KR102424040B1 - System of management of distributing biometric data and method of management of distributing biometric data using thereof - Google Patents

Abstract

The present invention relates to a system for managing distribution of biometrics and a method for managing distribution of biometrics by using the same. According to an embodiment of the present invention, a biometrics management server for managing distribution of biometrics comprises: a receiving module for receiving a biometric template obtained based on biometric information collected through a biometric terminal communicatively connected to the biometric information management server; a template division module for dividing the biological template into a plurality of distributed templates; and a distributed information management module for transmitting the plurality of distributed templates to distributed storages and storing distributed information about the plurality of distributed templates. The distributed information is randomly generated whenever biometric information is collected from the biometric terminal, to include information related to criteria for generating the plurality of distributed templates, a method for generating a plurality of distributed templates, and the distributed storages. Therefore, whenever a biometric template corresponding to biometric information is generated, a method for dividing the biometric template and distributing and managing the same can be randomly set.

Description

Distributed management system for biometric information and a method for distributed management of biometric information using the same

The present invention relates to a biometric information distributed management system and a biometric information distributed management method using the same, and more particularly, to an apparatus and method for encrypting and authenticating biometric information, which can safely store and authenticate biometric information by distributing it. it's about

Biometric information is being used in various fields. Specifically, biometric information having information about an individual's fingerprint has been utilized as important information for identifying an individual from the past. Recently, not only fingerprints but also an individual's face, iris, blood vessels, and genes are utilized as personal biometric information.

In particular, since such biometric information has unique characteristics that exist only in individuals, it is utilized to identify and identify individuals. Among the biometric information described above, an individual's fingerprint has been used as data for identifying an individual for a long time. Fingerprint data is collected to identify individuals in banks and government offices, and this fingerprint data is collected through fingerprint recognition sensors in various electronic devices and smart devices.

Recently, as various sensors have been developed, in addition to fingerprints, various personal biometric information such as palm veins, finger veins, back veins, iris, face, voice, and genes are collected. is used to authenticate.

However, as the types of personal biometric information increase and the fields of use thereof increase, a method for safely storing and safely utilizing biometric information is required. In particular, there is a problem in that it is difficult to uniformly store and manage biometric information as they have different sizes and are collected through different sensors.

In addition, there is a problem in security that it is difficult to collectively store and manage biometric information in a server or management device that collects, stores, and authenticates biometric information for authentication from electronic devices or smart devices used by individuals or organizations that require authentication.

On the other hand, the above-mentioned background art is technical information that the inventor possessed for the derivation of the present invention or acquired in the process of derivation of the present invention, and it cannot be said that it is necessarily a known technique disclosed to the general public before the filing of the present invention. .

Korea Patent Publication No. 10-2005-0099220 (2005.10.13)

An object to be solved by the present invention is to provide an apparatus and method for encrypting and authenticating biometric information, in which a method for dividing and distributed management of biometric templates can be randomly set whenever a biometric template corresponding to biometric information is generated. .

In addition, another problem to be solved by the present invention is to strengthen the security of biometric information by distributing the divided biometric templates in a plurality of distributed servers and the biometric authentication database (DB) according to the randomly set distributed management method of biometric templates. It is to provide an apparatus and method for encrypting and authenticating biometric information.

In addition, another problem to be solved by the present invention is a method of distributing a bio-template in a terminal for collecting bio-information and generating a token to verify the distribution and a method of distributing bio-information, distributed management of bio-information and bio-information. To provide an apparatus and method for encrypting and authenticating biometric information, which can verify the validity of authentication and enhance security.

The problems of the present invention are not limited to the problems mentioned above, and other problems not mentioned will be clearly understood by those skilled in the art from the following description.

In order to solve the above problems, the biometric information management server for distributed management of biometric information according to an embodiment of the present invention is based on the biometric information collected through the biometric terminal connected to communicate with the biometric information management server. A receiving module for receiving the obtained biometric template, a template dividing module for dividing the biometric template into a plurality of distributed templates, and distribution information for transmitting the plurality of distributed templates to a distributed storage and storing distributed information for the plurality of distributed templates a management module, wherein the distributed information is randomly generated whenever biometric information is collected in the biometric terminal to include information related to a criterion for generating a plurality of distributed templates, a method for generating a plurality of distributed templates, and distributed storage. .

According to another feature of the present invention, the biometric information management server further includes a verification module that verifies the validity of the biometric template received from the receiving module by utilizing the transaction verification token generated based on the biometric template and distributed information in the biometric terminal. may include

According to another feature of the present invention, the verification module can verify the validity of the received biometric template through the distributed information and the receiving module based on the biometric template acquisition time and the transaction verification token obtained from the biometric terminal. .

According to another feature of the present invention, the distributed information is a biometric template based on the number of distributed templates, the location of each of the plurality of distributed servers and the biometric database (DB) constituting the distributed storage, and the number of distributed templates. It may include a division method code corresponding to the length of each of the differentially divided distributed fragment bio-templates, and a method of generating a plurality of distributed templates by dividing and recombining the distributed fragment biological template.

According to another feature of the present invention, the template division module generates a plurality of distributed fragment biometric templates by first dividing the biometric template that has passed the validation of the verification module according to the distribution information, and a plurality of distributed fragment biometric templates. A distributed template can be generated by recombination of some of the templates.

According to another feature of the present invention, the distributed information management module transmits each of the plurality of distributed templates to each of the plurality of distributed servers and the biometric authentication DB according to the location of the distributed server and the location of the biometric DB, and transmits the It is possible to store distribution information corresponding to a plurality of distribution templates.

According to another feature of the present invention, the receiving module receives the biometric information authentication request transmitted from the biometric terminal, and the verification module authenticates the biometric information based on the transaction verification token transmitted from the biometric terminal together with the biometric information authentication request. Verifies the validity of the biometric authentication template transmitted from the biometric terminal together with the request, and the distributed information management module inquires the distributed information corresponding to the validated biometric authentication template, It may request to transmit distributed templates corresponding to the authentication template.

According to another feature of the present invention, distributed templates corresponding to the biometric templates received from a plurality of distributed servers and the biometric DB in response to the request of the distributed information management module are generated based on the distributed information corresponding to the biometric template. The method further includes a template authentication module for restoring a biometric template, wherein the template authentication module compares the biometric template with the restored biometric template to authenticate the biometric information corresponding to the biometric information authentication request.

In order to solve the above problems, a biometric information distributed management system according to an embodiment of the present invention includes a biometric information management server, a biometric terminal, and a distributed storage according to any one of various embodiments of the present invention. .

According to another feature of the present invention, the biometric terminal includes a biometric information collection module for collecting biometric information, a template acquisition module for obtaining a biometric template by extracting features from the biometric information, and a biometric template and a biometric template that is the time at which the biometric template is acquired A storage module for storing the acquisition time, a distributed information generation module for generating distributed information, and a biometric information management server to verify the validity of the biometric template, generate a transaction verification token based on the biometric template, the biometric template acquisition time, and the distributed information and a transmission module for transmitting the biometric template, biometric template acquisition time, distribution information, transaction verification token, and ID corresponding to the biometric template to the biometric information management server.

According to another feature of the present invention, the distributed storage may include a plurality of distributed servers and a biometric DB.

In order to solve the above problems, there is a method for distributed management of biometric information using a biometric information distributed management system according to an embodiment of the present invention.

According to any one of the problem solving means of the present invention, in an embodiment of the present invention, whenever a biometric template corresponding to biometric information is generated, a method for dividing and distributed management of the biometric template can be set randomly.

In addition, according to any one of the problem solving means of the present invention, another embodiment of the present invention provides a biometric template divided into a plurality of distributed servers and a biometric authentication database (DB) according to a randomly set distributed management method of biometric templates. The security of biometric information can be strengthened by distributing

In addition, according to any one of the problem solving means of the present invention, another embodiment of the present invention is a method of distributing a bio-template in a terminal for collecting bio-information and generating information about the distribution and generating a token to verify it. , it is possible to verify the validity of distributed management of biometric information and authentication of biometric information and strengthen security.

The effects obtainable in the present invention are not limited to the above-mentioned effects, and other effects not mentioned may be clearly understood by those of ordinary skill in the art from the following description. will be.

1 is a block diagram schematically illustrating a biometric terminal, a biometric information management server, and a distributed storage constituting a biometric information distributed management system according to an embodiment of the present invention.
2 is a flowchart illustrating a method for distributed management of biometric information according to an embodiment of the present invention.
3 exemplarily shows a table for distribution information for distributing a bio-template according to an embodiment of the present invention.
4 is a block diagram illustrating a process of generating a transaction verification token for a biometric template in a biometric terminal according to an embodiment of the present invention.
5 is a block diagram illustrating a process of verifying the validity of a biometric template in the biometric information management server according to an embodiment of the present invention.
6 exemplarily illustrates a process of generating a distribution template from a bio-template according to distribution information according to an embodiment of the present invention.
7 is a block diagram schematically illustrating a biometric terminal, a biometric information management server, and a distributed storage constituting a biometric information distributed management system according to another embodiment of the present invention.
8 is a flowchart illustrating a method for distributed management of biometric information according to another embodiment of the present invention.

Advantages and features of the present invention and methods of achieving them will become apparent with reference to the embodiments described below in detail in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but will be implemented in a variety of different forms, only these embodiments allow the disclosure of the present invention to be complete, and common knowledge in the technical field to which the present invention belongs It is provided to fully inform the possessor of the scope of the invention, and the present invention is only defined by the scope of the claims.

The shapes, sizes, proportions, angles, numbers, etc. disclosed in the drawings for explaining the embodiments of the present invention are illustrative and the present invention is not limited to the illustrated matters. In addition, in describing the present invention, if it is determined that a detailed description of a related known technology may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. When 'including', 'having', 'consisting', etc. mentioned in this specification are used, other parts may be added unless 'only' is used. When a component is expressed in the singular, the case in which the plural is included is included unless otherwise explicitly stated.

In interpreting the components, it is interpreted as including an error range even if there is no separate explicit description.

Although first, second, etc. are used to describe various elements, these elements are not limited by these terms. These terms are only used to distinguish one component from another. Accordingly, the first component mentioned below may be the second component within the spirit of the present invention.

Like reference numerals refer to like elements throughout the specification, unless otherwise specified.

Each feature of the various embodiments of the present invention may be partially or wholly combined or combined with each other, and as those skilled in the art will fully understand, technically various interlocking and driving are possible, and each embodiment may be independently implemented with respect to each other, It may be possible to implement together in a related relationship.

Hereinafter, terms used in this specification are defined.

As used herein, biometric information refers to data in which information related to an individual's biometrics is sensed or extracted by an electronic device or the like. For example, types of personal biometrics include fingerprints, palm veins, finger veins, back veins, iris, face, voice, genes, pulse waves, brain waves, and electrocardiograms, and biometric information includes fingerprints, palm veins, and finger veins. , back vein, iris, face, voice, gene, pulse wave, brain wave, electrocardiogram, etc. may refer to data detected or extracted by an electronic device.

In this specification, the biometric template means that biometric information is textualized. In particular, in the present specification, the biometric template may exist in different sizes depending on the type of living body, may exist individually for each biometric information, and may be generated by extracting feature points for each biometric information. For example, a fingerprint template may be generated corresponding to the fingerprint data, and a palm vein template may be generated corresponding to the palm vein data, and each of these biometric templates has a different size according to the type of the living body.

A computer device includes a processor and a memory in electrical communication with the processor and storing computer readable instructions through which the processor may execute an artificial intelligence model. In addition, such a computer device may learn data through a processor to train an artificial intelligence model, or may make inferences or predictions by inputting data into the learned artificial intelligence model.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram schematically showing a biometric terminal, a biometric information management server, and a distributed storage constituting the biometric information distributed management system according to an embodiment of the present invention. 2 is a flowchart illustrating a method for distributed management of biometric information according to an embodiment of the present invention.

First, referring to FIG. 1 , the biometric information distributed management system 10 according to an embodiment of the present invention includes a biometric information management server 100 , a biometric terminal 200 , and a distributed storage 900 .

Specifically, the biometric information management server 100 includes a reception module 110 , a verification module 120 , a template division module 130 , a template authentication module 135 , a distributed information management module 140 , and a transmission module 145 . ) is included. In addition, the biometric terminal 200 includes a biometric information collection module 2100 , a template acquisition module 220 , a storage module 230 , a distributed information generation module 240 , a verification token generation module 250 , and a transmission module 260 . In addition, the distributed storage 900 includes at least one distributed server 901, 902, 903, ... and a biometric authentication database (Database; DB).

Here, the various modules included in the biometric information management server 100 and the biometric terminal 200 are classified according to the functions performed for convenience of description, and each function may be physically performed by one module or processor. In addition, different from the classification of modules shown in FIG. 1 , a plurality of modules may be combined to perform various functions as one module. Hereinafter, with reference to FIGS. 1 and 2 , the biometric information distributed management system 10 collects biometric information from the biometric terminal 200 and distributes and stores it in the distributed storage 900 through the biometric information management server 100 , Describe the management process.

1 and 2 , the biometric terminal 200 collects biometric information by scanning the biometric information, acquires a biometric template from the collected biometric information, and distributes the biometric template to store and manage the biometric information. It is transmitted to the management server (100).

Specifically, the biometric terminal 200 collects biometric information by scanning the biometric information through the biometric information collection module 210 (S211). Next, the biometric terminal 200 obtains a biometric template by extracting features from the biometric information through the template obtaining module 220 (S212). The biometric terminal 200 may acquire the biometric template and simultaneously record the biometric template acquisition time, which is the time at which the biometric template is acquired, and store the biometric template and the biometric template acquisition time in the storage module 230 ( S213 ).

The biometric terminal 200 randomly generates distributed information, which is information for distributing and storing the obtained biometric template, through the distributed information generating module 240 (S214). Specifically, the distributed information generating module 240 randomly generates distributed information within the range of the master table for distributing the bio-template whenever bio-information is collected. Here, the distributed information includes a reference for generating a plurality of distributed templates in the biometric information management server 100 based on the biometric template, a method for generating a plurality of distributed templates, and a distributed storage ( 900) and related information. Specifically, the distribution information includes information related to the number of distribution templates, a location in which each distribution template is stored in the distribution storage 900, and a division method for dividing the bio-template. A more detailed description of the distribution information will be described later with reference to FIG. 3 .

As such, the distributed information generated through the distributed information generating module 240 is randomly generated whenever biometric information is collected. In a new way, it is possible to randomly divide a bio-template and store it in the distributed storage 900 . Accordingly, the biometric terminal 200 and the biometric information management server 100 can share a distributed management method for biometric information in real time, and the biometric information management server 100 and the distributed storage 900 are different for each biometric information. By using the distributed management method, the security of biometric information can be greatly strengthened.

Then, the biometric terminal 200 generates a transaction verification token for verifying the validity of the biometric information based on the biometric template, the biometric template acquisition time, and the distribution information through the verification token generating module 250 (S215). . The verification token generation module 250 is a hash to which a hash function is applied based on the bio-template acquisition time and distribution information so that the bio-information management server 100 can verify the validity of bio-information through the bio-template. A hash value can be calculated, and this is used as a transaction verification token. Such a transaction verification token may consist of a hash value of 64 bytes.

Accordingly, the biometric terminal 200 may collect biometric information to generate a biometric template, biometric template acquisition time, distribution information, and transaction verification token, and may provide an ID (or key) corresponding to the biometric template. have. The biometric terminal 200 transmits the ID, biometric template, biometric template acquisition time, distribution information, transaction verification token, etc. to the biometric information management server 100 through the transmission module 260 (S216).

The biometric information management server 100 receives the ID, biometric template, biometric template acquisition time, distribution information, and transaction verification token from the biometric terminal 200 through the receiving module 110 . Next, the biometric information management server 100 verifies the validity of the biometric template and distributed information with the transaction verification token through the verification module 120 (S220). Specifically, the verification module 120 verifies the validity of the method of dividing the bio-template among the bio-template and the distribution information and specific information on the divided distribution template, based on the bio-template acquisition time and the transaction verification token. A detailed description of the verification method by the verification module 120 will be described later with reference to FIG. 5 .

Next, the biometric information management server 100 generates a distributed fragment biometric template by first dividing the biometric template that has passed validation according to the distributed information through the template dividing module 130 (S230). The biometric information management server 100 recombines some of the distributed fragment biometric templates with reference to the distributed information through the template division module 130 to finally generate a plurality of distributed templates (S240). A detailed process by which the template dividing module 130 generates a distributed fragment biometric template and a plurality of distributed templates will be described later with reference to FIG. 6 .

Then, the biometric information management server 100, through the distributed information management module 140, each of the generated plurality of distributed templates according to the distributed storage location of the distributed information distributed servers (901, 902, 903, ... and biometric authentication) It is transmitted to the DB 909 (S250), and the distributed information management module 140 may separately store distributed information corresponding to each of the plurality of distributed templates transmitted to the distributed storage 900 (S260). Here, the distributed information management module 140 may transmit the distributed information to the distributed template and the distributed server or the biometric authentication DB 909 , and the distributed information transmitted to the biometric authentication DB 909 is stored in the biometric authentication DB 909 . Alternatively, the distributed information management module 140 may store only the distributed information in its own module of the biometric information management server 100 or store it in the distributed information management module 140 itself.

In this way, the biometric information management server 100 according to the embodiment of the present invention distributes the biometric template and related acquisition time, a transaction verification token for verifying the validity of the biometric template, and the biometric template from the biometric terminal 200 . By receiving distributed information for storage and management, and verifying the validity of the biometric template itself, it is possible to secure the validity of the result of firstly transmitting the biometric information. Furthermore, the biometric information management server 100 divides the validated biometric template according to randomly generated distributed information and transmits it to the biometric authentication DB 909 and a plurality of distributed servers 901, 902, 903, ... , it is possible to increase the efficiency of distributed storage and management of biometric information and maximize security In addition, the biometric information management server 100 stores the distributed information randomly generated through the distributed information management module 140 into the biometric authentication DB. By transmitting the distributed information to 909 or storing the distributed information in the distributed information management module 140 itself, authentication of biometric information can be performed by recombining distributed templates later in a state in which security is further strengthened.

3 exemplarily shows a table for distribution information for distributing a bio-template according to an embodiment of the present invention. 4 is a block diagram for explaining a process of generating a transaction verification token for a biometric template in a biometric terminal according to an embodiment of the present invention.

First, referring to FIGS. 1 and 3 , the biometric terminal 200 generates distributed information 310 through the distributed information generating module 240 . As described above, the distribution information includes information related to a criterion for generating a plurality of distribution templates, a method for generating a plurality of distribution templates, and a distribution storage. Specifically, the distribution information 310 includes the number of distributed templates 311, the location where each distributed template is stored in the distributed storage (hereinafter, the distributed storage location, 312), and the length of the distributed fragment bio-template 313, and a division method code 314 .

Referring to FIG. 3 , the number of distributed templates 311 indicates that the number of distributed templates generated in the biometric information management server 100 is three, and the distributed storage location 312 indicates that each of the three distributed templates is a distributed storage ( 900) to indicate where it is stored. For example, KFTC may refer to the biometric DB 909 of the distributed storage 900 , SV01 is the first distributed server 901 of the distributed storage 900 , and SV02 is the second of the distributed storage 900 . may refer to a distributed server 902 .

On the other hand, the length 313 of the distributed fragment biometric template in FIG. 3 may be expressed, for example, as 53, 17, 46, or 34, which is the length of data in bytes, and the biometric information management server ( 100), before the distributed template is generated, it is possible to indicate the size of each of the distributed fragments of the bio-templates into which the bio-templates are primarily divided by the template dividing module 130 . That is, the template dividing module 130 primarily divides the biometric template into four distributed fragment biometric templates, and in this case, the size of each of the four distributed fragment biometric templates is 53 bytes, 17 bytes, 46 bytes, and 34 bytes. .

The division method code 314 determines the number 311 of the above-described distributed template, the distributed storage location 312, and the length 313 of the distributed fragment bio-template, and recombines the distributed fragment bio-template to finally the distributed template. Shows one of the methods for creating . The division method code 314, '300012', sets the number of distributed templates to three, the distributed storage locations are determined by SV02, SV01, and KFTC, and the length of the distributed fragment biometric template is 53, 17, 46, 34 while Finally, in order to set the number of distributed templates to three, this is a code corresponding to a method of merging and combining two distributed fragment biotemplates out of four. A process of generating a distributed template by dividing a bio-template according to the division method code 314 will be described later with reference to FIG. 6 .

The distributed information table 300 including information for distributed management of the bio-template may further include a bio-template acquisition time 320 and a transaction verification token 330 . The bio-template acquisition time 320 may be expressed as, for example, '20220105172439', and the transaction verification token 330 is 'XA18C17... It can be expressed as a character string that is a combination of alphanumeric characters such as '. The process of generating the transaction verification token 330 will be described later with reference to FIG. 4 .

1, 3 and 4, a hash value of 64 bytes is calculated by applying a hash function based on the distribution information 310 and the bio-template acquisition time 320 by the verification token generation module 250 can be Specifically, the verification token generating module 250 applies the biometric template 410 and the ID 430 corresponding thereto along with the distribution information 310 corresponding to the biometric template acquisition time 320 to a hash function to 64 A hash value of bytes may be calculated, and the calculated hash value may be determined as the transaction verification token 330 .

As described above, in the biometric terminal 200 according to an embodiment of the present invention, the distributed information 310 randomly generated whenever biometric information is collected, the biometric template 410 corresponding to the biometric information, and the biometric template acquisition time Based on (320) and the like, a transaction verification token 330 is generated, and these are transmitted to the biometric information management server 100 . Accordingly, the biometric information management server 100 verifies the validity of the biometric template 410 based on the transaction verification token 330 , and divides the biometric template 410 based on the distributed information 310 to obtain a plurality of Distributed templates may be generated, and a plurality of distributed templates may be distributed to the distributed storage 900 according to the distribution information 310 to be stored and managed. Accordingly, the biometric information distributed management system 10 generates the distributed information 310 and the transaction verification token 330 in the biometric terminal 200 , and the biometric information management server 100 validates the biometric template 410 . By verifying and distributing and managing the biometric template 410, it is possible to more efficiently perform distributed management through two terminals and a server separated from each other, and to further enhance security.

5 is a block diagram illustrating a process of verifying the validity of a biometric template in a biometric information management server according to an embodiment of the present invention. 6 exemplarily illustrates a process of generating a distribution template from a bio-template according to distribution information according to an embodiment of the present invention.

1 and 5 , the biometric information management server 100 receives the biometric template 410, the biometric template acquisition time 320, and the transaction verification token 330 from the biometric terminal 200 through the receiving module 110. ), and the distributed information 310 , and verify the validity of the biometric information based on the biometric template acquisition time 320 and the transaction verification token 330 through the verification module 120 . Specifically, the verification module 120 may verify the validity of the biometric template 410 and the distribution information 310 based on the biometric template acquisition time 320 and the transaction verification token 330 . Accordingly, the biometric information management server 100 can confirm that the biometric template 410 obtained from the biometric information and the distributed information 310 for distributing and managing the biometric template 410 are effectively transmitted from the biometric terminal 200 . If the validity of the biometric template 410 and the distributed information 310 is not verified by the verification module 120 , the biometric information management server 100 does not divide the received biometric template 410 and receives the biometric template 410 . The template 410 and distribution information 310 are discarded.

1, 3, and 6, when the validity of the biometric template 610 and the distribution information 310 is verified through the transaction verification token 330 in the verification module 120, the template division module 130 divides the bio-template 610 according to the distribution information 310 .

For example, the total length of the bio-template 610 is 150 bytes, and according to the distribution information 310, the length 313 of the distributed fragment bio-template is 53, 17, 46, and 34 bytes, respectively. Accordingly, the template division module 130, A distributed fragment biometric template 611 is 53 bytes, B distributed fragment biometric template 612 is 17 bytes, C distributed fragment biometric template 613 is 46 bytes, and D distributed fragment The bio-template 614 may primarily divide the bio-template 610 to have 34 bytes.

Next, according to the number of distribution templates 311 and the division method code 314 among the distribution information 310, the number of distribution templates should be finally three, and the number of distribution templates should be three by '300012', which is the division method code of the master table. Among the dispersed fragment biotemplates, two random distributed fragment biotemplates may be merged. That is, according to the division method code 314, '300012', the B dispersed fragment biometric template 612 and the D distributed fragment biometric template 614 are merged to generate a 51-byte second distributed template 622, The distributed fragment C bio-template 613 becomes the first distributed template 621 , and the distributed fragment A bio-template 611 becomes the third distributed template 623 .

Next, the template partitioning module 130 determines to transmit the first distributed template 621 to the second distributed server 902 corresponding to 'SV02' according to the distributed storage location 312 of the distributed information 310 . It may be determined to transmit the second distributed template 622 to the first distributed server 901 corresponding to 'SV01', and to transmit the third distributed template 623 to the biometric DB 909 corresponding to 'KFTC'. ) can be determined to be transmitted. As described above, the biometric information management server 100 may transmit and store the distributed information 310 together with the distributed template in the biometric authentication DB 909 .

7 is a block diagram schematically showing a biometric terminal, a biometric information management server, and a distributed storage constituting a biometric information distributed management system according to another embodiment of the present invention. 8 is a flowchart illustrating a method for distributed management of biometric information according to another embodiment of the present invention. The biological terminal 200 of FIG. 7 has substantially the same configuration except that the distributed information generating module 240 is deactivated in the biological terminal 200 of FIG. 1 , and thus a redundant description of the same configuration will be omitted. Hereinafter, with reference to FIGS. 7 and 8 , the distributed template of the biometric information distributed management system 10 received from the biometric terminal 200 and stored in the distributed storage 900 through the biometric information management server 100 . Recall them and explain the process of authenticating biometric information.

7 and 8 , the biometric terminal 200 scans a biometric to be authenticated, collects biometric information, extracts features from the collected biometric information, and acquires a biometric authentication template for authenticating biometric information, The biometric information is transmitted to the biometric information management server 100 so that the biometric information can be authenticated by the biometric information management server 100 .

Specifically, the biometric terminal 200 collects biometric information by scanning the biometric information through the biometric information collection module 210 (S811). Next, the biometric terminal 200 acquires a biometric authentication template by extracting features from the biometric information through the template acquisition module 220 (S812). The biometric terminal 200 may acquire the biometric authentication template and simultaneously record the biometric template acquisition time, which is the time at which the biometric authentication template is acquired, and store the biometric authentication template and the biometric template acquisition time in the storage module 230 . (S813).

Next, the biometric terminal 200 generates a transaction verification token for verifying the validity of the biometric information based on the biometric template and the biometric template acquisition time through the verification token generating module 250 (S814). Here, the transaction verification token is generated to verify the validity of biometric information for biometric identification, and is transmitted to the biometric information management server 100 and is used to verify the validity of the biometric authentication template and the resulting biometric information. . The verification token generation module 250 is a hash value to which a hash function is applied based on the biometric template and the biometric template acquisition time so that the biometric information management server 100 can verify the validity of the biometric information through the biometric template. It is possible to create a transaction verification token with Such a transaction verification token may consist of a hash value of 64 bytes.

Accordingly, the biometric terminal 200 may collect biometric information, generate a biometric authentication template, a biometric template acquisition time, and a transaction verification token, and may assign an ID corresponding to the biometric authentication template. The biometric terminal 200 transmits the ID, biometric template, biometric template acquisition time, transaction verification token, etc. to the biometric information management server 100 through the transmission module 260 (S815).

The biometric information management server 100 receives the ID, biometric template, biometric template acquisition time, and transaction verification token from the biometric terminal 200 through the receiving module 110 . Next, the biometric information management server 100 verifies the validity of the biometric authentication template with the transaction verification token through the verification module 120 (S820). Specifically, the verification module 120 verifies the validity of the biometric template based on the biometric template acquisition time and the transaction verification token.

Next, the biometric information management server 100 corresponds to the biometric authentication template whose validity is verified from the DB (eg, biometric authentication DB 909) storing distributed information through the distributed information management module 140 . The distributed information may be inquired and a request may be made to transmit a distributed template corresponding to the biometric template to a plurality of distributed servers and the biometric authentication DB 909 (S831). Accordingly, the distributed storage 900 may transmit distributed information and a plurality of distributed templates to the biometric information management server 100 (S832).

Next, the biometric information management server 100 receives a plurality of distributed templates and distributed information received from the plurality of distributed servers 901 , 902 , 903 , ... and the biometric authentication DB 909 through the template authentication module 135 . Based on the above, the biometric template corresponding to the biometric template can be restored by merging the plurality of distributed templates (S840). Furthermore, the template authentication module 135 may convert the validated biometric template and the restored biometric template. By comparison, the biometric information can be authenticated ( S850 ) The biometric information management server 100 authenticates the biometric authentication template through the transmission module 145 and returns the result of authenticating the biometric information to the biometric terminal 200 . can be transmitted to (S860).

In this way, the biometric information management server 100 according to the embodiment of the present invention performs a transaction for verifying the validity of the biometric authentication template and the biometric template acquisition time from the biometric information to be authenticated from the biometric terminal 200 . By receiving the verification token, it is possible to enhance security by first verifying the biometric information to be authenticated and the validity of the resulting biometric authentication template. Furthermore, the biometric information management server 100 fetches distributed templates that are distributed, stored and managed in the distributed storage 900 based on the validated biometric authentication template and distributed information that is information about them. Restoration and authentication process can be performed based on distributed templates and information only for the secured authentication target. For this reason, the biometric information management server 100 firstly authenticates the biometric information through comparison of the biometric authentication template that has passed validation and the biometric template restored by the distributed templates and the distributed information secondarily. By doing so, it is possible to perform distributed management and authentication of biometric information in a state where security is further strengthened.

In this specification, each block or each step may represent a module, segment, or part of code that includes one or more executable instructions for executing specified logical function(s). It should also be noted that it is also possible for the functions recited in blocks or steps to occur out of order in some alternative embodiments. For example, it is possible that two blocks or steps shown one after another may in fact be performed substantially simultaneously, or that the blocks or steps may sometimes be performed in the reverse order according to the corresponding function.

The steps of a method or algorithm described in connection with the embodiments disclosed herein may be directly implemented in hardware, software module executed by a processor, or a combination of the two. A software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a CD-ROM, or any other form of recording or storage medium known in the art. An exemplary recording medium or storage medium is coupled to the processor, the processor capable of reading information from, and writing information to, the recording medium or storage medium. Alternatively, the recording medium or storage medium may be integral with the processor. A processor and a recording medium or storage medium may reside within an application specific integrated circuit (ASIC). The ASIC may reside within the user terminal. Alternatively, the processor and storage medium may reside as separate components within the user terminal.

Although the embodiments of the present invention have been described in more detail with reference to the accompanying drawings, the present invention is not necessarily limited to these embodiments, and various modifications may be made within the scope without departing from the technical spirit of the present invention. . Therefore, the embodiments disclosed in the present invention are not intended to limit the technical spirit of the present invention, but to explain, and the scope of the technical spirit of the present invention is not limited by these embodiments. Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive. The protection scope of the present invention should be construed by the following claims, and all technical ideas within the equivalent range should be construed as being included in the scope of the present invention.

100 Biometric information management server
110 receiving module
120 Verification module
130 Template split module
135 Template authentication module
140 Distributed Information Management Module
145 Transmission module
200 biometric terminal
210 Biometric information collection module
220 Template Acquisition Module
230 storage module
240 Distributed Information Generation Module
250 verification token generation module
260 transmission module
300 Distributed Information Table
310 Distributed Information
311 Number of distributed templates
312 Distributed Storage Locations
313 Dispersion fragment biotemplate length
314 division method code
320 Bio Template Acquisition Time
330 Transaction Verification Token
410 bio template
430 ID(Key)
610 Bio Templates
611 A Dispersion Fragment Bio Template
612 B Dispersion Fragment Biotemplate
613 C Dispersion Fragment Biotemplate
614 D Scattered Fragment Bio Template
621 first distributed template
622 Second Distributed Template
623 Third Distributed Template
900 distributed storage
901 first distributed server
902 Second distributed server
903 3rd distributed server
904 4th distributed server
905 5th distributed server
909 biometric database

Claims (12)

As a biometric information management server for distributed management of biometric information,
a receiving module for receiving a biometric template obtained on the basis of biometric information collected through a biometric terminal connected to communicate with the biometric information management server;
a template dividing module dividing the bio-template into a plurality of distributed templates; and
and a distributed information management module that transmits the plurality of distributed templates to a distributed storage and stores distributed information about the plurality of distributed templates,
The distribution information is randomly generated each time the biometric information is collected in the biometric terminal to include information related to a criterion for generating the plurality of distributed templates, a method for generating the plurality of distributed templates, and the distributed storage, and ,
and a verification module that verifies the validity of the bio-template received from the receiving module by utilizing a transaction verification token generated based on the bio-template and the distributed information in the bio-terminal;
Biometric information management server. delete According to claim 1,
The verification module is
Validating the validity of the bio-template received through the distribution information and the receiving module based on the bio-template acquisition time and the transaction verification token at which the bio-template was acquired in the bio-terminal,
Biometric information management server. 4. The method of claim 3,
The distribution information is
Each of the distributed fragment biometric templates obtained by first dividing the biometric template based on the number of distributed templates, the location of each of the plurality of distributed servers and biometric authentication databases constituting the distributed storage, and the number of the distributed templates length of, including a division method code corresponding to a method of generating the plurality of distributed templates by dividing and recombining the distributed fragment bio-template,
Biometric information management server. 5. The method of claim 4,
The template division module,
The bio-template that has passed the validation of the verification module is first divided according to the dispersion information to generate a plurality of distributed fragment bio-templates, and some of the plurality of distributed fragment bio-templates are recombined to generate the distributed template. generated,
Biometric information management server. 5. The method of claim 4,
The distributed information management module,
Transmitting each of the plurality of distributed templates to each of the plurality of distributed servers and the biometric authentication DB according to the location of the distributed server and the location of the biometric authentication DB,
Storing distribution information corresponding to the transmitted plurality of distribution templates,
Biometric information management server. 7. The method of claim 6,
The receiving module receives the biometric information authentication request transmitted from the biometric terminal,
The verification module verifies the validity of the biometric authentication template transmitted from the biometric terminal along with the biometric information authentication request based on the transaction verification token transmitted from the biometric terminal together with the biometric information authentication request,
The distributed information management module inquires for distributed information corresponding to the biometric authentication template whose validity has been verified, and requests to transmit distributed templates corresponding to the biometric authentication template to the plurality of distributed servers and the biometric authentication DB ,
Biometric information management server. 8. The method of claim 7,
At the request of the distributed information management module, distributed templates corresponding to the biometric templates received from the plurality of distributed servers and the biometrics DB are restored to a biometric template based on the distributed information corresponding to the biometric template. It further includes a template authentication module that
The template authentication module compares the biometric template with the restored biometric template to authenticate biometric information corresponding to the biometric information authentication request,
Biometric information management server. A biometric information management server according to any one of claims 1 and 3 to 8;
the biometric terminal; and
comprising the distributed storage,
Biometric information distributed management system. 10. The method of claim 9,
The biometric terminal,
a biometric information collection module for collecting the biometric information;
a template acquisition module for obtaining the biometric template by extracting features from the biometric information;
a storage module for storing the bio-template and a bio-template acquisition time, which is the time at which the bio-template was acquired;
a distributed information generation module for generating the distributed information;
a verification token generating module for generating a transaction verification token based on the biometric template, the biometric template acquisition time, and the distributed information so that the biometric information management server verifies the validity of the biometric template; and
and a transmission module for transmitting the biometric template, the biometric template acquisition time, the distribution information, the transaction verification token, and an ID corresponding to the biometric template to the biometric information management server,
Biometric information distributed management system. 10. The method of claim 9,
The distributed storage is
Including a plurality of distributed servers and biometric DB,
Biometric information distributed management system. A method for distributed management of biometric information using the biometric information distributed management system according to claim 10.

Images