KR200433767Y1 - Electronic device - Google Patents

Abstract

The present invention relates to an electronic device, and more particularly, to an electronic device for authenticating a user and an electronic device using an encryption code generated based on system information.

An electronic device of the present invention includes an electronic device including at least one processor, at least one memory device, and at least one input / output device, based on system information regarding at least one of the processor, the storage device, and the input / output device. A code generation unit for generating a predetermined lock code; An output unit for requesting a user to input a password; A password input unit for receiving the password from a user; And an authentication control unit for determining whether the password from the password input unit and the lock code from the code generation unit match, and disallowing access of the user if it is determined to be inconsistency. As a result, the authenticity of the electronic device can be checked, and various security measures for user authentication can be provided.

security

Description

Electronic device {ELECTRONIC DEVICE}

1 is a schematic block diagram of an electronic device according to a first embodiment of the present invention;

2 is a flowchart illustrating an authentication method of an electronic device disclosed in FIG. 1;

3 is a schematic block diagram of an electronic device according to a second embodiment of the present invention;

4 is a flowchart illustrating an authentication method of an electronic device disclosed in FIG. 3;

5 is a schematic block diagram of an electronic device according to a third embodiment of the present invention;

6 is a flowchart illustrating an authentication method of the electronic device disclosed in FIG. 5.

The present invention relates to an electronic device, and more particularly, to an electronic device for authenticating a user and an electronic device using an encryption code generated based on system information.

If high technology or trade secrets developed at high cost are leaked to competitors or competitors, the economic loss is difficult to count. Awareness of the importance of security has become commonplace at the corporate, national and individual levels.

Due to this demand, various security technologies are used. For example, a method of recognizing a body such as an iris, a fingerprint, or the like, allowing only an RF ID card holder to enter or searching for belongings when entering or exiting is used. In addition, firewalls are used to prevent information leakage through the network, hacking prevention technology is used, passwords are set for important documents, and passwords are set for important computers to prevent unauthorized access to trade secrets. .

The authentication method for setting a password is most commonly used because it is simple and does not require any expensive equipment. The conventional password authentication method is a method of determining whether to permit authentication based on whether a user knows a password.

However, when the electronic device is operated by someone and some devices of the system are replaced with other devices of the same type, for example, a hard disk drive, etc., information may be leaked. In other words, the conventional password authentication method is a method of authenticating only the user's access according to whether a password is input, and there is a problem in that it cannot provide a method for checking whether the system is illegally changed. In addition, when multiple people share the same password, there is a high possibility of the password being leaked. Therefore, it is more preferable to use a password that is dynamically changed depending on the user and the device.

Accordingly, an object of the present invention is to provide an electronic device capable of more thorough security by providing an authentication for easily checking a change of an electronic device requiring security.

The present invention for achieving the above object is an electronic device comprising at least one processor, at least one memory device and at least one input / output device, comprising at least one of the processor, the storage device and the input / output device Code generation unit for generating a predetermined lock code based on the system information; An output unit for requesting a user to input a password; A password input unit for receiving the password from a user; And an authentication control unit for determining whether the password from the password input unit and the lock code from the code generation unit match, and disallowing access of the user if it is determined to be inconsistency. The apparatus may further include a source input unit for receiving predetermined personal unique information, wherein the code generation unit generates the lock code based on the system information and the personal unique information. The source input unit may be configured to receive the personal unique information from an ID card. The source input unit further receives a second lock code from the ID card, and the authentication control unit determines that the first lock code from the code generation unit matches the first password from the password input unit. The output unit requires input of a second password, the password input unit receives a second password from a user, and the authentication control unit matches the second password from the password input unit with the second lock code from the source input unit. It is an obvious means of authenticating whether or not to judge whether or not a user does not allow access. The above-described electronic device further includes an input / output port capable of data communication for input / output of data, wherein the source input unit receives connection information indicating the connection state of the ID card from the ID card, and the authentication control unit is the connection information. If is not input, it is possible to prevent data communication through the input and output ports to prevent accidental information leakage to a third party. The system information may include at least one of a manufacturing number, a storage capacity, and an information processing speed, and may include a booting unit that performs booting when a user access is allowed from the authentication control unit.

Hereinafter, with reference to the accompanying drawings will be described a specific embodiment of the present invention.

1 is a schematic block diagram of an electronic device according to a first embodiment of the present invention.

Referring to FIG. 1, the electronic device of the present invention includes a processor 1, a memory device 2, an input / output device 3, a code generator 4, an output unit 5, a password input unit 6, and an authentication control unit. It includes (7).

The processor 1 may include a high performance microprocessor and a microcontroller according to an electronic device, and may be used as a co-processor or a central processing unit (CPU) for mathematical operation or image processing depending on its function. .

The storage device 2 includes a RAM, a ROM, a hard disk drive (HDD), and the like. The input / output device 3 processes a module for image processing, a monitor, a mouse, a touch screen, and a sound. It includes any device used for inputting and outputting data such as a module, a keyboard, a keypad, and the like.

The code generation unit 4 generates a lock code based on system information relating to at least one of the processor 1, the storage device 2, and the input / output device 3. That is, information about the serial number of the processor 1, the capacity of the storage device 2, the manufacturing information of the BIOS stored in the storage device 2, the processing speed of the processor 1, the version of the boot loader, and the like is included in a predetermined coding method. Combinations are generated accordingly. At this time, the coding method may not be a standardized coding method, and may be defined to generate a lock code by an arbitrary rule.

The output unit 5 includes an integrated device for reproducing a sound or video for requesting a user to input a password. Of course, the output unit 5 may be used to overlap with a part of the above-described input and output device (3).

The password input unit 6 is a device for receiving a password from a user, and a general input means such as a keypad, a touch screen, a mouse, a keyboard, and a voice recognition device may be used.

The authentication control unit 7 is a control means for comparing the lock code with the password inputted through the password input unit 6 and determining whether to authenticate the electronic device. That is, the authentication control unit 7 determines the authenticity of the electronic device according to whether the lock code and the password match, and informs the user of the result. If the authentication process for such an electronic device is performed at system initialization, for example, at the BIOS stage, it prevents the subsequent operating system (OS) from loading, indicating that it is not a true electronic device and disallowing the user access to the electronic device. You can do that. On the other hand, if the authentication process for the electronic device is in progress while the operating system is activated, it is preferable to notify the user of the fact by a method such as a display to check the sub device.

2 is a flowchart illustrating an authentication method of an electronic device according to a first embodiment of the present invention. Hereinafter, an authentication method of the electronic device disclosed in FIG. 1 will be described in detail with reference to FIG. 2.

The code generator 4 generates a lock code by selectively combining system information on at least one of at least one processor 1, at least one memory device 2, and an input / output device 3 mounted in the system. (11)

The authentication controller 7 requests a user to input a password through the output unit 5 (12), and receives a password from the user through the password input unit 6 (13).

The authentication control unit 7 compares the password from the password input unit 6 with the lock code generated by the code generation unit 4 (14). As a result of the comparison, when the lock code and the password match, it is determined to be a true electronic device, and the user's access is authenticated. Subsequent actions of the electronic device for the access denial have been described above.

An electronic device and an authentication method thereof according to a first embodiment of the present invention disclosed in FIGS. 1 and 2 relate to authentication of an electronic device, and means for checking the theft or change of a component by checking its authenticity. To provide.

FIG. 3 is a schematic block diagram of an electronic device according to a second embodiment of the present invention, the configuration of which is the same as that disclosed in FIG.

Hereinafter, the same reference numerals are used for the configuration of FIG. 3 that is the same as the electronic device of FIG. 1, and the electronic device of FIG. 3 will be described based on the difference in configuration.

The electronic device of FIG. 3 further includes a source input unit 8 for receiving personally unique information from the user. Personally unique information is unique information for distinguishing users, iris information, teeth information, voice information, fingerprint information, etc. may be used, and in brief, uniquely assigned unique numbers such as social security numbers or employee numbers may be used. Therefore, the source input unit 8 is implemented by various devices such as an iris recognition device, a voice recognition device, an RF card reader, a magnetic card reader, and a fingerprint reader according to the type of personal unique information.

The personal unique information of the source input unit 8 is transmitted to the code generating unit 4, and the code generating unit 4 generates a lock code by combining the system information and the personal unique information. The lock code is a code generated by combining the system information and the personal information, so that the authenticity and personal authentication of the system can be verified at the same time.

4 is a flowchart illustrating an authentication method of an electronic device according to a second embodiment of the present invention. Hereinafter, an electronic device and an authentication method thereof according to a second embodiment of the present invention will be described in detail with reference to FIGS. 3 and 4.

3 and 4, the user inputs personally unique information through the source input unit 8 (21). Subsequently, the personal information unique to the source input unit 8 is transmitted to the code generation unit 4.

The code generation unit 4 generates the lock code based on the combination of the input personal unique information and the system information (22). As described above, the system information is information on the components of the electronic device. Specifically, the system information includes device information on any one or several devices that are predetermined among the processor 1, the memory device 2, and the input / output device 3. it means.

Since the lock code generated by the code generation unit 4 is changed according to personal unique information, a unique password corresponding to the lock code is determined for each user, and the password information is previously assigned to the user and notified.

Next, the authentication controller 7 requests the user to input the password through the output unit 5, and receives the password from the user through the password input unit 6 (23).

The authentication control unit 7 compares the input password with the generated lock code (24).

As a result of the comparison, the user is allowed access if both are found to match, and the user is denied if both are found to be inconsistent (25, 26). It will be readily understood that the subsequent process depending on the user's access authentication and disallowing can proceed in the same manner as in the first embodiment.

The authentication method according to the second embodiment of the present invention has an advantage that the authentication for the system and the authentication for the user are performed at the same time. Since the user's unique information is the generation factor of the lock code, the users are assigned a unique password, so that the user's authentication can be made more complete.

FIG. 5 is a schematic block diagram of an electronic device according to a third embodiment of the present invention. Like FIG. 3, the same reference numerals are used for the same components.

The electronic device of FIG. 5 further includes an ID card 9 and a booting unit 10.

The ID card 9 includes personal unique information and a separate lock code (hereinafter referred to as 'first lock code'), and the personal unique information is input to the code generation unit 4 through the source input unit 8. The first lock code is input to the authentication control unit 7.

The booting unit 10 is any means for loading and executing an operating system, and is controlled by the authentication control unit 7 to perform a booting operation when final user authentication is completed.

6 is a flowchart illustrating an authentication method of an electronic device according to a third embodiment of the present invention. Hereinafter, an authentication method for the electronic device of FIG. 5 will be described in detail with reference to FIG. 6.

5 and 6, the first lock code and the unique information recorded on the ID card 9 are transferred to the authentication control unit 7 and the code generation unit 4 through the source input unit 8, that is, the card reader. Each is input 31.

The code generation unit 4 generates a second lock code based on the system information and the personal unique information (32).

Next, the authentication control unit 7 requests the user to input the password through the output unit 5, and receives the first password from the user through the password input unit 6 (33).

The authentication control unit 7 determines whether the second lock code matches the first password (34).

If the second lock code and the first password do not match, the user's access is not allowed (35). Display a message indicating that the user has been denied access, or, as described above, requesting input of a password again and resetting the system if the entered password and second lock code do not match a number of times, indicating that the user has been denied access. Could be represented.

If the second lock code and the first password match, the user is allowed access, and proceeds to the next step of user authentication to receive a second password from the user (36).

The authentication control unit 7 determines whether the second password matches the first lock code (37).

As a result of the comparison, when the second password and the first lock code do not match, the authentication control unit 7 disallows the user's access (35). On the contrary, if the second password and the first lock code match, the user is allowed access (38). At this time, the operating system of the system is activated (39) by booting in the normal procedure.

According to the third embodiment of the present invention, there is an advantage in having a dual security method by requiring a password for the first lock code in addition to the second lock code based on the personal information and the system information.

Of course, the first to third embodiments may be selectively executed after the BIOS step, the booting step, and the booting completion. It will be readily appreciated that depending on which step is being executed, the process that follows the user's access authorization / disapproval may change.

Also, in the third embodiment, the ID card 9 is constantly kept in an electronically readable state by the electronic device to check its connection periodically, and when the connection is terminated, the USB, PS2, UART It can be made to block the input and output to the input and output ports such as. When the same ID card 9 is reconnected, normal operation is guaranteed, and when reconnecting to another ID card 9, the system is shut down after storing the information of the connected card. have. As a result, when the authenticated user leaves the electronic device without logging off, information leakage from the electronic device by a third party can be prevented.

As described above, the present invention can not only check authenticity of the electronic device but also provide various security measures for user authentication.

Claims (7)

An electronic device comprising at least one processor, at least one memory device, and at least one input / output device, A code generation unit for generating a predetermined lock code based on system information relating to at least one of the processor, the storage device, and the input / output device; An output unit for requesting a user to input a password; A password input unit for receiving the password from a user; And And an authentication control unit for determining whether the password from the password input unit and the lock code from the code generation unit match, and disallowing access of the user if it is determined to be inconsistency. The method of claim 1, Further comprising a source input unit for receiving predetermined personal unique information, And the code generation unit generates the lock code based on the system information and the personal unique information. The method of claim 2, And the source input unit receives the personal unique information from an ID card. The method of claim 3, The source input unit further receives a second lock code from the ID card, If the authentication controller determines that the first lock code from the code generation unit and the first password from the password input unit match, the output unit requests input of a second password, The password input unit receives a second password from the user, And the authentication controller determines whether or not the second password from the password input unit matches the second lock code from the source input unit, and disallows a user's access when it is determined to be inconsistency. The method of claim 4, wherein And an input / output port capable of data communication for input / output of data, The source input unit receives connection information indicating the connection state of the ID card from the ID card, And the authentication control unit disables data communication through the input / output port when the connection information is not input. The method according to any one of claims 1 to 5, And the system information includes at least one of a manufacturing number, a storage capacity, and an information processing speed. The method according to any one of claims 1 to 5, And a booting unit which performs booting when a user's access is permitted from the authentication control unit.

Images