KR102334900B1 - Surrogate authentication service system and method based on biometric information using sound wave communication - Google Patents

Abstract

The present invention relates to a biometric information-based surrogate authentication service system and method using sound wave communication, and more particularly, a surrogate terminal capable of biometric recognition on behalf of an authentication target terminal without a biometric means authentication for a user of the authentication target terminal It relates to a biometric information-based surrogate authentication service system and method using sonic communication that supports to perform surrogate using sonic communication and biometric information to increase authentication convenience and security for users of authentication target terminals. The present invention supports a specific terminal not equipped with a biometric means to receive service authentication through another terminal equipped with a biometric means to ensure authentication convenience of a user using the specific terminal, and does not include a biometric means By allowing biometric information to be used as an authentication means even in a specific terminal that is not yet available, there is an effect of increasing security for authentication of a specific terminal by using the biometric information as an authentication means.

Description

Surrogate authentication service system and method based on biometric information using sound wave communication}

The present invention relates to a biometric information-based surrogate authentication service system and method using sound wave communication, and more particularly, a surrogate terminal capable of biometric recognition on behalf of an authentication target terminal without a biometric means authentication for a user of the authentication target terminal It relates to a biometric information-based surrogate authentication service system and method using sonic communication that supports to perform surrogate using sonic communication and biometric information to increase authentication convenience and security for users of authentication target terminals.

Currently, the security service technology using the user's biometric information is widely used not only in a large-scale system such as an access control system, but also in a small-scale terminal such as a user's mobile terminal.

Biometric means for security, such as fingerprints and iris used for biometric information, are difficult to forge and have high security reliability, so they are highly preferred as a means for user authentication. There is a problem in that authentication using biometric means is limited.

Therefore, there is a need for a method to support authentication using biometric information even in a terminal without biometric recognition means.

Korean Patent Registration No. 10-1960801

The present invention supports a specific terminal not equipped with a biometric means to receive service authentication through another terminal equipped with a biometric means to ensure convenience of authentication for users using the specific terminal, and converts the authentication means into biometric information The purpose of this is to support it to increase security by using it.

A biometric information-based proxy authentication service method using sound wave communication for allowing the second terminal to perform proxy authentication for the first terminal based on biometric information on behalf of the first terminal according to an embodiment of the present invention, An authentication request step of transmitting, by the service server, authentication request information including a first identifier that is an identifier of the first terminal included in the log-in information to a biometric authentication server when the log-in information is received from the first terminal; A token issuance step in which the biometric authentication server in which matching biometric information is pre-registered, when receiving the authentication request information, issues a token corresponding to the first identifier and transmits it to the first terminal through the service server; Included in the authentication information when the server receives authentication information including the token, the first identifier, and biometric information from the second terminal, which has obtained the token and the first identifier through sound wave communication between the first terminal and the second terminal Whether the token issued corresponding to the first identifier and the token of the authentication information match each other, and the biometric information previously registered in the biometric authentication server corresponding to the first identifier of the authentication information and the biometric information of the authentication information A determination step of determining whether or not authentication succeeds in the authentication information according to whether they match each other, and transmitting the authentication result information on the determination result to the service server, and when the service server succeeds in authentication based on the authentication result information, the login It may include an authentication step of authenticating the first terminal corresponding to the information.

As an example related to the present invention, the biometric information may include at least one of fingerprint information, face recognition information, and iris information.

As an example related to the present invention, in the determining step, in the biometric authentication server, a token issued in response to the first identifier included in the authentication information matches the token of the authentication information and the biometric authentication information included in the authentication information If there is the previously registered biometric information matching the information, the authentication information is judged as authentication success, otherwise it is judged as authentication failure, and authentication result information for the judgment result is transmitted to the service server. can be done with

As an example related to the present invention, in the biometric information-based proxy authentication service method using the sound wave communication, after the token issuance step, the first application unit configured in the first terminal and transmitting the login information to the service server is the login Generating a sound wave signal corresponding to the received token and the first identifier corresponding to the information and transmitting it to the second terminal through a first sound wave interface unit configured in the first terminal, and a second application unit of the second terminal The token and the first identifier are generated from the sound wave signal received from the first terminal through a second sound wave interface unit configured in the second terminal, and when the sound wave signal is received, the biometric recognition means configured in the second terminal The method may further include generating authentication information including the biometric information, the token, and the first identifier after generating the information and transmitting the generated authentication information to the biometric authentication server.

As an example related to the present invention, the first sound wave interface unit and the second sound wave interface unit may include a microphone and a speaker.

As an example related to the present invention, in the biometric information-based proxy authentication service method using the sound wave communication, before the authentication request step, a second control unit configured in the second terminal according to a user input is a storage unit of the second terminal Activating the second application unit by executing an application stored in the second application unit, activating the second sound wave interface unit when activated as the second application unit, and generating a test signal when the first application unit generates the login information to generate the first sound wave Transmitting to the second terminal through an interface unit, generating a response signal when the second application unit receives the test signal through the second sound wave interface unit and transmitting the response signal to the first terminal, and the first application unit receives the response The method may further include transmitting the login information to the service server when receiving a signal.

A biometric information-based proxy authentication service system using sound wave communication for the second terminal to perform proxy authentication for the first terminal based on biometric information on behalf of the first terminal according to an embodiment of the present invention, A service server that transmits authentication request information including a first identifier, which is an identifier of the first terminal included in the log-in information, to a biometric authentication server when receiving log-in information from the first terminal, and the first identifier when receiving the authentication request information The token and the token from the second terminal, which is issued corresponding to and transmitted to the first terminal through the service server, and obtained the token and the first identifier through sound wave communication between the first terminal and the second terminal When the authentication information including the first identifier and the biometric information is received, whether the token issued corresponding to the first identifier included in the authentication information and the token of the authentication information match each other, and the biometric information of the authentication information is the biometric authentication It is determined whether or not the authentication of the authentication information is successful according to whether or not the biometric information registered in the server matches, and whether to authenticate the first terminal is determined based on the authentication result information for the determination result in the service server It may include a biometric authentication server that transmits the authentication result information to the service server as much as possible.

As an example related to the present invention, configured in the first terminal, the login information is generated and transmitted to the service server, and when the token is received, a sound wave signal corresponding to the token and the first identifier is generated to generate the first The token from the sound wave signal received through the first application unit and the second terminal configured to transmit to the second terminal through the first sound wave interface unit configured in the first terminal, and the second sound wave interface unit configured in the second terminal and a first identifier, and when the sound wave signal is received, biometric information is generated through the biometric means configured in the second terminal, and then authentication information including the token, the first identifier, and biometric information is generated to authenticate the biometric It may be characterized by further comprising a second application unit for transmitting to the server.

As an example related to the present invention, when an event requiring authentication of the first identifier of the first terminal occurs after login, the service server requests the biometric authentication server to issue a new token for the first identifier in response to the event and transmits the new token received in response to the event to a first application unit of the first terminal, and the first application unit generates a sound wave signal corresponding to the new token and the first identifier when the new token is received to transmit to the second terminal through the first sound wave interface unit, and the second application unit generates new authentication information including the new token when receiving the sound wave signal received through the second sound wave interface unit, the biometric authentication server and, the biometric authentication server generates authentication result information corresponding to the new authentication information and transmits it to the service server so that the service server determines whether to authenticate the first terminal corresponding to the event. can be done with

The present invention supports a specific terminal not equipped with a biometric means to receive service authentication through another terminal equipped with a biometric means to ensure authentication convenience of a user using the specific terminal, and does not include a biometric means By allowing biometric information to be used as an authentication means even in a specific terminal that is not yet available, there is an effect of increasing security for authentication of a specific terminal by using the biometric information as an authentication means.

In addition, the present invention can activate sound wave communication for security of the token in the authentication process for the first terminal between the first terminal and the second terminal in advance before the token is delivered to the first terminal, By shortening the time required to activate the sonic communication in the token delivery process through the token and minimizing the token activation time, there is an effect of increasing the security of the token required for authentication of the first terminal.

1 is a block diagram of a biometric information-based proxy authentication service system using sound wave communication according to an embodiment of the present invention.
2 is a detailed operation block diagram of a biometric information-based proxy authentication service system using sound wave communication according to an embodiment of the present invention.
3 is a flowchart of a proxy authentication service method of a biometric information-based proxy authentication service system using sound wave communication according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

1 is a configuration diagram of a biometric information-based proxy authentication service system using sound wave communication according to an embodiment of the present invention. As shown, a first terminal 100 and a second terminal 200 communicate with each other through a communication network. It may include a biometric authentication server 400 and a service server 300 .

In addition, the service server 300 and the biometric authentication server 400 may interact with each other while communicating through a communication network. In this case, it goes without saying that the service server 300 and the biometric authentication server 400 may be configured as one integrated server.

In addition, the communication network described in the present invention may include a wired/wireless communication network, and as an example of such a wireless communication network, a wireless LAN (WLAN), a DLNA (Digital Living Network Alliance), a Wibro (Wireless Broadband: Wibro), WiMAX (World Interoperability for Microwave Access: Wimax), GSM (Global System for Mobile communication), CDMA (Code Division Multi Access), CDMA2000 (Code Division Multi Access 2000), EV-DO (Enhanced Voice-Data Optimized or Enhanced Voice- Data Only), Wideband CDMA (WCDMA), High Speed Downlink Packet Access (HSDPA), High Speed Uplink Packet Access (HSUPA), IEEE 802.16, Long Term Evolution (LTE), Long Term Evolution-A (LTE-A) Advanced), Wireless Mobile Broadband Service (WMBS), 5G mobile communication service, Bluetooth, LoRa (Long Range), RFID (Radio Frequency Identification), Infrared Data Association (IrDA), Ultra Wideband (UWB), ZigBee, Near Field Communication (NFC), Ultra Sound Communication (USC), Visible Light Communication (VLC), Wi-Fi, Wi-Fi Direct may be included. In addition, wired communication networks include wired LAN (Local Area Network), wired WAN (Wide Area Network), Power Line Communication (PLC), USB communication, Ethernet, serial communication, optical/coaxial A cable may be included.

In addition, the first terminal 100 and the second terminal 200 may be configured as user terminals, respectively, and the user terminals include a smart phone having a communication function, a portable terminal, Mobile Terminal, Personal Digital Assistant (PDA), PMP (Portable Multimedia Player) Terminal, Telematics Terminal, Navigation Terminal, Personal Computer, Laptop Computer, Slate PC (Slate PC), tablet PC (Tablet PC), ultrabook (ultrabook), wearable device (Wearable Device, for example, watch-type terminal (Smartwatch), glass-type terminal (Smart Glass), HMD (Head Mounted Display), etc. including), Wibro terminal, IPTV (Internet Protocol Television) terminal, smart TV, digital broadcasting terminal, AVN (Audio Video Navigation) terminal, A/V (Audio/Video) system, flexible terminal, etc. It may include various terminals.

In addition, the user terminal includes a communication unit for communication with a server and an external device including other terminals, a display unit for displaying various information, a storage unit for storing various data, a user input unit for receiving user input, and overall control of the user terminal It may be configured to include various components such as a control unit that performs a function, and at least one component configured in the user terminal may be configured to be included in another component.

In this case, the control unit executes the overall control function of the terminal by using the program and data stored in the storage unit configured in the user terminal. The control unit may include RAM, ROM, CPU, GPU, and a bus, and the RAM, ROM, CPU, GPU, etc. may be connected to each other through a bus.

In addition, the control unit of the user terminal may be stored in advance in the storage unit of the user terminal and may operate as an application unit by executing an application for communication with the service server 300 .

Based on the above configuration, in the present invention, a biometric means is provided instead of the first terminal 100 without biometric means, and authentication for the first terminal 100 based on biometric information is performed by the second terminal ( 200) can provide a system that can support performing on behalf of the user, and through this, authentication using biometric information can be used even in the first terminal 100 without a biometric means, thereby enhancing authentication convenience for users and In addition, it is possible to increase the security of user authentication by supporting authentication using biometric information for the user of the first terminal 100 without biometric recognition means, which will be described in detail with reference to the drawings below.

2 is a detailed operation block diagram of a biometric information-based proxy authentication service system using sound wave communication according to an embodiment of the present invention.

As shown, the first terminal 100 without (not provided) biometric means capable of generating biometric information may be configured including a component of the user terminal, and in addition to the configuration of the user terminal, A first sound wave interface unit for sound wave communication may be configured in the first terminal 100 .

In addition, the first terminal 100 includes a first control unit operating as the control unit, and the first control unit executes an application stored in the storage unit of the first terminal 100 to perform the first application unit 110 . can operate as

Also, when operating as the first application unit 110 , the first application unit 110 may include a service use unit 111 and an authentication request module 112 .

In this case, the service use unit 111 and the authentication request module 112 may mean a software function (function) supported by the application.

In addition, the first application unit 110 may be a component including a service using unit 111 and an authentication request module 112 composed of hardware, and the service using unit 111 and an authentication request module 112 may store the application-related data to execute a function related to the application or load the application from the storage unit of the first terminal 100 to execute the function related to the application.

The service use unit 111 may access the service server 300 , and when accessing the service server 300 , may transmit log-in information to the service server 300 .

In this case, the login information may include a user ID and password corresponding to the user of the first terminal 100 .

In addition, the service use unit 111 may include a first identifier that is a preset identifier of the first terminal 100 in the login information and transmit it to the service server 300 .

Here, as an example of the first identifier, the first identifier may be identification information of the first terminal 100 or user identification information corresponding to a user of the first terminal 100 . In addition, the identification information of the first terminal 100 may include a mobile directory number (MDN), mobile IP, mobile MAC, subscriber identity module (Sim) card unique information, serial number, and the like. The user identification information may include a user ID, user contact information, and the like.

Alternatively, the first identifier may include both identification information of the first terminal and user identification information.

In addition, the service server 300 may transmit web page information to the service using unit 111 when the service using unit 111 configured in the first terminal 100 is connected, and the first The service use unit 111 of the application unit 110 may display a web page according to the web page information, generate login information through the web page, and transmit it to the service server 300 .

In addition, the authentication request module 112 constituting the first application unit 110 corresponds to the login information and transmits the user authentication of the first terminal 100 by the service server 300 (or the first terminal ( 100) for authentication), and upon receiving the token, the token and a sound wave signal corresponding to the first identifier for sound wave communication are generated based on the token and a preset first identifier. can do.

In addition, the authentication request module 112 may transmit the sound wave signal to the second terminal 200 through a first sound wave interface unit for sound wave communication configured in the first terminal 100 .

In this case, the authentication request module 112 may generate a sound wave signal by inserting a code corresponding to the token and the first identifier into an audible sound frequency or an inaudible sound frequency, and includes a first The sound wave signal may be transmitted to the second terminal 200 through the sound wave interface unit.

In addition, the first sound wave interface unit may include a microphone (mic) and a speaker.

On the other hand, unlike the first terminal 100, the second terminal 200 may be provided with a biometric means capable of generating biometric information, and, like the first terminal 100, includes a component of the user terminal. In addition to the configuration of the user terminal, a second sound wave interface unit for sound wave communication may be configured in the second terminal 200 .

In addition, a second control unit operating as the control unit of the second terminal 200 is configured, and the second control unit executes an application stored in the storage unit of the second terminal 200 to perform the second application unit 210 . can operate as

In this case, the application executed in the second terminal 200 may be the same application as the application executed in the first terminal 100 .

Also, when operating as the second application unit 210 , the second application unit 210 may include a biometric information collection unit 212 and an authentication module 211 .

In this case, the biometric information collection unit 212 and the authentication module 211 may mean software functions (functions) supported by the application.

In addition, the second application unit 210 may be a component including a biometric information collecting unit 212 and an authentication module 211 composed of hardware, and the biometric information collecting unit 212 and the authentication module. The 211 may store the application-related data to execute the application-related function, or load the application from the storage unit of the second terminal 200 to execute the application-related function.

In addition, the second application unit 210 may receive the sound wave signal transmitted from the first terminal 100 through a second sound wave interface unit including a microphone configured in the second terminal 200 . .

In this case, the second sound wave interface unit may be configured to include a speaker and a microphone.

In the above configuration, the first application unit 110 of the first terminal 100 generates a sound wave signal in which an application identifier for execution of the application is inserted in addition to the token and the first identifier in the sound wave signal. It can be transmitted to the second terminal 200 .

Accordingly, when receiving the sound wave signal, the second control unit of the second terminal 200 obtains the application identifier from the sound wave signal by analyzing the sound wave signal, and the second terminal 200 corresponding to the application identifier ) may be activated as the second application unit 210 by executing an application stored in the storage unit.

Also, the second application unit 210 may obtain the token and the first identifier by analyzing the sound wave signal. At this time, the second control unit acquires the token and the first identifier together with the application identifier, and transmits it to the application after the execution of the application so that the second application unit 210 obtains the token and the first identifier. It might work.

In addition, the authentication module 211 of the second application may receive the sound wave signal through the second sound wave interface unit to obtain the token and the first identifier.

Also, the authentication module 211 may activate the biometric information collection unit 212 of the second application unit 210 when the token and the first identifier are obtained.

The biometric information collection unit 212 may activate the biometric means configured in the second terminal 200 upon activation, and collect biometric information through the biometric means or cooperate with the biometric means to collect the biometric information. can create

For example, the biometric information collection unit 212 is configured in the second terminal 200 and includes a camera unit, a fingerprint recognizer for recognizing a fingerprint, an iris recognizer for recognizing an iris, and the like (or biometric recognition unit). ) to generate biometric information for the user of the first terminal 100 including various user biometric information such as iris information, fingerprint information, and facial recognition information corresponding to the user of the first terminal 100 in conjunction with the have.

In this case, the user of the second terminal 200 may be the same as the user of the first terminal 100 , or may be a different person from the user of the first terminal 100 .

In addition, the invention will be described below on the assumption that the biometric information collection unit 212 generates biometric information including any one of the iris information, fingerprint information, and face recognition information. It goes without saying that various types of biometric information such as information and facial recognition information may be included.

In addition, the authentication module 211 may receive biometric information in response to the sound wave signal from the biometric information collection unit 212, and generate authentication information including the token, the first identifier, and the biometric information. It can be transmitted to the biometric authentication server 400 .

Meanwhile, the biometric authentication server 400 may include an authentication unit 410 , a token issuing unit 420 , and a DB 430 .

At this time, the biometric authentication server 400 may be configured to include a second server control unit including the authentication unit 410 and the token issuing unit 420 , and the second server control unit may include the biometric authentication server ( 400), the second server control unit may include RAM, ROM, CPU, GPU, and a bus, and the RAM, ROM, CPU, GPU, etc. may be connected to each other through a bus.

In addition, the biometric authentication server 400 includes a second communication unit for communicating with the first terminal 100 and the second terminal 200 and the service server 300 , a second storage unit for storing various information, and an external device. It may be configured to include various components such as a second interface unit for receiving an input, and components configured in the biometric authentication server 400 may be controlled through the second server control unit.

In this case, the second storage unit may be configured as the DB 430 or the DB 430 may be included in the second server control unit.

The operation of the biometric authentication server 400, which will be described below, may be performed by the second server controller.

The authentication unit 410 may receive authentication request information including a first identifier included in the login information from the service server 300 that has received the login information of the first terminal 100, and the authentication Upon receiving the request information, the authentication request information may be transmitted to the token issuing unit 420 .

The token issuing unit 420 may issue (issuance) a token in response to the authentication request information, and the token may be a one-time token with a set validity period.

In addition, the authentication unit 410 or the token issuing unit 420 may transmit a token issued in response to the authentication request information to the service server 300, and when issuing the token, the token is issued until an authentication determination is made. It may match the first identifier and temporarily store it and wait for reception of authentication information corresponding to the token.

In this case, when the validity period of the token expires, the token issuing unit 420 may delete the expired token.

In addition, the user's biometric information corresponding to the first terminal 100 may be pre-registered and stored in the DB 430 .

At this time, the user's biometric information corresponding to the first terminal 100 stored in the DB 430 is composed of biometric registration information or the user's biometric information is included in the biometric registration information. It may be stored in the DB 430, and the biometric registration information matches the first identifier that is the identifier of the first terminal 100 and is stored in the DB 430 or includes the first identifier in the biometric registration information. and may be stored in the DB 430 .

Accordingly, when the authentication information is received, the authentication unit 410 works with the token issuing unit 420 to identify a token issued and stored in advance corresponding to the first identifier included in the authentication information, and to the authentication information. Matching may be determined by comparing the included token with a token issued and stored in advance for the first identifier (a token identified corresponding to the first identifier).

Also, the authentication unit 410 may identify a first identifier from the authentication information, and identify biometric information (or biometric registration information) stored in the DB 430 in correspondence to the first identifier, and the authentication information By comparing the biometric information identified in response to the biometric information of the authentication information, it is possible to determine whether pre-registered biometric information matching the biometric information included in the authentication information exists in the DB 430 .

That is, the authentication unit 410 searches the DB 430 based on the first identifier included in the authentication information, and if there is no biometric information registered in response to the first identifier, the authentication information If it is determined that authentication has failed, and biometric information that has been registered (matched) with the first identifier exists in the DB 430, the corresponding biometric information (biometric registration information) is extracted from the DB 430 and then the authentication is performed. The biometric information of the information is compared, and if the biometric information of the DB 430 and the biometric information of the authentication information match each other as a result of the comparison, it is determined that the authentication is successful for the authentication information. can do.

Accordingly, the authentication unit 410, the token issued corresponding to the first identifier included in the authentication information and the token of the authentication information coincide with the pre-registered biometric information included in the authentication information If the (pre-stored) biometric information exists in the DB 430, the authentication information is judged as authentication success, otherwise it is judged as authentication failure, and authentication result information for the judgment result is sent to the service server 300. can be transmitted

In this case, the authentication unit 410 may include the first identifier in the authentication result information to enable identification of an authentication target corresponding to the authentication result information and transmit it to the service server 300 .

Meanwhile, the service server 300 may include a service providing unit 310 and an authentication requesting unit 320 .

In this case, the service server 300 may be configured to include a first server control unit including the service providing unit 310 and the authentication request unit 320 , and the first server control unit is the service server 300 . , and the first server control unit may include RAM, ROM, CPU, GPU, and a bus, and the RAM, ROM, CPU, GPU, etc. may be connected to each other through a bus.

In addition, the service server 300 includes a first communication unit for communicating with the first terminal 100 and the second terminal 200 and the biometric authentication server 400, a first storage unit for storing various information, and an external device. It may be configured to include various components such as a first interface unit for receiving an input, and components configured in the service server 300 may be controlled through the first server control unit.

The operation of the service server 300, which will be described below, may be performed by the first server control unit.

When the service providing unit 310 of the first terminal 100 accesses the service server 300, the information (eg, the web page information) required for the login of the first terminal 100 is provided to the first terminal ( 100 ), and when receiving login information from the first terminal 100 , the first identifier included in the login information may be transmitted to the authentication requesting unit 320 .

In addition, the authentication request unit 320 generates authentication request information including the first identifier upon receiving the first identifier, and transmits the authentication request information to the biometric authentication server 400 to request token issuance. to be transmitted to the token issuing unit 420 , and a token issued in response to the authentication request information may be received from the biometric authentication server 400 .

Also, the authentication request unit 320 may transmit the token to the first terminal 100 upon receiving the token.

In addition, after transmitting the token to the first terminal 100 in conjunction with the authentication request unit 320, the service providing unit 310 may wait for reception of the authentication result information in response to the login information. In addition, when authentication result information is received from the biometric authentication server 400 , the authentication result information corresponding to the log-in information may be identified through the log-in information and the first identifier included in the authentication result information.

In addition, when the authentication result according to the authentication result information based on the authentication result information is authentication success, the service providing unit 310 is configured to perform authentication for the user of the first terminal 100 or the first terminal 100 . It can be determined as successful, and when authentication is successful, service-related data can be transmitted to the first terminal 100 to provide the service provided by the service providing unit 310 to the first terminal 100 .

Through the above configuration, the present invention supports to receive service authentication from a specific terminal not equipped with a biometric means through another terminal equipped with a biometric means while ensuring authentication convenience of a user using the specific terminal, By enabling biometric information to be used as an authentication means even in a specific terminal that is not equipped with a biometric means, it is possible to increase security for authentication of a specific terminal by using the biometric information as an authentication means.

In other words, according to the present invention, when the user wants to receive the service of the service server through the user's first terminal, such as a PC, which is not equipped with the biometric recognition means, the biometric recognition means through the user's second terminal, such as a smartphone equipped with the biometric recognition means. It is possible to authenticate the user of the information-based first terminal, and through this, the service is provided to the first terminal, so that the user through biometric-based authentication even when using the service through the first terminal that is not equipped with a biometric means. By supporting authentication, convenience and security for user authentication can be improved.

Meanwhile, in the above configuration, the token activation time (or token holding time) is minimized while supporting the first terminal 100 to be smoothly authenticated using the second terminal 200 equipped with the biometric recognition means. This can increase the security of the token, which will be described in detail.

First, the second control unit configured in the second terminal 200 executes an application stored in the storage unit of the second terminal 200 according to a user input and activates it as the second application unit 210 , and the second application The unit 210 may activate the second sound wave interface unit when activated.

At this time, the first control unit configured in the first terminal 100 also executes the application stored in the storage of the first terminal 100 according to a user input and activates it as the first application unit 110 , and the first application The unit 110 may activate the first sound wave interface unit when activated.

In addition, the first application unit 110 of the first terminal 100 may generate a test signal when generating the login information and transmit it to the second terminal 200 through the first sound wave interface unit.

In addition, the second application unit 210 of the second terminal 200 generates a response signal upon receiving the test signal through the second sound wave interface unit and transmits it to the first terminal 100 through the second sound wave interface unit. can

In addition, the first application unit 110 may transmit the login information to the service server 300 upon receiving the response signal through the first sound wave interface unit.

Based on the above configuration, the present invention provides an authentication process for the first terminal 100 between the first terminal 100 and the second terminal 200 before the token is transferred to the first terminal 100 . Acoustic communication for security of the token can be activated in advance, and through this, the time required to activate sonic communication in the token delivery process is shortened and the token activation time is minimized by minimizing the token activation time to the token required for authentication of the first terminal 100. security can be improved.

On the other hand, in addition to the above-described configuration, the proxy authentication service according to the present invention to perform authentication of the first terminal 100 using biometric information generated by the second terminal 200 equipped with a biometric recognition means. Proxy authentication using biometric information of the second terminal 200 for the first terminal 100 of the system is provided by the service server 300 as well as the login to the service server 300 of the first terminal 100 It can also be applied while using the service, which will be described in detail.

First, when an event requiring authentication for the first identifier of the first terminal 100 occurs after logging in, the service server 300 issues a new token for the first identifier in response to the event. ), and the new token received in response to the event may be transmitted to the first application unit 110 of the first terminal 100 .

In addition, the first application unit 110 may generate a sound wave signal corresponding to the new token and the first identifier upon receiving the new token and transmit it to the second terminal 200 through the first sound wave interface unit.

In addition, the second application unit 210 obtains the new token and the first identifier from the sound wave signal when the sound wave signal received through the second sound wave interface unit is received, and the new token and the first identifier and the first identifier Second, new authentication information including biometric information obtained through the biometric recognition means of the terminal 200 may be generated and transmitted to the biometric authentication server 400 .

In addition, the biometric authentication server 400 may generate authentication result information in response to the new authentication information and transmit it to the service server 300 in the same manner as in the process of generating authentication result information for the above-described authentication information.

In addition, when the service server 300 receives the authentication result information from the biometric authentication server 400 in response to the event, the user of the first terminal 100 responds to the event based on the authentication result information determines whether to authenticate for the event, and when the authentication of the user of the first terminal 100 for the event is successful, a service corresponding to the event is transmitted to the first terminal 100 or subsequent processing corresponding to the event and may transmit result information on the subsequent processing to the first terminal 100 .

In this case, the event is a payment-related event while using the service provided by the service server 300 , or a right through user identification of the first terminal 100 for content that requires the use right provided by the service server 300 . It may include various events such as authentication.

3 is a sonic communication according to an embodiment of the present invention for the second terminal 200 to perform proxy authentication for the first terminal 100 based on biometric information on behalf of the first terminal 100 It is a flowchart of a proxy authentication service method of a biometric information-based proxy authentication service system using

First, the first application unit 110 configured in the first terminal 100 accesses the service server 300 and sends login information including the first identifier that is the identifier of the first terminal 100 to the service server 300 . ) can be transmitted to (S1).

In addition, when receiving the login information, the service server 300 may generate authentication request information including the first identifier included in the login information and transmit it to the biometric authentication server 400 ( S2 ).

In addition, the biometric authentication server 400 pre-registered with biometric information corresponding to the second terminal 200 issues a token corresponding to the first identifier upon receiving the authentication request information to the service server 300 . It can be transmitted (S3).

Also, the service server 300 may transmit the token to the first application unit 110 of the first terminal 100 (S4).

In addition, the first application unit 110 of the first terminal 100 generates a sound wave signal corresponding to the token and the first identifier through the first sound wave interface unit configured in the first terminal 100 . It can be transmitted to the second terminal 200 (S5).

In addition, the second application unit 210 of the second terminal 200 generates the token and the first identifier from the sound wave signal received through the second sound wave interface unit configured in the second terminal 200, and the sound wave Upon receiving a signal, biometric information is generated through the biometric means configured in the second terminal 200 (S6), and authentication information including the biometric information, the token, and the first identifier is generated, and the biometric authentication server 400 ) can be transmitted to (S7).

In addition, when the biometric authentication server 400 receives the authentication information, whether the token issued corresponding to the first identifier included in the authentication information and the token of the authentication information match each other, and the biometric information of the authentication information is It is possible to determine whether the authentication is performed according to whether or not the biometric information registered (pre-stored) in the biometric authentication server 400 matches (S8), and to transmit authentication result information for the determination result to the service server 300 (S9). ).

In addition, the service server 300 authenticates the first terminal 100 corresponding to the login information when the authentication is successful based on the authentication result information, approves the login of the first terminal 100, and Service data requested from the first terminal 100 may be transmitted to the first terminal 100 (S10).

The various devices and components described herein may be implemented by hardware circuitry (eg, CMOS-based logic circuitry), firmware, software, or a combination thereof. For example, it may be implemented using transistors, logic gates, and electronic circuits in the form of various electrical structures.

Those of ordinary skill in the art to which the present invention pertains may modify and modify the above-described contents without departing from the essential characteristics of the present invention. Accordingly, the embodiments disclosed in the present invention are not intended to limit the technical spirit of the present invention, but to explain, and the scope of the technical spirit of the present invention is not limited by these embodiments. The protection scope of the present invention should be construed by the following claims, and all technical ideas within the scope equivalent thereto should be construed as being included in the scope of the present invention.

100: first terminal 110: first application unit
111: service use unit 112: authentication request module
200: second terminal 210: second application unit
211: authentication module 212: biometric information collection unit
300: service server 310: service provider
320: authentication request unit 400: biometric authentication server
410: authentication unit 420: token issuing unit
430: DB

Claims (9)

A service method for a second terminal to perform proxy authentication for the first terminal based on biometric information on behalf of the first terminal,
an authentication request step of transmitting, by the service server, authentication request information including a first identifier, which is an identifier of the first terminal included in the log-in information, to the biometric authentication server when the log-in information is received from the first terminal;
A token issuance step in which the biometric authentication server matched with the first identifier and pre-registered with biometric information issues a token corresponding to the first identifier when receiving the authentication request information and transmits it to the first terminal through the service server ;
When the biometric authentication server receives authentication information including the token, the first identifier, and biometric information from the second terminal that obtained the token and the first identifier through sound wave communication between the first terminal and the second terminal, the authentication Whether the token issued corresponding to the first identifier included in the information and the token of the authentication information match each other, and the biometric information previously registered in the biometric authentication server corresponding to the first identifier of the authentication information and the authentication information a determination step of determining whether or not authentication of the authentication information is successful according to whether the biometric information matches each other, and transmitting authentication result information on the determination result to the service server; and
An authentication step of authenticating, by the service server, the first terminal corresponding to the login information when authentication is successful based on the authentication result information;
After the token issuance step,
The first application unit configured in the first terminal and transmitting the login information to the service server generates a token received in response to the login information and a sound wave signal corresponding to the first identifier, the first configured in the first terminal transmitting to the second terminal through a sound wave interface; and
A second application unit of the second terminal generates the token and the first identifier from the sound wave signal received from the first terminal through a second sound wave interface unit configured in the second terminal, and when the sound wave signal is received, the second After generating biometric information through the biometric recognition means configured in the terminal, generating authentication information including the biometric information, the token, and a first identifier, and transmitting the biometric information to the biometric authentication server;
Before the authentication request step,
The second control unit configured in the second terminal executes an application stored in the storage unit of the second terminal according to a user input, activates it as a second application unit, and activates the second sound wave interface unit when activated as the second application unit ;
generating a test signal when the first application unit generates the login information and transmitting it to the second terminal through the first sound wave interface unit;
generating a response signal when the second application unit receives the test signal through the second sound wave interface unit and transmitting it to the first terminal; and
Biometric information-based proxy authentication service method using sound wave communication, characterized in that it further comprises the step of transmitting the login information to the service server when the first application unit receives the response signal.
The method according to claim 1,
Wherein the biometric information includes at least one of fingerprint information, face recognition information, and iris information.
The method according to claim 1,
The determination step is
The biometric authentication server,
When the token issued corresponding to the first identifier included in the authentication information matches the token of the authentication information and the previously registered biometric information matching the biometric information included in the authentication information exists, the authentication information A biometric information-based proxy authentication service method using sound wave communication, characterized in that the authentication success is determined and authentication failure is otherwise determined, and authentication result information for the determination result is transmitted to the service server.
delete The method according to claim 1,
The first sound wave interface unit and the second sound wave interface unit biometric information-based proxy authentication service method using sound wave communication, characterized in that it comprises a microphone and a speaker.
delete A service system for a second terminal to perform proxy authentication for the first terminal based on biometric information on behalf of the first terminal,
a service server that transmits, to a biometric authentication server, authentication request information including a first identifier that is an identifier of the first terminal included in the log-in information when receiving the log-in information from the first terminal; and
Upon receiving the authentication request information, a token corresponding to the first identifier is issued and transmitted to the first terminal through the service server, and the token and the first identifier through sound wave communication between the first terminal and the second terminal Whether the token issued corresponding to the first identifier included in the authentication information and the token of the authentication information match each other when the token, the first identifier, and the authentication information including the biometric information are received from the second terminal, It is determined whether or not authentication of the authentication information is successful according to whether the biometric information of the authentication information matches the biometric information previously registered in the biometric authentication server, and based on the authentication result information for the determination result in the service server and a biometric authentication server that transmits the authentication result information to the service server to determine whether to authenticate the first terminal,
A first sound wave interface configured in the first terminal, generating the login information and transmitting it to the service server, and generating a sound wave signal corresponding to the token and the first identifier when receiving the token, and configured in the first terminal a first application unit for transmitting to the second terminal through a unit; and
Biometric recognition means configured in the second terminal, generating the token and the first identifier from the sound wave signal received through a second sound wave interface unit configured in the second terminal, and configured in the second terminal when receiving the sound wave signal After generating biometric information through a second application unit that generates authentication information including the token, the first identifier, and biometric information and transmits it to the biometric authentication server,
When an event requiring authentication of the first identifier of the first terminal occurs after the login, the service server requests the biometric authentication server to issue a new token for the first identifier in response to the event, and receives in response to the event transmits the new token to the first application unit of the first terminal,
The first application unit generates a sound wave signal corresponding to the new token and the first identifier when receiving the new token and transmits it to the second terminal through the first sound wave interface unit,
The second application unit generates new authentication information including the new token when receiving the sound wave signal received through the second sound wave interface unit and transmits it to the biometric authentication server,
The biometric authentication server generates authentication result information corresponding to the new authentication information and transmits it to the service server so that the service server determines whether to authenticate the first terminal corresponding to the event. Biometric information-based proxy authentication service system using delete delete

Images