KR102463246B1 - Identity authentication method and system using vehicle and biometric information - Google Patents

Abstract

The present invention provides a system including an authentication request device installed in a specific place or movable, and a user terminal in which biometric information of a user is stored. The authentication request device senses a user's biometric information and vehicle information from the user's vehicle, identifies the user terminal corresponding to the vehicle information, and transmits the sensed biometric information, and the user terminal transmits the biometric information received from the authentication request device in advance after determining whether the same matches prestored biometric information. Through the present invention, even in an environment where it is difficult for a user to carry a user terminal, identity authentication and payment can be performed only by providing biometric information, so that convenience can be significantly improved. Also, a user terminal can be specified through vehicle information.

Description

Identity authentication method and system using vehicle and biometric information}

The present invention relates to an identity authentication method and system using a vehicle and biometric information, and to a method and system capable of more efficiently and conveniently performing identity authentication and payment.

With the development of information and communication technology, portable electronic devices, such as smartphones, are widely used, and systems capable of processing orders, payments, etc.

Conventional identity authentication simply obtains biometric information through a terminal owned by the user and transmits it to a separate application or server to authenticate it, or the user performs simple authentication by inputting biometric information into an ordering means provided such as a kiosk. method was used.

However, in the case of the conventional identity authentication system as described above, there is a problem in that the user's biometric information can be used indiscriminately, so that the security is weak. In addition, even if the user inputs biometric information at the kiosk, since the terminal must be possessed for authentication and payment, there is a cumbersome part in the identity authentication and payment process in places where it is difficult to possess the terminal, such as a water park. In addition, the conventional identity authentication system is limited only to the user's identity authentication, and there is a problem in that convenience is reduced because an action such as payment must be separately performed after identity authentication. In addition, since the user in the vehicle performs identity authentication and payment while leaving the vehicle, it is possible to automatically identify the user based on the vehicle information and automatically perform the user's identity authentication and payment. There is a need for technology development.

Various embodiments of the present invention are to solve the above problems, and it is an object of the present invention to provide a system capable of specifying a user terminal based on vehicle information and biometric information and performing an identity authentication or payment process for the user do it with

In addition, the problem to be solved by the present invention is to prevent leakage of biometric information in the process of inputting biometric information and authenticating identity.

In addition, an object of the present invention is to automatically perform identity authentication and payment for the user even if the user does not possess a terminal.

The problems to be solved by the present invention are not limited to the problems mentioned above, and other problems not mentioned will be clearly understood by those skilled in the art from the following description.

To this end, the present invention includes an authentication request device installed or movable in a specific place, and a user terminal in which the user's biometric information is stored, and the authentication request device senses the user's biometric information and vehicle information from the user's vehicle, and receives the vehicle information. A system for checking a corresponding user terminal and transmitting the sensed biometric information, the user terminal determines whether the biometric information received from the authentication request device matches the previously stored biometric information, and transmits the information on whether or not the biometric information is matched to the authentication request device provides

Through the present invention, even in an environment where it is difficult for a user to possess a user terminal, identity authentication or payment can be performed simply by providing biometric information, thereby remarkably increasing convenience.

In addition, the present invention can specify a user terminal through vehicle information, and can easily perform user authentication through biometric information collation, so that two-factor authentication about the user is possible.

Effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a view showing an overall identity authentication system according to an embodiment of the present invention.
2 is a view showing the overall identity authentication process according to an embodiment of the present invention.
3 is a diagram illustrating the overall configuration of a computing device according to an embodiment of the present invention.
4 is a diagram illustrating acquisition of vehicle information through a collection unit according to an embodiment of the present invention.
5 is a diagram illustrating an identity authentication method through an authentication request device according to an embodiment of the present invention.
6 is a diagram illustrating an additional authentication request according to an embodiment of the present invention.
7 is a diagram illustrating a payment request of an authentication request device according to an embodiment of the present invention.
8 is a diagram illustrating a payment request of a user terminal according to an embodiment of the present invention.
9 is a diagram illustrating an additional authentication request and a payment request of an authentication request device according to an embodiment of the present invention.
10 is a diagram illustrating an additional authentication request of an authentication request device and a payment request of a user terminal according to an embodiment of the present invention.
11 is a diagram illustrating deletion of biometric information according to an embodiment of the present invention.

The terminology used herein is for the purpose of describing the embodiments and is not intended to limit the present invention. In this specification, the singular also includes the plural, unless specifically stated otherwise in the phrase. As used herein, “comprises” and/or “comprising” does not exclude the presence or addition of one or more other components in addition to the stated components. Like reference numerals refer to like elements throughout, and "and/or" includes each and every combination of one or more of the recited elements. Although "first", "second", etc. are used to describe various elements, these elements are not limited by these terms, of course. These terms are only used to distinguish one component from another. Therefore, it goes without saying that the first component mentioned below may be the second component within the spirit of the present invention.

In the entire specification, when a part "includes" a certain component, it means that other components may be further included, rather than excluding other components, unless otherwise stated. In addition, terms such as "...unit" and "module" described in the specification mean a unit that processes at least one function or operation, which may be implemented as hardware or software, or a combination of hardware and software. .

1 is a view showing an overall identity authentication system according to an embodiment of the present invention. A “user” is a subject who intends to perform identity authentication through the present invention, possessing a user terminal and providing biometric information. In addition, "both biometric information" means biometric information obtained from an authentication request device, which will be described later, and biometric information stored in advance in the user terminal. The identity authentication system according to the present invention includes an authentication request device 100 and a user terminal 200 .

The authentication request device 100 is installed in a specific place or provided to be movable, and is configured to request identity authentication or payment using biometric information. To this end, the authentication request device 100 is provided as a means for obtaining biometric information, such as a kiosk, but is not limited thereto. In detail, the authentication request device 100 obtains the vehicle information v and the biometric information, specifies the user terminal 200 to be described later, and compares the specified user terminal 200 to check whether the biometric information matches. to request

In addition, the authentication request device 100 may be installed in an area adjacent to a place that can be entered through a vehicle (eg, a store, a parking lot, a vehicle blocker, etc.), and receives a voice signal from a user (eg, an order reception, etc.) ) may be provided as shown in FIG. The authentication request device 100 capable of receiving a voice order can be applied to operating facilities such as restaurants and drive-throughs that can receive voice orders from users who are in a vehicle or temporarily or completely alight from the vehicle. Here, the voice order may be performed through natural language processing using AI, or may include all orders through training between employees such as cashiers and users.

In addition, the authentication request device 100 can be applied to not only stores, but also free parking lots belonging to buildings such as shopping malls, apartments, etc. that check the entry and exit of vehicles, paid parking lots, and access systems of buildings, and check the entry and exit of vehicles It can be applied in various ways as long as it is a place where vehicle information can be checked from the vehicle.

In addition, the authentication request device 100 may receive additional information from the user in addition to receiving the vehicle information v in order to recognize the user terminal 200, and the additional information is a touch using an input means such as a display, It consists of inputting information in a voice method, and the like. In addition, the additional information may include, but is not limited to, an identification code registered in advance by a user, an answer to a quiz, and the like.

In addition, the authentication request device acquires and transmits vehicle information (v) and biometric information in a manner provided or connected to a computing device, and the computing device includes a collection unit 110 , a sensor unit 120 , and a determination unit ( 130 ) and a communication unit 140 . A more detailed description thereof will be provided later with reference to FIG. 3 .

The user terminal 200 receives biometric information transmitted from the authentication request device 100 in a state in which biometric information is stored in advance, and based on this, compares and determines whether both biometric information match, and requests authentication information on whether the biometric information matches. It returns to the device 100 . To this end, the user terminal 200 may be provided as a terminal means that the user can possess, such as a smartphone, but is not limited thereto.

In addition, the user terminal 200 may transmit a request regarding an order or payment for a product to be purchased at the store to the authentication request device 100 or a separate external server through an application or online. In detail, the user terminal 200 installs a separate application that can be connected to the authentication request device 100 or an external server or is connected to the authentication request device 100 or an external server through online, and then purchases the store product. You can send an order or payment request regarding

Here, the user terminal 200 may transmit an order or payment request for a store product regardless of whether the vehicle in which the user rides is close to the store. For example, after placing an order from a distance through the user terminal 200 for a drive-thru type store that sells fast food, the user gets into the vehicle and enters the store, and vehicle information through the authentication request device 100 And when the biometric information acquisition is confirmed and the comparison of both biometric information coincides through the user terminal 200 , the user can receive the pre-ordered product promptly. Through this, it is possible to order and receive in a non-face-to-face manner that does not require face-to-face meetings with employees such as cashiers.

In addition, biometric information obtained or stored in advance in the authentication request device 100 or the user terminal 200 may be provided in various formats such as binary data, vector data, images, text files, and the like, but is not limited thereto. Through this, the security of acquired or previously stored biometric information can be significantly improved.

The authentication request device 100 and the user terminal 200 are directly communicatively connected to obtain and transmit vehicle information, biometric information, and various information necessary for authentication and payment. System), NFC (Near Field Communication), MST (Magnetic Secure Transmission), WiFi (Wireless fidelity), LTE, LTE-A, CDMA, WCDA, UMTS, RF, BAN (Body Area Network), etc. can be used, but is not limited thereto. In addition, transmission and reception of the various types of information between the authentication request device 100 and the user terminal 200 may be performed through configuration of at least one of a separate middleware and a cloud system, but is not limited thereto. According to an embodiment, the user terminal 200 may communicate with the authentication request device 100 through a short-range communication module, but communicates remotely through a communication base station or network to transmit biometric information and reply whether or not it matches. data communication is possible. Through this, even if the user leaves the user terminal 200 at a remote location without carrying it, authentication or payment according to various embodiments of the present invention can be performed.

The authentication request device 100 or the user terminal 200 may perform identity authentication or payment of the user when both biometric information match. A more detailed description thereof will be described later with reference to FIGS. 5 to 11 .

As another embodiment of the present invention, the user terminal 200 may perform AI machine learning by itself to increase the accuracy of whether or not biometric information matches. In detail, in the user terminal 200, biometric information stored in advance by the user and biometric information transmitted from the authentication request device 100 (eg, vector data, fingerprint, iris, facial image, etc.) may be accumulated, and the user The terminal 200 may learn the accumulated data by itself to increase the accuracy of whether it matches the pre-stored biometric information. In the case of biometric information that the user stores in advance through the user terminal 200, the shape, brightness, saturation, color, etc. may be different depending on the external environment when the user stores it in the user terminal 200, and the authentication request device ( 100), the biometric information, particularly the face image, may be different depending on the user's condition. Accordingly, the user terminal 200 may refer to existing data result values, etc. when determining whether a currently received face image matches a pre-stored face image by continuously learning the accumulated face image. For example, when a user receives and learns a plurality of different types of facial images from the authentication request device 100 , when another facial image is received from another authentication request device 100 in the future, refer to the first learned face image Thus, authentication may be performed in the user terminal 200 .

An embodiment of this method may reflect Google's concept of Federated Learning. That is, the user terminal 200 does not transmit the biometric information transmitted from the authentication request device 100 to the central server (not shown) in real time, but proceeds with learning with an existing algorithm, and learns from the central server under specific conditions. You can send data and receive and update new algorithms. The specific condition may be provided in various conditions, such as when connecting to a separate central server, when connecting to WIFI, or at a specific time (eg, 12:00 am), but is not limited thereto.

More specifically, the user terminal 200 usually learns biometric information provided with a face, etc. with a separate algorithm initially provided to the user terminal 200 from the central server without external communication connection, and when a specific condition is met, the user terminal 200 transmits the learning result to the central server, and the central server upgrades the previously stored algorithm to be personalized in response to the received learning result. Thereafter, by retransmitting the upgraded algorithm from the central server to the user terminal 200, more precise biometric information-related comparison and authentication is possible. Accordingly, biometric information-related security and accuracy can be maximized, and a reduction in power consumption and a reduction in driving speed of the user terminal 100 can be prevented in advance.

2 is a view showing the overall identity authentication process according to an embodiment of the present invention, and is a diagram for each step in order to more clearly distinguish and display the steps performed by the authentication request device 100 or the user terminal 200 as a subject. The cities are shown differently. At least some of the respective steps disclosed in FIG. 2 may be omitted or the mutual order may be changed. Further, additional embodiments may be arbitrarily added between each step in FIG. 2 .

The user terminal 200 performs a step (s110) of storing biometric information in advance. To this end, a separate storage means such as a memory for storing the biometric information in advance may be built-in in the user terminal 200 or may be externally connected. Here, the user may pre-store personal information other than biometric information through the user terminal 200 . Personal information may include, but is not limited to, information that can identify the user, such as the user's social security number, residence address, name, and gender.

In one embodiment, when a user enters a store through a vehicle or before that, the user terminal 200 sends a purchase request for a product to be purchased at the store through an application or online to the authentication request device 100 or an external server. The step of transmitting to may be further carried out. This is carried out after the step (s110) of storing the aforementioned biometric information in advance, and may be carried out simultaneously with, before or after the steps (s210 and s220) of collecting vehicle information and biometric information to be described later. That is, in a state in which biometric information is stored in the user terminal in advance, when the vehicle enters the store, the user terminal 200 performs an identity authentication or a product purchase request to the authentication request device 100, and the authentication request device 100 Depending on the location of the vehicle information and biometric information collection steps (s210, s220) may be performed before, after, or simultaneously. Meanwhile, the request may be made by transmitting information about the order request to an external server separately connected to at least one of the authentication request device 100 or the user terminal 200 .

After the user terminal 200 stores the biometric information, the authentication request device 100 collects vehicle information (v) from the vehicle in which the user rides (s210) and collects the biometric information from the user (s220) carry out Here, the step (s210) of collecting the vehicle information (v) and the step (s220) of collecting the biometric information may be performed simultaneously or sequentially, for example, after collecting the vehicle information (v) first, the user Biometric information can be collected by recognition, but the order is not limited thereto.

Based on the collection of vehicle information (v) and biometric information, the authentication request device 100 performs a specific and confirming step (s230) of the user terminal 200 . Here, a method for the authentication request device 100 to specify the user terminal 200 will be described later with reference to FIG. 6 .

After the user terminal 200 is specified, the authentication request apparatus 100 performs a step (s240) of transmitting biometric information toward the user terminal 200 . In detail, the authentication request device 100 transmits the obtained biometric information to the user terminal 200 .

The user terminal 200 performs a step (s120) of comparing the biometric information transmitted from the authentication request device 100 with the biometric information stored in advance. Here, when information on vehicle information including at least one of biometric information and vehicle license plate, high pass card, RF card, identification sticker or vehicle identification number is stored in the user terminal 200 in advance, comparison of vehicle information is simultaneously performed. may be implemented, and authentication may be performed by receiving multi-modal data in which the biometric information and vehicle information are integrated. Here, when the form of the biometric information is a vector image extracted from a facial image, the user terminal 200 may determine whether to compare both vector images (the first vector image and the second vector image).

Thereafter, the user terminal 200 performs a step (s130) of transmitting the transmitted biometric information and the result of comparing whether the biometric information stored in advance in the user terminal 200 matches the authentication request device 100 (s130). .

When both biometric information match, the user terminal 200 may transmit information necessary for user identity authentication or payment to the authentication request device 100 . According to various embodiments, the user terminal 200 may additionally perform a step of processing payment in connection with an external server at the same time or sequentially while transmitting the comparison result information. A more detailed description thereof will be described with reference to FIGS. 7 to 10 .

Meanwhile, as vector data is extracted or stored in advance for a facial image among biometric information, and both vector data are compared in the user terminal 200 , the user's identity may be authenticated.

3 is a view showing the overall configuration of the authentication request device 100, which is a computing device according to an embodiment of the present invention, and FIG. 4 is a view showing vehicle information (v) through the collection unit 110 according to the embodiment of the present invention. It is a diagram showing what is obtained.

A computing device according to the present invention includes at least one processor, and is at least temporarily implemented by the at least one processor. To this end, the collection unit 110 for collecting vehicle information (v), the sensor unit 120 for sensing biometric information, and a determination unit for checking the user terminal 200 possessed by the user based on the vehicle information (v) and a communication unit 140 that transmits the sensed biometric information to the 130 and the user terminal 200 and receives whether the biometric information matches from the user terminal 200 in response.

The collection unit 110 is a component for collecting vehicle information v, and is provided to identify a vehicle in which the user rides. To this end, the collection unit 110 collects vehicle information about a vehicle in which a user accessing the computing device rides. Here, the vehicle information (v) is at least one of a license plate (v1) attached to the front or rear of the vehicle, a high-pass card (v2) attached to the vehicle, an RF card, an identification sticker (v3), or a vehicle identification number (v4). including, but not limited to. For such vehicle information collection, the collection unit 110 may collect vehicle information through at least one of a camera (not shown), the sensor unit 120 , and the communication unit 140 .

Referring to FIG. 4 as an example, the authentication request device 100 is installed in an area adjacent to a location so that it can be entered through a vehicle, and is provided to receive an order through a voice generated by a user. Accordingly, the computing device connected to or provided with the authentication request device 100 collects vehicle information from a nearby vehicle. Here, the computing device may be attached to a vehicle license plate (v1) attached to the front of the vehicle, a high-pass card (v2) mounted to the rearview mirror, an RF card that can be attached to the windshield of the vehicle, and the glass of the vehicle. A separate identification sticker and vehicle identification number (v4) may be collected, but the present invention is not limited thereto. Meanwhile, the computing device that has collected vehicle information about the vehicle as described above senses biometric information.

The sensor unit 120 is configured to sense the user's biometric information. In detail, the sensor unit 120 collects biometric information from a user who is riding in a vehicle or alighted from the vehicle. To this end, the sensor unit 120 includes a camera, sensor, touch panel, keyboard, microphone, and speaker capable of collecting biometric information that can be distinguished from others, such as the user's iris, pupil, voice, fingerprint, face, vein, and electrocardiogram. It is provided as a sensing means provided with an input/output interface such as an input/output interface, etc., and the type of biometric information that the sensor unit 120 can acquire is not limited thereto.

As another embodiment of the present invention, the sensor unit 120 may further include a separate extraction unit for extracting the first vector data based on the face image among the biometric information. The separate extraction unit may extract the first vector data through a pre-stored face recognition algorithm after receiving biometric information provided as a face image while connected to the sensor unit. Meanwhile, the face recognition algorithm may be provided with various types of algorithms such as PCA, LDA, EBGM, and Open API technology, but is not limited thereto.

The separate extraction unit as described above is also installed or connected to the user terminal 200, so that when the user stores biometric information in the user terminal 200 in advance, the second vector data may be acquired and stored with respect to the face image.

A separate exporter may extract the first vector data or the second vector data from the facial image by itself, or extract the vector data on the server after transmitting the facial image to a separate server.

In addition, after the separate extraction unit completes the extraction of the first vector data from the biometric information provided as the face image, the face image itself is deleted from the authentication request device 100 , thereby improving security.

Meanwhile, the first vector data obtained through a separate extraction unit is transmitted to the user terminal 200 , and the user terminal 200 in a state in which the second vector data is stored in advance receives the transmitted first vector data and receives the second vector data. Determines whether it matches the vector data. Whether the first vector data and the second vector data match may be determined through a face recognition algorithm, and may be performed by software or an application installed on the user terminal 200 . Here, whether the first vector data and the second vector data match means whether the degree of matching is achieved to a degree that can probabilistically guarantee and assert that both vector data are faces of the same person.

The determination unit 130 is configured to identify and specify the user terminal 200 based on vehicle information. In detail, the determination unit 130 may include at least one of a process of recognizing a vehicle, a process of recognizing a license plate, and a process of recognizing a character identified from the vehicle. As an embodiment, the determination unit 130 is provided to recognize the vehicle model and the vehicle license plate v1 of the vehicle together. Through this, the determination unit 130 may store or learn information about a plurality of vehicle models and license plates v1 in advance. In addition, the determination unit 130 is installed with a separate recognition means for recognizing and detecting the vehicle license plate (v1) and the characters described in the license plate (v1), for easier recognition of the license plate (v1) and characters Recognition systems such as You Only Look Once (YOLO) and Convolution Neural Network (CNN) may be reflected, but are not limited thereto.

The determination unit 130 may check identification information of the user terminal 200 related to the vehicle information v. The identification information may be, for example, information such as a mobile phone number and a product serial number, but is not limited thereto, and includes information that can be identified in order to transmit information to the user terminal 200 . The identification information may be transmitted from the user terminal 200 to the authentication request apparatus 100 in advance through an application or online, or may be transmitted and stored in the authentication request apparatus 100 through an external server. The authentication request device 100 may pre-form a database by associating at least one of identification information of the user terminal 200, vehicle information of a vehicle, biometric information of a user, and identification information. As another embodiment, the authentication request device 100 is connected to the adjacent user terminal 200 through short-range communication, it is also possible to collect the identification information of the user terminal (200).

Through the determination unit 130 as described above, it is possible to recognize and specify the user terminal 200 belonging to the vehicle based on the vehicle information (v).

The communication unit 140 transmits the biometric information collected through the collection unit 110 to the user terminal 200 specified by the determination unit 130 , and in response to the transmission, both biometric information from the user terminal 200 . Get a match or not. To this end, the communication unit 140 is provided with a communication module capable of short-distance or long-distance communication, and after the confirmation of the user terminal 200 is completed through the determination unit 130, the biometric information obtained toward the user terminal 200 is transmitted. send it out In addition, after the comparison of the biometric information of the user terminal 200 performed in response thereto, it is received from the user terminal 200 whether the biometric information is the same.

5 is a diagram illustrating an identity authentication method according to an embodiment of the present invention.

The identity authentication method is implemented through the computing device described above in FIG. 3 , collecting vehicle information v (s210), sensing biometric information (s220), and checking the user terminal 200 (s230). ), transmitting the biometric information to the user terminal 200 (s240) and receiving the comparison result of the biometric information.

The step (s210) of collecting the vehicle information (v) is performed by the authentication request device 100 installed to be close to the store, and the collection unit 110 collects the vehicle information (v) from the vehicle of the user who is nearby. Sense and collect.

The step (s220) of collecting the biometric information may be performed after the above-described step (s210) of sensing the vehicle information (v), performed before, or performed simultaneously. In detail, the sensor unit 120 senses and collects biometric information about a user who gets on or off the vehicle.

Based on the vehicle information (v), a step (s230) of confirming the user terminal 200 is performed. The authentication request apparatus 100 checks the user terminal 200 corresponding to the vehicle information v through the determination unit 130 . That is, the authentication request device 100 specifies the user terminal 200 for the user corresponding to the vehicle information (v).

In various embodiments, before transmitting the biometric information to the user terminal 200 , the authentication request device 100 receives additional information from the user in order to recognize the user terminal 200 to be specified in order to transmit the biometric information. It may further include a step of receiving an input. This is an embodiment that can be supplemented when it is difficult to check the user terminal only with vehicle information. In detail, the user may input additional information for recognizing the user terminal 200 through touch, voice, etc. by using an input means such as a display in proximity to the authentication request device 100 . Here, the additional information may include, but is not limited to, an identification code registered in advance by a user, an answer to a quiz, and the like.

Thereafter, the authentication request device 100 performs a step (s240) of transmitting the biometric information. in detail. The authentication request device 100 transmits the biometric information sensed by the sensing unit to the user terminal 200 through the communication unit 140 .

In the process of transmitting the biometric information from the authentication request device 100 to the user terminal 200 , the biometric information may be encrypted using a preset encryption method or converted into a file of a predetermined format and transmitted. In detail, the preset encryption method may be provided with at least one or more of RC4 OTPad, DES, TDES, AES, IDEA, Diffie-Hellman, DSA, Elgamal, RSA, ECC, SHA, MD5, HAVAL, HMAC, and CBC-MAC. and is not limited thereto. Biometric information may be encrypted and transmitted in a state in which it is provided in various formats such as binary data, vector data, image, and text file as described above.

After the authentication request device 100 transmits the biometric information, the user terminal 200 compares the received biometric information with the pre-stored biometric information (s120), and transfers the information about the comparison result to the authentication request device ( 100), a step (s130) of transmitting is performed. Here, the information on the comparison result of the biometric information includes whether both biometric information matches, and further, the biometric information may be visually floated on the authentication request device 100 to be visualized, but is not limited thereto. Thereafter, the authentication request apparatus 100 performs a step of receiving from the user terminal 200 the result of comparing whether both biometric information matches each other.

As another embodiment of the present invention, the method may further include receiving voice information and accepting an order. In detail, the authentication request device 100 may receive voice information formed from the user's voice, and connect it to a pre-connected store-related server (eg, an external server) to receive an order. Here, the step of accepting the order is carried out by the authentication request device 100 installed to be close to the store when the vehicle the user boarded enters the store, and sensing the above-described vehicle information (v) ( s210) may be performed before or after or simultaneously. That is, the order reception according to the reception of the voice information of the authentication requesting device 100 is performed simultaneously with the acquisition of the vehicle information (v) while the authentication requesting device 100 is installed adjacent to the store, or the vehicle information (v) is collected It may be carried out before the following or after the vehicle information (v) is collected, and may be set in various ways according to the location of the store and the device 100 for requesting authentication.

6 is a diagram illustrating an additional authentication request according to an embodiment of the present invention. FIG. 6 further includes a step relating to an additional authentication request in the embodiment according to FIG. 5 . That is, in the embodiment according to FIG. 6 , after the user terminal 200 transmits information on the comparison result of both biometric information to the authentication request device 100 , the additional authentication request step performed by the authentication request device 100 . (s250), receiving a user authentication request through the user terminal 200 (s140), and completing the authentication through the user terminal 200 (s150), which is based on the premise that both biometric information match each other is carried out under

The authentication request device 100 having performed the step of receiving the comparison information indicating that both biometric information matches each other performs a step (s250) of additionally requesting user authentication from the user terminal 200 .

Thereafter, the user terminal 200 performs a step (s140) of receiving the requested user authentication request and a step (s150) of completing the authentication in response to the authentication request. Here, the completion of the authentication may be completed by the user completing the authentication through an input to the user terminal 200 , or in response to an authentication request automatically received from the user terminal 200 . As shown in FIG. 6 , even if the biometric information matches, the user terminal 200 receives a request from the authentication request device 100 and additionally performs authentication, thereby increasing security.

7 is a diagram illustrating a payment request of an authentication request device according to an embodiment of the present invention, and FIG. 8 is a diagram illustrating a payment request of a user terminal according to an embodiment of the present invention.

7 and 8 further include the step of performing a payment request and payment after transmitting the information on the result of comparing biometric information to the authentication request device 100 in the embodiment of FIG. 5 described above. When both biometric information match, the user's identity authentication or an action related to payment may be performed in at least one of the authentication request device 100 or the user terminal 200 . In addition, the authentication request device 100 or the user terminal 200 may transmit information required for payment and information on a comparison result between the two pieces of biometric information together or separately. In detail, the authentication request device 100 or the user terminal 200 may simultaneously transmit or sequentially transmit information on a payment request, information on a comparison result between both biometric information and biometric information in the process of requesting payment. . For example, the authentication request device 100 transmits the information necessary for payment to the user terminal 200 like biometric information in the step (S240) of transmitting the biometric information to the user terminal 200, or transmits the biometric information. It can be sent before or after. In addition, the authentication request device 100 may provide the user terminal 200 with payment related information necessary for payment after receiving the comparison result as shown in FIG. 7 .

After the authentication requesting device 100 receives the comparison result between the two biometric information, the subject requesting payment may be at least one of the authentication requesting device 100 or the user terminal 200, and according to the requesting subject, FIG. 7 or It is divided into the embodiment of FIG. 8 .

When the subject requesting payment is the authentication requesting device 100 (see FIG. 7 ), when the biometric information matches, the authentication requesting device 100 performs a step (s260) of requesting payment toward the user terminal 200 do. Here, the authentication request device 100 provides at least one of cost information (eg, cost required for payment) or information about a payment method to the user terminal 200, and the payment method is a credit card, a prepaid card, or an account. It is provided with at least one or more of transfer, high-pass card, in-vehicle payment card, telecommunication company payment, point payment, virtual currency payment, and gift certificate payment. It may be provided to the terminal 200 . On the other hand, it is preferable that the information on the above-described payment method should be stored in advance in the user terminal 200 . As described above, the authentication request apparatus 100 may transmit at least one of cost information and payment method information required for payment to the user terminal in an arbitrary step (eg, step s240) of FIG. 7 as well as step s260.

Correspondingly, the user terminal 200 performs a step (s170) of receiving a payment request, and then performs a step (S180) of executing and completing the payment. Here, the payment based on the user terminal 200 is performed by the user's input, or the user terminal 200 is automatically connected to a predetermined application, a separate server for payment, or a separate payment means to make the payment. have. The payment method may be equally applied to FIGS. 8 to 10 .

As another embodiment of the present invention, in the step of requesting payment (s260), the authentication request device 100 may request a payment from a separate server (eg, PG company server, card company server, bank server) for payment. . In this case, the separate server for the payment includes at least one of the above-described cost information or information on a payment method. In addition, a separate server for the payment is connected to the user terminal 200 to complete the payment according to the user's input, or the user terminal 200 connected to the server can automatically approve the payment to complete the payment. . This may be equally applied to the embodiment according to FIGS. 8 to 10 .

In addition, in the step (s180) of conducting and completing the payment, a portion of the payment amount may be accumulated as points. In detail, information on points and information on a method of earning points are stored in the user terminal 200 in advance, and a predetermined ratio of the payment amount may be accumulated as points. Here, the information on the points, the information on the point accumulation method, and the predetermined ratio of the payment amount may be specified in advance in the user terminal 200 or may be provided to the user terminal 200 by presetting in a separate server for payment. . The accumulation of some points of the payment amount as described above may be applied equally to FIGS. 8 to 10 , and a part of the payment amount is accumulated as points in the authentication request device 100 instead of the user terminal 200 and is given to the user terminal 200 . can do.

On the other hand, when the subject of the payment request is the user terminal 200 (see FIG. 8), when the biometric information matches, the user terminal 200 sends the authentication request device 100 or a separate server for payment (eg, an external server) ) to request a payment (s160) is performed.

Thereafter, the authentication request device 100 or a separate server for the payment performs a step (s270) of receiving a payment request from the user terminal 200, followed by a step of completing the payment in response to the payment request (s280) carry out Here, as described above, a separate server may perform payment in response to a user input to the user terminal 200 , or the user terminal 200 may automatically perform payment while connected to the server.

In addition, as in FIG. 7 , the authentication request device 100 performs payment using a payment method corresponding to the payment request information sent from the user terminal 200 in a state in which the payment method information is stored in advance. can This may be equally applied to the case of a separate server for the payment instead of the authentication request device 100 . In this case, the separate servers for the payment are directly connected to each other in the user terminal 200, or the authentication request device 100 receiving the payment request from the user terminal 200 is connected to a separate server for the payment. It can be performed by connecting and requesting payment.

As additionally applied to the embodiment shown in FIG. 7 , in the step s260 of requesting a payment, an alternative key authentication for payment may be requested together.

Referring to FIG. 7 as an example, when a payment request is made toward the user terminal 200 , the authentication request device 100 may transmit information about the replacement key so that the user terminal 200 authenticates the replacement key. Here, the information on the replacement key may be transmitted before the information on the payment request or may be transmitted simultaneously.

Thereafter, in step (s170) of receiving the payment request, the user terminal 200 receives information about the payment request and information about the replacement key to authenticate the replacement key. To this end, it is preferable that information about the replacement key identical to the replacement key or in another replacement key corresponding to the replacement key should be stored in advance in the user terminal 200 .

When the information on the replacement key is transmitted before the information on the payment request, the authentication request device 100 may transmit the information about the payment request toward the user terminal 200 after the authentication of the replacement key of the user terminal 200 . . Thereafter, the user terminal 200 performs and completes the payment using the above-described payment method.

After authentication of biometric information, by requesting payment after determining whether or not matching based on an alternative key is performed, various types of information can be prevented from being unintentionally leaked in the process of payment, so that a high level of information protection can be achieved. In other words, it is possible to prevent the password of the payment method for the user's payment from being unintentionally exposed as it is, and to apply a simple password by using an alternative key of the security system set by the user, rather than a specific encryption method. It has high security compared to

As additionally applied to the embodiment of FIG. 8 , in the step (s160) of the user terminal 200 requesting payment, the authentication request device 100 may request authentication of an alternative key for payment.

The user terminal 200 transmits information about the replacement key to the authentication request device 100, which may be performed simultaneously with or before the transmission of the information on the payment request.

The authentication request device 100 authenticates the received replacement key while information on the replacement key is previously provided or stored through the user terminal 200 or a separate server.

When authentication is completed, a payment request is made to the authentication request device 100 or a separate server for payment by the user terminal 200 , and payment may be performed in response thereto.

As described above, a high level of information protection can be achieved by authenticating using both the replacement key and biometric information for payment owned by the user, and the user can easily proceed with payment without a real payment method (e.g., cash, card). .

9 is a diagram illustrating an additional authentication request and a payment request of an authentication request device according to an embodiment of the present invention.

The embodiment according to FIG. 9 is a mixture of the embodiments according to FIGS. 6 and 7 , and after receiving the comparison result of both biometric information, payment is performed through the user terminal 200 . In addition, the additional authentication request for the user is performed by the authentication request device (100). The step of requesting payment (s260) and the step of requesting additional authentication (s250) may be performed simultaneously after receiving the comparison result of biometric information, or may be sequentially performed, such as when a payment request is made after additional authentication as shown in FIG. 9 . .

10 is a diagram illustrating an additional authentication request of an authentication request device and a payment request of a user terminal according to an embodiment of the present invention.

In the embodiment according to Fig. 10, as compared with the embodiment according to Fig. 9, the subject of the payment request is changed from the authentication request device 100 to the user terminal 200, and the embodiments according to Figs. 6 and 8 are mixed with each other. belongs to the examples.

After determining whether both biometric information matches and the comparison result is transmitted to the authentication requesting device 100 , the additional authentication request described above in FIG. 6 is made by the authentication requesting device 100 . After the authentication in the corresponding user terminal 200 is completed, a payment request to the authentication request device 100 according to the user terminal 200 is processed and payment is performed. Here, as described above, the payment request is made directly from the user terminal 200 to a separate server for payment, or the authentication request device 100 receiving the payment request from the user terminal 200 is connected to a separate payment request. Payment can also be made by sharing payment information with the server of

The step of requesting payment (s160) and the step of requesting additional authentication (s250) in FIG. 10 may be performed simultaneously or sequentially after receiving the comparison result of biometric information.

5 to 10 as described above, even in an environment where it is difficult for a user to possess the user terminal 200, identity authentication and payment can be performed just by providing biometric information, thereby significantly improving convenience. have.

In addition, according to the present invention, the user terminal 200 can be specified through the vehicle information v, and user authentication can be easily performed through matching of biometric information, so that two-factor authentication about the user is possible.

As another embodiment of the present invention, in the embodiment according to FIGS. 7 to 10 , payment may be made through a predetermined payment method in response to an image of a body part other than a face image. That is, when a specific value, such as a gesture on another body part, is detected in the biometric information by the extraction unit connected to the sensor unit, payment is made by the payment method in a state in which a payment method linked to the specific value is stored in advance. can

In detail, when the type of biometric information acquired by the biometric information collection using the user terminal 200 and the sensor unit 120 is an image about another body part except for the face image, the feature value related to the image of the other body part It may be extracted through the aforementioned separate extraction unit.

The user may set a payment method corresponding to the feature value related to the image of the other body part in advance, and through this, if the feature value of the other body part is input and matches, payment can be made to a specific payment method.

For example, in the process of pre-saving biometric information, the user may make a gesture in the shape of a V-shaped hand and set to use a credit card corresponding thereto. Thereafter, when the V-shaped gesture is identically performed when biometric information is acquired through the sensor unit, payment may be performed with the corresponding credit card. When the user takes another unspecified action in the collection process of the bio-government, payment may be made in a different payment method through image detection of the corresponding body part.

In the process of storing biometric information in advance in the user terminal 200 and collecting biometric information through the authentication request device 100, as described above, a payment method that detects and compares a specific value of a specific body part and works with the specific value By performing the payment to , it is possible to significantly improve payment convenience. In addition, even if biometric information on a specific body part is collected in the same way, a specific value reflected up to a specific gesture is detected and compared, so that it has a remarkable effect in terms of security.

As another embodiment according to FIGS. 7 to 10 , information on payment transmitted in response to a payment request is stored locally in the user terminal 200 , and a separate server for payment or an authentication request device 100 is configured as described above. Payment information is stored in encrypted form. In detail, in order to prevent the payment-related information from being unintentionally exposed and misused, the payment-related information may be stored only in the user terminal 200 . In addition, the payment-related information is transferred to a separate server or authentication request device 100 for payment in an encrypted state. The payment-related information is transformed into a bill key or token method through a separate conversion means provided in or connected to the user terminal 200 and encrypted, and the encrypted payment-related information is sent to a separate server or authentication request for payment. It may be provided to the device 100 to perform payment.

As described above, the original source of payment-related information is stored only in the user terminal 200, and the payment-related information is encrypted and provided to a separate server or authentication request device 100 for payment, so that payment-related information is intended It has the effect of preventing it from being exposed and preventing abuse even if it is exposed.

11 is a diagram illustrating deletion of biometric information according to an embodiment of the present invention.

FIG. 11 relates to a step (s290) of deleting biometric information, which is equally applied to the above-described embodiments according to FIGS. 5 to 10 , and through deletion of the biometric information, the possibility of leakage related to the biometric information is blocked in advance.

After the authentication request device 100 transmits the biometric information obtained from the sensor unit 120 to the user terminal 200 through the communication unit 140 , a step (s290) of permanently deleting the obtained biometric information is performed. That is, the sensed biometric information is permanently removed from the authentication request device 100 after being transmitted to the user terminal 200 . Although not shown in FIG. 11 , the biometric information deletion step ( s290 ) of the authentication request apparatus 100 may be performed after receiving a comparison result indicating that they match from the user terminal 200 . As described above, in addition to biometric information stored in advance in the user terminal 200, the one-time collected biometric information from the authentication request device 100 is deleted, thereby preventing the unintentional leakage of biometric information from the authentication request device 100 in advance. can be prevented, and security can be remarkably improved.

Through the present invention, which is carried out through a series of configurations and processes as described above, it is possible to prevent leakage of biometric information in advance and automatically perform user authentication and payment more efficiently and conveniently compared with the conventional identity authentication system. can In particular, from a user's point of view, even if the user does not have a user terminal, identity authentication and payment can be performed automatically, thereby significantly maximizing convenience compared to the prior art.

The steps of the method or algorithm described in relation to the embodiment of the present invention may be implemented directly in hardware, implemented as a software module executed by hardware, or implemented by a combination thereof. A software module may include random access memory (RAM), read only memory (ROM), erasable programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), flash memory, hard disk, removable disk, CD-ROM, or It may reside in any type of computer-readable recording medium well known in the art to which the present invention pertains.

As mentioned above, although embodiments of the present invention have been described with reference to the accompanying drawings, those skilled in the art to which the present invention pertains can realize that the present invention can be embodied in other specific forms without changing its technical spirit or essential features. you will be able to understand Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive.

100: authentication request device 110: collection unit
120: sensor unit 130: determination unit
140: communication unit 200: user terminal

Claims (21)

an authentication request device installed or movable in a specific place; and
Including a user terminal in which the user's biometric information is stored,
The authentication request device,
Collecting the user's biometric information and vehicle information from the user's vehicle, confirming the user terminal corresponding to the vehicle information, and transmitting the collected biometric information,
The user terminal is
It is determined whether the biometric information received from the authentication request device matches biometric information stored in advance, and information on whether or not the biometric information is matched is transmitted to the authentication request device,
The authentication request device,
It is installed in the area adjacent to the store entered through the vehicle,
The user terminal is
Transmitting a request for a product to be purchased at the store to the authentication request device through an application or online regardless of whether the vehicle is close to the store,
A separate algorithm for learning biometric information included in the user terminal,
An identity authentication system using a vehicle and biometric information, characterized in that the biometric information received from the authentication request device or the biometric information stored in advance is learned without an external communication connection, and when a specific condition is met, the learned result is transmitted to a central server . The method of claim 1,
The vehicle information is
An identity authentication system using a vehicle and biometric information, including at least one of a vehicle license plate, a high-pass card, an RF card, an identification sticker, or a vehicle identification number. The method of claim 1,
The authentication request device or the user terminal,
An identity authentication system using vehicle and biometric information that processes the user's identity authentication or payment when biometric information matches. delete delete The method of claim 1,
The authentication request device,
An identity authentication system using a vehicle and biometric information to permanently delete the biometric information from the authentication request device as the biometric information is transmitted to the user terminal. The method of claim 1,
The authentication request device,
An identity authentication system using a vehicle and biometric information, characterized in that receiving additional information for recognizing the user terminal from a user. delete delete delete delete delete delete delete delete delete delete In the method for the user terminal to perform identity authentication,
storing, by the user terminal, biometric information in advance;
specifying the user terminal from an authentication requesting device that has obtained vehicle information from the user's vehicle, and receiving the biometric information obtained by the authentication requesting device from the authentication requesting device; and
Transmitting, by the user terminal, information on a comparison result of the biometric information stored in advance and the biometric information transmitted by the authentication request device to the authentication request device;
The method further comprising the step of transmitting, by the user terminal, a request for a product to be purchased at the store to the authentication request device through an application or online regardless of whether the vehicle is close to the store,
A separate algorithm for learning biometric information included in the user terminal,
A method of learning biometric information received from the authentication request device or biometric information stored in advance without an external communication connection, and transmitting the learned result to a central server when a specific condition is satisfied. 19. The method of claim 18,
The vehicle information is
A method comprising at least one of a vehicle license plate, a high-pass card, an RF card, an identification sticker, or a vehicle identification number. delete 19. The method of claim 18,
The method further comprising the step of processing the user's identity authentication or payment, or transmitting information necessary for payment to the authentication request device when the biometric information matches.

Images