KR101722028B1 - Method of user authentication using a variable keypad and, the system thereof - Google Patents

Abstract

According to an embodiment of the present invention, there is provided an authentication system for a financial transaction. An authentication server employing a password and fingerprint information according to one embodiment of the present invention includes: a variable keypad generating unit for generating a variable keypad including an encryption key and a fingerprint input unit for receiving a fingerprint of a user, in which a position of the encryption key is varied whenever the encryption key is produced; an authentication information storage unit for storing authentication information of a portable terminal user; and an authentication execution unit for performing user authentication by providing generated information of the variable keypad to a remote portable terminal and receiving position information of the encryption key according to an order inputted by the user from the portable terminal and the fingerprint information inputted into the fingerprint input unit by the user.

Description

TECHNICAL FIELD The present invention relates to a method and system for authenticating a user using a variable keypad,

The present invention relates to a method and system for authenticating a user, and more particularly, to a method and system for authenticating a user who receives a password and fingerprint information from a portable terminal through a variable keypad and transmits the password and the fingerprint information to a server, will be.

Recently, financial transactions such as electronic payment using mobile terminals such as smart phones and tablets have become active, and interest in security related issues such as passwords is increasing.

This is because, unlike existing mobile phones, smartphones are vulnerable to hacking like a widely deployed PC because anyone can develop applications and learn about its structure.

In particular, when entering a password or a resident registration number by using a fixed keypad, the user needs to be careful when inputting the password since it is easy to find out the password or the resident registration number based on the location when the location is touched.

A method for compensating the problem in using such a fixed keypad is an authentication method using a variable keypad. In the variable keypad method, since the arrangement of the input buttons of the keypad is changed every time the user connects, even if a third party finds a position of a password or the like inputted by the user on the keypad, it is difficult to know the password by using it.

However, even if the variable keypad is used, when the user witnesses a password input scene in the vicinity or hacking a password transmitted from the portable terminal to the server in the middle when the authentication is requested, the password itself can be detected, .

Also, there is a problem that if the third party authenticates the user and performs authentication of the user with the password thus obtained, it can not be prevented.

SUMMARY OF THE INVENTION The present invention has been made in view of the technical background as described above, and it is an object of the present invention to provide a system capable of preventing unauthorized use of a third party by transmitting location information of a variable keypad and fingerprint information together when a password is transmitted from the portable terminal to the authentication server And the like.

The objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

According to another aspect of the present invention, there is provided an authentication server including a combination of a password and a fingerprint information. The authentication server generates a variable keypad including a cipher key and a fingerprint input unit for inputting a fingerprint of the user, A variable keypad generating unit for generating a variable key every time the key is generated; An authentication information storage unit for storing authentication information of a portable terminal user; And providing the generated information on the variable keypad to a remote portable terminal, receiving location information of the cryptographic key according to a sequence entered by the user from the portable terminal, and fingerprint information input by the user into the fingerprint input unit, And an authentication performing unit for performing authentication of the user.

According to another aspect of the present invention, there is provided an authentication portable terminal including a display unit including a cipher key and a fingerprint input unit, the display unit displaying a variable keypad that is generated such that the positions of the cipher keys are varied at every generation; And a control unit for receiving the information of the variable keypad from the authentication server and transmitting the location information of the encryption key obtained through the variable keypad, the input order of the encryption key, and the fingerprint information to the authentication server.

According to another aspect of the present invention, there is provided a method for authenticating a mixed password and fingerprint information, comprising: generating a variable keypad including a cryptographic key and a fingerprint input unit, wherein the variable keypad is generated such that a position of each cryptographic key is variable at every generation; Transmitting the generated variable keypad to a portable terminal; Receiving location information of the cryptographic key according to a sequence entered by a user from the portable terminal and fingerprint information input by the user into the fingerprint input unit; And performing authentication of the user based on the received location information of the encryption key and the fingerprint information.

According to the present invention, since the position information of the keypad is transmitted instead of the password itself, the password can not be obtained by hacking, and the fingerprint information is transmitted together. Therefore, even if the password is leaked, There is an effect.

Brief Description of the Drawings Fig. 1 is a diagram illustrating an authentication system including a portable terminal and an authentication server according to an embodiment of the present invention.
2 is a flow diagram of a principal authentication method in accordance with an embodiment of the present invention.
FIG. 3 is a view showing generation of a variable keypad according to an embodiment of the present invention. FIG.
FIG. 4 is a diagram showing a variable keypad according to an embodiment of the present invention in the XY plane as coordinates; FIG.
5 is a flowchart illustrating a procedure for extracting a password from an encryption key according to an embodiment of the present invention to perform authentication.
6 is a view illustrating a display unit of a mobile terminal having a variable keypad and a fingerprint input unit according to an embodiment of the present invention.
7 is a view illustrating a display unit of a mobile terminal in which a fingerprint input unit is displayed as a pop-up window according to an embodiment of the present invention.
8 is a view showing a state where a face recognition part is added together with a variable keypad according to another embodiment of the present invention.
9 is a diagram illustrating authentication using an identifier of a variable pad according to another embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as being limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. Is provided to fully convey the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. It is to be understood that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification. As used herein, the terms " comprises, " and / or "comprising" refer to the presence or absence of one or more other components, steps, operations, and / Or additions.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating an authentication system in which a password and a fingerprint information are mixed according to an embodiment of the present invention.

As shown in FIG. 1, the authentication system, which is a mixed password and fingerprint information, includes a portable terminal 100 and a personal authentication server 200.

The authentication server 200 includes a variable keypad generation unit 210, an authentication performance unit 220, and an authentication information storage unit 230.

The variable keypad generation unit 210 generates a variable keypad including a cipher key and a fingerprint input unit so that the positions of the numeric keys and the character keys constituting the cipher key are varied at each generation of the variable keypad. It is also possible to generate the position of the fingerprint input unit so as to be variable at the time of generation of the variable keypad.

When the authentication performing unit 220 transmits the arrangement information of each cipher key, which is information of the generated variable keypad, to the remote portable terminal 100, the portable terminal 100 uses the authentication information such as password and fingerprint information from the user .

In addition to the method of generating a variable keypad whenever necessary, the authentication performing unit 220 generates a plurality of variable keypads in advance, assigns an identifier to each of the variable keypads, shares the same with the portable terminal 100, It is also possible to use a method of transmitting only the identifier to the mobile terminal 100.

The authentication performing unit 220 receives the location information and the fingerprint information of the cryptographic key according to the order inputted by the user from the portable terminal 100 and performs authentication based on the received information. If the position of the fingerprint input unit varies in some cases, the position information of the fingerprint input unit can also be received and used for authentication of the user.

For example, the authentication performing unit 220 receives the location information of the cipher key according to the order inputted by the user from the portable terminal 100 such as a smart phone, that is, 4, 3, 1, (2.5, 3.5), (1.5, 3.5), (2.5, 3.5) and the fingerprint information, and performs authentication based on the received fingerprint information.

The authentication performing unit 220 stores the location information of each cryptographic key corresponding to the password, the input order, and the location information of the fingerprint input unit at the time of generating the variable keypad, Upon receiving the location information, the location information of the fingerprint input unit, and the fingerprint information, the authentication is performed by comparing the location information of the pre-stored encryption key, the location information of the fingerprint input unit, and the fingerprint information.

If the password is 4, 3, 1, 2 as in the above example, the location information of the corresponding cryptographic key is (0.5, 2.5), (3.5, 3.5) , (2.5, 3.5), and the input sequence is the same as above. Further, when the position of the fingerprint input unit is variable, the position information of the fingerprint input unit is (1.5, 2.5).

When the user touches the fingerprint portion of the finger with the fingerprint input portion, the fingerprint input scan sensor operates to acquire the fingerprint image of the user and acquire the position information (1.5, 2.5) of the fingerprint input portion.

Since both fingerprint input and cryptographic key input use finger touch, it is possible to strengthen security by mixing the order of input of cryptographic key and the order of fingerprint input.

For example, if the password to be input is 4, 3, 1, or 2, it is not input in order, but the fingerprint is input in an arbitrary order so that the password can not be known only by the location information.

That is, the user inputs the passwords 4 and 3 in order, then inputs the fingerprint, and then inputs the remaining passwords 1 and 2. Since the position information of the encryption key and the fingerprint input unit is (0.5, 2.5), (3.5, 3.5), (1.5, 2.5), (1.5, 3.5) You can not get a 4-digit password.

However, since the authentication performing unit 220 knows the positions (1.5, 2.5) of the fingerprint input unit, the passwords 4, 3, 1, 2 can be restored from the position information of the cryptographic key.

The fingerprint input unit may appear in a form of a pop-up window instead of a part of the variable keypad. In this case, since it is possible to adjust the size of a pop-up window in which a fingerprint input unit is displayed, it is also possible to use all fingers such as a thumb in addition to the index finger.

7 (b), the fingerprint input unit appears as a pop-up window. When the user inputs a password and touches the fingerprint portion of FIG. 7 (a), the fingerprint input unit appears as a pop- To the fingerprint input unit of the user.

When the user touches a fingerprint of the finger in a touch screen input format and a predetermined time (for example, one second or more) elapses, the fingerprint input scan sensor is automatically operated to acquire the fingerprint image of the user.

When the fingerprint input unit is constituted by the electrostatic touch screen, it is possible to determine whether electricity is flowing to the finger to be touched when the user touches the screen for fingerprint input. This makes it possible to prevent the user from copying the fingerprint to the fingerprint input unit such as rubber or silicone, thereby enhancing the security.

The authentication performing unit 220 receives the location information and the input order of the encryption key for the password, the location information of the fingerprint input unit and the fingerprint information according to the order inputted by the user from the portable terminal 100, 230 and the authentication information including the location information of the encryption key previously stored, the input order, the location information of the fingerprint input unit, and the fingerprint information.

The authentication performing unit 220 compares the positions of the minutiae points of the fingerprint image received from the terminal device 100 with the positions of the minutiae points of the fingerprint stored in the authentication information storage unit 230 to calculate statistics, If a score is equal to or greater than a preset threshold value (for example, 80%), it is judged to be the same fingerprint.

Fingerprint recognition technology is a technique of recognizing and reading the bending of the reflected fingerprint by shooting light on the fingerprint. This technology is used in quite a lot of places because it can be scanned quickly by placing a finger on the surface of the scanner.

Fingerprint recognition technology is a technology that identifies various types of fingerprints for each person, scans the dividing points of the fingerprints, the resulting points and the endpoints, converts the characteristics of each fingerprint into coordinates, and verifies the identity of the fingerprint with the existing data.

There are an optical system using a prism or a hologram, a non-optical system for sensing heat, pressure, an electric field or an ultrasonic wave of a finger, which is used in an input device for fingerprint recognition.

Fingerprint recognition technology is cheaper than sensor and semiconductor chip that stores and identifies fingerprints as compared with other biometrics technologies, and has a relatively fast technology development and wide range of applications.

Advantages of fingerprint recognition are relatively high recognition rate within 0.5% error rate and fast verification speed within 1 second. The advantages of fingerprint recognition are acceptability, convenience, and reliability.

And, when users use fingerprint recognition, they show less burden than other biometric technologies, and fingerprint recognition equipment occupies very little space.

The authentication information storage unit 230 stores passwords, fingerprint information, and the like of the portable terminal users.

Also, authentication information including the encryption key of the variable keypad generated by the variable keypad generation unit 210, the location information of the encryption key, the location information of the fingerprint input unit, and the fingerprint information is stored.

The portable terminal 100 may further include a display unit 120 including a variable keypad 110 and a controller 130 and a camera unit 140. [

The mobile terminal 100 includes not only a mobile phone but also a kiosk installed in a smart phone, a mobile phone, a tablet PC, a notebook, a mobile credit card payment terminal, a bank ATM, a pharmacy,

The position of each of the encryption keys and the position of the fingerprint input unit are changed at every generation of the variable keypad 110. [ The variable keypad 110 is generated by the variable keypad generation unit 210 of the authentication server 200 and the variable keypad 110 of the portable terminal 100 is generated by the variable keypad 110 ) To the user.

The display unit 120 displays the variable keypad 110. The position of the cipher key included in the variable keypad may be changed each time the cipher key is generated, the position of the fingerprint input unit may be fixed, or the position may be changed each time the cipher key is generated.

6 shows a state in which the variable keypad 110 and the fingerprint input unit are displayed on the display unit 120. FIG. 6 (a) shows a state before a user inputs a password and a fingerprint, and FIG. 6 (b) shows a state after a user inputs a password and a fingerprint. Entered passwords are asterisked (*) for security purposes.

The control unit 130 receives the information of the variable keypad from the authentication server 200, receives the encryption key location information, the input order of the encryption key, the location information of the fingerprint input unit, and the fingerprint information, Lt; / RTI >

The portable terminal 100 may further include a camera unit 140. The camera unit 140 photographs a direction toward the user. In order to use the user's face for inputting the authentication information in addition to the input of the above-described variable keypad 110 as the authentication information.

The camera unit 140 receives a command from the control unit 130 while the user inputs the variable keypad 110 and allows the user to photograph the face of the user while aligning with the guideline of the face contour displayed on the display unit 120. [ ) To adjust the position of the face to fit the guideline.

FIG. 8 is a diagram showing recognition of a user's face for face recognition together with a variable keypad 110 and a fingerprint input unit. When a face contour line is presented as shown in FIG. 8 (a) and a user matches the face, the face image capturing for face recognition is completed as shown in FIG. 8 (b).

The control unit 130 transmits the photographed face image to the identity authentication server 200, and the identity authentication server 200 can perform additional authentication using the face image together with other authentication information.

FIG. 2 is a flowchart illustrating a procedure of an authentication method using a combination of a password and a fingerprint information according to an exemplary embodiment of the present invention.

First, the position of each of the cryptographic keys and the position of the fingerprint input unit may be varied at every generation in order to generate a variable keypad including a cryptographic key and a fingerprint input unit (S110).

The generated variable keypad is transmitted to the portable terminal 100 together with the generated information (S120), and the user inputs the password and fingerprint to the variable keypad.

The authentication server 200 receives the location information of the encryption key, the location information of the fingerprint input unit, and the fingerprint information according to the order inputted by the user from the portable terminal 100 (S130) .

According to another embodiment of the present invention, it is also possible to perform identity authentication using only the location information of a part of the cryptographic key in the authentication of the user.

For example, if the password is 4312, the user does not input all four-digit passwords, but inputs only a part of the passwords such as 43 for the first two digits, 12 for the two digits after the first digits, 41 for the first digits and 41 for the third digits.

In the case of inputting the two digits 43, the position of the password becomes (0.5, 2.5), (3.5, 3.5) in FIG. 4 (a). Based on the position of the password, the input order, Carry out self-certification.

When the portable terminal 100 includes a camera, the user's facial recognition information can be used in addition to authentication as described above.

When the user authentication is performed based on the positional information of a portion of the cryptographic key, the amount of data to be authenticated is relatively smaller than the amount of data of the entire cryptographic key, so that the operation speed can be improved. The user convenience can be improved.

FIG. 3 illustrates that the positions of the cipher key and the fingerprint input unit in the variable keypad including the cipher key and the fingerprint input unit are changed at each generation according to an embodiment of the present invention. FIG. 3 (a) 3 (b) shows that the position of the fingerprint input unit is changed when the encryption key and the fingerprint input unit are generated next time.

FIG. 5 is a flowchart illustrating a method for extracting a password from a location of a cryptographic key to perform identity authentication according to an embodiment of the present invention.

When the password is stored in advance in the authentication server of the user and the location information of the password is received from the portable terminal, the password is extracted from the location information and the input order of the received password and the extracted password is compared with the password stored in the authentication storage unit. Authentication.

First, the authentication performing unit receives the position of the encryption key according to the order inputted by the member from the portable terminal, and extracts the password inputted by the member (S510).

Next, the authentication performing unit compares the extracted password and the received fingerprint information with password and fingerprint information stored in the authentication information storage unit to perform authentication (S520).

FIG. 8 is a view showing a face image of a user and transmitting a photographed face image to the authentication server 200 according to another embodiment of the present invention.

The control unit 130 of the portable terminal 100 controls the camera unit 140 to photograph the face of the user in front and the camera unit 140 photographs the face of the user in accordance with the instruction of the control unit 130. [

When the user matches the face according to the leader line outline on the screen as shown in FIG. 8 (a), the password and the face of the variable keypad can be recognized together as shown in FIG. 8 (b) And performs authentication of the user.

If the illuminance of the human eye is adjusted by using the flash of the portable terminal 100 before the camera 140 photographs the face, the pupil becomes wider or narrower in response to the human eye. If this is checked, It is possible to prevent the authentication information from being manipulated by using the authentication information, thereby enhancing the security.

9 is a diagram illustrating a primary authentication performed through an identifier corresponding to a variable keypad according to an embodiment of the present invention. FIG. 9 (a) shows an identifier assigned to each variable keypad stored in an authentication server, 9 (b) is a diagram showing an identifier assigned to a variable keypad stored in a portable terminal.

As shown in Fig. 9, the authentication performing unit generates a plurality of variable keypads and generates an identifier corresponding thereto. That is, when generating the variable keypad in the identity authentication server, indexes 1, 2, and 3 corresponding to the variable keys 1, 2, and 3 are generated, and the generated variable keypad and the identifier are provided to the portable terminal in advance.

When the authentication server receives the authentication request, the authentication server selects one of the stored identifiers and provides it to the portable terminal. The portable terminal receives the identifier and selects a variable keypad corresponding to the identifier and displays the selected variable keypad on the screen.

The authentication server performs the secondary authentication by comparing the location information, the input order, and the fingerprint information of the encryption key received from the portable terminal with the location information, the input order, and the fingerprint information of the encryption key stored in advance.

According to this embodiment, since the variable keypad layout structure is not transmitted from the authentication server to the portable terminal, security can be improved because the variable keypad layout structure can not be found by hacking the transmission packet.

Since the user has the advantage of performing the financial transaction in the enhanced security environment through the variable keypad, the user authentication method and the device using the fingerprint information and face recognition as described above, the user can safely use the mobile terminal and the mobile communication network You can proceed with the transaction.

While the present invention has been described in detail with reference to the accompanying drawings, it is to be understood that the invention is not limited to the above-described embodiments. Those skilled in the art will appreciate that various modifications, Of course, this is possible. Accordingly, the scope of protection of the present invention should not be limited to the above-described embodiments, but should be determined by the description of the following claims.

100:
110: Variable keypad 120: Display
130: control unit 140: camera unit
200: authentication server
210: Variable keypad generation unit 220: Authentication performance unit
230: Authentication information storage unit

Claims (11)

A variable keypad generation unit for generating a variable keypad including a cipher key and a fingerprint input unit for inputting a fingerprint of a user so that the position of each cipher key is varied at every generation;
An authentication information storage unit for storing authentication information of a portable terminal user; And
The information of the generated variable keypad is provided to a remote portable terminal, and the location information of the cryptographic key according to the order inputted by the user from the portable terminal, the fingerprint information input by the user to the fingerprint input unit, A fingerprint information receiving unit that receives the position information of the fingerprint information input in the information input order and receives the face photographing information of the user according to whether the pupil has reacted due to the illumination of the face contour guide line and the camera flash, Performance department
Authentication server which is a mixed password and fingerprint information.
2. The apparatus of claim 1, wherein the variable keypad generation unit
The position of the fingerprint input unit is varied so that the position of the fingerprint input unit changes every time the fingerprint is generated
Authentication server with mixed password and fingerprint information.
The apparatus of claim 1, wherein the authentication performing unit
Extracting the password inputted by the user from the positional information of the received cryptographic key, and comparing the extracted password and the received fingerprint information with the authentication information previously stored in the authentication information storage unit to perform authentication
Authentication server with mixed password and fingerprint information.
The apparatus of claim 1, wherein the authentication performing unit
Storing location information and an input order of each cryptographic key corresponding to the password at the time of generating the variable keypad,
Upon receipt of the location information of the cryptographic key and the fingerprint information according to the order inputted by the user from the portable terminal,
And compares it with the location information, the input order, and the fingerprint information of the cryptographic key previously stored in the authentication information storage unit to perform authentication
Authentication server with mixed password and fingerprint information.
The apparatus of claim 1, wherein the authentication performing unit
Storing an identifier corresponding to the variable keypad generated each time the variable keypad is generated, providing the stored identifier to the portable terminal,
Upon receipt of the identifier from the mobile terminal, compares the identifier with the previously stored identifier to perform the first authentication,
If the first authentication result is successful, the location information, the input order, and the fingerprint information of the encryption key received from the mobile terminal are compared with the location information, the input order, and the fingerprint information of the encryption key previously stored in the authentication information storage Performing authentication
Authentication server with mixed password and fingerprint information.
A display unit displaying a variable keypad including a cryptographic key and a fingerprint input unit, the variable keypad being generated such that a position of each of the cryptographic keys is variable at every generation; And
The information of the variable keypad is received from the authentication server, and the position information of the cryptographic key obtained through the variable keypad, the input order of the cryptographic key, the fingerprint information, and the fingerprint information input during input of the position information of the cryptographic key A control unit for transmitting face photographing information of a user to the authentication server of the user in consideration of the reaction of the user's pupil due to the position information, the face contour guideline display, and the illumination control through the camera flash;
And a portable terminal.
delete Generating a variable keypad including a cipher key and a fingerprint input unit, wherein the position of each of the cipher keys is varied at every generation;
Transmitting the generated variable keypad to a portable terminal;
The fingerprint information input by the user to the fingerprint input unit, the position information of the fingerprint information input in the input order of the position information of the cryptographic key, the position information of the fingerprint information input by the user Receiving facial photographing information of a user in consideration of whether or not the user's pupil is reacted in illuminance regulation through a facial contour guideline display of a terminal and a camera flash; And
Performing authentication on the basis of the received location information of the encryption key, the fingerprint information, the location information of the fingerprint information, and the facial photographing information;
Including a password and fingerprint information.
9. The method of claim 8,
Wherein the generating step comprises generating the position of the fingerprint inputting unit to be variable at the time of generating the variable keypad
In password and fingerprint information.
9. The method of claim 8, wherein performing the identity authentication comprises:
Authenticating the user based on the location information of a part of the encryption key
In password and fingerprint information.
9. The method of claim 8,
The step of performing the identity authentication includes:
Extracting the password inputted by the user from the positional information of the cryptographic key according to the order inputted by the user from the portable terminal, extracting the extracted password and the received fingerprint information from the password and fingerprint information stored in the authentication information storage unit To perform identity verification by comparison
In password and fingerprint information.

Images