KR20060019926A - Using image authentication system and authentication method - Google Patents

Abstract

The present invention discloses an authentication system and an authentication method using an image.

An authentication system using an image of the present invention includes an authentication image generation server for generating an electronic authentication image and randomly arranging and storing the authentication image, and an authentication code generation server for encoding an image generated by the authentication image generation server. It is composed of an authentication processing server that transmits an image to a portable wireless terminal and exchanges keys to perform authentication processing.

An authentication system and an authentication method using an image configured as described above have an advantage of providing convenience in using authentication by replacing a character input by selecting a specific point on a display. In addition, an image according to an initial image for security. Since the authentication and key exchange are secured by encoding the array information and the input value of, it guarantees the integrity of the transmission message and enables the implementation of a secure electronic payment protocol system even if there is information leakage by the internal participant. It provides the effect of enabling the transmission and reception of authentication information.

Image, authentication, mobile communication

Description

Using image authentication system and authentication method

1 and 2 are views showing a configuration for explaining an authentication system using an image according to the present invention;

3 is a flowchart illustrating an authentication method using an image according to the present invention.

<Explanation of symbols for the main parts of the drawings>

10: authentication image generation server

20: authentication code generation server

30: authentication processing server

40: wireless communication network

50: portable wireless terminal

The present invention relates to an authentication system and an authentication method using an image. More particularly, the authentication process is performed by selecting a specific point of an image displayed on a display, thereby using an image providing a high security and simple interface. It relates to an authentication system and an authentication method.

With the establishment of a culture of credit activity, credit transactions using credit cards (cash cards, debit cards, etc.) are becoming more frequent, and in order to make payments using credit cards or cash cards, an authentication process that checks whether a credit card holder is a valid user is required. need.

In general, in order to authenticate a credit card user, the user first inputs a predetermined password in a state where the credit card is read using a card reader, and then performs authentication through a verification process. In particular, in the case of a credit card, authentication may be performed using only the information of the credit card read from the card reader without inputting a password.

As described above, various services for value information provided through offline have been brought online with the development of wired / wireless communication networks and the Internet, and various information provided through printed paper or magnetic cards have been digitized, and forgery of the digital information has been made. Various encryption methods and security techniques have been tried together to prevent tampering.

In other words, in the case of electronic commerce using the Internet, the user inputs the corresponding information through a wired / wireless network or an internet network through a credit card number, a password, and an auxiliary authentication procedure provided by a financial institution, and authenticates the input information. In this way, the online man-made process has a problem that it is likely to be misused when a person's credit information is leaked to a third party.                         

In particular, in recent years, with the rapid development of mobile communication, the use of the Internet using a wireless communication network is rapidly increasing, and various value information related services which have been online as described above have a hand with enhanced portability and mobility. It is being wirelessized through a handheld based portable wireless terminal. In addition, the value-related wireless service is emerging as a new service that replaces the offline service provided by printed paper or magnetic card, unlike the existing online service, which is an offline supplementary or online-only service.

However, to date, value-related wireless services use only handheld-based wireless terminals as a substitute for offline printed paper or magnetic cards. It is provided in the form of Mobile Money, which stores the value information about, and the ticket printed on the paper is provided in the form of storing the ticket information in the portable wireless terminal, and the information stored in the magnetic card is transferred to the portable wireless terminal. It is provided in a stored form.

In other words, the existing value information-related wireless service is implemented by implementing the value information, which was issued to the printed paper or magnetic card by the value information provider offline, through the portability and mobility of the portable wireless terminal. It is only one.

On the other hand, the portable wireless terminal using the mobile communication network has the capability to run various software programs in addition to portability and mobility, and includes a function of generating and processing value information that is the most difficult to forge and forge through various security protocols and encryption algorithms. However, this also has a problem that the password is leaked directly or exposed to the risk of being hacked through a dictionary attack on the offline.

Various authentication schemes using functions and capabilities of such portable wireless terminals have been proposed. For example, there is a method of performing authentication using biometric information (fingerprint information, iris information, voice information, etc.) of a user, but reading such biometric information. Since not only requires a separate additional device but also requires high-performance resources, a portable wireless terminal using a mobile communication network has a problem in that it is restricted in use.

The present invention has been made to solve the above problems, and an object of the present invention is to provide an input interface through an image in an authentication system using a portable wireless terminal using a wireless communication network to increase convenience and to randomize image position values. It provides a system and an authentication method using the image to ensure that authentication and key exchange is secured against eavesdropping and off-line pre-attack by transmitting the code and encrypting the array information of the image after the creation.

An authentication system using an image according to the present invention for realizing the above object comprises: an authentication image generation server generating an electronic authentication image and randomly arranging and storing the electronic authentication image; An authentication code generation server for encoding an image generated by the authentication image generation server; Characterized in that it comprises an authentication processing server for transmitting the coded image to the portable wireless terminal and performing an authentication process by performing a key exchange.

In one preferred aspect of the present invention, the authentication processing server is connected to the wireless communication network, and includes a wireless communication device to perform the authentication key exchange with the portable wireless terminal.

In another preferred aspect of the present invention, the portable wireless terminal is distributed in a plurality of places and is connected to an authentication processing server through a mobile communication network.

In another preferred aspect of the present invention, the portable wireless terminal connects to the wireless communication network, receives and displays a coded image, and displays a PDA (Personal Data Assistance) having an authentication image function which can be selected by an authorized person. It is to include.

An authentication method using an image according to the present invention includes the steps of randomly generating, storing and encoding an electronic authentication image; Receiving an encoded image generated from an authentication image generation server and an authentication code generation server on an on / off line and providing the encoded authentication image to a portable wireless terminal of an authenticated person connected to a wireless communication network; Receiving a specific point of the authentication image provided to the subject; And comparing the input information and the stored information input by the subject, and authenticating the subject as a legitimate user.

The features and advantages of the present invention will become more apparent from the following detailed description based on the accompanying drawings. Prior to this, the terms or words used in the present specification and claims are defined in the technical spirit of the present invention on the basis of the principle that the inventor can appropriately define the concept of the term in order to explain the invention in the best way. It must be interpreted as meanings and concepts that are consistent.

Hereinafter, a preferred embodiment of an authentication system and an authentication method using an image according to the present invention will be described in detail with reference to the accompanying drawings.

1 and 2 are views showing a configuration for explaining an authentication system using an image according to the present invention, Figure 3 is a flow chart for explaining an authentication method using an image according to the present invention.

First, the authentication system using the image of the present invention, the authentication image generation server 10 for generating an image for authentication, the authentication code generation server 20 for encoding and encrypting the generated image and the encrypted authentication image It is composed of an authentication processing server 30 to be transmitted to the portable wireless terminal 50 and compared.

That is, the authentication image generation server 10 is for generating an electronic authentication image, and includes a database storing a large amount of image sources, and randomly extracts one or more images among the image sources stored in the database. Combine to create a new image and save the generated image again.

The authentication image generated by the authentication image generation server 10 is transmitted to the authentication code generation server 20 to be encoded and encrypted.

At this time, the encoding and encryption method for the image is applied to the encryption algorithm using a widely used HASH function and SEED function, the HASH function is used to verify the integrity of the original document, which is often used for electronic signature, such Algorithms using the HASH function are: (1) impossible to find input values for a given output, (2) impossible to find another input that produces the same output for a given input, and (3) any output that produces the same output. It is impossible to find two different input messages.

The SEED is a block cipher algorithm that processes messages in units of blocks as a symmetric key cipher algorithm. Here, the symmetric key block encryption algorithm has a Feistel structure, which is a repetitive structure in which a 2t bit plaintext block composed of blocks each having t bits is converted into a cipher text through r rounds (r≥1). It is a process in which a plaintext block is encrypted through several rounds.

As such, by applying an algorithm using a HASH function and a SEED function, HASH codes the arrangement information of the image with respect to the image generated from the authentication image generation server 10 and encrypts the payment information through the SEED function. The encrypted value is transmitted to the portable wireless terminal 50 to be authenticated through the authentication processing server 30 to perform authentication and key exchange.

That is, the image coded and encrypted by the authentication code generation server 20 is transmitted to the portable wireless terminal 50 of the authenticated person through the authentication processing server 30, and the authenticated user is displayed on the portable wireless terminal 50. When a specific point of the image displayed on the screen is selected and inputted, the selected information is transmitted to the authentication processing server 30 to perform authentication.

That is, the HASH code included in the specific position of the image selected by the authenticated person is regarded as normal authentication if it matches with the HASH code transmitted from the authentication processing server 30. Therefore, even if you do not know the contents of the original text can be authenticated by comparing the HASH code value, security can be maintained even if there is a leak of confidential information by the security vulnerability of the server or internal parties.

On the other hand, the authentication processing server 30 and the portable wireless terminal 50 to maintain the online state by using a mobile communication network, the portable wireless terminal 50 may be distributed in a number of places.

In addition, the portable wireless terminal 50 which accesses the wireless communication network 40 and receives the encoded and encrypted authentication image includes a personal communication system (PCS), a global system for mobile communications (GSM), a personal digital cellular (PDC), All kinds of wireless communication devices (or portable wireless terminals 50), including Personal Handyphone System (PHS), Personal Digital Assistant (PDA), Smart Phone, and International Mobile Telecommunication-2000 (IMT-2000) Etc. may be used, but in the present invention, it is preferable to connect to the wireless communication network 40 to receive a coded image, display it on the display, and touch the subject to select a specific point of the image shown on the display. It is proposed that a PDA (Personal Data Analysis) having a screen function is used. The touch screen refers to an input device capable of interactively inputting a signal generated by a contact as information on a screen of a computer or a portable information terminal instead of a keyboard or a mouse.                     

The authentication system using the image configured as described above is efficient by encrypting the image, which is authentication information, by HASH code, and encrypting the payment information by applying a SEED encryption algorithm.

The authentication system using the image according to the present invention configured as described above is operated as follows with reference to FIG.

First, the authentication image generation server 10 randomly generates an electronic authentication image (s110). Images generated by the authentication image generation server 10 may be randomly selected from a vast amount of image data sources, or may be selected by combining various images at random.

The authentication image generated as described above is coded and encrypted using an algorithm applying the HASH code and the SEED code in the authentication code generation server 20 (s120).

The coded and encrypted authentication image is transmitted to the portable wireless terminal 50 of the subject through the authentication processing server 30 (S130). The coded and encrypted image transmitted to the portable wireless terminal 50 is represented as an image on the display, and when the user selects a specific position of the image, the authentication processing server 30 acquires the user's input information. (S140).

In this way, the input information selected by the subject is compared and processed by the authentication processing server 30 (s150), and notifies the portable wireless terminal 50 of the authentication result and authenticates the subject as a legitimate user (s160). .

In summary, authentication is performed by selecting a specific point of an image by using a mouse or a touch pen instead of text input. At this time, the array information and the input value of the image are authenticated using an algorithm to which a HASH code and a SEED code are applied. And key exchange is performed, resulting in a stable authentication procedure while eliminating security vulnerabilities and input inconveniences caused by the character input method.

It is apparent to those skilled in the art that the present invention is not limited to the described embodiments, and that various modifications and changes can be made without departing from the spirit and scope of the present invention. Therefore, such modifications or variations will have to belong to the claims of the present invention.

The authentication system and the authentication method using the image configured and operated as described above have an advantage of providing convenience in use by selecting a specific point on the display to authenticate in place of text input.

In addition, for security, authentication and key exchange are secured by encoding the array information and input value of the image according to the initial image, thus ensuring the integrity of the transmission message and implementing a secure electronic payment protocol system even if there is information leakage by internal participants. It enables the transmission and reception of authentication information requiring a high level of security.

Claims (5)

An authentication image generation server generating an electronic authentication image and randomly arranging and storing the electronic authentication image; An authentication code generation server for encoding an image generated by the authentication image generation server; An authentication processing server for transmitting the coded image to the portable wireless terminal and performing an authentication process by exchanging a key; Authentication system using an image, characterized in that consisting of. The method of claim 1, wherein the authentication processing server, And a wireless communication device connected to the wireless communication network to perform authentication key exchange with a portable wireless terminal. The authentication system using an image as claimed in claim 1 or 2, wherein the portable wireless terminal is distributed in a plurality of places and connected to an authentication processing server through a mobile communication network. The portable wireless terminal of claim 1, And a personal data access (PDA) having a touch screen function for receiving and displaying an encrypted image encrypted and encrypted by accessing the wireless communication network. Randomly generating, storing, and encoding the electronic authentication image; Receiving an encoded image generated from an authentication image generation server and an authentication code generation server on an on / off line and providing the encoded authentication image to a portable wireless terminal of an authenticated person connected to a wireless communication network; Receiving a specific point of the authentication image provided to the subject; Comparing the input information input by the subject and the stored information, and authenticating the subject as a legitimate user when they match; Authentication method using an image, characterized in that performed as.

Images