KR101621002B1 - Method for providing log in service using image array - Google Patents

Abstract

Provided is a method for providing a login service using an image array, capable of perfectly preventing a concerned hacking. The method includes the steps of: receiving ID data based on a login event from a user terminal; controlling to output in the user terminal at least one type of image keyboard having at least one image which is matched with the ID data of the user terminal beforehand and stored; transmitting a private hash key and a temporary hash key to the user terminal; receiving transmission data in which at least one unique identification data corresponding to at least one image included in an image keyboard selected from the user terminal is combined with the private hash key and the temporary hash key; and providing a login service with respect to the user terminal if the received transmission data correspond with the stored data which is matched beforehand with the user terminal and stored.

Description

{METHOD FOR PROVIDING LOG IN SERVICE USING IMAGE ARRAY}

The present invention relates to a method of providing a login service using an image arrangement.

In recent years, the issue of increasing the reproof and security of security companies that can prevent the leakage of personal information due to the occurrence of a large number of personal information leakage events is a hot topic. Since the ID and the password are composed of characters, when the ID and the password transmitted between the client and the server are hijacked, the user's ID and password can be easily exposed.

At this time, a method of setting a password as an image is a method of connecting a randomly generated image to a pattern and a method of using an image as a password. In this connection, Korean Patent Publication No. 2010-0065136 (published on June 15, 2010) and Korean Registration No. 10-1328118 (issued on Nov. 13, 2013), assigns a sequence determined by a user to correspond to a password, There is disclosed a method in which a user selects an image corresponding to a password and decides whether or not security is to be released according to image sequences, and a method of stringing and transmitting the image itself.

However, the pattern transformation method according to which the pattern of the mobile terminal is easily leaked can not be applied to the communication between the client and the server. Also, when a user logs in using a public certificate from a mobile-based terminal, since the keyboard layout is randomly arranged for security of the keyboard, if the English alphabet corresponding to the Korean alphabet is set as the password, the user abandons the login in the mobile, Most of the time you are logging in from your PC. Also, if the same string is used for each login attempt, there is a risk of hacking.

The embodiment of the present invention randomly generates a temporary hash key for each login attempt, so that even if the same image is used as a password, data generated at the user terminal can be transmitted to the authentication server every time the login is attempted, It is possible to provide a method of providing a login service using an image array, which can completely block a concern. It should be understood, however, that the technical scope of the present invention is not limited to the above-described technical problems, and other technical problems may exist.

As a technical means for achieving the above technical object, an embodiment of the present invention is characterized by including: receiving ID data based on a login event from a user terminal; storing at least one image stored in matched relation with the ID data of the user terminal Transmitting a private hash key and a temporary hash key from the user terminal to the user terminal, receiving the selected image from the user terminal, Receiving at least one unique identification data corresponding to at least one image contained in a keyboard in combination with a hash-only key and a hash temporary key, and transmitting the received transmission data and the user- If the stored data match, the login service for the user terminal And a step of balls.

According to the present invention, even if the same image is used as the secret data, the data generated and transmitted at the user terminal are different from each other at the login attempt, thereby completely blocking the risk of hacking, The user can easily input and store secret data by using a desired keyboard pattern and a customized keyboard, store the image source selected by the user in a separate server, and transmit only unique identification data randomly set to be mapped to the image The image set by the user can be unidentifiable even if the server is hacked, and the unique identification data mapped to the image can be set differently even if the same image is used, Can not.

1 is a block diagram illustrating a login service providing system using an image arrangement according to an exemplary embodiment of the present invention.
2 is a block diagram illustrating a login service providing server using the image arrangement shown in FIG.
FIG. 3 is a diagram illustrating an embodiment in which a login service using the image arrangement shown in FIG. 1 is implemented in a user terminal.
FIG. 4 is a diagram illustrating another embodiment in which a login service using the image arrangement shown in FIG. 1 is implemented in a user terminal.
5 is a diagram illustrating a process in which data is transmitted and received between the respective components included in the login service providing system using the image arrangement of FIG. 1 according to an embodiment of the present invention.
6 is a flowchart illustrating a method of providing a login service using an image arrangement according to an exemplary embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "including" an element, it is to be understood that the element may include other elements as well as other elements, And does not preclude the presence or addition of one or more other features, integers, steps, operations, components, parts, or combinations thereof.

The terms "about "," substantially ", etc. used to the extent that they are used throughout the specification are used in their numerical values or in close proximity to their numerical values when the manufacturing and material tolerances inherent in the stated meanings are presented, Accurate or absolute numbers are used to help prevent unauthorized exploitation by unauthorized intruders of the referenced disclosure. The word " step (or step) "or" step "does not mean" step for. &Quot;

In this specification, the term " part " includes a unit realized by hardware, a unit realized by software, and a unit realized by using both. Further, one unit may be implemented using two or more hardware, or two or more units may be implemented by one hardware.

In the present description, some of the operations or functions described as being performed by a terminal, a device, or a device may be performed instead in a server connected to the terminal, device, or device. Likewise, some of the operations or functions described as being performed by the server may also be performed in a terminal, device or device connected to the server.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating a login service providing system using an image arrangement according to an exemplary embodiment of the present invention. Referring to FIG. 1, the login service providing system 1 using an image arrangement may include a user terminal 100 and a login service providing server 300 using an image arrangement. However, since the login service providing system 1 using the image arrangement of FIG. 1 is only one embodiment of the present invention, the present invention is not limited to FIG.

At this time, the respective components of FIG. 1 are generally connected through a network 200. For example, as shown in FIG. 1, a user terminal 100 may be connected to a login service providing server 300 using an image arrangement through a network 200. Here, the network 200 refers to a connection structure capable of exchanging information between nodes such as terminals and servers. An example of the network 200 is an Internet, a LAN (Local Area Network) ), Wireless LAN (Local Area Network), WAN (Wide Area Network), PAN (Personal Area Network), 3G, 4G, LTE, Wi-Fi and the like. The user terminal 100 and the login service providing server 300 using the image arrangement shown in FIG. 1 are not limited to those shown in FIG.

The user terminal 100 may be at least one terminal connected to the login service providing server 300 using an image arrangement. In addition, the user terminal 100 may be a terminal using a mouse or a touch without using a keyboard or a keyboard in subscription and login authentication. Accordingly, the user terminal 100 may be a terminal that does not install a security-related program such as Active X in sign-up or login authentication. In addition, the user terminal 100 uses character data (String) at the time of membership registration and login authentication, and the image (password) is a terminal using the image, voice, image, and characters stored in the user terminal 100 . Here, the image may be an image, voice, image, or character received from the login service providing server 300 using the image arrangement. When the user terminal 100 selects an image from the login authentication and transmits the selected image to the login service providing server 300 using the image array, the user terminal 100 may transmit the unique identification data mapped to the image rather than the image itself. Further, the user terminal 100 issues a hash-only key and a hash temporary key from the login service providing server 300 using the image arrangement, and combines it with the unique identification data to provide a login service providing server 300). Accordingly, even if hijacking occurs between the user terminal 100 and the login service providing server 300 using the image array, it is difficult to know what image selected by the user terminal 100 is, have.

The user terminal 100 may be implemented as a computer that can access a remote server or terminal through the network 200. [ Here, the computer may include, for example, a notebook, a desktop, a laptop, and the like on which a WEB browser is installed. The user terminal 100 may be implemented as a terminal capable of connecting to a remote server or terminal through the network 200. The user terminal 100 may be a personal communication system (PCS), a global system for mobile communications (GSM), a personal digital cellular (PDC), a personal handyphone system (PHS) , PDA (Personal Digital Assistant), IMT (International Mobile Telecommunication) -2000, CDMA (Code Division Multiple Access) -2000, W-CDMA (W-CDMA), Wibro (Wireless Broadband Internet) a smartphone, a smartpad, a smart tablet, a Tablet PC, and the like.

The log-in service providing server 300 using the image arrangement receives the ID data from the user terminal 100 when the subscription event occurs in the user terminal 100, and transmits at least one image to the user terminal 100, (100). The login service providing server 300 using the image arrangement transmits the hashing private key and the hash temporary key for the user terminal 100 to the user terminal 100 and transmits the hash private key to the user terminal 100 And may be a server for transmitting in the user terminal 100 in combination with the unique identification data. Here, the hash-only key may be a key that is generated when the subscription event is generated in the user terminal 100 and is used fixedly, and may be generated randomly each time the user terminal 100 for hash- And may be a key to be transmitted to the user terminal 100 and used in the user terminal 100. Here, the login service providing server 300 using the image arrangement may transmit, in addition to at least one image, similar data similar to at least one image and false data. At this time, the user terminal 100 can select one or a plurality of images desired by the user of the user terminal 100 among at least one image. The unique identification data corresponding to one or a plurality of images selected from the user terminal 100 may be transmitted to the login service providing server 300 using the image arrangement in combination with the hash key and the hash temporary key. Here, the login service providing server 300 using the image arrangement may randomly generate unique identification data for one or a plurality of images, and the generated unique identification data may include one or a plurality of images, Can be mapped to ID data and stored as a table.

The login service providing server 300 using the image arrangement can store the ID data and the unique identification data of the user terminal 100 in a database of the user terminal 100 and store the ID data and unique identification data of the user terminal 100 in a database, The temporary key for hash generated each time the terminal 100 logs in may also store one or a plurality of images in a separate server in a database or may store a database separate from the database stored in the table. Accordingly, even if the database of the log-in service providing server 300 using the image arrangement is hacked, the risk that the image selected by the user terminal 100 is leaked can be eliminated. The login service providing server 300 using the image arrangement may be implemented as a computer capable of connecting to a remote server or terminal through the network 200. [ Here, the computer may include, for example, a notebook, a desktop, a laptop, and the like on which a WEB browser is installed.

The login service providing method using the image arrangement according to an embodiment of the present invention will be described as an example.

In recent years, the issue of increasing the reproof and security of security companies that can prevent the leakage of personal information due to the occurrence of a large number of personal information leakage events is a hot topic. Since the ID and the password are composed of characters, when the ID and the password transmitted between the client and the server are hijacked, the user's ID and password can be easily exposed.

In addition, Active X program based on IE (Internet Exploer) must be installed in setting ID and password, and since Chrome or Firefox not based on IE does not support security program Login itself is not possible. Also, even when a user logs in using a public certificate from a mobile-based terminal, since a keyboard layout is randomly arranged for security of the keyboard, if the English alphabet corresponding to Korean is set to a password, Most of the time you are logging in from your PC. In addition, since a plurality of programs are installed in the mobile terminal for securing the keyboard, the user using the 3G may download the program and give up the login altogether, or even download the security program and install it, The number of cases of giving up is increasing.

Accordingly, a method of providing a login service using an image arrangement according to an embodiment of the present invention is a method of providing a login service using a password, such as an image, a video, and a voice, . ≪ / RTI > Also, a method of providing a login service using an image array according to an embodiment of the present invention can log in without downloading and installing a security program such as ActiveX, and a random character string mapped to the image is used for a hash- By combining with the temporary key for hashing to send and receive between the client and the server, the risk of information leakage due to hijacking can be reduced. Also, in the method of providing a login service using an image arrangement according to an embodiment of the present invention, an image source selected by a user is stored in a separate server, and only the unique identification data set to be mapped to an image is mapped to a user's ID So that the image set by the user can not be identified even if the server is hacked. At this time, the unique identification data mapped to the image may be set differently even if it is the same image, so that the original of the image can not be discriminated from the outside.

FIG. 2 is a block diagram illustrating a login service providing server using the image arrangement shown in FIG. 1, and FIG. 3 illustrates an embodiment in which a login service using the image arrangement shown in FIG. 1 is implemented in a user terminal FIG. 4 is a diagram illustrating another embodiment in which a login service using the image arrangement shown in FIG. 1 is implemented in a user terminal.

2, a login service providing server 300 using an image arrangement according to an embodiment of the present invention includes a first receiving unit 310, a control unit 320, a transmitting unit 330, (340), and a providing unit (350).

A login service providing server 300 using an image arrangement according to an embodiment of the present invention or another server (not shown) operating in conjunction with a login service providing server 300 using an image arrangement may be used as an image- A web page, or the like to the user terminal 100, the user terminal 100 can install or open an application, a program, a web page, and the like for the service. Also, an image-based login program may be executed in the user terminal 100 by using a script executed in a web browser. Here, a web browser is a program that enables a WWW (World Wide Web) service, and is a program for receiving and displaying hypertext described in hypertext mark-up language (HTML), for example, Netscape (Netscape) An Explorer, chrome, and the like. Further, the application refers to an application on the terminal, for example, an app (app) running on a mobile terminal (smart phone).

The connection of the network 200 means that the user terminal 100 and the login service providing server 300 using the image arrangement are connected to each other so that the network 200 can be connected. Means that the used login service providing server 300 creates a communication object at a communication contact for communication with a terminal connected to the network 200. [ The login service providing server 300 using the image arrangement can exchange data with each other through the communication object.

The first receiving unit 310 can receive the ID data based on the login event from the user terminal 100. [ At this time, the ID data may be character data or content data such as an image, a voice, and an image. The user terminal 100 may proceed with membership registration before the login event and the ID receiving unit 310 may receive the ID data based on the membership registration request event from the user terminal 100. [

The control unit 320 may control the user terminal 100 to output at least one kind of image keyboard including at least one image stored in matched relation with the ID data of the user terminal 100. Here, the at least one image stored and matched with the ID of the user terminal 100 may be configured to receive the ID data based on the membership request event from the user terminal 100, to receive at least one kind of image from the user terminal 100 Receives the at least one image included in the selected image keyboard sequentially from the user terminal 100, sequentially transmits the hash temporary key and the hash key to the user terminal 100, The at least one unique identification data matched with the selected at least one image is transmitted to the user terminal (or the user terminal) by combining the hash temporary key and the hash dedicated key with the user terminal 100, and stores the received result data as a labeled table by matching with the ID data It can be set.

That is, the user terminal 100 may proceed with membership registration before performing the login event, and the control unit 320 may transmit at least one image corresponding to the ID data to be displayed on the screen of the user terminal. Accordingly, the user of the user terminal 100 can set at least one image desired by himself / herself.

A process of setting at least one image desired by the user terminal 100 and logging in using the image will now be described with reference to FIG. Referring to FIG. 3A, a screen for selecting an image of the user and pressing an OK button may be provided to the user terminal 100. At this time, the number of the entire images provided can be variously changed according to the environment of the client, that is, the user terminal 100, and the level of site security. For example, if the user terminal 100 is a PC, it may be 8 to 16, and if the user terminal 100 is a mobile terminal, it may be 6 to 8.

Also, the user terminal 100 may select the image keyboard before selecting the image. If the user selects the numeric image keyboard in the user terminal 100 as shown in (b), as shown in (c) You can select an image to be used as secret data. Also, if the keyboard of the English word image is selected in (b), an English word can be output as shown in (d). For example, if a user wants to generate confidential data of a combination of "I love you, I love dog ", the words" I " dog "and" love ". In addition, as in (e), all English words except for personal pronouns can be selected, or (f). Accordingly, when an image is used, since the number of keys is relatively smaller than that of an existing key, the selection is easy and the password is not memorized. In this case, even if the keyboard pattern is hacked because the keyboard is not secured, a method of providing a login service using an image arrangement according to an embodiment of the present invention is a combination of a temporary key for hashing and a dedicated key for hashing, There is no risk of hacking even if it is hacked, even if it is hacked, unless it is generated in the user terminal 100. [

2, the control unit 320 controls the image terminal 100 to output at least one type of image keyboard including at least one image stored in matched relation with the ID data of the user terminal 100 The user terminal 100 allows the user terminal 100 to select at least one type of image keyboard including at least one image stored in matched relation with the ID data of the user terminal 100, And the like. Here, the selected image keyboard includes at least one image, attracting data, and false data, and at least one image, attracting data, and false data are mixed and arranged in an array on the screen of the user terminal 100, In the case where there is a plurality of at least one image, the number of screens displayed on the user terminal 100 is determined based on the number of images, and the probability that the attracting data is exposed in the user terminal 100 is at least one image May be determined based on the probability of exposure. Here, when the ID data received from the user terminal 100 is not stored in the registered ID data, the login service providing server 300 using the image arrangement can transmit a plurality of false data to the user terminal 100 have.

At this time, at least one unique identification data is randomly generated so as to correspond to at least one image when a membership subscription event is generated in the user terminal 100, and at least one unique identification data, at least one unique identification data, Type image keyboard and ID data can be matched one to many (1: many), respectively. In addition, the ID data of the user terminal 100 and at least one unique identification data are matched and stored in a database as a labeled table, and at least one image to which at least one unique identification data is assigned is stored in a database And at least one image is stored in a separate database and at least one pass data (Passdata) corresponding to the ID data (ID Data) among Passage, Passvoice, Passvideo, ).

The transmitting unit 330 may transmit a private hash key and a temporary hash key to the user terminal 100. The hash key is randomly changed every time the user terminal 100 logs in and is transmitted from the login service providing server 300 using the image array to the user terminal 100. The dedicated key for hash When the terminal 100 logs in, it may be fixed data transmitted from the log-in service providing server to the user terminal 100 and stored in association with the ID data of the user terminal 100.

The second receiving unit 340 receives at least one unique identification data corresponding to at least one image included in the image keyboard selected from the user terminal 100 as transmission data combined with the hash only key and the hash temporary key .

The providing unit 350 may provide the login service for the user terminal 100 when the received transmission data matches the stored data stored in matching with the user terminal 100. [ At this time, when providing the login service for the user terminal 100 when the received transmission data matches the stored data stored in matching with the user terminal 100 in the providing unit 350, the transmission data and the hash If the hash function result combined with the temporary key for the hash function matches the result of the hash function combining the at least one unique identification data corresponding to at least one image stored in the ID data and stored in the ID data, Or by providing a login service for the mobile device 100.

The operation of the providing unit 350 will now be described with reference to FIG.

Referring to FIG. 4, even if an image keyboard of the same category is used, there may be another keyboard having unique identification data mapped to an actual image. That is, as shown in (a), the unique identification data mapped to i, you, love and dog among the English word category # 001 key data are assumed to be cc, 12, dc, and dk, The unique identification data mapped to i, you, love, and dog in the 002 key data are assumed to be 92, ap, ya, and 93, respectively. Here, the unique identification data is represented by two digits for the sake of explanation, but it is not limited to two digits but may be longer. (C), when the user selects i, you, love, and dog using the English word category # 001 keyboard, the login service providing server 300 using the image arrangement expects cc12dcdk, The user can transmit the word category # 001 keyboard to the user terminal 100. At this time, the login service providing server 300 using the image arrangement can process authentication failure if cc12dcdk is not received. Likewise, when the user selects i, you, love, dog by using the English word category # 002 keyboard, the login service providing server 300 using the image arrangement searches the English word category # 002 keyboard To the terminal 100. At this time, the login service providing server 300 using the image arrangement may fail authentication if 92apya93 is not received.

The category keyboard is used for enhancing the security of data, and may be a combination of at least one content such as text, image, and moving picture. In addition, the category keyboard can provide not only an emoticon image but also various images (texts (numerals, symbols, alphabets, special symbols, etc.)) for each category so that the user can select an image keyboard type.

In addition to the unique identification data mapped to the image, the providing unit 350 receives the hash dedicated key (PHK) and the hash temporary key (THK) and substitutes the received unique identification data (V) Data can be expected to be received from the user terminal 100. [ For example, as shown in Equations (1) and (2), different values are generated for each login attempt in the hash-enabled user terminal 100, so that even if the same image is selected, Lt; / RTI >

Here, if the unique identification data (V) and the hash key (PHK) for the image selected by the user terminal (100) are constant but the hash temporary key (THK) is different, Lt; / RTI >

The providing unit 350 may then map and store the hash temporary key (THK) transmitted to the user terminal 100 with the user terminal 100 and compare the same with the received transmission data (D). For example, it is assumed that the table mapped with the user terminal 100 and stored is as shown in Table 1 below.

ID hong name Hong Gil Dong category English words Dedicated keys for hashing abc Temporary keys for hashing 999aa Image data LoSBTL7ww1PAY3vOmqbpJAGCKEh

Here, the hash private key PHK may be a unique value generated when registering the member information, and the PIV may be a value generated and registered when the member information is registered with hash (V + PHK).

At this time, the providing unit 350 outputs the authentication result when the received data satisfies Equation (3), and outputs a result satisfying Equation (4).

In this case, the hash function is an algorithm for mapping data of an arbitrary length to data of a fixed length. If the values obtained from the hash functions are different from each other, the original data for the hash values must be different. Is not established. That is, even if they have the same hash value, they do not guarantee that the original input values are the same. Thus, even if only one bit of the original input is changed, the hash value can be greatly changed due to the nature of the hash function. In the case of using the hash function in duplicate, when the original input value is different at the time of authentication, authentication becomes impossible and hacking is impossible at all. Accordingly, it can be used as a substitute for a public certificate such as a double authentication of a financial transaction, can be used for accessing an apartment building, a smartphone app, or for substituting a card password.

On the other hand, the login service providing server 300 using the image arrangement can store only the unique identification data of the image without storing the image (image, audio, image, character) in binary form in the database itself, Can be stored in the form shown in Table 2 below.

ID ID_IMG hong 12333xyddaaaa hong 1029333ddzzyd who 20339aadd who azzeddfa222 who 3930szzd00az who gjtlda938z who 33i9d11234zzg

In addition, the unique identification data of the image may specify a certain format according to the site, may include format information according to the unique identification data, the data name may be randomly generated when the user registers the data, , And can include specific formats for each site. For example, assuming that an image named a.jpg is uploaded from the user terminal 100, the new image name may be 2309 aazt, the image name may be 32309 aazt, or other rules (fake, real ) Can be created as ab312309aazt with the given name.

The login service providing server 300 using the image array can transmit a plurality of false data to the user terminal 100 when the ID data received from the user terminal 100 is not stored and registered as ID data have. This makes it impossible to confirm whether the user terminal 100 has mistakenly input the ID data or whether the image has been mistakenly input, thereby preventing analogy between the ID data and the image. In this case, the image may be secret data. For example, the concept of a password is a concept of a key set by a user including a number including a character and a symbol, but the image may include an image that can include a password, , Image, and character, and can be defined as the concept of the key set by the user. Therefore, since the user terminal 100 can input an image without using the keyboard key board, log-in is possible without installing a security program such as ActiveX and login is possible even if the security program related to the keyboard keyboard is not activated .

Also, the at least one image, the attracting data, and the false data transmitted to the user terminal 100 may be arranged in an array by mixing the image, the attracting data, and the false data on the screen of the user terminal 100. At this time, when there are a plurality of at least one image, the number of screens displayed on the user terminal 100 may be determined based on the number of images. That is, at least one image, attracting data, and false data transmitted to the user terminal 100 may be displayed one by one on the screen of the user terminal 100.

At this time, when the image set by the client, that is, the user terminal 100 is a secret image and a secret image matching the ID data is requested to the login service providing server 300 using the image array, And the attracting image and the false image may be included in a satisfactory condition and transmitted to the user terminal 100.

Assuming that the number of images to be transmitted is t, the number of secret images associated with the ID data, that is, the number p of secret images set by the user terminal 100, can be defined as Equation (5).

Here, p denotes the number of secret images, t denotes the total number of images to be transmitted to the user terminal 100, and r denotes a value adjustable according to characteristics of the site or the terminal. For example, if the number of secret images set by the user terminal 100 is 2 (p = 2), the total number of images to be transmitted to the user terminal is 9 (t = 9) The sum can be seven.

In addition, the probability that the attracted data is exposed at the user terminal 100 can be determined based on the probability that the image is exposed, and can be determined by the following equation (6).

Here, d represents the number of attracting images. Equation (6) is a mathematical expression when assuming that a screen is composed of only a secret image and an attracting image. That is, it is assumed that the attracting image is filled with the number obtained by subtracting the number of secret images from the total number of images. In addition, the attracted image can be exposed with a probability similar to that of the secret image, thereby minimizing the interference with the secret image.

The false image can be determined by the following equation (7).

f means the number of false images. Equation (3) is a mathematical expression when it is assumed that the secret image, the attracting image, and the false image are all configured on the screen.

For example, the total number of images to be transmitted from the login service providing server 300 using image arrays is nine (t = 9), and the number of secret images set by the user terminal 100 is three (d = 2), the number of false images can be four (f = 4). If the total number of images to be transmitted is nine (t = 9), and the number of secret images set by the user terminal 100 is one (p = 1), if four attraction images are inserted (d = 4), and the number of false images may be four (f = 4). If the total number of images to be transmitted is nine (t = 9) and the number of secret images set by the user terminal 100 is one (p = 1), two manned images (d = 2) When inserted, the number of false images can be six (f = 6).

At this time, description will be given of an embodiment in which unique identification data is specified. Unique identification data may also be generated differently for the same image with ID = aabc02022 and ID = 33029azqwe. That is, when transmitting the image from the login service providing server 300 using the image array to the user terminal 100, unique identification data can be generated with different values each time the unique identifier data is requested. Accordingly, even if the same image is transmitted, unique identification data is randomly generated, so that security can be improved. At this time, the unique identification data has a minimum of 8 digits, and it is possible to divide upper and lower case letters, and to mix numbers and alphabets.

Accordingly, the user terminal 100 does not directly transmit the selected image itself to the log-in service providing server 300 using the image arrangement, but transmits only the unique identification data of the selected image. Therefore, even if information is exposed by hijacking, The user terminal 100 can not know whether or not the user terminal 100 has selected it. Also, since the unique identification data corresponding to the selected image is randomly designated differently even if it is the same image, even if ID data and unique identification data of the user terminal 100 are obtained, the login service can not be provided after that . At this time, the unique identification data can be newly issued every time a login request is made in the user terminal 100 or whenever a login failure occurs. In addition, the user terminal 100 may expose a plurality of images in stages or may expose a single image in stages. At this time, only one image is exposed on one screen of the user terminal 100, and the next step is continued to reduce the possibility of hacking by pattern analysis due to screen capture or the like.

A method of providing a login service using an image arrangement according to an embodiment of the present invention is a method of providing a login service by using a password such as an image, . In addition, it is possible to easily design and apply a keyboard arrangement that a user desires, rather than a category keyboard provided, so that a user can generate a keyboard capable of being applied, that is, a DIY, , The possibility of hacking can be minimized with strong security. In addition, a login service providing method using an image arrangement according to an embodiment of the present invention can log in without downloading and installing a security program such as ActiveX, and only a random string mapped to an image is transmitted / The risk of information leakage due to hijacking can be reduced. Also, in the method of providing a login service using an image arrangement according to an exemplary embodiment of the present invention, an image source selected by a user is stored in a separate server, and only unique identification data randomly set to be mapped to an image is mapped to a user's ID So that the image set by the user can not be identified even if the server is hacked. At this time, the unique identification data mapped to the image may be set differently even if it is the same image, so that the original of the image can not be discriminated from the outside.

The method for providing the login service using the image arrangement of FIG. 2 to FIG. 4 will not be described. Referring to FIG. 1, It is possible to deduce that the following description will be omitted.

5 is a diagram illustrating a process in which data is transmitted and received between the respective components included in the login service providing system using the image arrangement of FIG. 1 according to an embodiment of the present invention. Hereinafter, an example of a process of transmitting and receiving a signal according to an embodiment of the present invention will be described with reference to FIG. 5. However, the present invention is not limited to such an embodiment, and according to various embodiments described above, It is apparent to those skilled in the art that the process of transmitting and receiving the shown data can be changed.

Referring to FIG. 5, the user terminal 100 sends a membership request to the log-in service providing server 300 using an image array while transmitting ID data (S5100). At this time, the login service providing server 300 using the image arrangement transmits at least one type of image keyboard to the user terminal 100, so that the user can select an image to be used as a type and password (secret data) of a desired image keyboard (S5200).

Then, the user terminal 100 selects one of the at least one image and a password, which is at least one image, from the at least one image, and transmits it to the login service providing server 300 using the image arrangement (S5300) The login service providing server 300 used randomly generates unique identification data based on the selection data (S5400).

The login service providing server 300 using the image arrangement matches the created unique identification data with the user ID in step S5500. When an event for attempting login in the user terminal 100 occurs in step S5600, It is checked whether or not the ID data received from the terminal 100 matches the previously stored ID data (S5700).

If the pre-stored ID data and the received ID data match, the log-in service providing server 300 using the image array mixes images, similar data, and false data (S5820) If the ID data does not match, false data is generated (S5810).

The login service providing server 300 using the image arrangement transmits the data generated in the user terminal 100 and the temporary key for hashing and the temporary key for hashing in step S5830 and transmits the unique key of the selected data from the user terminal 100 The identification data is combined with a hash-only key and a hash temporary key (S5840). Here, the login service providing server 300 using the image arrangement compares the hash function result obtained by combining the transmitted data and the hash temporary key with the hash function result obtained by combining the unique identification data and the hash only key (S5900) If they match, the login of the user terminal 100 is approved (S5910), and if they do not match, the login of the user terminal 100 fails (S5920).

5, a description of the login service providing method using the image arrangement shown in FIG. 5 can be easily made from the same or described contents of the method for providing the login service using the image arrangement, It is possible to deduce that the following description will be omitted.

The order between the above-described steps S5100 to S5920 is merely an example, but is not limited thereto. That is, the order between the above-described steps S5100 to S5920 may be mutually varied, and some of the steps may be executed or deleted at the same time.

6 is a flowchart illustrating a method of providing a login service using an image arrangement according to an exemplary embodiment of the present invention. 5, the login service providing server using the image arrangement receives the ID data based on the login event from the user terminal (S6100).

In operation S6200, the login service providing server using the image arrangement controls at least one type of image keyboard including at least one image matched with the ID data of the user terminal to be output from the user terminal.

In addition, the login service providing server using the image arrangement transmits a private hash key and a temporary hash key to the user terminal (S6300) At least one unique identification data corresponding to at least one image is received (S6400) in combination with a hash-only key and a hash temporary key.

Finally, the login service providing server using the image arrangement provides a login service for the user terminal if the received transmission data matches the stored data stored in matching with the user terminal (S6500).

The method of providing the login service using the image arrangement shown in FIG. 6 is not described. Referring to FIGS. 1 to 5, the method of providing the login service using the image arrangement is the same as or described So that the following description will be omitted.

The method of providing a login service using an image arrangement according to the embodiment described with reference to FIG. 6 can also be implemented in the form of a recording medium including instructions executable by a computer, such as an application executed by a computer or a program module have. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, the computer-readable medium can include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes any information delivery media, including computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism.

The method of providing a login service using an image arrangement according to an embodiment of the present invention may be implemented by an application installed in a terminal (which may include a program included in a platform or an operating system that is basically installed in the terminal) And may be executed by an application (that is, a program) directly installed on a master terminal by a user through an application providing server such as an application store server, an application, or a web server associated with the service. In this regard, the above-described method of providing a login service using an image arrangement according to an embodiment of the present invention is implemented as an application installed in a terminal or directly installed by a user (i.e., a program) Lt; / RTI >

It will be understood by those skilled in the art that the foregoing description of the present invention is for illustrative purposes only and that those of ordinary skill in the art can readily understand that various changes and modifications may be made without departing from the spirit or essential characteristics of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

Claims (10)

Providing a login service using an image array A method of providing a login service using an image array executed by a server,
Receiving ID data based on a login event from a user terminal;
Controlling at least one kind of image keyboard including at least one image matched with the ID data of the user terminal to be output from the user terminal;
Transmitting a private hash key and a temporary hash key to the user terminal;
Receiving at least one unique identification data corresponding to at least one image included in the image keyboard selected from the user terminal in combination with the hash-only key and the hash temporary key; And
Providing a log-in service for the user terminal if the received transmission data and stored data stored in matching with the user terminal coincide with each other
, ≪ / RTI &
Wherein the at least one image stored in matched relation with the ID of the user terminal,
Receiving ID data based on a membership request event from the user terminal;
Selecting at least one kind of image keyboard from the user terminal;
Sequentially selecting at least one image included in the image keyboard selected by the user terminal;
Transmitting a hash temporary key and a hash dedicated key to the user terminal;
Wherein at least one unique identification data matched with the selected at least one image is selected as a result of combining with the hash temporary key and the hash dedicated key when the user terminal selects at least one image of the at least one image, Receiving data from the user terminal;
Matching the received result data with the ID data and storing the result data as a labeled table;
The method comprising the steps of:
delete The method according to claim 1,
Wherein the hash value is randomly changed every time the user terminal logs in, and the data is transmitted from the login service providing server using the image arrangement to the user terminal.
The method according to claim 1,
Wherein the hash-only key is a fixed data transmitted from the log-in service providing server to the user terminal when stored in the user terminal, How to provide login services.
The method according to claim 1,
Wherein the step of providing a login service for the user terminal, when the received transmission data matches the stored data stored in the user terminal,
A result of the hash function combining the transmission data and the hash temporary key is a result of the hash function combining the at least one unique identification data corresponding to at least one image stored in the ID data and stored, And if so, is executed by providing a login service for the user terminal.
The method according to claim 1,
Wherein the step of controlling at least one kind of image keyboard including at least one image matched with the ID data of the user terminal to be output from the user terminal comprises the steps of:
Selecting at the user terminal at least one kind of image keyboard including at least one image matched with the ID data of the user terminal;
Controlling the selected image keyboard to be output from the user terminal;
Wherein the login service is executed by performing an image registration.
The method according to claim 6,
Wherein the selected image keyboard comprises the at least one image, attracted data and false data,
The at least one image, the attracting data, and the false data are mixed and arranged in an array on a screen of the user terminal,
Wherein when the at least one image is a plurality of images, the number of screens displayed on the user terminal is determined based on the number of the plurality of images,
Wherein the probability that the attracted data is exposed at the user terminal is determined based on a probability that the at least one image is exposed.
The method according to claim 1,
Wherein the at least one unique identification data is randomly generated to correspond to the at least one image when a subscription event occurs in the user terminal,
Wherein the at least one image and the at least one unique identification data, the at least one kind of image keyboard, and the ID data are each one-to-many (1: many) .
The method according to claim 1,
And transmitting a plurality of false data to the user terminal when the ID data received from the user terminal is not previously stored and registered ID data.
The method according to claim 1,
Wherein the ID data of the user terminal and at least one unique identification data are stored in a database in a matched and labeled table,
Wherein at least one image to which the at least one unique identification data is assigned is stored in a database separate from the database in which the table is stored,
Wherein the at least one image is at least one pass data (Passdata) corresponding to the ID data (ID data) among images (Passimage), Passvoice, Passvideo, A method for providing a login service using an array.

Images