KR20040048115A - Apparatus and method for transmitting/receiving multi-biological information for authentication in mobile communication network - Google Patents

Abstract

PURPOSE: A device and a method for transmitting/receiving the multi-biometric certification information certification on a mobile communication network are provided to enable a mobile terminal to collect/transmit the multi-biometric information of a user to a wireless Internet server and make the wireless Internet server perform the certification by using the multi-biometric information. CONSTITUTION: A controller preprocesses the biometric information inputted from an image input part, a fingerprint detecting sensor, a voice processor, or a touch screen panel, and extracts the biometric information from the preprocessed data. An encoder(601) encodes/outputs the biometric information inputted from the controller. A packet generator(602) generates a packet includes the encoded biometric information. A cryptogram generator(603) generates a cryptogram message by encrypting the packet. A transmitter converts the cryptogram message into a signal of a mobile communication standard and transmits the signal to a BTS(Base station Transceiver Subsystem).

Description

Apparatus and method for transmitting and receiving multi-biometric information for authentication in mobile communication network {APPARATUS AND METHOD FOR TRANSMITTING / RECEIVING MULTI-BIOLOGICAL INFORMATION FOR AUTHENTICATION IN MOBILE COMMUNICATION NETWORK}

The present invention relates to a mobile communication network, and more particularly, to an apparatus and method for transmitting and receiving multiple biometric information for authentication in a mobile communication network.

In recent years, desktop PCs have been miniaturized into notebooks, laptops, and handheld PCs, and the popularity of personal digital assistants including electronic notebooks, mobile communication terminals, and personal digital assistants (PDAs) is rapidly increasing. This is to meet the needs of consumers who want to do anything (anytime, anywhere, anything) anytime, anywhere. For this reason, the necessity of identity verification (user verification) using a personal portable terminal in a mobile environment has emerged.

As a solution of this, many information protection technologies have been developed, and biometrics using the characteristics of the body as one of the methods has also been developed into a very important technology field. The human body has many features, but the face, vulva, iris, retina, foot print, palm, fingerprint, signature, DNA, etc. can be used for biometrics. With these physical features, if you represent your own unique password, your own physical feature is your password, which means that you can remove all the tools that have been used to indicate that you are yourself. it means.

However, the biometric schemes proposed in the related art have limitations in terms of performance and reliability because authentication is performed by recognizing one physical feature. For example, about 3% of people have no fingerprints or are not good enough to use for authentication, iris recognition is difficult to focus, facial recognition is sensitive to the surrounding lighting environment, Recognition is sensitive to ambient noise. Therefore, fingerprint recognition is useless for a person with poor fingerprint status, face recognition is impossible in a poor lighting condition, and voice recognition is difficult in a place with a lot of noise. However, if a multi-biometric system is developed instead of biometrics limited to one body feature, it will be a way to improve the performance and reliability of personal authentication.

As mentioned above, in recent years, the need for personal authentication using a personal mobile terminal in a mobile environment has emerged. For example, cdma1x and 1xEVDO terminals currently in use support packet communication and support web surfing in a mobile environment. Users can access the desired information by connecting to their desired wireless Internet server (Nate, etc.) using a mobile terminal. Currently, when accessing a wireless Internet server requires an ID and password for authentication, this method always involves the problem of information theft. Therefore, the authentication method through biometrics is emerging as the next generation authentication method. If authentication is performed using multiple biometric information in a mobile environment (wireless Internet server), the problem of the authentication method using a single biometric may be solved as well as the problem of the existing authentication method (ID / password).

Accordingly, an object of the present invention is to provide an apparatus and method for collecting and transmitting a plurality of biometric information of a user in a mobile terminal.

Another object of the present invention is to provide an apparatus and a method for a wireless Internet server to perform authentication by matching a plurality of user biometric information received from a mobile terminal with previously registered biometric information.

According to the first aspect of the present invention for achieving the above objects, it is possible to shoot at least one of the iris, face, vein and hand shape, convert the optical signal incident to the lens into an electrical signal, and converts the electrical signal into a digital Converts data into an image input unit for outputting to the control unit, an illumination unit for emitting the light for the shooting, a fingerprint sensor for sensing a fingerprint image and outputting to the control unit, and converts a voice signal input from the microphone into digital data And a touch screen panel for outputting coordinate data generated by contacting an upper surface of the panel to the controller, wherein the image input unit, the fingerprint sensor, the voice processor, and the Each of the biometric data inputted from at least one of the touch screen panels is generated. A control unit for preprocessing according to a recognition type and extracting a plurality of biometric information from the preprocessed data, an encoding unit for encoding and outputting each of the plurality of biometric information from the control unit, and the encoding from the encoding unit A packet generator for generating a packet having a predetermined standard including a plurality of biometric information, a ciphertext generator for encrypting the packet from the packet generator, and a ciphertext message, and a ciphertext message from the ciphertext generator. It characterized in that it comprises a transmitting unit for converting the signal of the mobile communication standard and transmitting to the base station.

According to a second aspect of the present invention, an authentication server device operating in the wireless Internet includes a database storing a plurality of biometric information of members in advance, and SSL from an IP packet received from the Internet when performing authentication for a specific member. Extracts and outputs a ciphertext message, converts the transmission message from the transmission message generation unit into an IP packet, and transmits the encrypted message to the Internet; and decrypts an SSL (Secure Socket Layer) encryption message from the network communication unit to a predetermined standard. A ciphertext release unit for outputting a packet, a packet release unit for decomposing the packet from the ciphertext release unit, and outputting a plurality of encoded biometric information, and each of the plurality of encoded biometric information from the packet release unit Decoding unit for decoding and outputting the raw biometric information for the specific member A matching unit which matches the biometric information of the specific member from the decoding unit with the biometric information of the member registered in the database, and outputs matching results based on the matching results from the matching unit; Determine whether to authenticate, output the authentication result, and a transmission message generation unit to generate a transmission message including the authentication result and to transmit it to the network communication unit. It is characterized in that it is transmitted to the mobile terminal of the specific member via a communication network.

1 is a diagram showing a network configuration according to the present invention.

FIG. 2 shows a more detailed configuration of FIG. 1. FIG.

3 is a view showing an appearance configuration of a mobile terminal 6 according to an embodiment of the present invention.

4 is a block diagram of a mobile terminal 6 according to an embodiment of the present invention.

FIG. 5 is a diagram illustrating a detailed configuration of the fingerprint recognition sensor 219 described with reference to FIG. 4.

6 is a diagram illustrating a configuration for transmitting multiple biometric information in a mobile terminal according to an embodiment of the present invention.

7 is a diagram illustrating a packet configuration including multiple biometric information according to an embodiment of the present invention.

8 is a diagram showing a detailed configuration of an authentication server 5 according to an embodiment of the present invention.

9 is a view showing a configuration for performing authentication by receiving multiple biometric information in the authentication server (5) according to an embodiment of the present invention.

10 is a diagram illustrating a message transmission and reception procedure performed between the mobile terminal 6, the service providing servers 3, 4, and the authentication server 5 according to an embodiment of the present invention.

11 is a diagram showing the detailed procedure of the mobile terminal 6 in FIG. 10 described above.

FIG. 12 is a diagram showing the detailed procedure of the service providing server 3, 4 in FIG.

Fig. 13 is a diagram showing the detailed procedure of the authentication server 5 in Fig. 10 described above.

<Brief description of symbols for the main parts of the drawings>

1: Mobile communication network 2: Internet

3: shopping mall server 4: brokerage company server

5: authentication server 6: mobile terminal

200: BTS 201: BSC / PCF

202: MSC 203: PDSN / FA

204: AAA 205: HA

206: carrier intranet

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In describing the present invention, if it is determined that the detailed description of the related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

The present invention described below relates to a technology for a mobile terminal connected to a wireless Internet server to perform authentication using a plurality of biometric information. In the following description, code division multiple access (CDMA) communication is an example of a mobile terminal (IS-95 terminal, CDMA1X terminal, 1xEVDO terminal, 1xEVDV terminal, PDA, European asynchronous (UMTS, W-CDMA) terminal, etc.). Will be explained.

The presently known biometric types are as follows. However, it is noted that the present invention is not limited to the following types of biometrics and other biometrics can be used.

First, referring to the fingerprint recognition, the fingerprint recognition system refers to a system that checks the user's identity by reading the user's finger electronically and comparing it with pre-input data. Although there is an inconvenience in that an accurate image is not recognized due to a problem in a user's hand or a problem of receiving a scanner, it is excellent in convenience and safety in a manner commonly known in the biometric technology field. The fingerprint image input method includes an optical scanner method and a non-optical method. A non-optical scanner method includes a semiconductor, a CCD, a CMOS, a tacile, and an ultrasonic sensor. have. Fingerprint recognition technology can be divided into three element technologies. Technology to acquire fingerprint image through input device, technology to extract feature of fingerprint from acquired fingerprint image, matching by comparing feature with user's feature information pre-stored in database It can be divided into the technology to judge.

Next, looking at the iris recognition, the iris recognition system is a system for authenticating a user using a donut-shaped iris pattern that exists between the central black pupil and the sclera in the human eye. In general, a person will have his or her own iris within three years of birth. In order to widely use the iris, which is known to have a higher discrimination ability among individuals than any other biometric features, as a biometric means, a technique for effectively expressing the characteristics of the living body and a technology for providing a more convenient environment to the user are required. Personal identification using iris consists of iris image acquisition part and iris recognition part. The image acquisition part performs the function of acquiring the eye image of the quality suitable for iris recognition, and the iris recognition part is the acquired eye image and performs functions such as iris region extraction, iris feature extraction, iris code generation, and feature matching. To perform.

Input devices required for iris image acquisition include a CCD camera, a video camera, illumination to obtain a clear iris pattern, and a capture board or frame grabber for converting an analog image into a digital image. Such an input device is related to the performance of the whole system in terms of the system, and is one of the important components of the iris identification system in terms of user convenience. In the iris recognition part, iris region extraction is a step of separating the iris region from the eye image acquired through the input device, which plays a very important role for consistent iris feature extraction. Iris feature extraction is a step of extracting the feature of the pattern pattern appearing in the iris region, it is expressed as a value reflecting the change in the gray value of the iris pattern pattern. The iris code generation step encodes the extracted iris characteristics in a predetermined form for efficient storage and comparison of the iris code. The identification of an individual using the iris uses the similarity of the two iris codes to be compared. Is done.

Next, when looking at the vein recognition, the vein recognition system is a system that recognizes the shape of the blood vessels of the palm or wrist, it has the advantage of reducing the user's rejection and can be used by people without fingerprints or fingers. . Vein patterns are also invisible, but they have their own unique patterns like other biometrics. The process of extracting the vein pattern uses infrared light and a filter to maximize the contrast of blood vessels to see the vessels, and then extracts the distribution of veins and stores them in a database to recognize outliers and to compare overall vessel shapes. Check. Here, the infrared light is obtained as a digital image through a CCD camera, and the image captured by the CCD camera can acquire excellent features for use in personal identification.

Next, looking at face recognition, the face recognition system refers to a system for identifying the identity using a given face database of one or more faces present in a still image or video. Unlike other biometric technologies, face recognition technology does not require direct contact with a part of its body to the recognition device, and thus, there is a lack of coerciveness and discomfort that can be given to the user due to less coercion in the method of obtaining biometric information. The method of extracting the singularity of the facial image uses the nodes of the forehead and upper lip, which do not change in facial expression and hairstyle. As an input device, a scanner is used for a still image, and a CCD camera installed in a bank or the like is used for a video. When face detection is successful, compensation for illumination or compensation for various deformations is made, and the face image which has undergone this normalization process is determined by whose recognition algorithm.

Next, looking at the speech recognition, the speech recognition system is a system that identifies the identity as a feature of the voice that appears during speech is a system that does not require any special equipment other than the microphone. This method has no merit of loss and there is an advantage that user authentication can be performed through the communication network without any special equipment in the remote place. The recognition principle is to acquire the voice data, extract the features using the LPC-Cepstrum coefficients, store them in a database by vector quantization, and compare the LPC coefficients of the input voice signals with the stored database. In addition, neural networks have been widely used in recent years.

Next, with regard to handwriting (or signature) recognition, handwriting recognition systems identify people by their unique handwriting. The signature, which is uniquely created by the pressure and the movement, direction, and shape of the pen, is carried out repeatedly through large and small deformations over a long time, and is fixed in a unique form. Personal identification using signatures is largely divided into on-line and off-line methods according to the signature input method. In the offline method, there is an optical method using a camera and a scanner. Thus, after the signature is first created, the signature is entered and signature verification is performed. The main feature used to distinguish signatures in the offline method is the appearance of the signature. On the other hand, in the online signature verification method, a signature is input by using an electronic pen and a tablet, and a signature is created and verification processing is performed. In addition to the appearance of the signature, the main features used in the online method include the abscissa, ordinate and velocity, pressure, and pen tilt information over time.

The invention described below is based on the biometrics described above.

1 shows a network configuration according to the present invention.

As shown, the network according to the present invention comprises a mobile terminal 6, a mobile communication network 1, the Internet 2, various service providing servers (3, 4), the authentication server (5) do.

2 shows a more detailed configuration of FIG. 1.

As shown, the mobile communication network 1 includes a base station (BTS) base station (BTS) 200, a control station (BSC: base station controller) / packet control unit (PCF: packet control function) (201), an exchange station ( MSC: Mobile Switching Center (202), Home Location Register (HLR: Home Location Register, not shown), Visitor Location Register (VLR: Visitor Location Register, not shown), Packet Data Service Node (PSDN: Packet Data Service) Node / FA Agent (203), Carrier's intranet (206), Authorization Authentication Accounting (AAA) (204), Home Agent (HA) ( 205) and the like.

Referring to FIG. 2, the mobile terminal 6 is in the range of an arbitrary base station 200, and the information of the mobile terminal 6 passes through the base station 200 and the control station 201 controlling the switching station 202. Information transmitted from the switching center 202 is transmitted to the mobile terminal 6 via the control station 201 and the base station 200. The mobile terminal 6 is meant to include all terminals capable of communicating (circuit communication and packet communication) while the user is carrying and moving.

The base station 200 is responsible for connecting the mobile terminal 6 to the control station 201, the wireless communication with the mobile terminal 6, and the communication with the control station 201 by wire Perform wired / wireless conversion function. The control station 201 coordinates the connection between the base station 200 by connecting the base station 200 to the switching center 202 and is responsible for a signal processing function for communication between the base station 200 and the switching station 202. The packet control unit (PCF) in the control station 201 processes packet data in association with the packet data service node 203.

The packet data service node 203 is responsible for an interface function between a radio access network (RAN) and a data core network 206. That is, the data link layer is terminated from the mobile terminal 6 and routed to a higher layer protocol on the data network. In this case, a simple IP call is directly connected to an IP network (Internet), and a mobile IP call is connected to a home agent (HA) through a GRE (Generic Routing Encapsulation) tunnel. Connect.

The home agent 205 serves as a gateway for the mobile IP user to access the Internet. The home agent 205 performs tunneling with the PSDN 203 for MIP registration and delivers a MIP call packet from the home network to the PSDN 203.

Therefore, when the mobile terminal 6 attempts to access a specific service providing server 3 or 4 connected to the Internet 2, first, the AAA 204 performs subscriber authentication. If the subscriber authentication is successful, the home agent (or visiting agent) assigns the mobile terminal 6 an IP address to be used for packet communication (when using mobile IP). Thereafter, the mobile terminal 6 performs packet communication with the assigned IP address. As such, when the Internet connection is completed, the authentication server 5 performs authentication for the mobile terminal 6 in response to a request of the service providing servers 3 and 4. That is, the mobile terminal 6 requests the multi biometric information for authentication, and then performs the authentication by matching the multi biometric information received from the mobile terminal 6 with the pre-registered multi biometric information. Here, the multi-bio information transmitted by the mobile terminal 6 is transmitted to the authentication server 5 via the control station 201, the packet data service node 203, the home agent 205, the Internet (2). . Then, the authentication server 5 transmits the authentication result to the service providing server (3, 4), and also to the mobile terminal (5). Then, the service providing server (3, 4) grants or denies service use to the mobile terminal (6) based on the authentication result received from the authentication server (5).

As such, the mobile terminal 6 according to the present invention should be provided with devices (engines) for multiple biometrics.

3 shows an external configuration of a mobile communication terminal 6 having devices for multiple biometric recognition according to an embodiment of the present invention.

As shown, the mobile terminal 6 according to the present invention is composed of a main body 20 and a folder 30 as a sub-body.

On the main body 20, a keypad assembly 21 composed of a plurality of key buttons is installed. The keypad assembly 21 may include a plurality of numeric key buttons at the bottom and a predetermined navigation key button at the top. Under the keypad assembly 21, a microphone device 22, which is a talker for inputting voice by a terminal during a call, is installed. The microphone device 22 is used as a tool for recognizing a user's voice.

The display device 31 is installed in the folder 30. The display device 31 is combined with the LCD (LCD) module and the touch screen module. Accordingly, as shown in the drawing, various types of information may be input using a predetermined stylus pen 80. According to the present invention, the touch screen module and the stylus pen are used as a tool for recognizing a user's handwriting. In the upper portion of the display device 31, a speakerphone device 32, which is a receiver for outputting the other party's voice, is installed.

The folder 30 and the main body 20 may be installed to be opened and closed by rotating the axis A of FIG. 1 by a predetermined hinge device 50, the opening and closing angle may be a convenient angle for the user to talk, It preferably has an opening and closing angle range of 135 to 145 degrees.

In addition, a lens assembly 60 for using the terminal 10 as an optical photographing device may be built in the hinge device 50, and the lens assembly 60 may include a knob installed at one end of the hinge device 50. 61 is installed rotatably in conjunction with 360). This is to match a unique shooting angle or position for each subject. The lens assembly 60 is used as a tool for recognizing the shape of the user's iris, face, hand, and vein. In addition, a predetermined lighting device 33 is installed in place of the display device 31. The lighting device 33 is for emitting light (for example, infrared light) corresponding to a unique photographing characteristic for each subject.

In addition, a fingerprint recognition assembly 70 that is electrically removable on one side of the terminal is installed. The fingerprint recognition assembly 70 has a jack as a terminal and is inserted into a jack hole formed in the main body 20 to perform electrical connection with the terminal. However, the present invention is not limited thereto, and the fingerprint recognition assembly 70 may use other electrical connection means, such as flexible connection means such as fusible printed circuits.

4 illustrates a functional block configuration of the mobile terminal 6 according to the embodiment of the present invention.

As shown, the mobile terminal 6 includes a controller 411, a memory 412, a voice processor 413, a display 414, a touch screen panel 415, a key input unit 416, and an image input unit 417. ), An illumination unit 418, a fingerprint sensor 419, a channel coding unit 420, a diffusion modulation unit 421 and a transmitting RF unit 422, a channel decoding unit 423, a despreading demodulation unit 424, The reception RF unit 425, the duplexer 428, the antenna 429, the speaker 430, and the microphone 431 are configured to be included.

Referring to FIG. 4, first, the controller 411 controls overall operations of the mobile communication terminal. In particular, in an embodiment of the present invention, the controller 411 performs user authentication with biometric information received from at least one or more biometric devices. The controller 411 is typically a one chip microprocessor, and may use, for example, a mobile station modem (MSM) chip manufactured by Qualcomm.

The memory 412 includes a volatile memory (for example, RAM) and a nonvolatile memory (for example, flash memory, EEPROM), and is generated according to program data, initial service data, and performance of an operation for controlling the overall operation of the mobile communication terminal. Store temporary data. In particular, the memory 412 is a program for extracting biometric information by recognizing a fingerprint, iris, vein, face, handwriting, etc. according to the present invention, a message of a predetermined standard (protocol standard) with the extracted biometric information It stores programs for creating and sending, web browser programs, etc. In other words, it processes biometric data received from biometric devices to extract biometric information, and stores various programs for converting the extracted biometric information into signals of a predetermined standard and transmitting the biometric information.

The voice processing unit 413 converts the PCM data from the control unit 411 into an analog voice signal and outputs it to the microphone 430, and converts the analog voice signal from the microphone 431 into PCM data to the control unit 411. Output Here, in the normal mode, the PCM data from the control unit 411 is the other party's voice data received from the base station (BTS), and the PCM data output to the control unit 411 is the voice data transmitted to the base station (BTS). In the voice recognition mode, the controller 411 extracts biometric information (feature information) from the PCM data (biometric data) input from the voice processor 413 and stores the biometric information (feature information) in a specific area of the memory 412. do. The biometric information obtained through the voice recognition is then transmitted along with other biometric information to a wireless Internet server (Internet server providing a service to a mobile terminal through a mobile communication network).

The display unit 414 displays an overall state of the mobile communication terminal and input user input information and the like on a display window (eg, a liquid crystal display (LCD)) under the control of the controller 411. The touch screen panel 415 provides the controller 411 with coordinate data generated when the user touches the upper surface of the panel using a hand or a writing instrument (stylus pen). The memory 412 includes a conversion table for converting the coordinate data into a character code, and the controller 211 outputs a character code corresponding to the received coordinate data to the display unit 414 to display a predetermined area of the display window. Display on. Here, the liquid crystal display window and the panel are integrally formed. That is, the user writes letters on the upper surface of the display window using a writing instrument or the like. In the handwriting recognition mode, the controller 411 extracts biometric information (feature information) from coordinate data (biometric data) from the touch screen panel 415 and stores the biometric information (feature information) in a predetermined area of the memory 412. The biometric information obtained through the handwriting recognition is then transmitted along with other biometric information to a wireless Internet server requesting the biometric information.

The key input unit 416 includes a plurality of numeric key buttons, navigation key buttons, and the like, and transmits a key signal corresponding to a key selected by the user to the controller 411.

The image input unit 417 converts the optical signal incident to the lens into an electrical signal, converts the electrical signal into digital data (image data), and outputs the converted digital signal to the controller 411. For example, the image input unit 417 may use a charge-coupled device (CCD) camera. The image input unit 417 is used for video communication in the normal mode, and is used as a tool for recognizing the iris, vein, hand shape and face in the biometric mode. The control unit 411 extracts biometric information (feature information) from the image data (iris photographing data, vein photographing data, hand photographing data, face photographing data: biometric data) from the image input unit 417 and stores the memory ( 412 stored in a predetermined area. The extracted biometric information is then transmitted along with other biometric information to a wireless Internet server requesting the biometric information.

The lighting unit 418 emits light (eg, infrared light) to help photograph the subject of the image input device 417. Here, the lighting unit 418 may emit different lights according to a subject (face, iris, vein) under the control of the controller 411.

The fingerprint sensor 419 converts an electrical signal according to fingerprint detection into digital data (image data) and outputs the digital signal to the controller 411. As mentioned above, the fingerprint sensor 419 is largely divided into an optical scanner method and a non-optical scanner method. In the present invention, a relatively small volume of non-optical sensor (heat sensor, semiconductor sensor, LCD sensor, ultrasonic sensor) , Capacitor sensor, etc.) is assumed. For example, an ATMEL thermal sensor 'FCD4B14' may be used. The fingerprint sensor 419 will be described later in detail with reference to FIG. 5. The controller 411 extracts biometric information (feature information) from the image data (biometric data) from the fingerprint sensor 419 and stores the biometric information (feature information) in a predetermined area of the memory 412. The biometric information obtained through the fingerprint recognition is then transmitted along with other biometric information to the wireless Internet server that requested the biometric information.

The channel coding unit 420 channel-codes and interleaves the transmission message from the control unit 411, converts the transmission message into an analog baseband signal, and provides the spreading modulator 421. The spread modulator 421 spreads and modulates the baseband signal from the channel coding unit 420 through orthogonal spreading and PN spreading. The transmitter RF unit 422 converts the spread modulated signal from the spread modulator 421 into a radio frequency signal by output frequency up-regulation and outputs the signal to the antenna 429 through the duplexer 428. The antenna 429 radiates the change of the electrical signal on the lead to electromagnetic waves in the air. The channel coding unit 420, the spreading modulator 421, and the transmitting RF unit 422 will be referred to as a 'transmitter'.

If the multi-biological information transmission mode, the control unit 411 encodes each of the obtained plurality of biometric information by a predetermined method (for example, Base64), and combines the encoded biometric information by a predetermined method to packet Generate the transmission message by encrypting the packet by a SSL method. This will be described in detail later with reference to the drawings.

The duplexer 428 separates a transmission signal and a reception signal. In other words. The transmission signal from the transmission RF unit 222 is transmitted to the antenna 429, and the signal received through the antenna 429 is transmitted to the reception RF unit 425. The receiving RF unit 425 converts a radio frequency (RF) signal received from an adjacent base station into a baseband analog signal by adjusting the frequency down and outputs the baseband analog signal. The despread demodulator 424 despreads and demodulates the output signal from the receiving RF unit 425 through PN despreading and orthogonal spreading. The channel decoding unit 423 restores the despread demodulated signal from the despread demodulator 424 to the original information message through deinterleaving and channel decoding, and restores the restored information message. It is provided to the controller 411. The channel decoding unit 423, the despread demodulator 424, and the reception RF unit 425 will be referred to as a receiver.

Looking at the fingerprint recognition of the above-described biometric types in more detail as follows.

FIG. 5 illustrates a detailed configuration of the fingerprint recognition sensor 419 described with reference to FIG. 4.

As shown, the fingerprint sensor 419 is a column selector 501, a sensor array 502, a line selector 503, an amplifier 504, a first ADC 505, a second ADC 506, a latch ( 507, a chip temperature sensor 508.

Referring to FIG. 5, the sensor array 502 is composed of 281 columns including a dummy column for indicating the start position of the sensor array, and each column is composed of 8 pixels. Accordingly, the sensor array 502 outputs an electrical signal for a total of 2248 pixels, and the electrical signal changes according to the pressure and thermal image of a finger placed on the contact surface.

The column selector 501 generates a selection signal for selecting a column of the sensor array 502. The sensor array 502 outputs electrical signals for the pixels of the column according to the selection signal from the column selector 501. In this case, since each column includes eight pixels, a total of eight electrical signals are output. The line selector 503 outputs a line selection signal to the amplifier 504 for sequentially selecting electrical signals from the sensor array 502. The amplifier 504 sequentially amplifies and outputs electrical signals from the sensor array 502 according to the line selection signal. The amplifier 504 outputs an odd number signal (pixel) to the first ADC 505 and an even signal (pixel) to the second ADC 506.

The first ADC 505 and the second ADC 506 convert the electrical analog signals from the amplifier 504 into 4-bit digital data and output the converted 4-bit digital data. The 8-bit data generated as described above is provided to the controller 411 through the latch 507, and the controller 411 converts each 4-bit data obtained through the first ADC 505 and the second ADC 506 into 8 bits 256. The gray value is converted to preprocessing for feature point extraction. On the other hand, the chip temperature sensor 508 detects the temperature before reading the information from the sensor array 502 and the temperature difference after reading the information. The detected temperature difference is used to correct an error of the sensing data. When sensing as described above, one frame includes 2240 pixels of information, and one pixel is represented by four bits. The controller 511 extracts fingerprint feature information (biometric information) by processing image data (image) input in units of frames from the latch 507.

6 is a diagram illustrating a configuration for transmitting multiple biometric information in a mobile communication terminal according to an embodiment of the present invention. As shown in the drawing, the encoder 601, the packet generator 602, the ciphertext generator 603, the channel coder 420, the spreading modulator 421, and the transmitter RF unit 423 are configured. . Here, the source encoding unit 601, the packet generation unit 602, and the cipher text generation unit 603 constituting the message generator 600 may be referred to as software function blocks and hardware function blocks provided in the control unit 411. have.

Referring to FIG. 6, first, the source encoding unit 601 encodes and outputs each of a plurality of input biometric information in Base64. At this time, each bit string obtained by encoding is input to a hash algorithm (eg, a message digest algorithm such as MD5, SHA, etc.) to generate hash values, and each hash value may be concatenated with corresponding encoded biometric information. have. Here, the plurality of input biometric information may be fingerprint recognition, iris recognition, vein recognition, face recognition, handwriting recognition biometric information, and the like. The packet generator 602 combines the encoded biometric information from the source encoder 601 as shown in FIG. 7 to generate and output a packet having a predetermined standard.

As shown in FIG. 7, the packet records a syncword field, a network ID field, a mobile IP field, a command field, and a packet size. And a plurality of fields in which the biotype is recorded, a field in which the biometric type is recorded, a field in which the size is recorded, and a field in which the biometric information is recorded, and a reserve field and error correction that have not yet been defined. It has a checksum field for it.

Thereafter, the cipher text generation unit 603 encrypts the packet from the packet generation unit 602 by SSL (Secure Socket Layer) protocol method and outputs the encrypted packet. The SSL protocol is a personal information security protocol used for Internet commerce developed by Netscape, which encrypts and transmits information by using digital signature technology that can be decrypted by anyone other than the recipient. It's cryptography. The cipher text generation unit 603 may generate a cipher text using other cipher methods (public key algorithm, symmetric key algorithm, etc.) in addition to the SSL protocol method.

The channel coder 420 channel-codes and interleaves the ciphertext from the ciphertext generator 603, converts the ciphertext into an analog baseband signal, and provides the converted ciphertext to the spread modulator 421. The spread modulator 421 spreads and modulates the baseband signal from the channel coding unit 420 through orthogonal spreading and PN spreading. The transmitter RF unit 422 converts the spread modulated signal from the spread modulator 421 into a radio frequency signal by output frequency up-regulation and outputs the signal to the antenna 429 through the duplexer 428.

Although omitted from the description of FIG. 6, the cipher text is converted into RLP (Radio Link Protocol) packets according to a predetermined protocol standard (RLP / PPP / IP), and the packets are included in a physical channel message to provide a physical layer. ) Is provided as an input of the channel coding unit 420. Therefore, the protocol layer of the mobile terminal 6 according to the embodiment of the present invention is "physical layer / RLP / PPP / IP / SSL / application layer" or "physical layer / RLP / PPP / IP / UDP / SSL / application layer It may be defined as ".

8 shows a detailed configuration of an authentication server 5 according to an embodiment of the present invention.

As shown, the authentication server 5 is a control unit (CPU) 800, ROM 810, RAM 820, external storage device 830, the network communication unit 840, the input interface 850, output Interface 860 and various external devices 851, 852, 861, 862.

Referring to FIG. 8, first, the controller 800 controls the overall operation of the authentication server 5. The ROM 810 stores a fixed program or fixed parameters used by the controller 800. The RAM 820 stores various programs executed by the controller 800 and temporary data generated during program execution.

Specifically, the RAM 820 is a biometric information extraction program 821 for extracting biometric information of a specific member from a received IP packet (TCP packet or UDP packet), and is registered in the database in advance with the extracted biometric information. A matching program 822 for determining whether to authenticate the corresponding biometric information, an authentication result transmitting program 823 for generating and transmitting a transmission message according to the authentication result, and the like.

The external storage device 830 is a mass storage device, and includes a hard disk, a floppy disk, a CD_ROM, a DVD, and the like. The external memory device 830 includes a member management database 831 that manages various member information, a fingerprint database 832-1 for storing fingerprint recognition biometric information of members, and an iris for storing iris recognition biometric information of members. The database 832-2, the vein database 832-3 for storing the member's vein biometric information, the face database 832-4 for storing the face biometric information of the members, and the voice recognition biometric information of the members. Voice database 832-5 for storing, handwriting database 832-N for storing handwriting recognition biometric information of members, and the like.

Here, the member management database 831 stores IDs, passwords, names, ages, genders, social security numbers, birth dates, occupations, e-mails, addresses, and IP addresses of members managed by the authentication server 5. For example, the authentication server 5 will share the information of the members of the contracted service providing server (site). When a user of any mobile terminal joins any of the service providing sites, the site requests the user specific biometric information to be used for authentication, and the user transmits the biometric information to the site. Then, the site transmits the received biometric information to the authentication server 5, and the authentication server 5 registers the biometric information in a database corresponding to the user. As another example, the biometric information transmitted by the user may be directly transmitted to the authentication server 5 without passing through the service providing site. On the other hand, in the subsequent authentication, the user's biometric information may be provided to the authentication server 5 via the service site, or may be directly transferred to the authentication server 5 as another example.

The network communication unit 840 includes a protocol processing module (which includes a software module and a hardware module) for communicating in a TCP protocol and / or UDP protocol. For example, the network communication unit 840 includes a physical layer corresponding to a modem and a TCP layer and / or a UDP layer corresponding to a higher protocol layer. That is, the network communication unit 840 extracts an information message (SSL cipher text) by processing an IP packet received through the Internet and performs the function of providing the control unit 800 to the network. In addition, the information message from the controller 800 is made into an IP packet according to a predetermined protocol layer, and the IP packet is transmitted to a corresponding destination (IP address) through the Internet.

The input interface 850 is a data input means connected to a mouse 851, a keyboard 852, and the like, which are pointing devices. The output interface 860 is various data output means, and is connected to a display unit 861 such as a CRT or LCD, a printer 862 for outputting a hard copy, or the like.

In the following description of the algorithm performed by the authentication server 5, for convenience of explanation, the subject of the operation will be described as the control unit CPU, but the control unit CPU is described in the above-described ROM, RAM, and the like. It is apparent in the art that an operation is performed by driving various mounted software modules.

9 illustrates a configuration for receiving authentication and receiving multiple biometric information from the authentication server 5 according to an embodiment of the present invention. As shown, the network communication unit 840, decryption unit 901, packet release unit 902, decoding unit 903, matching unit 904, determination unit 905, transmission message generation unit 906 It is configured to include. Here, the blocks 901, 902, 903, 904, 905, and 906 may be referred to as software function blocks provided in the controller 800.

9, the network communication unit 840 extracts and outputs an SSL cipher text message from an IP packet including multiple biometric information received via the mobile terminal 6 or the service providing servers 3 and 4. The ciphertext release unit 901 decrypts the ciphertext message from the network communication unit 840 and outputs a packet of a predetermined standard (see FIG. 7). The packet release unit 902 extracts and outputs a plurality of encoded biometric information (biometric information 1, biometric information N) from the packet from the ciphertext decryption unit 901. The decoding unit 903 base64 decodes each of the plurality of encoded biometric information from the packet release unit 902 to output raw biometric information. In this case, if a hash value corresponding to each encoded biometric information is included in the packet, the hash value may be used to verify whether the original biometric information is valid.

The matching unit 904 inputs the original biometric information and pre-registered biometric information corresponding to the original biometric information, matches the biometric information corresponding to each other, and outputs the results. That is, the similarity between the received biometric information and the registered biometric information is measured and output. For example, the similarity is a score calculated according to the number of matched features.

The determination unit 905 determines whether to match (if it is determined that the similarity score is equal to or greater than a predetermined value) from the similarities from the matching unit 904, and determines whether the authentication is successful from the matching results. Outputs For example, the determination unit 905 may determine that authentication succeeds when all of the biometric information is successful, and as another example, determine that authentication is successful when at least one of the biometric information is successful. have. As another example, it may be determined that the authentication succeeds when the matching is successful for a specific biometric information, otherwise it may be determined that the authentication is successful when the matching is successful for all the remaining biometric information.

The transmission message generation unit 906 generates an information message including the authentication result information from the determination unit 905 and outputs the information message to the network communication unit 840. Then, the network communication unit 840 converts the information message into an IP packet conforming to a communication protocol standard and transmits the information message to a mobile terminal (home agent) or a service providing server (3, 4).

10 illustrates a message transmission / reception procedure performed between the mobile terminal 6, the service providing servers 3 and 4, and the authentication server 5 according to an embodiment of the present invention. In particular, FIG. 10 shows a case in which biometric information transmitted by the mobile terminal 6 is directly transmitted to the authentication server 5 without passing through the service providing servers 3 and 4.

Referring to FIG. 10, first, the mobile terminal 6 accesses specific service providing servers 3 and 4 in step 1001. For example, the user operates the mobile terminal 6 to drive a web browser, and enters a domain name of a site to be accessed in the address bar of the web browser screen to access the site. When the site access is completed, the service providing server 3 or 4 transmits a logon request screen (web page) to the mobile terminal 6 in step 1003, and the mobile terminal 6 displays the logon request screen. Display on. Thereafter, the mobile terminal 6 transmits the ID (and password) input by the user to the service providing server 3 or 4 in step 1005. In operation 1007, the service providing server 3 or 4 searches whether the member information corresponding to the ID exists in the member database, and if the member information exists, the identification information of the member who attempted to log on the authentication server 5. Notify).

In step 1009, the authentication server 5 searches for a database with the member's identification information (eg, ID, social security number, etc.), and reads out multiple biological items necessary for authentication of the member. In operation 1011, the authentication server 5 transmits a screen (web page) requesting the multi-bio information corresponding to the read multi-bio items to the mobile terminal 6, and the mobile terminal 6 Displays the multi-biometric information request screen on the display window.

Thereafter, the mobile terminal 6 extracts biometric information by pre-processing biometric data received from a plurality of biometric devices according to the user's action in step 1013, generates a message including the biometric information, and generates the authentication. Send to server 5. Here, the message including the biometric information is transmitted to the authentication server 5 via the base station-> control station-> PDSN-> HA-> Internet as mentioned above.

Then, in step 1017, the authentication server 5 extracts biometric information from the message received from the mobile terminal 6, and performs authentication by matching the extracted biometric information with pre-registered biometric information. In step 1019, the authentication server 5 transmits a message including the authentication result to the service providing servers 3 and 4. Then, in step 1021, the service providing server 3 or 4 reflects the authentication result in a database. Meanwhile, the authentication server 5 transmits the authentication result (logon success, logon failure) screen to the mobile terminal 6 in step 1023, and the mobile terminal 6 displays the authentication result screen received in step 1025. Display on. Here, if the authentication result is 'logon success', the mobile terminal 6 can then use the service provided by the service providing server (3, 4).

FIG. 11 shows the detailed procedure of the mobile terminal 6 in FIG. 10 described above.

Referring to FIG. 11, first, the mobile terminal 6 accesses a specific service providing server 3, 4 in step 1101, and receives and displays a logon request screen from the service providing server 3, 4 in step 1103. . Thereafter, the mobile terminal 6 transmits the ID (and password) input by the user to the service providing server in step 1105, and receives and displays the multi-biometric information request screen from the authentication server 5 in step 1107. The screen includes information of biometric items required for authentication. In operation 1109, the mobile terminal 6 checks whether a multi biometric mode key is input according to a user's input. If the multi biometric mode key is not input, the mobile terminal 6 returns to step 1107 to continuously display the multi biometric information request screen, otherwise the multi biometric mode key is input. The mobile terminal 6 proceeds to step 1111 to display a plurality of biometric items required. Here, the plurality of biometric items are information received from the authentication server (5).

Thereafter, the mobile terminal 6 checks whether an end key for terminating the multiple biometric recognition mode is input in step 1113. If the end key is not input, the mobile terminal 6 proceeds to step 1127 and checks whether a selection key for selecting a specific item among the plurality of biometric items is input. If the selection key is not input, the mobile terminal 6 continues to return to step 1111 to display the plurality of biometric items, and if the selection key is input, the mobile terminal ( In step 6129, the mobile terminal enters a specific biometric mode according to the selected item. In operation 1131, the mobile terminal 6 checks whether biometric data is received from the biometric module (or device). When the biometric data is received, the mobile terminal 6 preprocesses the received biometric data in step 1133, extracts biometric information from the preprocessed data in step 1135, and stores the biometric information in a predetermined area of the memory. Return to step 1111.

When the end key is input in step 1113, the mobile terminal 6 encodes (eg, Base64) each of a plurality of biometric information stored in a predetermined region of the memory in step 1115, and in step 1117, the encoding is performed. The biometric information is combined to generate a packet of a predetermined standard (see FIG. 7). In operation 1119, the mobile terminal 6 encrypts the packet by a predetermined method (SSL protocol method) to generate a cipher text, and in step 1121, converts the generated cipher text into a signal of a mobile communication wireless standard. Transmit to the base station. The transmitted signal (information) is transmitted to the authentication server 5 via the radio access network (RAN), the carrier intranet 206, the home agent 205 and the Internet 2.

Thereafter, the mobile terminal 6 checks whether an authentication result is received from the authentication server 5 in step 1123. When the authentication result is received, the mobile terminal 6 displays the received authentication result on the screen in step 1125. Here, if the authentication result is 'authentication success (or logon success)', the user of the mobile terminal 6 can use the service provided by the service providing server (3, 4).

In FIG. 11, the multi-biometric information request screen may be transmitted from the service providing servers 3 and 4 to the mobile terminal 6 instead of the authentication server 5. In this case, the service providing server (3, 4) transmits the network identification information (IP address) of the authentication server to the mobile terminal 6, the mobile terminal 6 corresponds to the obtained biometric information to the IP address Implement to transmit to the authentication server (5).

FIG. 12 shows a detailed procedure of the service providing servers 3 and 4 in FIG. 10 described above.

Referring to FIG. 12, first, the server 3 or 4 checks whether a site access request signal is received from an arbitrary mobile terminal 6 in step 1201. If the site access request signal is received, the server 3 or 4 transmits a logon request screen to the mobile terminal 6 in step 1203. In operation 1205, the server 3 or 4 checks whether an ID (and password) is received from the mobile terminal 6. When the ID is received, the server 3 or 4 checks whether member information for the ID exists in the member database in step 1207.

If the member information for the ID does not exist in the member database, the server 3 or 4 transmits an error message to the mobile terminal 6 in step 1215 and terminates. If the member information for the ID exists in the member database, the server 3 or 4 transmits a message requesting authentication of the member to the authentication server 5 in step 1209. In operation 1211, the server 3 or 4 checks whether an authentication result for the member is received from the authentication server 5. When the authentication result is received, the server 3, 4 reflects the authentication result to the database in step 1213 and ends. Here, if the authentication result is 'authentication successful', the server (3, 4) is then allowed to use the service of the mobile terminal (6).

FIG. 13 shows a detailed procedure of the authentication server 5 in FIG. 10 described above.

Referring to FIG. 13, first, in step 1301, the authentication server 5 checks whether a message requesting authentication for a specific mobile terminal 6 is received from the service providing servers 3 and 4. The authentication request message includes identification information (eg, ID, resident registration number, etc.) for the user of the mobile terminal 6, and an IP address or the like currently used by the mobile terminal 6, and the like. Upon receiving the authentication request message, the authentication server 5 searches the database with the identification information in step 1303 and reads out a plurality of biometric items required for authentication of the user. The authentication server 5 transmits to the mobile terminal 6 a multi biometric information request screen requesting multi biometric information on the read plurality of biometric items.

After transmitting the multi biometric information request screen, the authentication server 5 checks whether a message including multi biometric information is received from the mobile terminal 6 in step 1307. Upon receipt of the message (password) including the multi-body information, the authentication server 5 releases the cipher text in step 1309 and converts the packet into a predetermined standard packet (see FIG. 7), and releases the packet in step 1311. Extract a plurality of encoded biometric information. In operation 1313, the authenticator 5 decodes each of the encoded biometric information to extract original biometric information.

Thereafter, the authentication server 5 reads previously registered biometric information corresponding to the extracted biometric information from the database in step 1315. In operation 1317, the biometric information received from the mobile terminal 6 is matched with the previously registered biometric information, and in step 1319, it is determined whether authentication is successful based on the respective matching result. As described above, it may be determined that authentication is successful when matching is successful for all of the biometric information. In another example, it may be determined that authentication is successful when at least one of the biometric information is successful. As another example, it may be determined that the authentication succeeds when the matching is successful for a specific biometric information, otherwise it may be determined that the authentication is successful when the matching is successful for all the remaining biometric information. In this way, it is possible to judge whether or not authentication succeeds according to Decision Fusion policy, Multi Layer Perceptron (MLP), Support Vector Machine (SVM), Minimum Cost Bayesian Classifier, Fisher's Linear Discriminant, etc. Authentication can also be performed using a probabilistic model of.

If it is determined that the authentication is successful, the authentication server 5 transmits the authentication success message to the service providing server 3 and 4 in step 1321, and transmits the authentication success screen to the mobile terminal 6 in step 1323. Then exit. On the other hand, if it is determined that the authentication failure, the authentication server 5 transmits the authentication failure message to the service providing server (3, 4) in step 1325, and transmits the authentication failure screen to the mobile terminal (6) in step 1327. Terminate after sending. Here, the authentication success screen and the authentication failure screen may be provided to the mobile terminal 6 by the service providing servers 3 and 4 instead of the authentication server 5. In this case, the service providing server 3 or 4 transmits the authentication success screen (or authentication failure screen) to the mobile terminal 6 when an authentication success message (or authentication failure message) is received from the authentication server 5. Done.

Although the above-described embodiment has described a process at the time of performing authentication, it will be apparent to those skilled in the art that the above process is performed even at the time of biometric information registration for authentication.

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications are possible without departing from the scope of the present invention. In the above-described embodiment, the server providing the service and the authentication server are separately implemented, but the server providing the service may also operate the authentication server together. In this case, as described above, the message exchange procedure between the service providing server and the authentication server is omitted. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the scope of the following claims, but also by those equivalent to the scope of the claims.

As described above, the present invention can perform authentication through multiple biometrics on the mobile communication network, thereby preventing the leakage and theft of personal information, which are problems caused by the existing authentication scheme. In addition, it is possible to improve the performance and reliability of biometrics by proposing multiple biometrics.

Claims (23)

At least one of an iris, a face, a vein, and a hand may be photographed, and an image input unit may convert an optical signal incident to a lens into an electrical signal, convert the electrical signal into digital data, and output the digital signal to a controller. By contacting the illumination unit for emitting the light for the illumination, the fingerprint sensor for sensing the fingerprint image and outputting to the controller, the voice processing unit for converting the voice signal input from the microphone into digital data and outputting the digital data to the controller, In the mobile terminal device comprising a touch screen panel for outputting the generated coordinate data to the control unit, Preprocessing each of the biometric data input from at least one of the image input unit, the fingerprint sensor, the voice processing unit, and the touch screen panel according to a biometric type, and extracting a plurality of biometric information from the preprocessed data. With the control unit, An encoding unit for encoding and outputting each of the plurality of biometric information from the control unit; A packet generation unit generating a packet of a predetermined standard including the encoded plurality of biometric information from the encoding unit; An encryption text generation unit for generating an encryption text message by encrypting the packet from the packet generation unit; And a transmitter for converting the ciphertext message from the ciphertext generator into a signal of a mobile communication standard and transmitting the signal to a base station. The method of claim 1, The encoding unit is characterized in that for encoding each of the plurality of biometric information by the Base64 method. The method of claim 1, The cipher text generation unit is characterized in that for encrypting the packet by the SSL (Secure Socket Layer) method. The method of claim 1, The packet of the predetermined standard includes a field in which a sync word is recorded, a field in which a network ID (Net ID) is recorded, a field in which a mobile IP is recorded, a field in which a command is recorded, a field in which a packet size is recorded, and a biometric number. And a plurality of fields in which the biotype is recorded, a field in which the size is recorded, and a field in which the biometric information is recorded, and an undefined reserve field and a checksum for error correction. And a field. The method of claim 1, wherein the fingerprint sensor, Outputs electrical signals for a predetermined number of pixels, the electrical signals being varied by a pressure and thermal image of a finger placed on a contact surface; An amplifier for amplifying an electrical signal from the sensor array; A first ADC for converting and outputting electrical signals for odd-numbered pixels of the electrical signals output from the amplifier into digital data; A second ADC for converting and outputting electrical signals for even pixels among the electrical signals output from the amplifier into digital data; And a latch outputting the digital data from the first and second ADCs to the controller in units of 2 pixels. In the authentication server device operating in the wireless Internet, A database that stores a plurality of biometric information about a member in advance; A network communication unit which extracts and outputs an SSL cipher text message from an IP packet received from the Internet when performing authentication for a specific member, converts the transmission message from the transmission message generation unit into an IP packet, and transmits it to the Internet; A ciphertext releasing unit for decrypting an SSL (Secure Socket Layer) cipher text message from the network communication unit and outputting a packet of a predetermined standard; A packet release unit for decomposing the packet from the ciphertext release unit and outputting a plurality of encoded biometric information; A decoding unit for decoding each of the plurality of encoded biometric information from the packet release unit and outputting raw biometric information for the specific member; A matching unit for matching the biometric information of the specific member from the decoding unit with the biometric information of the member registered in the database and outputting matching results; A determination unit which determines whether to be authenticated based on the matching results from the matching unit, and outputs the authentication result; And a transmission message generation unit configured to generate a transmission message including the authentication result and transmit the message to the network communication unit, wherein the transmission message is transmitted to the mobile terminal of the specific member via the internet and a mobile communication network. Device. The method of claim 6, The decoding unit is characterized in that for decoding each of the plurality of encoded biometric information by the Base64 method. The method of claim 6, And the determination unit determines that authentication is successful when all of the biometric information are successfully matched. The method of claim 6, And the determination unit determines that authentication is successful when at least one of the biometric information matches successfully. The method of claim 6 The biometric information registered in the database is at least one of fingerprint recognition information, iris recognition information, face recognition information, vein recognition information, hand-shaped recognition information, handwriting recognition information. At least one of an iris, a face, a vein, and a hand may be photographed, and an image input unit may convert an optical signal incident to a lens into an electrical signal, convert the electrical signal into digital data, and output the digital signal to a controller. By contacting the lighting unit for emitting the light for the illumination, the fingerprint sensor for sensing the fingerprint image and outputting to the control unit, the voice processing unit for converting the voice signal input from the microphone into digital data and outputting it to the control unit, the upper surface of the panel In the method for transmitting multi-bio information in a mobile terminal device comprising a touch screen panel for outputting the generated coordinate data to the controller, Preprocessing each of the biometric data input from at least one of the image input unit, the fingerprint sensor, the audio processor, and the touch screen panel according to a biometric type; Extracting a plurality of biometric information from the preprocessed data; Encoding each of the extracted plurality of biometric information; Generating a packet of a predetermined standard including the encoded plurality of biometric information; Generating a ciphertext message by encrypting the generated packet; And converting the ciphertext message into a signal of a mobile communication standard and transmitting the same to a base station. The method of claim 11, wherein the transmitting process, Converting the ciphertext message into RLP packets according to the RLP / PPP / IP protocol specification; Loading the RLP packets in a physical channel message; Channel coding and interleaving the physical channel message; Spread modulating the interleaved data; And converting the spread modulated signal into a high frequency signal and transmitting the same to the base station. The method of claim 11, Wherein each of the plurality of biometric information is encoded by a Base64 scheme. The method of claim 11, The packet is characterized in that the encrypted by the SSL (Secure Socket Layer) scheme. The method of claim 11, The packet of the predetermined standard includes a field in which a sync word is recorded, a field in which a network ID (Net ID) is recorded, a field in which a mobile IP is recorded, a field in which a command is recorded, a field in which a packet size is recorded, and a biometric number. And a plurality of fields in which the biotype is recorded, a field in which the size is recorded, and a field in which the biometric information is recorded, and an undefined reserve field and a checksum for error correction. And a field. Claims [1] A method for authenticating a specific member in an authentication server device that operates in the wireless Internet and includes a database that stores a plurality of biometric information of members in advance. Extracting an SSL cipher text message from an IP packet received from the Internet; Generating a packet having a predetermined standard by decrypting the SSL message message; Decomposing the packet to generate a plurality of encoded biometric information; Decoding each of the plurality of encoded biometric information to generate raw biometric information for the particular member; Generating matching results by matching the biometric information of the specific member with the biometric information of the member registered in the database; Determining whether to authenticate based on the matching results, and generating the authentication result; Generating a transmission message including the authentication result, converting the transmission message into an IP packet, and transmitting the transmission message to the Internet; And wherein the transmission message is transmitted to the mobile terminal of the specific member via the internet and the mobile communication network. The method of claim 16, And decoding each of the plurality of encoded biometric information using a Base64 scheme. The method of claim 16, And determining that the authentication is successful when the matching is successful for all the biometric information. The method of claim 16, And determining that authentication is successful when at least one of the biometric information matches successfully. The method of claim 16, The biometric information registered in the database is at least one of fingerprint recognition information, iris recognition information, face recognition information, vein recognition information, hand-shaped recognition information, handwriting recognition information. In the method for the wireless Internet server to perform authentication using the multi-biometric information received from the mobile terminal, Transmitting a logon screen to the mobile terminal upon receiving a connection request from a specific mobile terminal; Upon receiving an ID from the mobile terminal, checking whether the member information for the ID exists in a database; If there is member information on the ID, reading multiple bio-items registered in a database corresponding to the ID; Transmitting a screen requesting biometric information corresponding to the multi biometric items to the mobile terminal; Extracting a plurality of biometric information from the message when receiving a message including the plurality of biometric information from the mobile terminal; Matching each of the extracted biometric information with corresponding biometric information registered in the database; Determining whether to authenticate based on each matching result, and reflecting the authentication to a database; Transmitting the authentication status to the mobile terminal. In the method for the authentication of the user of the mobile terminal in conjunction with the service providing server and the authentication server, Transmitting, by the service providing server, a logon screen to the mobile terminal upon receiving a connection request from a specific mobile terminal; Upon receiving an ID from the mobile terminal, checking whether the member information for the ID exists in a database; Transmitting a message requesting authentication of a member corresponding to the ID to the authentication server when the member information on the ID exists; Reading, by the authentication server, multiple bio-items registered in a database corresponding to the ID; Transmitting a screen requesting biometric information corresponding to the multi biometric items to the mobile terminal; When receiving a message including the plurality of biometric information from the mobile terminal, extracting a plurality of biometric information from the message; Matching each of the extracted biometric information with corresponding biometric information registered in the database; Determining whether to be authenticated based on each matching result; Transmitting the authentication to the service providing server and the mobile terminal; Allowing, by the service providing server, whether or not the authentication is reflected in a database to allow or deny the use of the service by the member; The mobile terminal, characterized in that it comprises the step of displaying the authentication on the display window. In the method for performing authentication by accessing a wireless Internet server in a mobile terminal, Receiving and displaying a logon screen from the server when the wireless Internet server is connected; Transmitting an ID input by the user to the server; Displaying a plurality of biometric items required upon receiving a multi-biometric information request screen from the server; Obtaining a plurality of biometric information by preprocessing a plurality of biometric data received from a plurality of biometric devices when a multi biometric mode key is input during the display; Encoding each of the plurality of biometric information using a Base64 method; Generating a packet of a predetermined standard including the encoded biometric information; Generating a cipher text message by encrypting the packet by an SSL method; Converting the ciphertext message into a signal of a mobile communication radio standard and transmitting the converted text message to the server; And upon receiving an authentication result from the server, displaying the authentication result on a display window.