number located on the upper left side among the numbers located in the row direction of the character 'H' It may be to point to the number on the lower right of the number in the column direction. Consequently, the cryptographic information can be "row-upper-left side of D, row-upper-left side of D, row-upper-left side of H, column-lower-right side of H".

The location information of two or more characters and numbers set is stored as password information, and when the user inputs a number corresponding to the password input, the inputted number can be compared with the decryption information decoded. If the password information and the decryption information match, the user authentication is processed and the security can be released. An example of inputting the numeric password based on the set password information will be described later with reference to FIG.

3 is a view for explaining an example of numeric password input through a numeric password table.

As shown in Figs. 3 (a) and 3 (b), the numeric password table 301 can be generated by a 6 x 6 matrix table. At this time, the numbers can be randomly arranged in the first row and the first column, and the characters can be randomly arranged in the remaining rows and columns. When placing numbers, you can place two numbers on the upper left and lower left.

The user sequentially applies the "row-upper left side of D, upper left-side of D, upper left-hand side of H, upper left-hand side, H column-lower right end" set in the password information to the numeric password table 301 to set the numeric password Can be input. At this time, one numeric value encryption table 301 per character can be updated in the numeric value encryption table 301. The user can check the numeric encryption table 301 corresponding to one character and then display the new numeric encryption table 301 by passing the screen.

First, the numeric password of the letter 'D' can be found by using the numeric password table 301 shown in FIG. 3A. Since the password information for the letter 'D' is "row-upper-left side of D, row-upper-left side of D", first, it is confirmed that the number located on the upper left side among the numbers arranged in the row of letter 'D' is '7' have. Next, it can be confirmed that the number located on the upper left side among the numbers arranged in the column of the character 'D' is '9'. That is, the numbers "7" and "9" can be sequentially inputted since "D row-upper left side: 7, D row upper left side: 9"

Next, first, the numeric password of the character 'H' can be found by using the numeric encryption table 301 shown in FIG. 3 (b). Since the cipher information for the character 'H' is "row-upper-left side of H, column-lower right-hand side of H", it can be confirmed that the number located on the upper left side among the numbers arranged in the row of character 'H' have. Next, it can be confirmed that the number located on the lower right side among the numbers arranged in the column of the character 'H' is '5'. That is, since the row "H" on the upper left side is 9, the row of H is lower and the lower row is 5 ", the numbers" 9 "and" 5 "can be sequentially inputted.

The numbers identified in FIGS. 3A and 3B can be input through the number input area 303 shown in FIG. 3C. Since two digits are generated for one character, four digits can be input, and whether or not the digits are input can be confirmed through the input confirmation area 305. [ Therefore, the user can confirm that the number '7995' is inputted through the input confirmation area 305 as shown in (c) of FIG. At this time, the input confirmation area 305 may display a password input with a unified symbol rather than a number, thereby enhancing security. However, since the numeric password of the present invention is a password for OTP, a different numeric password is set every time, Can be prevented from being leaked.

4 is a flowchart illustrating a user authentication processing method using a user authentication processing apparatus according to an embodiment of the present invention.

In step S110, password information to be used on the numeric password table is stored. At this time, the numeric password table is a table in which a plurality of characters are arranged on a matrix table, and two different numbers are arranged at different positions in the row direction and the column direction with respect to each character. In addition, the numeric encryption table is a table made up of mxn matrices, in which two numerals located on the upper side and the lower side are arranged in one column direction of each row and one row direction of each column, and one row and column And places the characters in the excluded rows and columns. The cipher information includes at least two characters and at least two characters to be used on the numeric cipher table set by the user, and position information of a numeral to be designated by numeric cipher among numbers located in the column direction.

In step S120, when executing the user authentication application installed in the user authentication processing apparatus, a numeric password table in which letters and numbers are randomly arranged according to the first setting is displayed. In addition, step S120 may sequentially display the numeric encryption table in which characters and numbers are randomly arranged according to the second setting after the display of the numeric encryption table in which letters and numbers are randomly arranged according to the first setting.

In step S130, the number corresponding to the user's password input is applied to the numeric password table according to the first setting to decode the character matched to the corresponding number and the positional information of the numeric code to be matched to the character, . In addition, in step S130, the number corresponding to the user's password input is applied to the numeric password table according to the first setting and the numeric password table according to the second setting, and a character matched to the corresponding number and a number The decryption information can be generated by decoding the position information of the cipher.

In step S140, the authentication processing is performed based on the result of comparison between the decryption information and the previously stored encrypted information. That is, it can be determined whether the character and position information according to the decryption information coincide with the character and position information of the pre-stored password information, and if they match, the user authentication can be approved and the security can be released. If there is an inconsistency, the user authentication is unapproved and the security can be maintained.

One embodiment of the present invention may also be embodied in the form of a recording medium including instructions executable by a computer, such as program modules, being executed by a computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, the computer-readable medium may include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes any information delivery media, including computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism.

It will be understood by those skilled in the art that the foregoing description of the present invention is for illustrative purposes only and that those of ordinary skill in the art can readily understand that various changes and modifications may be made without departing from the spirit or essential characteristics of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

100: user authentication processing device 110: memory
120: Processor 201: Character setting area
202: Position setting area 301: Number password table
303: Numerical input area 305: Input confirmation area

Claims (10)

In the user authentication processing device,
Password information including cipher-specified location information among two or more characters according to a previously set user setting and two numerical positions arranged at positions different from each other in a row direction and a column direction for each of the two or more characters; This stored memory; And
And a processor executing the user authentication application,
The processor comprising:
Upon execution of the user authentication application,
A numeric encryption table in which a plurality of characters are arranged on a matrix table and two different numbers are arranged at different positions in the row direction and the column direction for each character, and,
Wherein the input number is applied to the numeric value encryption table according to the first setting, and the number of characters matched to the row direction and the column direction of the inputted number on the numeric value encryption table and the matching Decodes the position in the row direction and the column direction of the character to generate decryption information,
And performs authentication processing based on a result of comparison between the decryption information and the password information stored in the memory. The method according to claim 1,
Wherein the processor sequentially displays a numeric password table in which letters and numbers are randomly arranged according to a second setting after the display of the numeric password table in which letters and numbers are randomly arranged according to the first setting,
The number corresponding to the input of the user's password is applied to the numeric password table corresponding to the first setting and the numeric password table corresponding to the second setting to display a character matched to the numeric value and a numeric password And decrypting the information to generate decryption information. The method according to claim 1,
The numeric encryption table is a table made up of mxn matrices, and two numbers located on the upper and lower sides in one column direction and one row direction of each column are arranged in each row, and one row and column And the character is placed in a row and a column except for the character. A user authentication processing method using a user authentication processing device,
Storing cryptographic information to be used on a numeric cipher table in which a plurality of characters are arranged on a matrix table and two different numbers are arranged at different positions in a row direction and a column direction for each character;
Executing the pre-installed user authentication application to display the numeric password table in which letters and numbers are randomly arranged according to a first setting;
Wherein the input number is applied to the numeric value encryption table according to the first setting, and the number of characters matched to the row direction and the column direction of the inputted number on the numeric value encryption table and the matching Decoding the position in the row direction and the column direction of the character to generate decryption information; And
Comparing the decryption information with the stored encryption information, and performing an authentication process based on the comparison result,
The encryption information includes,
Wherein the user identification information includes at least two characters according to user input settings, and position information designated by a password among positions of two numbers arranged at positions different from each other in a row direction and a column direction for each of the two or more characters. 5. The method of claim 4,
The step of displaying the numeric password table may include displaying a numeric password table in which letters and numbers are randomly arranged according to a first setting, Authentication processing method. 6. The method of claim 5,
Wherein the generating the decryption information comprises applying a number corresponding to the user's password input to the numeric encryption table according to the first setting and the numeric encryption table according to the second setting, And decoding the location information of the numeric cipher to be matched to generate decryption information. 5. The method of claim 4,
The numeric encryption table is a table made up of mxn matrices, and two numbers located on the upper and lower sides in one column direction and one row direction of each column are arranged in each row, and one row and column And the character is placed in a row and a column except for the character. A computer-readable recording medium recording a program for performing the method according to any one of claims 4 to 7 on a computer. In the user authentication processing device,
Password information including cipher-specified location information among two or more characters according to a previously set user setting and two numerical positions arranged at positions different from each other in a row direction and a column direction for each of the two or more characters; This stored memory; And
And a processor executing the user authentication application,
The processor comprising:
Upon execution of the user authentication application,
A numeric encryption table in which a plurality of characters are arranged on a matrix table and two different numbers are arranged at different positions in the row direction and the column direction for each character, and,
Detecting a number that matches the cryptographic information on the numeric encryption table according to the first setting to generate a numeric cipher,
And compares the inputted numeral with the generated numeric cipher according to a user's password input, and performs an authentication process based on the comparison result. A user authentication processing method using a user authentication processing device,
Storing cipher information including two or more characters according to a user setting inputted and cipher-specified position information among positions of two numbers arranged at positions different from each other in a row direction and a column direction for each of the two or more characters;
A plurality of characters are arranged on a matrix table and two different numbers are arranged at different positions in a row direction and a column direction for each of the characters, Displaying a randomly arranged numeric password table;
Detecting a number that matches the cryptographic information on the numeric encryption table according to the first setting to generate a numeric cipher; And
Comparing the number entered according to a user's password input with the generated numeric password, and performing an authentication process based on the comparison result.

Images