KR102064678B1 - Method for user authentication by data verification - Google Patents

Abstract

According to the present invention, a user authentication method through data verification can further enhance the security of user authentication by allowing a user authentication server to receive acoustic data containing a voice of a user and information on the user from the user and store the same by a data block and to perform a process of storing the same data block as the data block and comparing the same during user authentication with the same data block stored in a user device.

Description

Method for user authentication by data verification}

The present invention relates to a method for authenticating a user through data verification, and more particularly, to a method for authenticating a user by using information of a previously stored data block when authenticating a user.

For the processing of important tasks such as financial transactions, it is important to check whether the subject requesting the current transaction is a user with legal authority. For example, when a user requests a financial transaction through internet banking or mobile banking, the user authenticates himself first through a public certificate, and secondly, authenticates himself again by text message or answering machine. do.

SMS authentication sends a SMS authentication number to the user's registered mobile phone number and asks the user to enter the received authentication number to verify the identity. ARS authentication is for the user to receive and receive an incoming call automatically. Listen and enter the verification number guided to verify your identity.

However, the SMS authentication method has the possibility of intercepting the authentication number by the third party, and the ARS method is relatively secure and is used in various institutions, but the service provider has to pay a fee for making an ARS call to the carrier. From the standpoint of the cost will be burdened. In addition, even when a user performing ARS authentication does not receive an authentication call, there is a problem in that the trouble of having to perform authentication again from an initial process occurs.

In the present invention, when authenticating a user through a user's voice, when storing data necessary for authentication, the user's voice information and the user's information and a history related to the authentication are stored together to increase security of the user's personal information. The purpose is to provide a user authentication method.

The present invention is to provide a user authentication method that further enhances the security by storing the ambient noise together with the user's voice information when storing the original voice required for authentication in authenticating the user through the user's voice. have.

In the user authentication method through data verification according to an embodiment of the present invention, the user authentication server receives sound data including the user's voice from the user and information on the user and stores the data block as a data block and stores the same data block in the user device. Storing; When the user authentication server receives a signal for requesting authentication for accessing a preset service from the user device, transmitting a voice input menu to the user device; Receiving, by a user authentication server, voice information input by a user and stored data block information from a user device through a voice input menu; And the user authentication server may compare the information included in the data block previously stored in the user authentication server with the information included in the data block received from the user device to authenticate whether the user is a valid user.

The sound data may include a user voice and a sound provided from a surrounding environment when the user generates a voice, and the user authentication server may include a component corresponding to an audible frequency band and a component corresponding to an inaudible frequency band from the sound data. It is characterized by storing the classification.

The data block may include a plurality of sections each including a classification code, a personal code, a version, voice data, and history information. The classification code may correspond to a user's country, a personal code of a user's city, date of birth, and gender. And a version of the user authentication server linked to the data block, and the voice data may include voice information stored by the user for authentication.

Here, the history information may include information about the year in which the user stored the voice for authentication, the number of times of authentication of the user, the words of the voice stored by the user, and the user's authentication place.

In addition, when it is determined that the information included in the data block stored in the user authentication server and the data block information of the user to perform authentication do not match, additional authentication is performed for the current user and additional authentication is successful. If the information of the current user is added to the section corresponding to the history information, characterized in that for updating.

According to an exemplary embodiment of the present invention, a place where a user performs authentication with an intuitive personal information comparison, in which a data block including information and sound data of a user is configured in a user authentication server and a user device when the user is authenticated And additionally compare the history information to the number of times of authentication, and if the comparison results do not match, the security of the user authentication can be further improved because the current information is validated and updated and stored through additional authentication.

The embodiment can further improve security for user authentication because it not only performs authentication through voice of the user but also additionally performs background noise authentication.

According to the embodiment of the present invention, the user does not need to separately memorize user authentication information, and can perform authentication only by inputting voice information through a portable terminal or a personal PC, thereby simplifying the authentication procedure.

1 is a flow chart of a user authentication method through data verification according to an embodiment of the present invention.
2 is a diagram illustrating a data block of a user authentication method through data verification according to an embodiment of the present invention.
3 is a view illustrating a history section in detail in the data block of FIG.
4 is a flowchart specifically illustrating a step of authenticating whether a user is a valid user in an embodiment of the present invention.

Hereinafter, the present embodiment will be described in detail with reference to the accompanying drawings, but the present invention is not limited or limited thereto. In describing the present invention, detailed descriptions may be omitted to clarify the gist of the present invention by known functions or configurations.

In the present invention, the user device refers to a device having an input means capable of wireless communication, data transmission and reception with a server, and receiving voice information. For example, a smartphone, a smart pad, a tablet computer, etc. may be included in the user device. In addition, the user device refers to a device equipped with a processor and a storage space in which a program capable of performing the functions mentioned in the present invention may be installed and driven.

1 is a flow chart of a user authentication method through data verification according to an embodiment of the present invention.

Referring to FIG. 1, in an embodiment of the present invention, a user authentication server and a user device receive sound data and user information including a user's voice and store the data for each user to store as a data block (S10). Can be. The sound data may be data including a user's voice and background noise generated at a corresponding place when the user speaks the voice.

Subsequently, when the user authentication server receives a signal for requesting authentication for accessing a preset service from the user device, the user authentication server transmits a voice input menu to the user device (S20). Here, the voice input menu can be executed by the user through the input means of the user device, and performs a function of generating voice data by collecting the spoken voice through the voice input means of the user device when the user speaks. Display the menu.

When the user requests authentication through the user device, the user authentication server sends request information to the user device to execute a program capable of performing a voice input function, and the user selects it or executes a separate program to input voice information. can do.

The user authentication server performs step S30 of receiving voice information and sound data input by the user through the voice input menu from the user device. In the process of receiving voice information and sound data, a user inputs voice information through a voice input means of a user device according to an execution of a program that performs a voice input function, and collects sound data including user voice and background noise. This means transmitting to the user authentication server.

Here, the user authentication server may be provided with data block information stored in the user device together with voice information and sound data input by the user from the user device.

In operation S40, the data block information previously stored in the user authentication server and the sound data and data block information received from the user device may be compared to authenticate whether the user is a valid user (S40).

In operation S10 of storing user-specific data in the user authentication server, when the user authentication server receives sound data from the user to store initial authentication data of the user, the user may analyze the frequency components of the acoustic data to determine the components of the audible frequency band. Stored separately from the components of the non-audible frequency band.

The component of the audible frequency band is a component corresponding to the frequency band in the range of 16 Hz to 20 kHz, such as the user's voice, the voices of people around him, and the sound of a car.

The component of the inaudible frequency band is a component of a band not recognized by the human ear, and may be a component of a low frequency, high frequency, or radio frequency band used for wireless communication.

2 is a diagram showing a data block of a user authentication method through data verification according to an embodiment of the present invention.

Referring to FIG. 2, information input by a user for authentication may be classified for each user and stored in a data block form for each user. The data block may be composed of a plurality of sections, and each section may include a classification code, an individual code, a version, voice data, and history information.

Section 1 is a classification code that may contain user country information. This may be recorded by referring to an IP address at the time of input if the user device is a personal PC through the network operator information when the user device is a smartphone.

Section 2 is a personal code that can contain your personal information. The personal information of the user may include information about the city, date of birth, and gender of the user.

Section 3 may include version information of the authentication program used by the user authentication server as a version. When the user writes authentication information or performs authentication, each information may be sequentially arranged according to the version of the authentication program.

Section 4 may include voice data information of the user and may include any word information selected by the user for authentication. In addition, sound information about an audible frequency and an inaudible frequency when the user performs storage for authentication may be included.

Section 5 may include history information, and the history information may include information in which a series of details of a user uploading and authenticating user information for authentication are sequentially arranged.

3 is a view illustrating a history section in detail in the data block of FIG. 2. Referring to FIG. 3, the history section includes a storage year in which a user uploaded user information and voice for authentication, a number of authentications in which a user normally authenticated through a user authentication server, and provided with a service, and the user changed for security. The authentication voice may include information about a place where the user authenticated. The history section may be a space in which a series of processes and results of the user's authentication activity are accumulated and stored. If the user successfully authenticates, the history section may be increased by one. By comparing the number of authentication success counts during authentication, it can be used as a basis for determining the validity of the current user. In addition, by verifying the voice and the authentication place that is mainly used by the user, and storing it as a history history, when the user authenticates in a completely different place, the process requiring additional authentication is performed. Can be strengthened.

In an embodiment of the present invention, the voice and sound data of the user are compared with each other, and the information included in the data block stored in the user device and the user authentication server is compared with each other. The comparison process can be performed.

Prior to the user authentication process performed in FIG. 1, a process of setting initial authentication data to perform voice authentication from a user device may be preceded.

First, the user authentication server performs a step of receiving a selection input for a voice authentication setting menu. The voice authentication setting menu may be an interface that may be displayed by execution of a program for performing a voice input function executed in the user device when the user device connects to the server.

When the user authentication server selects the voice authentication setting menu, the user authentication server may receive a selection input and transmit a voice recognition setting menu to the user device. Subsequently, the user authentication server may perform a step of receiving voice information of the user from the user device through a voice recognition setting menu and storing the received voice information as initial authentication data of the user account.

At this time, if the user attempts to store the voice in the user authentication server, the user authentication server may separate the audible frequency data and the inaudible data from the received data and store it in the user account as reference voice information, which is information for personal authentication. have.

Each user information may be assigned an identification number for each individual as shown in FIG. 2 and may be stored in a section of a data block corresponding to each identification number.

4 is a flowchart specifically illustrating a process of authenticating whether a user is a valid user by comparing the data previously stored in the user authentication server with data received from the user device in the embodiment of the present invention.

Referring to FIG. 4, the step of authenticating whether the user is a valid user may first determine whether or not the data block information stored in the user device and the user authentication server are identical (S41).

In step S41, first, information about a user's country is compared, and secondly, information about a city, date of birth, and gender, which are personal information of the user, is compared. In addition, since the information stored by the user and the information at the time of authentication are sequentially stored in the data block in which version of the user authentication server, the data block can determine whether the information is duplicated by referring to the version of the currently transmitted information. have.

The method may include determining whether the audio frequency is the same by comparing the audible frequency with the inaudible frequency in the data received in the authentication data stored in the user authentication server.

The comparison of the audible frequencies is a step of comparing the areas corresponding to the human voice. As previously known, text information or pattern information corresponding to the voice information received through the voice processing process is stored and compared to determine the suitability. can do. In addition, noise other than the voice of the user included in the audio frequency band may be excluded from the information compared by a known method.

The process of comparing the inaudible frequencies is a process of comparing frequency components in an area that is not recognized by a human being, and a process of comparing components of inaudible frequencies included in authentication data stored in a user authentication server for authentication. Can be.

In the initial authentication data of the user, the sound of the inaudible frequency which is inaudible to the human ear is stored. The sound of the inaudible frequency may appear differently according to the user's location. Therefore, the embodiment stores the sound having an inaudible frequency together with the user's voice and utilizes it for user authentication.

The data block information stored in the user device and the data block information transmitted from the user authentication server determine that the current user is a valid user, thereby completing the user authentication process and providing a corresponding service to the current user (S42). Can be performed. In the process of determining whether the data is identical by comparing the data block information, when the corresponding information matches at least 90% or more, it may be regarded as the same user.

If it is determined that the data block information is not identical to each other, step S44 of performing additional authentication on the current user may be performed. Additional authentication may be performed such as ARS authentication, user fingerprint recognition, iris recognition.

If the additional authentication of the user is successful, step S45 may be performed by storing corresponding current user information in the data block information. Therefore, when the user performs authentication by changing a place or changing voice, additional data may be continuously updated in the initial authentication data, and information on the correlation of the data may be accumulated.

Therefore, when the user performs authentication on a normal copper wire, authentication may be performed immediately without the need for additional authentication. That is, the embodiment stores the user authentication information and user information as described above in the user authentication server and the user device, compares them, and compares the audible frequency components included in the initial authentication data with the inaudible frequency. By adding a process of comparing information on the components, it is possible to further improve the security of user authentication by voice.

In order to enhance the security of user authentication through voice, the user may transmit the sound of a predetermined subaudible frequency directly to the user authentication server by using a smartphone or a PC together with the user's voice to be stored in the data block. .

The sound of the preset non-audible frequency may be the same frequency as the user authentication server, the user is automatically sounded when the sound of the corresponding non-audible frequency through the application installed on the smartphone or PC to perform authentication Can be set to include.

In this case, even if the user's location changes, the sound of the same non-audible frequency band is included in the data, so that the validity of the user can be more accurately understood, and the user authenticates in a public place. Since only sound corresponding to the audible frequency can be reproduced, it is possible to prevent the authentication information from being exposed.

The embodiment stores the user information and the information about the user's voice as a data block and transmits the data to the user authentication server as described above, and the user transmission server stores the information and updates the information again when authentication of the user is performed. Manage. There is a history section in the data block information.In addition to the intuitive personal information stored in the data block when the user authenticates, the history information is further compared to the place where the user authenticated and the number of authentications. Has the advantage of further improving the security of user authentication because the current information is validated and updated through additional authentication.

The present invention has been described above with reference to preferred embodiments thereof, which are merely examples and are not intended to limit the present invention, and those skilled in the art to which the present invention pertains do not depart from the essential characteristics of the present invention. It will be appreciated that various modifications and applications are not possible that are not illustrated above. For example, each component specifically shown in the embodiment of the present invention can be modified. And differences relating to such modifications and applications will have to be construed as being included in the scope of the invention defined in the appended claims.

Claims (5)

Receiving, by the user authentication server, sound data including the user's voice from the user and information on the user and storing the sound data as a data block and storing the same data block in the user device;
When the user authentication server receives a signal for requesting authentication for accessing a preset service from the user device, transmitting a voice input menu to the user device;
Receiving, by the user authentication server, voice information input by the user and stored data block information from the user device through a voice input menu; And
The user authentication server includes comparing the information included in the data block previously stored in the user authentication server with the information included in the data block received from the user device, and authenticating whether the user is a valid user.
The sound data includes a user voice and a sound provided from a surrounding environment when the user generates a voice, and the user authentication server distinguishes a component corresponding to an audible frequency band and a component corresponding to an inaudible frequency band from the sound data. Characterized in that for storing,
The user authentication server authenticates the user by comparing the information on the inaudible frequency component with the comparison of the audible frequency component included in the initial authentication data, the user authentication method through data verification. delete The method of claim 1,
The data block is composed of a plurality of sections each containing a classification code, personal code, version, voice data, history information,
The classification code is the user's country, the personal code includes the user's city, date of birth, gender information, the version is the version of the user authentication server linked to the data block, the voice data is for the user to authenticate User authentication method through data verification including stored voice information. The method of claim 3,
The history information is a user authentication method through data verification, including information about the year the user stored the voice for authentication, the number of times of authentication of the user, the words of the voice stored by the user, the user's authentication place. The method of claim 1,
If it is determined that the information included in the data block stored in the user authentication server and the data block information of the user to be authenticated do not match, additional authentication is performed for the current user and the additional authentication succeeds, A method of authenticating a user by verifying data by adding the user's information to the section corresponding to the history information.

Images