KR102565422B1 - Method, computer apparatus, and computer program for providing authentication data - Google Patents

Abstract

A method for providing authentication data implemented by a computer, comprising: receiving a request for generating authentication data for user-provided information from a user of the computer; obtaining a plurality of images by photographing at least one user-related object capable of identifying the user using at least one camera in response to the authentication data generation request; generating authentication data for the user-provided information based on the plurality of images; and transmitting the authentication data through a network.

Description

METHOD, COMPUTER APPARATUS, AND COMPUTER PROGRAM FOR PROVIDING AUTHENTICATION DATA

The description below relates to techniques for providing authentication data.

As information exchanges or transactions occur between remote users over the Internet, authentication data is required to confirm that the information provided by the user (hereinafter referred to as "user-provided information") is true, or authentication data along with the information. is sometimes provided. For example, in order to prove that a certain user is a store owner of a specific store, an image of the user taken at the store may be requested as authentication data. However, in the above scenario, the image provided by the user must not be edited or falsified.

In this regard, Korean Patent Registration No. 10-1703712 (registered on February 01, 2017) discloses whether the digital image is an image captured by the user terminal using metadata included in the digital image received from the user terminal. A technique for verifying whether or not is disclosed. However, in order to use this technology, verification methods must be managed according to a predetermined metadata format for each type of user terminal. As the types of user terminals become more diverse, the number of verification methods to be managed increases and more resources are required. do.

In an embodiment according to the present invention, it is possible to provide reliable authentication data for user-provided information and verify the authentication data by efficiently using resources.

In one aspect, a method of providing authentication data implemented by a computer includes receiving a request for generating authentication data for user-provided information from a user of the computer; obtaining a plurality of images by photographing at least one user-related object capable of identifying the user using at least one camera in response to the authentication data generation request; generating authentication data for the user-provided information based on the plurality of images; and transmitting the authentication data through a network.

The authentication data providing method may further include providing a user information input interface so that the user can input the user provided information.

Generating authentication data for the user-provided information may include generating visually coded information based on the plurality of images.

The acquiring of the plurality of images may include acquiring a first image of the at least one user-related object from a first camera of the at least one camera; and acquiring a second image of the at least one target object associated with user-provided information from a second camera among the at least one camera. Here, the first image and the second image may be generated by simultaneously capturing the at least one user-related object and the at least one target object by the first camera and the second camera.

The acquiring of the plurality of images may include acquiring a first image of the at least one user-related object photographed at a specific viewpoint from a first camera among the at least one camera; and acquiring a second image of at least one target object that is captured from a second camera of the at least one camera at a viewpoint different from the specific viewpoint and associated with the user-provided information.

The obtaining of the plurality of images may include obtaining a first image of the at least one user-related object photographed by the at least one camera; and obtaining a second image of at least one target object associated with the user-provided information by using at least one screen capture program.

The obtaining of the plurality of images may include providing a preview so that the user can check images captured through each of the at least one camera.

In the generating of the authentication data, the authentication data may be generated using location information of the computer or the at least one camera related to the plurality of images.

Transmitting the authentication data through a network may include transmitting the authentication data to another computer. Here, the authentication data may be decrypted by the other computer, and verification data including the decrypted authentication data may be displayed by the other computer.

Transmitting the authentication data through a network may include transmitting the authentication data to another computer. Here, the authentication data may be decrypted by the other computer depending on whether the other computer is located within a predetermined distance from the location of the computer or the at least one camera related to the plurality of images.

The authentication data may be transmitted to the other computer according to whether there is a request for verification data from the other computer.

The other computer may transmit confirmation information about the user-provided information input from the second user of the other computer to the server.

In another aspect, a computer program stored in a non-transitory computer readable recording medium is provided to execute the authentication data providing method on the computer.

In another aspect, a computer device includes at least one processor configured to execute computer readable instructions, wherein the at least one processor receives authentication data for first user-provided information from a first user terminal. a data receiving unit, wherein the authentication data is generated based on a plurality of images including a user-related image related to a first user; a data management unit that associates the authentication data with the first user-provided information; a request receiving unit receiving a request for verification data for the first user-provided information from a second user terminal; and an authentication data transmission unit configured to transmit the authentication data to the second user terminal in response to the verification data request.

The computer may further include a memory for storing user-provided information pre-entered by the first user terminal.

The authentication data transmission unit may decrypt the authentication data in response to the verification data request, and transmit the decrypted authentication data to the second user terminal.

The authentication data may include the user-related image obtained by photographing at least one user-related object related to the first user by a first camera among at least one camera of the first user terminal; and a target image obtained by photographing at least one target object from a second camera among the at least one camera, wherein the user-related image and the target image are generated by the first camera and the second camera. It may be generated by simultaneously photographing the user-related object and the at least one target object.

The request receiving unit further receives a request for a list of candidates to be verified from the second user terminal, searches for user-provided information associated with the request for a list, and uses the searched user-provided information as the candidate to be verified. 2 It can be provided to the user terminal.

The list request may include location information of the second user terminal.

The data management unit may further associate the confirmation information with the first user-provided information when receiving confirmation information on the first user-provided information from the second user terminal.

1 shows a network system including a plurality of electronic devices and a plurality of servers according to an embodiment of the present invention.
2 specifically shows components included in an electronic device and a server included in a network system according to an embodiment of the present invention.
3 illustratively illustrates a process of generating authentication data and using the authentication data according to an embodiment of the present invention.
4 is a flowchart illustrating a method of providing authentication data according to an embodiment of the present invention.
5 is a flowchart illustrating a process in which an electronic device performs a verification data display method according to an embodiment of the present invention.
6 is a block diagram illustrating a processor included in a computer device or server according to an embodiment of the present invention.
7 is a flowchart illustrating a method performed by a server according to an embodiment of the present invention.
8 to 10 are exemplary diagrams for specifically explaining a process of providing authentication data according to an embodiment of the present invention.
11 and 12 are exemplary diagrams for specifically explaining a process of displaying verification data in an embodiment of the present invention.
13 and 14 illustratively illustrate a process of generating authentication data and using the authentication data according to another embodiment of the present invention, respectively.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Embodiments of the present invention relate to technology for providing authentication data, and more particularly, to technology for providing authentication data for user-provided information.

Embodiments including those specifically disclosed in this specification generate authentication data using an image captured by a program code and cannot be edited by a user, thereby improving efficiency, market security, service expansion, convenience, cost reduction, etc. Significant advantages can be achieved in terms of

1 shows a network system including a plurality of electronic devices and a plurality of servers according to an embodiment of the present invention.

The exemplary network system shown in FIG. 1 includes a plurality of electronic devices 110 , 120 , 130 , and 140 , a plurality of servers 150 and 160 , and a network 170 . 1 is an example for explanation of the invention, and the number of electronic devices or servers is not limited as shown in FIG. 1 .

The plurality of electronic devices 110, 120, 130, and 140 may be fixed terminals implemented as computer systems or mobile terminals. Examples of the plurality of electronic devices 110, 120, 130, and 140 include a smart phone, a mobile phone, a navigation device, a computer, a laptop computer, a digital broadcast terminal, a personal digital assistant (PDA), and a portable multimedia player (PMP). ), tablet PC, game console, wearable device, internet of things (IoT) device, virtual reality (VR) device, augmented reality (AR) device, and the like. As an example, FIG. 1 shows the shape of a smartphone as an example of the electronic device 110, but in the embodiments of the present invention, the electronic device 110 substantially uses a wireless or wired communication method to transmit other information via the network 170. It may refer to one of various physical computer systems capable of communicating with the electronic devices 120 , 130 , and 140 and/or the servers 150 and 160 .

The communication method is not limited, and includes not only a communication method utilizing a communication network (eg, mobile communication network, wired Internet, wireless Internet, broadcasting network, satellite network, etc.) that the network 170 may include, but also short-range wireless communication between devices. can For example, the network 170 may include a personal area network (PAN), a local area network (LAN), a campus area network (CAN), a metropolitan area network (MAN), a wide area network (WAN), and a broadband network (BBN). , one or more arbitrary networks such as the Internet. In addition, the network 170 may include any one or more of network topologies including a bus network, a star network, a ring network, a mesh network, a star-bus network, a tree or a hierarchical network, and the like. Not limited.

Each of the servers 150 and 160 communicates with the plurality of electronic devices 110, 120, 130, and 140 through the network 170 to provide commands, codes, files, contents, services, and the like, or a computer device or a plurality of computers. It can be implemented in devices. For example, the server 150 may be a system that provides a first service to a plurality of electronic devices 110, 120, 130, and 140 accessed through the network 170, and the server 160 may also include a network ( It may be a system that provides a second service to a plurality of electronic devices 110, 120, 130, and 140 accessed through 170). As a more specific example, the server 150 provides a service (eg, social service, etc.) for which the application is intended through an application as a computer program that is installed and driven in the plurality of electronic devices 110, 120, 130, and 140. As the first service, it may be provided to a plurality of electronic devices 110, 120, 130, and 140. As another example, the server 160 may provide a service for distributing files for installing and running the above-described application to the plurality of electronic devices 110, 120, 130, and 140 as a second service.

2 specifically shows components included in an electronic device and a server included in a network system according to an embodiment of the present invention.

Referring to FIG. 2 , components included in the electronic device 110 , the electronic device 120 , and the server 150 will be described as examples of electronic devices. In addition, the other electronic devices 130 and 140 or the server 160 may also have the same or similar components as the above-described electronic devices 110 and 120 or the server 150 .

The electronic device 110, the server 150, and the electronic device 120 include memories 211, 221, and 231, processors 212, 222, and 232, communication modules 213, 223, and 233, and input/output interfaces 214, 224, 234) may be included. The memories 211, 221, and 231 are non-transitory computer-readable recording media, such as random access memory (RAM), read only memory (ROM), disk drive, solid state drive (SSD), flash memory, and the like. The same non-perishable mass storage device (permanent mass storage device) may be included. Here, non-perishable mass storage devices such as ROM, SSD, flash memory, and disk drives may be included in the electronic devices 110 and 120 or the server 150 as separate permanent storage devices distinct from the memories 211, 221, and 231. there is. In addition, the memory (211, 221, 231) has an operating system and at least one program code (for example, a browser installed and driven in the electronic device (110, 120) or installed in the electronic device (110, 120) to provide a specific service. code for an application, etc.) may be stored. These software components may be loaded from a computer-readable recording medium separate from the memories 211, 221, and 231. The separate computer-readable recording medium may include a computer-readable recording medium such as a floppy drive, a disk, a tape, a DVD/CD-ROM drive, and a memory card. In another embodiment, software components may be loaded into the memories 211, 221, and 231 through the communication modules 213, 223, and 233 rather than computer-readable recording media. For example, at least one program is a computer program installed by files provided by developers or a file distribution system (for example, the above-described server 160) that distributes installation files of applications through the network 170. It may be loaded into the memories 211, 221, and 231 based on (eg, the above-described application).

The processors 212, 222, and 232 may be configured to process commands of a computer program by performing basic arithmetic, logic, and input/output operations. Instructions may be provided to the processors 212 , 222 , 232 by the memory 211 , 221 , 231 or the communication module 213 , 223 , 233 . For example, the processors 212 , 222 , and 232 may be configured to execute received instructions according to program codes stored in a recording device such as the memories 211 , 221 , and 231 .

The communication modules 213, 223, and 233 may provide a function for the electronic device 110, the electronic device 120, and the server 150 to communicate with each other through the network 170, and the electronic device 110, The electronic device 120 and/or the server 150 may provide a function for communicating with another electronic device (eg, the electronic device 130) or another server (eg, the server 160). For example, a request generated by the processors 212 and 232 of the electronic devices 110 and 120 according to a program code stored in a recording device such as the memory 211 and 231 is transferred to the network under the control of the communication module 213 and 233. It may be transmitted to the server 150 through 170. Conversely, control signals, commands, contents, files, etc. provided under the control of the processor 222 of the server 150 pass through the communication module 223 and the network 170 to the communication modules of the electronic devices 110 and 120. It can be received by the electronic device 110 through (213, 233). For example, control signals, commands, contents, files, etc. of the server 150 received through the communication modules 213 and 233 may be transferred to the processors 212 and 232 or the memories 211 and 231, and the contents or Files and the like may be stored in a storage medium (the permanent storage device described above) that may be further included in the electronic devices 110 and 120 .

The input/output interfaces 214 and 234 may be means for interface with the input/output devices 215 and 235 . For example, the input device may include devices such as a keyboard, mouse, microphone, and camera, and the output device may include devices such as a display, a speaker, and a haptic feedback device. As another example, the input/output interfaces 214 and 234 may be means for interface with a device in which functions for input and output are integrated into one, such as a touch screen. The input/output devices 215 and 235 may be configured as one device with the electronic device 110 . Also, the input/output interface 224 of the server 150 may be connected to the server 150 or may be a means for interface with a device (not shown) for input or output that may be included in the server 150 . As a more specific example, when the processors 212 and 232 of the electronic devices 110 and 120 process commands of the computer programs loaded into the memories 211 and 231, data provided by the server 150 or the electronic device 130 A service screen or content configured using may be displayed on the display device through the input/output interfaces 214 and 234 .

Also, in other embodiments, the electronic devices 110 and 120 and the server 150 may include more components than those shown in FIG. 2 . However, there is no need to clearly show most of the prior art components. For example, the electronic devices 110 and 120 may be implemented to include at least some of the aforementioned input/output devices 215 and 235, or may include a transceiver, a Global Positioning System (GPS) module, a camera, various sensors, a database, and the like. It may further include other components such as As a more specific example, when the electronic devices 110 and 120 are smartphones, acceleration sensors, gyro sensors, camera modules, various physical buttons, buttons using touch panels, input/output ports, and vibrations that are generally included in smartphones Various components such as a vibrator for vibration may be implemented to be further included in the electronic devices 110 and 120 .

Hereinafter, specific embodiments of a method and system for providing authentication data will be described.

Authentication data for user-provided information may be provided together with user-provided information so that other users can verify user-provided information in information exchange or transaction over the Internet. For example, when registering as an online member, the user's image along with the user's identification card may be provided as authentication data for information provided by the user, such as a user's name or birthday input by the user. As another example, when a user who operates a store inputs store information such as a store location or a store owner as user-provided information to use an online payment service, the store owner image and store image may be provided as authentication data. As another example, in order to prove that the user has been to the museum on a specific date, a museum image and a user image taken at the museum may be provided as authentication data. In addition, in order to prove that the user has taken the online lecture, an image captured from the screen of the online lecture being displayed on the user device and a user image taken using the user device may be provided as authentication data.

The present invention is not limited to the above example, and can be applied in the case of providing authentication data for user-provided information together with user-provided information.

3 illustratively illustrates a process of generating authentication data and using the authentication data according to an embodiment of the present invention.

Referring to FIG. 3 , the server 150 may receive authentication data 301 generated by the electronic device 110 of the first user and transmit it to the electronic device 120 of the second user. An example of the creation and use of authentication data 301 follows.

310. Generate authentication data

The first user, the store owner of the "LINE STORE" store, provides user information including the store owner ID 312 and store name 313 through an application installed on the electronic device 110 of the first user for online payment service ( 311) can be entered. A service provider (platform operator) of an online payment service always needs to authenticate user-provided information 311 . At this time, the first user may request generation of authentication data through an application.

At this time, the electronic device 110 of the first user according to an embodiment of the present invention includes at least one camera attached to the electronic device 110 or wired/wireless connected to the electronic device 110 (ie, electronic device 110). A plurality of images may be generated by capturing at least one user-related object capable of identifying the first user using at least one camera electrically connected to the device 110 . Here, 'at least one user-related object capable of identifying the first user' may include, for example, a body part of the first user, a face of the first user, a handwriting of the first user, and the like. Embodiments of may freely select at least one user-related object capable of identifying the first user.

Here, one of the plurality of generated images may be associated with a user-related object photographed by a camera, and the others may be associated with a target object associated with user-provided information. In this case, the electronic device 110 may further generate at least one image by capturing at least one target object associated with the user-provided information using at least one camera electrically connected to the electronic device 110 .

The electronic device 110 that has received the authentication data generation request for the user-provided information from the first user generates a store owner image 314 captured from the front camera of the electronic device 110 and a store image 315 captured from the rear camera of the electronic device 110. And by encrypting the shooting time 316 and the shooting location 317 associated with the store owner image 314 or the store image 315, visually coded information is generated as authentication data 301 for user-provided information. can do. Here, the visually coded information may include barcodes, QR codes, 2D matrix codes, color codes, 3D codes, or image codes.

320. Transmit authentication data

The electronic device 110 may transmit the authentication data 301 to the server 150 automatically according to the first user's request to transmit the authentication data or as soon as the authentication data 301 is generated.

330. Receive verification data request

The server 150 may receive a request for verification data for the user-provided information 311 from the electronic device 120 of the second user. The second user may be a user designated by the service provider of the online payment service or a user who has volunteered to obtain any reward from the online payment service.

340. Transmission of authentication data

The server 150 may transmit authentication data 301 for the user-provided information 311 to the electronic device 120 in response to the verification data request. The server 150 may retrieve additional information necessary for verification from the user-provided information 311 and provide it to the electronic device 120 together with the authentication data 301 . For example, the name of the store owner may be searched from the store owner ID 312 included in the user-provided information 311 and the retrieved store owner name may be transmitted to the electronic device 120 .

350. Verification data display

The electronic device 120 may display verification data 351 by decoding the received verification data 301 . The verification data 351 may include not only data decrypted from the authentication data 301 (eg, the store name 353) but also additional information received from the server, such as the store owner's name 352.

360. Transmission of confirmation information

The electronic device 120 may receive confirmation information about user-provided information input from the second user and transmit it to the server 150 .

The server 150 may include a server that provides a social network service (SNS) service or may interwork with a server that provides an SNS service. Accordingly, users using the SNS service can send and receive authentication data for the information together with information through the server 150 .

4 is a flowchart illustrating a method of providing authentication data according to an embodiment of the present invention.

The electronic devices 110 , 120 , 130 , and 140 according to this embodiment may provide authentication data using an application installed in each electronic device.

The processor 212 and components of the processor 212 of the electronic device 110 according to the present embodiment cause the electronic device 110 to perform steps S410 to S450 included in the authentication data providing method of FIG. 4 . You can control it. For example, the processor 212 and components of the processor 212 may be implemented to execute instructions according to an operating system code and at least one program code included in the memory 211 .

In step S410, the processor 212 may read necessary commands from the memory 211 loaded with commands related to control of the electronic device 110. In this case, the read command may include a command for controlling the processor 212 to execute steps S420 to S450 to be described later.

In operation S420 , the processor 212 may receive a request for generating authentication data for user-provided information from a first user who is a user of the electronic device 110 .

The electronic device 110 provides a user information input interface so that the user can input the user-provided information, and can receive an input on authentication target information from the user as user-provided information. In addition, the electronic device 110 may store input of authentication target information from the user in the memory 211 as user-provided information. The electronic device 110 may receive a request for generating authentication data for the user-provided information together with the user-provided information. Alternatively, the electronic device 110 may receive a selection of one of user-provided information received and stored prior to the authentication data generation request together with the authentication data generation request. From this, the electronic device 110 may associate the authentication data generation request with the corresponding user-provided information.

In operation S430, the processor 212 may acquire a plurality of images by using at least one camera to photograph at least one user-related object capable of identifying the user in response to the authentication data generation request.

Here, one of the plurality of generated images may be associated with a user-related object photographed by a camera, and the others may be associated with a target object associated with user-provided information.

The processor 212 allows a first camera of at least one camera electrically connected to the electronic device 110 to capture a first image in a first direction, and a second camera different from the first camera to capture a first image in a second direction. A second image may be captured. That is, the processor 212 acquires a first image of at least one user-related object from a first camera of the at least one camera, and obtains a first image of at least one user-related object from a second camera of the at least one camera, and selects at least one object associated with user-provided information. A second image of the object may be acquired.

In this case, the processor 212 may generate the first image and the second image by causing the first camera and the second camera to simultaneously capture at least one user-related object and at least one target object, respectively. For example, the processor 212 may acquire a store owner image and a store image by having a front camera and a rear camera attached to the electronic device 110 simultaneously photograph the store owner and the store, respectively.

The processor 212 acquires a first image of at least one user-related object captured at a specific point of time from a first camera of the at least one camera, and captures a first image from a second camera of the at least one camera at a point of time different from the specific point of view. and a second image of at least one target object associated with user-provided information may be acquired. That is, the processor 212 causes one of at least one camera electrically connected to the electronic device 110 to capture a user-related object, and captures a first image after a predetermined time elapses from one or more cameras. Any one of them may be used to photograph the target object. The predetermined time may be a value predetermined by an application installed in the electronic device 110 or a value determined by a user. For example, the predetermined time may be a minimum time required for the first camera or the second camera to continuously photograph two objects.

The processor 212 may enable a first camera among one or more cameras electrically connected to the electronic device 110 to capture both the user-related object and the target object. For example, the processor 212 may cause the camera included in the electronic device 110 to photograph the store and the store owner after a predetermined time has elapsed. The processor 212 may rotate the lens of the camera by an arbitrary angle for a predetermined time to photograph the storekeeper (ie, to obtain an image of the storekeeper). Here, the rotation angle of the lens may be a predetermined value by an application installed in the electronic device 110 . The angle of rotation of the lens also determines that a specific type of object such as a person is recognized while the processor 212 rotates the lens of the camera electrically connected to the electronic device 110 in an arbitrary direction (clockwise or counterclockwise). It can be a judging angle.

The processor 212 may also cause a first camera to capture a first image and a second camera to capture a second image. For example, the processor 212 may cause the rear camera of the electronic device 110 to photograph the store and, after a predetermined time elapses, the front camera of the electronic device 110 to photograph the store owner. As another example, the processor 212 may enable the rear camera and the front camera of the electronic device 110 to simultaneously photograph a store and a store owner, respectively.

The processor 212 obtains a first image of at least one user-related object photographed from at least one camera electrically connected to the electronic device 110, and uses at least one screen capture program to obtain user-provided information. A second image of at least one target object associated with may be acquired. For example, the processor 212 acquires a user image by having the front camera of the electronic device 110 photograph the user, and captures a screen of an online lecture being played on the electronic device 110 to obtain a playback screen image. can

Additionally, the processor 212 may provide a preview so that the user can check images captured through each of the at least one camera.

Referring to FIG. 8 , the processor 212 causes the display device 800 of the electronic device 110 to display a shooting guide 810, a "QR code generation" UI 820, and a "first camera preview" UI 830. ), the "second camera preview" UI 840 may be displayed. The processor 212 may receive an input on the “Generate QR code” UI 820 from the first user as a request for generating authentication data for user-provided information. The processor 212 automatically captures the user-related object and the target object in response to an input on the "QR code generation" UI 820 (ie, without a separate input from the first user), thereby capturing the first image and the first image. A plurality of images including 2 images may be acquired. Since the first user cannot edit the plurality of images used to generate the QR code after the first user inputs the “QR code generation” on the UI 820 in this way, the processor 212 processes the plurality of images. A photographing guide 810 may be provided so that the user can recall an authentication target to be photographed. In addition, the processor 212 may configure a “first camera preview” UI 830 or a “second camera preview” UI (so that the first user may check in advance an image captured by the first camera or the second camera). 840) can be provided. Further referring to FIGS. 9A and 9B , the processor 212 causes the display devices 800 and 900 to receive input from the front camera according to the input on the “first camera preview” UI 830 by the first user. To display the image 930, and to cause the display devices 800 and 900 to display the image 935 input from the rear camera according to the input on the "second camera preview" UI 840 by the first user. can do. The processor 212 causes the display devices 800 and 900 to display a "first camera preview" UI 910 and a "second camera preview" UI 915, thereby determining which camera is previewed first. You can remind users. In addition, the processor 212 may remind the first user of a photographing subject associated with each camera by causing the display devices 800 and 900 to display the first camera guide 920 and the second camera guide 925. .

Referring back to FIG. 4 , in step S440, the processor 212 may generate authentication data for user-provided information based on a plurality of images.

In this case, authentication data may be generated using location information of the electronic device 110 or at least one camera related to the plurality of images. The processor 212 may associate the location information of the electronic device 110 recognized by the GPS module of the electronic device 110 with the location information of the first image and/or the location information of the second image. When the camera connected to the electronic device 110 can obtain location information, the electronic device 110 can receive the location information of the camera from the camera, and the processor 212 converts the location information of the corresponding camera into a first It may be associated with the location information of the image and/or the location information of the second image. The processor 212 may also store location information of the first image and/or location information of the second image as location information of corresponding authentication data.

Authentication data may be generated by further using image information related to the first image, the second image, or a plurality of images. Image information associated with at least one of the first image and the second image may include time information, camera user information, and the like in addition to location information.

The processor 212 may generate visually coded information as authentication data based on a plurality of images. The visually coded information may include barcodes, QR codes, 2D matrix codes, color codes, 3D codes, or image codes. Additionally, the processor 212 may generate visually coded information by encrypting the store image, the store owner image, and the GPS value of the electronic device.

For example, as shown in FIG. 10 , the processor 212 encrypts the store owner image 1010, the store image 1020, and the location information 1030 of the store image to generate a QR code 1040 as authentication data. can do.

Additionally, the processor 212 may store the generated authentication data in the memory 211 of the electronic device 110 .

In step S450, the processor 212 may transmit authentication data over a network. For example, the processor 212 may receive an authentication data transmission request from the first user and, accordingly, transmit the authentication data 301 to the server 150 . At this time, the processor 212 causes the display device to display a plurality of images used in the authentication data to help determine whether the first user requests transmission of the generated authentication data or generation of new authentication data. can be displayed. As another example, the authentication data 301 may be automatically transmitted to the server 150 as soon as the authentication data 301 is generated.

As described above, the electronic devices 110, 120, 130, and 140 according to the present embodiment may provide authentication data for user-provided information using an application installed in each electronic device, while another Verification data for user-provided information may be displayed using authentication data provided from the electronic device.

The verification data display method may be performed by the electronic device 110 as well as the electronic devices 130 and 140, but hereinafter, a method of displaying verification data for user-provided information by the electronic device 120 will be described. do it with

5 is a flowchart illustrating a process in which an electronic device performs a verification data display method according to an embodiment of the present invention.

The processor 232 of the electronic device 120 and components of the processor 232 may control the electronic device 120 to perform steps S510 to S590 included in the verification data display method of FIG. 5 . For example, the processor 232 and components of the processor 232 may be implemented to execute instructions according to an operating system code and at least one program code included in the memory 231 .

In step S510, the processor 232 may read necessary commands from the memory 231 loaded with commands related to control of the electronic device 120. In this case, the read command may include a command for controlling the processor 232 to execute steps S520 to S570 to be described later.

In operation S520 , the processor 232 may transmit a request for a list of candidates to be verified to the server 150 in response to a first input of a second user who is a user of the electronic device 120 .

The second user who can request the list of verification target candidates may be a user confirmed by the server 150 to have verifier authority. The processor 232 may not display the user interface for the first input for a user who does not have permission to request a list of candidates to be verified.

The request for a list of candidates to be verified may include location information of the electronic device 120 . At this time, the processor 232 may recognize location information from the GPS module of the electronic device 120 . The request for a list of candidates to be verified may also include a candidate condition specified by the second user. For example, the second user may designate a certain distance (eg, within 1 km) from the location of the electronic device 120 as a candidate condition for the list request.

As another example, the request for a list of candidates to be verified may include second user information of the electronic device 120 . From this, in addition to a small number of users pre-determined by the payment service provider, a user who wants to become a verifier among SNS users can request a list of verification target candidates.

In step S530, the processor 232 may receive verification target candidates associated with the list request from the server 150 and display the candidate list through an output device. The candidate list provides information on an authentication target (for example, an object to be authenticated, such as a store name or location) or an authentication requester (for example, a first user associated with an authentication data generation request or information on an authentication target). user) information. At this time, the processor 232 may display condition information for the list request designated by the user together with the candidate list. In step S540, the processor 232 may transmit a request for verification data for at least one item from the candidate list to the server in response to the second input of the second user.

X" 등 인증 대상(1122)에 대한 정보와 "James," "Sally" 등 인증 요청자(1123)에 대한 정보를 포함할 수 있다. 인증 요청자(1123)에 대한 정보는 인증 데이터 생성 요청자 또는 정보 제공자의 SNS 상에서의 식별자 또는 실명(實名)에 관한 정보 중 적어도 하나를 포함할 수 있다. 전자 기기(120)의 표시 장치(1100)는 또한, 제2 사용자가 지정한 목록 요청에 대한 조건(1km 이내)을 기초로 조건 정보(1110)를 후보 목록(1120)과 함께 표시할 수 있다. 프로세서(232)는, 제2 사용자로부터 후보 목록(1120) 중 제1 항목(점포명 "LINE STORE")의 선택(1124)을 수신할 수 있다. 프로세서(232)는, 제1 항목이 선택된 상태에서 제2 사용자의 "검증 데이터 보기" UI(1130) 상의 입력에 응답하여 제1 항목에 대한 검증 데이터 요청을 서버(150)로 전송할 수 있다.Referring to FIG. 11 , the processor 232 may cause the display device 1100 of the electronic device 120 to display the candidate list 1120 . The candidate list 1120 is the store name "LINE STORE,""CAF

X", etc., and information on the authentication requester 1123, such as "James," and "Sally". The information on the authentication requester 1123 is an authentication data generation requestor or information provider. The display device 1100 of the electronic device 120 may also include a condition (within 1 km) for a list request specified by the second user. Based on this, the condition information 1110 may be displayed along with the candidate list 1120. The processor 232 selects a first item (store name “LINE STORE”) from the candidate list 1120 from the second user. 1124 may be received. The processor 232 sends a request for verification data for the first item to the server in response to the second user's input on the "view verification data" UI 1130 while the first item is selected. (150).

Referring back to FIG. 5 , in step S550, the processor 232 may receive one of authentication data associated with the verification data request from the server 150. For example, the processor 232 may receive a first code (eg, 1040 of FIG. 10 ) as authentication data for a first item (store name “LINE STORE”).

In step S560, the processor may cause the output device to display verification data.

According to an example, the processor 232 may first determine whether a predetermined decryption condition is satisfied for the authentication data received from the server 150 . In this case, the predetermined decryption condition may be related to user authority associated with the corresponding authentication data or location data of the corresponding authentication data. For example, the processor 232 may determine whether the second user has the authority to decrypt the first code, which is authentication data for the first item (store name “LINE STORE”). As another example, the processor 232 may determine whether the electronic device 120 is located within a predetermined range from location data of the first code.

At this time, if the processor 232 determines that the predetermined decoding condition is not satisfied, the processor 232 may cause the output device to output a message indicating that the corresponding verification data cannot be output.

On the other hand, if the processor 232 determines that a predetermined decryption condition is satisfied, the processor 232 may decrypt the received authentication data and cause an output device to display verification data including the decrypted authentication data. can For example, the processor 232 may allow the electronic device 120 to further receive a decryption key from the server 150 or to further read a decryption key from the memory 231 of the electronic device 120 .

Referring to FIG. 12 , the processor 232 decodes the first code, which is authentication data for the first item (store name “LINE STORE”), to obtain a first image 1213, a second image 1214, and a photographing time ( 1215), and a photographing position 1216 may be acquired. The processor 232 may cause the output device 1200 of the electronic device 120 to display the verification data 1210 based on the decrypted verification data. At this time, the verification data 1210 includes user-provided information about the first item (store name "LINE STORE") such as the store owner's name 1211 and store name 1212, and the first image 1213 and the second image 1214 , photographing time 1215, and photographing location 1216 may include decrypted authentication data.

In step S570, the processor 232 may transmit confirmation information on the user-provided information to the server in response to the third input of the second user. In this case, the third input may be an input on the UI regarding confirmation or not.

Referring back to FIG. 12 , the second user receives a third input including whether or not user-provided information such as the store name 1211 and the store owner name 1212 has been confirmed based on the verification data 1210 through the electronic device 120. can be input through the display device 1200 of. The third input may be an input on the “yes” UI 1221 , the “no” UI 1222 , or the “unable to confirm” UI 1223 . The third input may include a user comment input by the user on the comment UI 1224 .

In relation to FIG. 5, according to the above description, it has been described that the second user transmits a verification data request for at least one item from the candidate list to the server, but the second user sends the verification data request to the server without selecting an item ( 150), it is also possible that the server 150 determines one of the authentication data according to the user information of the second user and transmits it to the electronic device 120. That is, steps S520 to S540 of FIG. 5 may be omitted according to embodiments.

As described in FIGS. 4 and 5 , authentication data generated by the electronic device 110 for user-provided information may be transmitted to the electronic device 120 through the server 150 . Hereinafter, a method of providing authentication data from the viewpoint of the server 150 will be described in detail. 6 is a block diagram showing a processor included in a computer device or server according to an embodiment of the present invention, and FIG. 7 is a flowchart illustrating an example of a method that the server can perform according to an embodiment of the present invention. .

To perform the authentication data providing method according to FIG. 7 , the processor 222 of the server 150 includes an authentication data receiving unit 610, a data management unit 620, a request receiving unit 630, as shown in FIG. And it may include an authentication data transmission unit 640. Depending on embodiments, components of the processor 222 may be selectively included in or excluded from the processor 222 . Also, components of the processor 222 may be separated or merged to express functions of the processor 222 according to embodiments.

The processor 222 and components of the processor 222 may control the server 150 to perform steps S710 to S750 included in the authentication data providing method of FIG. 7 . For example, the processor 222 and components of the processor 222 may be implemented to execute instructions according to an operating system code and at least one program code included in the memory 221 .

Here, the components of the processor 222 are processors executed by the processor 222 according to commands provided by program codes stored in the server 150 (for example, commands provided by applications running in the server 150). (222) can be representations of different functions. For example, as a functional expression of the processor 222 that controls the server 150 according to the above-described command so that the server 150 receives authentication data for the first user-provided information from the first user terminal, the authentication data receiving unit ( 610) can be used.

In step S710, the processor 222 may read necessary commands from the memory 221 loaded with commands related to the control of the server 150. In this case, the read command may include a command for controlling the processor 222 to execute steps S720 to S750 to be described later.

In step S720, the authentication data receiving unit 610 may receive authentication data for the first user-provided information from the first user terminal (eg, the first user's electronic device 110). In this case, the authentication data may be generated based on a plurality of images including a user-related image related to the first user. Authentication data for the first user-provided information received from the first user terminal 110 includes, in detail, at least one user-related object related to the first user by the first camera among at least one camera of the first user terminal. It may be generated based on a user-related image obtained by photographing, or may be further generated based on a target image obtained by photographing at least one target object from a second camera among at least one camera. The user-related image and the target image may be generated by simultaneously capturing at least one user-related object and at least one target object by the first camera and the second camera.

Although not shown, the server 150 may further include an information receiving unit, and the information receiving unit may receive the first user provided information including authentication target information from the first user terminal 110 .

In step S730, the data management unit 620 may associate the authentication data received from the first user terminal 110 with the information provided by the first user. In addition, the data management unit 620 may store the authentication data in the memory 221 by associating the received authentication data with the first user-provided information.

In step S740, the request receiving unit 630 may receive a request for verification data for the information provided by the first user from the second user terminal (eg, the second user's electronic device 120). In this regard, the server 150 responds to the list request for verification target candidates from the second user terminal 120 before receiving the verification data request for the first user-provided information from the second user terminal 120. Thus, the verification target candidate may be transmitted to the second user terminal 120 . In this case, the server 150 may determine a verification target candidate using user information of the second user. For example, the server 150 may provide social graph information of the second user on the SNS (for example, whether the first user and the second user have a close relationship), a verification activity history of the second user (for example, , whether the second user has transmitted the confirmation information for the user-provided information a predetermined number of times or more) and the verification reliability of the second user (eg, for the confirmation information for the user-provided information previously received from the second user). Whether to transmit the verification target candidate to the second user terminal 120 and/or the verification target candidate to be transmitted may be determined based on reliability) and the like.

In step S750, the authentication data transmitter 640 may transmit authentication data to the second user terminal in response to the request for verification data from the second user terminal.

Although not shown, when the server 150 receives confirmation information on the first user-provided information from the second user terminal, the data management unit 620 may further associate the confirmation information with the first user-provided information. In addition, the server 150 may complete a verification procedure for user-provided information.

As another example, the server 150 may receive confirmation information on the first user-provided information from different user terminals more than a predetermined number of times in order to complete a verification process on the user-provided information. The server 150 may also complete the verification procedure as “verified” for the first user-provided information when the user-provided information is verified from different user terminals at a predetermined rate or more. For example, by receiving confirmation information for user-provided information of 4 "confirmed" and 1 "unconfirmed" from 5 different user terminals, and providing the user with 80% (a predetermined ratio of 70% or more) If the information is confirmed, the verification procedure can be completed by associating the final verification result with "verified" for the user-supplied information. As another example, when the server 150 receives confirmation information on the first user-provided information from a plurality of terminals, the data management unit 620 further separates the confirmation information received from each user terminal from the first user-provided information. It can be related and can be saved as a verification activity history of each user. At this time, the server 150 may calculate the verification reliability of each user based on whether each verification information received from the user terminal matches the final verification result of the user-provided information from the verification activity history of each user. For example, when confirmation information is received for 10 cases of user-provided information from the second user terminal, the confirmation information from the second user terminal matches the final verification result for 9 cases of user-provided information, and 1 case of user-provided information Regarding the information, when it is determined that the verification information from the second user terminal does not match the final verification result, the verification reliability of the second user may be set to 90%.

13 illustratively illustrates a process of generating authentication data and using the authentication data according to another embodiment of the present invention.

Referring to FIG. 13 , the server 150 may generate authentication data by encrypting images and image information received from the electronic device 110 of the first user, and transmit the authentication data to the electronic device 120 of the second user. there is. Another example of the generation and use of authentication data 1301 according to the present invention is as follows.

1310. The server 150 may receive a request for transmission of authentication data for user-provided information from the electronic device 110 of the first user. In this case, the authentication data transmission request may include a plurality of images and image information acquired by the electronic device 110 of the first user.

1320. The server 150 may generate authentication data 1301 using a plurality of images and image information received from the electronic device 110.

1330. The server 150 may receive a verification data request for user-provided information from the electronic device 120.

1340. The server 150 may determine whether the second user has authority in response to the verification data request.

1350. The server 150 may transmit authentication data 1301 for the second user-provided information to the electronic device 120 as it is determined that the second user has authority to check the corresponding user-provided information.

1360. The server 150 may receive confirmation information on user-provided data from the electronic device 120.

Referring to FIG. 14 according to another embodiment of the present invention, the electronic device 110 of the first user may transmit data to the electronic device 120 of the second user without going through a server. Another example of the generation and use of the authentication data 1401 according to this is as follows.

1410. Upon receiving the request for generating authentication data for user-provided information from the first user, the electronic device 110 may generate authentication data 1401 for user-provided information by encrypting a plurality of acquired images and image information. there is.

1420. The electronic device 110 may transmit a verification request for user-provided information to the server 150. Through the verification request, the server 150 may receive information indicating that the electronic device 110 has generated authentication data for user-provided information.

1430. The electronic device 110 may receive a verification data request for user-provided information from the electronic device 120 .

1440. The electronic device 110 may transmit authentication data 1401 for user-provided information to the electronic device 120 in response to the verification data request. When it is determined by the server 150 or the electronic device 120 that the verification data request satisfies a predetermined decryption condition, the electronic device 120 may decrypt the received authentication data 1401 and display the verification data. .

1450. The electronic device 120 may receive confirmation information about user-provided data input from the second user and transmit it to the server 150.

Above, the description of the technical features described above with reference to FIGS. 1 to 12 may be applied as it is to FIGS. 13 and 14, so duplicate descriptions are omitted.

The server 150 may include a server that provides a social network service (SNS) service or may interwork with a server that provides an SNS service. Accordingly, users using the SNS can send and receive information and reliable authentication data through the server 150 .

As such, according to embodiments of the present invention, reliable authentication data for user-provided information can be efficiently provided.

The devices described above may be implemented as hardware components, software components, and/or a combination of hardware components and software components. For example, devices and components described in the embodiments include a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA), and a programmable PLU (programmable logic unit). logic unit), microprocessor, or any other device capable of executing and responding to instructions. The processing device may run an operating system (OS) and one or more software applications running on the operating system. A processing device may also access, store, manipulate, process, and generate data in response to execution of software. For convenience of understanding, there are cases in which one processing device is used, but those skilled in the art will understand that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that it can include. For example, a processing device may include a plurality of processors or a processor and a controller. Other processing configurations are also possible, such as parallel processors.

Software may include a computer program, code, instructions, or a combination of one or more of the foregoing, which configures a processing device to operate as desired or processes independently or collectively. The device can be commanded. The software and/or data may be embodied in any tangible machine, component, physical device, computer storage medium or device to be interpreted by or to provide instructions or data to a processing device. there is. Software may be distributed on networked computer systems and stored or executed in a distributed manner. Software and data may be stored on one or more computer readable media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer readable medium. In this case, the medium may continuously store a program executable by a computer or temporarily store the program for execution or download. In addition, the medium may be various recording means or storage means in the form of a single or combined hardware, but is not limited to a medium directly connected to a certain computer system, and may be distributed on a network. Examples of the medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical recording media such as CD-ROM and DVD, magneto-optical media such as floptical disks, and ROM, RAM, flash memory, etc. configured to store program instructions. In addition, examples of other media include recording media or storage media managed by an app store that distributes applications, a site that supplies or distributes various other software, and a server.

As described above, although the embodiments have been described with limited examples and drawings, those skilled in the art can make various modifications and variations from the above description. For example, the described techniques may be performed in an order different from the method described, and/or components of the described system, structure, device, circuit, etc. may be combined or combined in a different form than the method described, or other components may be used. Or even if it is replaced or substituted by equivalents, appropriate results can be achieved.

Therefore, other implementations, other embodiments, and equivalents of the claims are within the scope of the following claims.

Claims (20)

A method for providing authentication data implemented by a computer,
receiving a request for generating authentication data for user-provided information from a user of the computer;
obtaining a plurality of images by photographing at least one user-related object capable of identifying the user using at least one camera in response to the authentication data generation request;
generating authentication data for the user-provided information based on the plurality of images; and
Transmitting the authentication data through a network
including,
The sending step is
Transmitting the authentication data to another computer that is a user terminal of another user designated in advance to verify the user-provided information;
The authentication data is decrypted when a condition, as a predetermined decryption condition, that the other computer is located within a predetermined distance from the position of the computer or the at least one camera related to the plurality of images is satisfied, and in the other computer Authentication data providing method in which verification data including the decrypted authentication data is displayed on the other computer for verification of the. According to claim 1,
providing a user information input interface so that the user can input the user provided information;
Further comprising, authentication data providing method. According to claim 1,
Generating authentication data for the user-provided information
Generating visually coded information based on the plurality of images
Including, authentication data providing method. According to claim 1,
Acquiring the plurality of images,
obtaining a first image of the at least one user-related object from a first camera of the at least one camera; and
obtaining a second image of the at least one target object associated with user-provided information from a second camera among the at least one camera;
including,
The first image and the second image are generated by simultaneously photographing the at least one user-related object and the at least one target object by the first camera and the second camera. According to claim 1,
Acquiring the plurality of images,
obtaining a first image of the at least one user-related object captured at a specific point in time from a first camera among the at least one camera; and
obtaining a second image of at least one target object that is captured from a second camera of the at least one camera at a viewpoint different from the specific viewpoint and associated with the user-provided information;
Including, authentication data providing method. According to claim 1,
Acquiring the plurality of images,
acquiring a first image of the at least one user-related object photographed by the at least one camera; and
Obtaining a second image of at least one target object associated with the user-provided information using at least one screen capture program
Including, authentication data providing method. According to claim 1,
Acquiring the plurality of images
Providing a preview so that the user can check images captured through each of the at least one camera.
Authentication data providing method comprising a. According to claim 1,
The step of generating the authentication data is
The authentication data providing method of generating the authentication data using location information of the computer or the at least one camera related to the plurality of images. According to claim 1,
wherein a reward is provided to the other user according to verification of the verification data in the other computer. delete According to claim 1,
The authentication data is transmitted to the other computer when there is a request for the verification data from the other computer. According to claim 11,
Wherein the other computer verifies the verification data by transmitting verification information for the user-provided information input from another user of the other computer to a server. A computer program stored in a non-transitory computer readable recording medium to cause the computer to execute the authentication data providing method according to any one of claims 1 to 9, 11 and 12. In a computer device,
at least one processor configured to execute computer readable instructions
including,
The at least one processor,
an authentication data receiver configured to receive authentication data for first user-provided information from a first user terminal, wherein the authentication data is generated based on a plurality of images including a user-related image related to the first user;
a data management unit that associates the authentication data with the first user-provided information;
a request receiving unit receiving a request for verification data for the first user-provided information from a second user terminal that is a user terminal of another user designated in advance to verify the first user-provided information; and
Authentication data transmission unit for transmitting the authentication data to the second user terminal in response to the verification data request
including,
The authentication data is decrypted when a condition in which the second user terminal is located within a predetermined distance from the first user terminal as a predetermined decryption condition is satisfied, and for verification at the second user terminal, the second user terminal At the user terminal, verification data including the decrypted verification data is displayed. According to claim 14,
A memory for storing user-provided information pre-entered by the first user terminal
Further comprising a computer device. delete According to claim 14,
The authentication data is
the user-related image obtained by photographing at least one user-related object related to the first user by a first camera among at least one camera of the first user terminal; and
A target image obtained by photographing at least one target object from a second camera among the at least one camera
is created based on
The user-related image and the target image are generated by simultaneously photographing the at least one user-related object and the at least one target object by the first camera and the second camera. According to claim 14,
The request receiver,
Further receiving a request for a list of candidates to be verified from the second user terminal;
Retrieve user-provided information associated with the listing request;
and providing the retrieved user-provided information to the second user terminal as the verification target candidate. According to claim 18,
Wherein the list request includes location information of the second user terminal. According to claim 14,
The data management unit,
and further associating the confirmation information with the first user-provided information when receiving confirmation information for the first user-provided information from the second user terminal.

Images