KR102435885B1 - Web camera applying a security solution based on onetime password - Google Patents

Abstract

According to an embodiment of the present invention, a web camera, to which a security solution using a one-time password is applied, comprises: an image sensor that photographs an image; a communication module for transmitting and receiving the photographed image and a message through network communication; an authentication module that implements an authentication method using a one-time password compatible with an ID-password authentication method by adding a tag to an XML-based message while supporting a message transmitting/receiving method based on an ONVIF communication protocol; and a control module that assigns an access right and a control right for the web camera to an authenticated user terminal and receives a message from the user terminal to generate a control command for the web camera.

Description

Web camera to which security solution using one-time password is applied {WEB CAMERA APPLYING A SECURITY SOLUTION BASED ON ONETIME PASSWORD}

The present invention relates to a web camera to which a security solution using a one-time password is applied.

A web camera is a type of camera that transmits video images using the Internet and can be used for video conferences, Internet lectures, Internet broadcasting, etc. by connecting to a PC, laptop, or smart phone.

Unlike IP cameras, web cameras can transmit images captured by web cameras through wired/wireless networks in real time through connection to PCs, laptops, and smart phones without an independent IP address.

Recently, interest and demand for web cameras are increasing due to an increase in telecommuting, remote classes, and video conferencing.

In addition to web cameras, IP cameras and CCTVs can always suffer from privacy issues due to hacking or leakage of personal information.

The present disclosure proposes a technology related to a web camera to which a security solution using a one-time password is applied.

The problem to be solved by the present invention is not limited to the above-mentioned problems, and other problems and advantages of the present invention not mentioned can be understood by the following description, and more clearly understood by the embodiments of the present invention will be

A first aspect of the present disclosure is a web camera to which a security solution using a one-time password is applied, comprising: an image sensor for capturing an image; a communication module for transmitting and receiving captured images and messages through network communication; an authentication module that supports the ONVIF communication protocol-based message transmission/reception method, but implements an authentication method using a one-time password compatible with the ID-password authentication method by adding a tag to the XML-based message; and a control module that grants access rights and control rights for the web camera to the authenticated user terminal, and receives a message from the user terminal to generate a control command for the web camera.

The authentication module includes: a user terminal logging in by inputting a one-time password through a user interface; receiving an authentication packet obtained by hashing the one-time password from the user terminal; checking the NTP of the authentication packet generation time, calculating a time bias based on the NTP, and verifying the validity of the authentication packet by reverse hashing the one-time password; and transmitting an authentication confirmation message to the user terminal when the validity of the authentication packet is confirmed.

The authentication module may include: receiving an input setting for a user's login method from the user terminal through a user interface; When the authentication method using a one-time password is included in the setting for the login method, installing an application program for one-time password authentication; may further include.

The authentication packet is composed of a header and a body according to a SOAP communication protocol standard, the header includes an encryption token, and the body may include a request to a web camera.

The one-time password may be generated through a user terminal or a separate one-time password generator, or may be associated with a biometric authentication method included in the user terminal.

By providing a web camera compatible with the ONVIF communication protocol, user terminals can be authenticated more simply and scalably compared to the existing ID-password method.

For example, according to an embodiment of the present invention, user login is possible in most user terminals supporting a web-based user interface such as a smartphone, and in connection with other one-time password generation methods mounted on a smartphone, the user Allows you to use a more friendly login method.

As another example, according to an embodiment of the present invention, compared to the ID-password-based user authentication method, the management cost for responding to the leakage of the password is reduced, and it has more stable security compared to the existing ID-password method for hacking situations. can

The present invention supports an extended login method while conforming to the ONVIF communication protocol standard, utilizes the strict authentication system required for image security as it is, and provides users with additional options for convenience and security. It has the advantage of improving performance.

1 is a conceptual diagram illustrating the configuration of a security solution system using a one-time password according to an embodiment of the present invention.
2 is a block diagram of a structure of a web camera according to an embodiment of the present invention.
3 is an example illustrating a user interface screen accessible from a user terminal according to an embodiment of the present invention.
4 is a flowchart illustrating a method for a user terminal to search for a web camera and install an application program for accessing the web camera according to an embodiment of the present invention.
5 is a flowchart illustrating that a user terminal is authenticated by a web camera using a one-time password according to an embodiment of the present invention.

Advantages and features of the present invention, and a method for achieving them will become apparent with reference to the detailed description in conjunction with the accompanying drawings. However, it should be understood that the present invention is not limited to the embodiments presented below, but may be implemented in a variety of different forms, and includes all transformations, equivalents, and substitutes included in the spirit and scope of the present invention. . The embodiments presented below are provided to complete the disclosure of the present invention, and to completely inform those of ordinary skill in the art to the scope of the present invention. In describing the present invention, if it is determined that a detailed description of a related known technology may obscure the gist of the present invention, the detailed description thereof will be omitted.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly dictates otherwise. In the present application, terms such as “comprise” or “have” are intended to designate that a feature, number, step, operation, component, part, or combination thereof described in the specification exists, but one or more other features It is to be understood that this does not preclude the possibility of the presence or addition of numbers, steps, operations, components, parts, or combinations thereof.

Some embodiments of the present disclosure may be represented by functional block configurations and various processing steps. Some or all of these functional blocks may be implemented in various numbers of hardware and/or software configurations that perform specific functions. For example, the functional blocks of the present disclosure may be implemented by one or more microprocessors, or by circuit configurations for a given function. Also, for example, the functional blocks of the present disclosure may be implemented in various programming or scripting languages. The functional blocks may be implemented as an algorithm running on one or more processors. Further, the present disclosure may employ prior art techniques for electronic configuration, signal processing, and/or data processing, etc. Terms such as "mechanism", "element", "means" and "configuration" will be used broadly. and is not limited to mechanical and physical configurations.

In addition, the connecting lines or connecting members between the components shown in the drawings only exemplify functional connections and/or physical or circuit connections. In an actual device, a connection between components may be represented by various functional connections, physical connections, or circuit connections that are replaceable or added.

Hereinafter, the present disclosure will be described in detail with reference to the accompanying drawings.

1 is a conceptual diagram illustrating the configuration of a security solution system 10 using a one-time password according to an embodiment of the present invention. The security solution system 10 using a one-time password according to an embodiment of the present invention may include a web camera 100 and a user terminal 200 .

The web camera 100 can communicate with other peripheral devices through a wired/wireless network, where the other peripheral devices are a user terminal 200 such as a PC, a laptop computer, a smart phone, or the like, or a server that can remotely access the web camera 100 . (not shown) and the like.

As an example, the web camera 100 remotely accesses the web camera 100 through the Internet, acquires an image captured by the web camera 100, and controls and manages the web camera 100. A CCTV integrated control server and can be connected Alternatively, the web camera 100 may be connected to other IoT devices included in the home network, such as a smart home platform, or may be managed and controlled through the smart home platform.

The web camera 100 and the user terminal 200 may be connected to each other through a network. Here, the network may be a mobile communication network such as Code Division Multiple Access (CDMA), Wideband CDMA (WCDMA), or Global System for Mobile Telecommunication (GSM). However, the present invention is not limited thereto, and Ethernet, Public Switched Telephone Network (PSTN), Wireless LAN, Bluetooth, Wi-Fi (Wireless Fidelity), UMTS (Universal) It may be a communication network implementing a communication method such as Mobile Telecommunications System), High Speed Downlink Packet Access (HSDPA), or Wireless Broadband (WiBro).

The user terminal 200 may refer to a communication terminal capable of using a web service in a wired/wireless communication environment. For example, the user terminal 1000 is a smartphone, a tablet PC, a notebook computer, a smart TV, a mobile phone, a personal digital assistant (PDA), a laptop, a media player, a head-up display, a micro server, an e-book terminal, a digital broadcasting terminal, navigation, kiosks, consumer electronics, and other mobile or non-mobile computing devices.

On the other hand, before the web camera 100 and the user terminal 200 transmit/receive an image through a wired or wireless network, it is necessary to set appropriate access rights and control rights between the web camera 100 and the user terminal 200 . At this time, the user terminal 200 becomes a client terminal requesting access to the web camera 100 , and after performing authentication for the user terminal 200 in the web camera 100 , an appropriate authority is granted to the user terminal 200 . can do.

In relation to this, in the case of an IP camera, an independent IP address is assigned to the camera, so that it is easy to identify and manage the IP camera. However, since the web camera 100 may not have an independent IP address, it is possible to transmit an image only to the designated user terminal 200 through wired/wireless network communication. may require a higher security solution.

2 is a block diagram of a structure of a web camera 100 according to an embodiment of the present invention. The web camera 100 may include an image sensor 110 , a communication module 120 , an encoding unit 130 , an authentication module 140 , and a control module 150 . On the other hand, although only related components are shown in the embodiment of the web camera 100 described in FIG. 2 , it is common knowledge in the related art that other general-purpose components may be further included or some components may be omitted. Anyone who has it can understand.

The image sensor 110 may capture an image. Here, the image sensor 110 may be an imaging device that converts light entering a camera lens into a digital signal and displays the image as an image. The image sensor 110 is composed of a pixel array, that is, a plurality of pixels arranged in a two-dimensional matrix form, and each pixel includes a photodiode that generates a signal charge by incident light (photon) and the photodiode. It may include a device for transferring and outputting the generated signal charge. Depending on the signal charge transfer and output method, the image sensor may be largely divided into a charge coupled device (CCD) type image sensor and a complementary metal oxide semiconductor (CMOS) type image sensor.

The communication module 120 may transmit/receive a captured image and a message through network communication. For example, the communication module 120 may support a message transmission/reception method based on the ONVIF communication protocol. For example, the ONVIF communication protocol may have respective communication protocol specifications that may be utilized on a media plane and a control plane. The communication module 120 may transmit a message through User Datagram Protocol (UDP) or Transmission Control Protocol (TCP) in the media plane, or may transmit voice or video through Real Time Streaming Protocol (RTSP).

In addition, the communication module 120 may support a SOAP communication protocol for device control in the control plane. For example, SOAP is a protocol created for the purpose of exchanging information in a distributed environment, and can exchange messages based on XML (eXtensible Markup Language) over a network using HTTP, HTTP, or Simple Message Transfer Protocol (SMTP). .

In an optional embodiment, the communication module 120 may perform network communication with a peripheral device in an indirect manner through a network repeater or a router.

The encoding unit 130 may convert the captured image into a predetermined compression format to facilitate data transmission. A typical video compression format may include MPEG (Moving Picture Experts Group)-4, H.264, AVC, and the like, and there may be various compression format types that comply with the ONVIF communication protocol, an international standard. The encoding unit 130 may encode the image obtained from the image sensor 110 using a predetermined compression codec.

The authentication module 140 may authenticate the client terminal requesting access to the web camera 100 according to a predetermined validity check. Here, the client terminal may be the user terminal 200 . As an example, the authentication module 140 supports an ONVIF communication protocol-based message transmission/reception method, but by adding a tag to an XML-based message, an authentication method using a one-time password compatible with the ID-password authentication method may be implemented.

For example, the user terminal 200 may log in by inputting a one-time password through the user interface. Here, the authentication module 140 receives the one-time password hashed authentication packet from the user terminal 200, checks the NTP of the authentication packet generation time, calculates a time bias based on the NTP, and reverse-hashes the one-time password. The validity of the authentication packet may be checked, and when the validity of the authentication packet is confirmed, an authentication confirmation message may be transmitted to the user terminal.

Here, the authentication packet may include a header and a body according to the SOAP communication protocol standard, the header may include an encryption token, and the body may include a request to a web camera.

NTP may be a protocol for synchronizing time information between a device connected to a network and the device. On the other hand, the NTP may be obtained by accessing an NTP server through the web according to the method of setting the reference time of the user terminal 200 , or by synchronizing with the reference time used in the user terminal 200 .

Meanwhile, the authentication module 140 may need to install the one-time password authentication module as a separate application program in order to perform authentication using the one-time password described above.

As an example, the authentication module 140 receives a setting for a user's login method from the user terminal through a user interface, and when an authentication method using a one-time password is included in the setting for the login method, an application program for one-time password authentication can be installed.

The control module 150 grants access rights and control rights to the web camera 100 to the authenticated user terminal 200, and receives a message from the user terminal to generate a control command for the web camera 100. can

For example, when the user terminal 200 is authenticated, the control module 150 may grant an image reproduction right to the user terminal 200 . According to an example, the web camera 100 only takes an image, and the image reproduction may be performed through another device.

Meanwhile, the user terminal 200 may receive the encoded image through the encoding unit 130 , decode the image through the decoder, and reproduce the image. In general, the user terminal 200 may reproduce an image captured by the web camera 100 through a display included in a PC, a laptop computer, a smart phone, or the like.

As another example, when the web camera 100 supports the PTZ operation, the control module 150 may generate a control signal for controlling the PTZ operation of the web camera 100 . As an example, the web camera 100 transmits the captured image to the user terminal 200 through the network, and the user or the manager remotely via the user terminal 200 the web camera 100 shooting direction, location, PTZ operation such as shooting angle can be controlled. Here, the PTZ is a camera capable of pan, tilt, and zoom movements, and it is possible to monitor a large area by observing the movement of a subject to be photographed or by rotating or zooming a necessary part.

A driving unit (not shown) may drive a plurality of motors according to the control signal generated by the control module 150 to perform the PTZ operation requested by the user. The main functions of ONVIF's PTZ service include absolute move, relative move, and continuous move. First, absolute movement moves in absolute values by receiving pan and tilt angles as values between -1 and +1 and pan and tilt speeds as values between 0 and 1. Relative movement receives values between 0 to 100 for pan and tilt angles and 0 to 1 for pan and tilt speeds, and moves from the current position by the input value. Continuous movement takes pan and tilt speeds as values between 0 and 100 and allows the client to move as long as the button is held down.

Meanwhile, the user may access the web camera 100 through the user terminal 200 . Here, the access right and control authority for the web camera 100 may be granted to the ID of the user logging in through the user terminal 200 rather than the user terminal 200 .

A user may need an interface for logging in to be authenticated with access rights and control rights for the web camera 100, and an example of a display screen (user interface) for this may be described with reference to FIG. 3 below. have.

3 is an example illustrating a screen of a user interface 30 accessible from a user terminal according to an embodiment of the present invention. As an example, the user interface is implemented in the form of an ONVIF Device Manager (ODM) that can be obtained on the open domain of the user terminal 200 , or as another example, a web camera ( 100) and may be implemented in the form of a web-based viewer program that can control the corresponding web camera 100 .

When the web camera 100 is first connected to the network, it is necessary to perform initial settings for the web camera 100 .

As an example, referring to FIG. 3 , the user interface 30 sets a user name and password as a basic login authentication method, and sets a second password (2 ^nd Password) as a sub login authentication method. can As above, if the login method is ranked as the basic login authentication method and the sub login authentication method, the user primarily uses the ID-password-based login method, but optionally uses the secondary password-based login method. you can choose to do

As another example, it is possible to select to use the second password-based login method without a difference in order from the first ID-password-based login method. Here, the degree of arrangement change of the difference in order between the login methods can be regarded as arrangement change of a degree that can be interpreted as the equivalent scope of the present invention.

As another example, the secondary password may be biometric authentication information associated with biometric authentication information supported by the user terminal 200 . Here, the one-time password may be generated through the user terminal 200 or a separate one-time password generator, or may be a password associated with a biometric authentication method included in the user terminal. For example, when biometric authentication information of a previously registered user such as fingerprint recognition, iris recognition, or face recognition is input, the user terminal 200 replaces or supplements the newly created one-time password using the biometric authentication information to log in. can do. In this case, the newly issued one-time password may be recorded in the authentication packet.

4 is a flowchart illustrating installation of a one-time password authentication module through a login method setting upon initial connection of a web camera according to an embodiment of the present invention. According to an embodiment, each step of FIG. 4 may be described as a WS-DisCovery (Web Service Dynamic Discovery) process.

In step 310 , when the user terminal 200 detects access to a new device through the network, it may transmit a discovery message (Probe) for discovering a nearby device, which may be referred to as a discovery step. When the discovery phase starts, the user terminal 200 may radiate a discovery message (Probe) to a predetermined distance around it.

In step 320 , the web camera 100 may obtain the IP address of the user terminal 200 by receiving the search message.

In step 330 , the web camera 100 may generate a response message (ProbeMatch) including access information for the web camera 100 in response to the search message and transmit it.

As an example, the web camera 100 responds in the form of delivery by putting the Relates to tag in the header of the received search message, and by adding access information about the web camera 100 to the tag of the body, the corresponding user terminal 200 is A response message may be generated to allow access to the corresponding web camera 100 .

In step 340, the user terminal 200 may receive a setting for a login method from the user through the user interface. As an example, the user interface may be a web-based UI.

Meanwhile, as a user, a one-time password authentication method may be selected from an ID-password-based login method, separately or in parallel with an ID-password-based login method.

If the existing ONVIF communication protocol provided only the basic login method of the ID-password method, embodiments of the present invention support the ONVIF communication protocol-based message transmission/reception method, but by adding a tag to the XML-based message. It is possible to implement a one-time password authentication method compatible with the ID-password authentication method. For example, it is possible to use an extended version of the communication protocol by adding a one-time password in the form of a tag to an authentication packet for user authentication using the user terminal 200 .

In step 350, when the one-time password authentication method is included in the login method selected by the user, in step 360, the user terminal 200 sets an NTP time synchronization reference point, and sends a request for pairing to the web camera 100 Upon transmission, in step 370, the web camera 100 may install a one-time password authentication module.

On the other hand, according to another embodiment, the web camera 100 may itself be loaded with software related to the one-time password authentication module, and this part is a part that can easily change the embodiment, and a third party implements a similar embodiment. case, it will be seen as an embodiment change that can be understood within the scope of equivalent interpretation of the present invention.

In step 380, the web camera 100 may set a reference point for visual synchronization of the one-time password between the user terminal 200 and the web camera 100 in the process of installing the one-time password authentication module or immediately after the installation of the one-time password authentication module. have.

On the other hand, the user terminal 200 transmits a time synchronization request (GetSystemDateAndTime Request) to the web camera 100 to check whether it can be connected to the web camera 100, and the web camera 100 does not require a separate authentication procedure for this. You can do a time synchronization response (GetSystemDateAndTime Response). In this case, the NTP time synchronization reference point may call the reference time from the reference time within the user terminal 200 or a separate public NTP server.

In step 390, the web camera 100 may generate a response message including authentication module installation information, and transmit the corresponding response message to the user terminal.

5 is a flowchart illustrating an authentication procedure for checking the validity of an authentication packet transmitted from a user terminal in the one-time password authentication module of the web camera 100 according to another example of the present invention.

The web camera 100 may provide a login screen through a user interface through a web-based viewer program that can be accessed from the web. In this case, the user may select an ID-password-based login method or a one-time password authentication-based login method.

In step 410, when the user selects an authentication method using a one-time password, the user terminal 200 logs in using the one-time password in step 420, and in step 430, the user terminal 200 hashes the one-time password. You can create an authentication packet. Here, the authentication packet may include a header and a body according to the SOAP communication protocol standard, the header may include an encryption token, and the body may include a request to the web camera 100 .

The authentication packet generated by the user terminal 200 may be transmitted to the web camera 100 together with a user terminal authentication request message using a one-time password. According to an example, the user terminal 200 may perform encryption for a separate authentication procedure without simply transmitting the password through the network through the ONVIF communication protocol. For example, the authentication module of the web camera 100 may authenticate the client by using the WS-UsernameToken in the header of the SOAP message. Here, WS-UsernameToken is Username (name of the authenticated user), Password (password of the authenticated user), Nonce (arbitrary unique number generated by the user terminal 200), Created (base time when the request is created), etc. may include

In addition, Username, Nonce, and Created among information included in UsernameToken may be transmitted as text, but Password may be transmitted by hashing according to an algorithm defined in WS-UsernameToken.

Accordingly, the user terminal 200 may encrypt the authentication packet based on Digest: BASED64ENCODE(SHA1 (VASE64DECODE(Nonce) + Created +Password)). The user terminal 200 may transmit the encrypted authentication packet to the web camera 100 including the user terminal 200 authentication request message through a one-time password.

In step 440, in response to the message reception, the web camera 100 checks the NTP of the authentication packet generation time, calculates a time bias based on the NTP, and reverse hashes the encrypted one-time password to check the validity of the authentication packet. .

For example, the authentication module of the web camera 100 may generate a digest using the stored password and the Nonce and Created of the header of the authentication packet, and check whether the password matches the password of the header of the authentication packet. In this case, the authentication module of the web camera 100 may check the validity of the authentication packet when both passwords match. When the validity of the authentication packet is checked, the web camera 100 may transmit to the user terminal 200 a response message for authorizing the content confirming the authentication of the user terminal 200 and the image reproduction right.

As another example, when the passwords of both sides do not match, the authentication module of the web camera 100 may classify it as an error message and reject the request of the user terminal 200 .

On the other hand, non-authentication of access right and control right request from the user terminal 200 to the web camera 100 is one-time, and whenever the user terminal 200 requests another control operation, the same user terminal 200 authentication process is performed. may have to be reproduced.

According to another embodiment, strict image security standards may be applied to images captured by the web camera 100 . According to this, even a user or an administrator may have to receive individual authentication when requesting the web camera 100 to perform a specific function.

Embodiments according to the present invention may be implemented in the form of a computer program that can be executed through various components on a computer, and such a computer program may be recorded in a computer-readable medium. In this case, the medium includes a hard disk, a magnetic medium such as a floppy disk and a magnetic tape, an optical recording medium such as a CD-ROM and DVD, a magneto-optical medium such as a floppy disk, and a ROM. , RAM, flash memory, and the like, hardware devices specially configured to store and execute program instructions.

Meanwhile, the computer program may be specially designed and configured for the present invention, or may be known and used by those skilled in the computer software field. Examples of the computer program may include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

According to an embodiment, the method according to various embodiments of the present disclosure may be included and provided in a computer program product. Computer program products may be traded between sellers and buyers as commodities. The computer program product is distributed in the form of a machine-readable storage medium (eg compact disc read only memory (CD-ROM)), or via an application store (eg Play Store™) or between two user devices. It can be distributed directly or online (eg, downloaded or uploaded). In the case of online distribution, at least a portion of the computer program product may be temporarily stored or temporarily created in a machine-readable storage medium such as a memory of a server of a manufacturer, a server of an application store, or a relay server.

The steps constituting the method according to the present invention may be performed in an appropriate order, unless the order is explicitly stated or there is no description to the contrary. The present invention is not necessarily limited to the order in which the steps are described. The use of all examples or exemplary terms (eg, etc.) in the present invention is merely for the purpose of describing the present invention in detail, and the scope of the present invention is limited by the examples or exemplary terms unless defined by the claims. it's not going to be In addition, those skilled in the art will appreciate that various modifications, combinations, and changes may be made in accordance with design conditions and factors within the scope of the appended claims or their equivalents.

Therefore, the spirit of the present invention should not be limited to the above-described embodiments, and the scope of the spirit of the present invention is not limited to the scope of the scope of the present invention. will be said to belong to

10: Security solution system using one-time password (10)
30: User Interface
100: web camera
110: image sensor
120: communication module
130: encoding unit
140: authentication module
150: control module
200: user terminal

Claims (5)

In a web camera to which a security solution using a one-time password is applied,
an image sensor that captures an image;
a communication module for transmitting and receiving captured images and messages through network communication;
an authentication module that supports the ONVIF communication protocol-based message transmission/reception method, but implements an authentication method using a one-time password compatible with the ID-password authentication method by adding a tag to the XML-based message; and
Containing; and a control module that grants access rights and control rights to the web camera to the authenticated user terminal, and receives a message from the user terminal to generate a control command for the web camera,
The authentication module is
Receives a search message from the user terminal before authentication is completed, includes access information corresponding to the search message in a response message, and controls the communication module to transmit to the user terminal before the authentication is completed,
When a setting for a login method that requires additional one-time passwords in addition to a password is input to the user terminal receiving the access information, a one-time password authentication module corresponding to the one-time password is installed in the web camera, a web camera. According to claim 1,
The authentication module is
A user terminal logging in by inputting a one-time password through a user interface;
receiving an authentication packet obtained by hashing the one-time password from the user terminal;
checking the NTP of the authentication packet generation time, calculating a time bias based on the NTP, and verifying the validity of the authentication packet by reverse hashing the one-time password;
When the validity of the authentication packet is confirmed, transmitting an authentication confirmation message to the user terminal; Containing, a web camera. delete 3. The method of claim 2,
The authentication packet includes a header and a body according to a SOAP communication protocol standard, the header includes an encryption token, and the body includes a request to the web camera. According to claim 1,
The one-time password is generated through a user terminal or a separate one-time password generator, or is associated with a biometric authentication method included in the user terminal, a web camera.

Images