KR20040048048A - An Authentication Method Using Multi-Biometric Data and USB Key Apparatus - Google Patents

Abstract

PURPOSE: A certification method and a USB(Universal Serial Bus) certification key device using multi-biometric information are provided to correctly certify a user to use various service systems, guarantee the safety for the danger against personal information hacking, and offer convenience by complexly using the multi-biometric information. CONSTITUTION: A USB device driver(122) is used for certifying the user by connecting to a host(110) through the USB(111). A system management/operation code part(123) processes the biometric information singular points of each different format inputted through the USB device driver depending on a command of the host. Each biometric information matching module(124) stores the biometric information singular point or verifies accordance by comparing the biometric information singular points with the stored biometric information singular points depending on a processing result of the system management/operation code part.

Description

An Authentication Method Using Multi-Biometric Data and UBS Key Apparatus

The present invention relates to a method and apparatus for authenticating a user using biometric information. More particularly, the present invention relates to a method and apparatus for authenticating a user using a plurality of biometric information such as fingerprints, faces, and voices. An authentication method and a USB authentication key device.

In general, the authentication process for an individual has been mainly used for logon or access ID of a computer system, and recently, it is widely used for electronic commerce and electronic money. In this authentication process, since secure management of personal information and secure user authentication are very important, this has been conventionally performed using a password or a personal number (PIN). However, the use of the password or personal number (PIN), which is a personal authentication method, has a disadvantage of being easily exposed by hacking or management carelessness.

In order to solve this disadvantage, recently, a USB security authentication key device has been used. In particular, the USB type security key is widely used as an authentication device for personal identification used in communication with an authentication system by containing biometric information such as a fingerprint in the USB type security authentication key device. As a prior patent for the security authentication key device of the USB method, Korean Patent Application No. 10-2000-0001699 discloses a 'U.S.B port type secret key security device', and Korea Patent Application No. 10 -2000-0051128 publishes 'Usb key for internet banking'. Since the USB type security authentication key device disclosed in No. 10-2000-0001699 uses biometric information, especially a fingerprint as a means for selecting encryption and decryption, requires separate personal authentication data and is used as a public key method. There is a disadvantage in that an external certification center is required. In addition, the USB-type security authentication key device disclosed in No. 10-2000-0051128 is limited to a specific use such as an Internet banking service, and forgot password or USB key because it does not provide user convenience by using biometric information. If you lose the disadvantage that you can not use.

In particular, the fingerprint information used as the biometric information for user authentication has a problem in that the personal identification recognition rate and the false positive rate vary greatly, and some users cannot acquire the fingerprint information itself. In addition, since the optical fingerprint recognizer receives an image of a fingerprint and performs image processing, there is a problem that personal information infringement may exist due to fingerprint manipulation.

The present invention has been made to solve the above-described problems, the present invention, by using a plurality of multiple biometric information in the authentication of the user can be used to accurately authenticate the user to use a variety of service systems, personal information It is an object of the present invention to provide a USB authentication key device and an authentication system using multiple biometric information that can guarantee the safety against the risk of being hacked and provide user convenience.

1 is a block diagram of an authentication system to which the present invention is applied.

2 is a flowchart illustrating a registration and authentication procedure of multiple biometric information according to an embodiment of the present invention.

3 is a flowchart illustrating in detail a procedure for registering multiple biometric information in a USB key according to an embodiment of the present invention.

4 is a flowchart illustrating an authentication procedure using multiple biometric information according to an embodiment of the present invention in detail.

* Description of the symbols for the main parts of the drawings *

110 host 120 USB authentication key device

111: USB112: USB Driver

113: operating system 114: biometric authentication program

115: biometric driver 116: biometric means

121: boot code / library unit 122: USB device driver

123: system management / operation code section 124: biometric information matching module

As a technical means for achieving the above object of the present invention, the present invention, in the authentication method for authenticating a user using biometric information through a USB authentication key device connected to the host via USB,

In the biometric information input device connected to the host, a first step of receiving one or more biometric information of a user to be authenticated and extracting the feature point from the host; A second step of transmitting from the host to the USB authentication key device, the at least one biometric information point received at the second step, and the biometric information stored in the USB authentication key device; A third step of checking whether the feature points match, and a fourth step of transmitting the test result of the third step from the USB authentication key device to the host, wherein the host displays and stores the result. Characterized by providing an authentication method using.

In another aspect, the present invention, in the USB authentication key device used to recognize the user connected to the host via USB,

A USB processing unit connected to the USB port of the host to transfer data between the host and the USB authentication key device, and one or more biometric feature points having different formats input through the USB processing unit according to the command of the host Storing one or more biometric information points having different formats, or one or more biometric information points having different formats according to a processing result of the system management / operation code section and the system management / operation code section. It is characterized in that it provides a USB authentication key device using multiple biometric information including at least one biometric information matching module for comparing and comparing each of the one or more biometric information points stored in the.

Hereinafter, a configuration of an authentication system using a USB authentication key device to which the present invention is applied will be described in detail with reference to the accompanying drawings.

1 is a block diagram of an authentication system to which the present invention is applied, and the authentication system to which the present invention is applied is largely composed of a host 110 and a USB authentication key device 120. The host 110 is a USB 111, a USB driver 112 for driving the USB, an operating system 113 for operating the overall host, and a biometric authentication program for managing user authentication using biometric information ( 114 and a plurality of biometric drivers 115 for driving the plurality of biometric means 116. The plurality of biometric means 116 may correspond to a fingerprint reader for recognizing a fingerprint, a CCD camera for recognizing an image such as a shape of a face, a microphone for recognizing a voice, and the like.

In addition, the USB authentication key device 120 is connected to a USB port of the host 110, a USB device driver 122 for transmitting data between the host and the USB authentication key device, and the USB authentication key device 120 ) Is connected to the USB port and is supplied with power through the boot code / library 121 and the USB device driver 122 that initializes the USB authentication key device 120 and prepares to perform a library. A system management / operation code unit 123 for operating the USB authentication key device such as processing a plurality of biometric information points having different types of inputs according to commands of the host, and the system management / operation code unit ( According to the processing result of 123, one or more biometric information points having different formats may be stored, or previously stored with one or more biometric information points having different formats. Matches by comparing the Southern one or more feature points, each biometric information comprises at least one biometric information matching module 124 for inspection. The boot / library unit 121, the USB device driver 122, and the system management / operation code unit 123 may exist in a ROM. The ROM includes a permanent memory ROM and an EEPROM or fresh ROM that is a nonvolatile memory.

Hereinafter, an operation of an authentication method using multiple biometric information and a USB authentication key device according to the present invention will be described in more detail with reference to the accompanying drawings.

FIG. 2 is a flowchart illustrating a procedure for registering and authenticating multiple biometric information according to an embodiment of the present invention. Referring to FIG. 2, first, a USB authentication key device is connected to a host and recognized (S31, S32, and S33). When the USB authentication key device is inserted into the USB hub of the host, power is supplied to the USB authentication key device and a boot code and a library are performed by a reset signal to initialize the memory and each controller. The operating system of the host system drives the USB driver, recognizes the USB authentication key device according to the USB communication method defined by the USB standard, registers it internally, informs the USB authentication key device of the registration result, and can use the biometric authentication program. Be prepared to. As described above, if the recognition of the USB authentication key device is performed, the process proceeds to the next step. If the recognition of the USB authentication key device fails, the USB authentication key device is detached from the host and the USB authentication key device is recognized again.

After successful recognition of the USB authentication key device, the main routine of the USB authentication key device and the authentication system according to the present invention is performed. The main routine of the USB authentication key device and the authentication system according to the present invention is largely divided into two steps: registering the biometric information (S34, S35) and authenticating the biometric information (S36, S37). The biometric information is then registered, stored in the USB authentication key device, and the biometric information used to authenticate the user using the biometric information. A step of authenticating a user through a matching process of biometric information input by the information input means and biometric information previously registered and stored in the USB authentication key device. First, a step of registering biometric information will be described with reference to FIG. 3.

First, in the first registration process (S401) of registering the biometric information, the biometric authentication program in the host recognizes the biometric information input means connected to the host, installs the driver of the recognized biometric information input means, and inputs the input. Initialize the means. Subsequently, in the second registration process (S402), the biometric information management program is designated from among the biometric information formats according to the input means initialized in the first registration process (S401). Subsequently, in the third registration process S403, the feature point of the biometric information input through the input means of the biometric information format specified in the second registration process S402 is extracted from the biometric authentication program. Subsequently, in the fourth registration process (S404), the biometric authentication program asks the USB authentication key device whether the matching module of the biometric information to be registered exists in the USB authentication key device, and receives a response thereto.

Subsequently, in the fifth registration process (S405, S406, S407, S408), if there is a matching module for the type of biometric information to be registered in the USB authentication key device in the fourth registration process (S404), the registration is desired. The biometric authentication program transmits the format of the biometric information and the feature points of the extracted biometric information to the USB authentication key device, while the biometric information is registered in the USB authentication key device in the fourth registration process (S404). If there is no matching module for the format, the biometric authentication program transmits the format of the biometric information to be registered and the matching module of the corresponding biometric information to the USB authentication key device, and the USB authentication key device receives the received biometric information. After recognizing the format, the system operation and management code loads the matching module of the biometric information received in the nonvolatile memory and executes it later. After generating a matching module by connecting the library and the memory, the biometric authentication program transmits the feature point of the biometric information to be registered to the USB authentication key device. Subsequently, in the sixth registration process (S409, S410), the USB authentication key device stores the feature points of the received biometric information according to the format of the received biometric information, and notifies the biometric management program of the host that the storage is completed. The registration step of the entire biometric information is completed.

Next, the steps (S36, S37) of authenticating biometric information in the main routine of the USB authentication key device and authentication system according to the present invention will be described with reference to FIG. First, in the first authentication process (S501) of authenticating the biometric information, the biometric authentication program in the host recognizes the biometric information input means connected to the host, installs the driver of the recognized biometric information input means, and inputs the input. Initialize the means. Subsequently, in the second authentication process, a single authentication mode or multiple authentication modes are designated according to the number of types of biometric information used for authentication of biometric information, and a format of biometric information to be used for each authentication mode is specified. The single authentication mode is a mode for performing authentication using only one biometric information, and the multiple authentication mode is a mode for performing authentication using two or more biometric information. After determining a mode to be used for authentication, the format of the biometric information to be used in each mode is determined. Will be specified.

Subsequently, in the third authentication process, when the authentication mode determined in the second authentication process is a single authentication mode, biometric information for authentication is input from the corresponding biometric information input unit according to the format of the designated biometric information, and the feature point is extracted from the corresponding recognition driver. do. Subsequently, in the fourth authentication process, information about the format of the biometric information and the extracted feature points is transmitted to the USB authentication key device through the USB. In this case, when transmitting information on the feature point of the extracted biometric information to the USB authentication key device, it may be encrypted using a symmetric key or an asymmetric key. That is, a method of encrypting the information on the feature point of the extracted biometric information in the host biometric authentication program using a symmetric key or an asymmetric key and decrypting it in the system management / operation code unit in the USB authentication key device receiving the same. Can be applied.

Subsequently, in the fifth authentication process, the system management / operation code unit in the USB authentication key device analyzes the format of the biometric information received in the fourth authentication process, and stores the biometric information type if it is stored in the USB authentication key device. Matching is performed in the matching module of the corresponding biometric information using the biometric information and the received biometric information, and the result is transmitted to the host. The host displays the result and stores individual authentication details. If a feature point of an information format is not stored in the USB authentication key device, the USB authentication key device transmits that the biometric information is not registered to the host, and the host displays the result and uses other biometric information. The authentication process is performed again from the second authentication process. In this case, when the biometric information received in the fourth authentication process is encrypted, the system management / operation code unit first performs decryption, analyzes the format of the biometric information, and continues the subsequent process.

In the sixth authentication process, when the authentication mode determined in the second authentication process is the multi-authentication mode, the biometric information for authentication is input by the corresponding biometric information input means according to the format of each designated biometric information, and the feature driver receives the feature points. Extract and save. Subsequently, in the seventh authentication process, the fourth authentication process and the fifth authentication process are repeated for the feature points of the plurality of biometric information extracted and stored in the sixth authentication process, and thus the feature points of the plurality of biometric information extracted and stored in the sixth authentication process. Perform all authentication on. In this case, when the biometric information format is not stored in the USB authentication key device as in the fifth authentication process, the host is notified that the biometric information format is not stored, and the host displays the result. The process returns to the sixth authentication process so that the authentication of the other biometric information stored in the sixth authentication process can be performed.

Through such a process, the USB authentication key device may use a single authentication mode for authenticating any one biometric information in some cases, and in the multi-authentication mode, a user authentication procedure may be more accurately performed by using a plurality of biometric information. Will be. In addition, even if the user does not have a fingerprint or can not speak a wide range of user authentication is possible.

According to the present invention as described above, by using the multiple biometric information for user authentication, there is an effect of improving the security of the system by improving the accuracy of the user authentication compared to the case of using a single biometric information. In addition, according to the present invention, by allowing the user to select the format of the biometric information used for authentication, there is an excellent effect of improving the flexibility and expandability of the user recognition.

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes can be made without departing from the technical spirit of the present invention. It will be apparent to those of ordinary skill in Esau.

Claims (3)

An authentication method for authenticating a user using biometric information through a USB authentication key device connected to a host through USB, A first step of receiving at least one biometric information of a user who wants to be authenticated from the biometric information input device connected to the host, and extracting feature points from the host; A second step of transmitting one or more biometric feature points extracted in the first step from the host to the USB authentication key device through USB; A third step of checking, by the USB authentication key device, whether the one or more biometric information points received in the second step and the biometric information points stored in the USB authentication key device match; And And transmitting a test result of the third step from the USB authentication key device to the host, wherein the host displays and stores the result. The method of claim 1, wherein the authentication method using the multi-biometric information comprises: Encrypting the biometric feature point extracted in the first step in a host; And decrypting by the USB authentication key device when the biometric characteristic point received in the second step is encrypted. In the USB authentication key device used to recognize the user connected to the host via USB, A USB device driver connected to a USB port of the host to transfer data between the host and a USB authentication key device; A system management / operation code unit for processing one or more biometric information points having different formats input through the USB device driver according to a command of the host; And Depending on the processing result of the system management / operation code, one or more biometric information points having different formats may be stored, or one or more biometric information points having different formats and one or more biometric information points previously stored. USB authentication key device using a plurality of biometric information including at least one biometric information matching module for comparing and checking each match.