KR20060089808A - Apparatus and method for user authentication using combined write-down and password recognition - Google Patents

Abstract

The present invention relates to a user authentication device and method for authentication of the user's identity, such as financial transactions or access control, specifically, by using a combination of secret information such as handwriting recognition and password as an authentication means more secure financial The present invention relates to a user authentication device and a method for authenticating whether or not a user can enable a transaction or access control.

User authentication, handwriting recognition, secret information, password

Description

Apparatus and method for combining handwriting recognition and password {APPARATUS AND METHOD FOR USER AUTHENTICATION USING COMBINED WRITE-DOWN AND PASSWORD RECOGNITION}             

1 is a view showing the overall configuration of a general electronic financial automation system.

2 is a view showing the internal configuration of the electronic financial automation device according to the present invention.

3 is a flowchart illustrating a user authentication process according to the present invention.

The present invention relates to a user authentication device and method for authentication of the user's identity, such as financial transactions or access control. More specifically, the present invention relates to a user authentication apparatus and method that can more safely perform authentication of the user's identity, such as financial transactions or access control, by combining handwriting recognition and a password.

In the case of financial transactions, it is essential to verify the user's identity. For example, if a user conducts a financial transaction face-to-face with a financial institution employee, such as a bank, securities company or insurance company, the financial institution verifies that the user is the user. Use a method to enter a password.

In addition, electronic banking, Internet banking, virtual banking, virtual banking, virtual banking, CD, cash dispenser In the case of Cyber Banking, etc., a method of verifying the identity of the user by inputting a password is widely used as a method of verifying the identity of the user. The automatic teller machine is a structure that integrates two functions, a cash dispenser (CD) and an automatic teller machine (AD). It consists of a bank book which is in charge of organizing, a banknote which is in charge of identification and storage of bills, a card reader, a statement printer, a control unit and the like. Since electronic banking is basically a non-face-to-face and non-traded transaction, it is possible to overcome the time and space constraints of traditional financial transactions, which greatly increases the convenience of financial services from the customer's point of view. In addition, financial institutions can lower management costs and processing costs per transaction by reducing the use of long-term documents, thereby improving profitability and developing a variety of products and services. It can be said that it was created. However, the overall risk situation and level of financial institutions' financial burden due to non-face-to-face, open network use, and increased dependence on IT technology for third parties are significantly different from that of providing traditional financial services. In particular, strategic, operational, legal and reputational risks have become more important than traditional financial services, and cross-border financial services have become easier. Various problems can arise, including different legal frameworks and difficulty in assessing customer credit. Accordingly, the management of identity verification (certification) of financial institutions becomes more important.

In addition, in the building access control system, identity verification (authentication) constitutes a very important function.

However, in the past, passwords (passwords) are used when authentication (confirmation) of identity is required, such as financial transactions and access control, and passwords usually use four digits and four or more digits or letters depending on the type of transaction. I'm using. While the use of such passwords is convenient, the passwords are entered through the keypad (numeric keyboard) so that others in the field of vision can easily see and obtain the passwords of others or write them on the back of the notebook or card. In this case, the leak caused by the loss is also easy, so there is a problem that the stability of accidents caused by the password leak frequently falls.

Therefore, there is a need for a user authentication device and method that can prevent a security incident caused by exposure of a password when entering a password in a financial transaction such as cash withdrawal, bank transfer, or using a credit card.

Accordingly, an object of the present invention is to provide a user authentication device, such as financial transactions or access control, which enables more secure user authentication by combining secret information such as handwriting recognition and password as an authentication means.

Another object of the present invention is to provide a user authentication method, such as financial transactions or access control, which enables more secure user authentication by combining secret information such as handwriting recognition and password as an authentication means.

The apparatus of the present invention for achieving the above object is a user information input device for inputting the secret information, such as a password in the handwriting with the user authentication information as information for recognizing the user and the user information input device It provides a user authentication device including a user information confirmation device for confirming the handwritten secret information that is the user authentication information.

In accordance with another aspect of the present invention, there is provided a user information input step of inputting secret information such as a password by hand by the user as information for recognizing a user and inputting the user information input device. It provides a user authentication method comprising a user information confirmation step of confirming the handwritten secret information that is the user authentication information.

The present invention relates to a user authentication device and method that can more securely authenticate the user's identity, such as financial transactions or access control by using handwriting recognition and password as an authentication means. That is, the present invention relates to a user authentication apparatus and method for providing a more secure security service by combining a password authentication method using a conventional keypad and a biometric method called handwriting recognition (handwriting recognition).

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In describing the present invention, if it is determined that the detailed description of the related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

1 is a view showing the overall configuration of a general electronic financial automation device system. Here, the ATM will be described as an example. The ATM is connected to the HOST computer of the financial institution via the Branch Processor. The ATM user inputs information about the financial account into the ATM using a card reader using the card he holds. The input information is transmitted to the computer room HOST computer of the financial institution to check whether the account is valid and the balance of the account. According to this confirmation, the user can carry out cash withdrawal. In this case, the user is provided with a security service by a security technology using secret information such as a password. In other words, the user (service user) refers to a technology for verifying identity as a method of judging whether or not it matches the registered information by presenting the specific character or numeric information registered to the service provider as secret information. For cash withdrawal or bank transfer, enter your account password and transfer password, or enter your ID and password when accessing Internet banking. This method is very economically effective because it can be easily supported by most computer systems and requires no additional equipment or complicated technology. In the identification technology using such secret information, the key is to maintain the confidentiality of the information. If anyone can easily obtain the information used for identity verification, such as password, because identity verification using information loses its value as identity verification technology. For this reason, identity verification technology using information is the core of the technology to safely generate and store information and to prevent others from easily inferring or hacking. Systems that use secret information, such as passwords, are encrypted and processed from the password entry stage, and multiple passwords are used in one transaction, and the service provider's employees are not able to see the contents. It is recommended that passwords that use only four digits are six or more passwords that contain a mixture of letters and numbers, and prohibits the use of numbers such as 1111 and 1234 that can be easily guessed. In addition, as the technology of extracting passwords is improved by substituting all the possible combinations due to the improvement of computer processing power, it is recommended to change the password periodically. If the password is entered incorrectly more than once, the password is invalidated.

In addition to the above, the present invention uses a method of allowing a user to enter a password in cursive and authenticating the cursive signature. A method for recognizing a handwritten signature is described in Patent Publication No. 10-2002-0081015 (a touch screen processor with a touch recognition and handwriting recognition function), which can be used. Of course, other known recognition methods are also possible. In addition, signature recognition and authentication methods are disclosed in Korean Patent Publication No. 10-2000-0024445 (Authentication method using digital signature and user authentication method and portable processing tool using wireless digital signature) and Patent Publication 10-2002-0012889 (Signature recognition) Credit card inquiry apparatus and method). Of course, other known recognition and authentication methods may be used.

2 is a view showing the internal configuration of the electronic financial automation device according to the present invention. Herein, an automatic teller machine will be described. When the user inputs his secret information through the operation unit 240, which is a user information input device of the electronic financial automation device 200, in a cursive form, the central processing unit 270 and the control unit 250 function so that the cursive secret information is stored in the user. Recognize that the signature is the same as, and verify that it is the same as the secret information registered by the user. The secret information registered by the user in this verification operation is executed by communicating with the host computer 220 via the processor 210 of the branch through the communication unit 260. Here, the main memory 280 and the auxiliary memory 290 are used to temporarily or limitedly store secret information when comparing secret information.

In the present invention, the password registration is a password input device with a touch screen, which is a control unit 240 that can receive a password, using a dedicated pen or a finger, etc., by manually writing a password (Hand Writing) and registering (register 1 Learning by inputting the number of times or multiple times), input one letter per space in the designated space corresponding to the number of digits of the password specified on the touch screen. When the input of a single character in the designated space of the touch screen is completed, the input character is recognized and stored as a number using a handwriting recognition algorithm, and the feature information (speed, stroke order, shape, pressure, etc.) of the same character is extracted and the extraction is completed. When the extraction is completed, information indicating that the extraction is normally completed is output to the designated area of the touch screen. The recognized number or * is displayed here. After that, the input, recognition and extraction are repeated by the number of digits of the password. Herein, the manipulation unit, which is a user information input device, may be a pin pad.

In this case, user password authentication using a cursive password, first output the input space corresponding to the number of digits on the password input device with a touch screen at the time when the password password input is required to guide the user to input, When the user writes the number in the designated space, the character recognition algorithm recognizes the number, extracts feature values (speed, stroke order, shape, pressure, etc.) and transmits the information to the CPU 270. The CPU checks whether the recognized number matches the stored numeric password and compares the similarity between the input feature value and the stored feature value to determine whether it matches the handwriting of the user. When a user writes a number with a dedicated pen or finger, it is desirable to prevent the input from the touch screen so that others cannot recognize it from the side or the back. Here, the numerical password is described as an example, but it is also possible to use a letter or a combination of numbers and letters as secret information.

3 is a flowchart illustrating a user authentication process according to the present invention. First, the user signs (310) confidential information such as a password in handwriting. In the next step, the user's signature is compared with the registered secret information and authenticated (320). If the authentication is confirmed, the next stop proceeds (330). That is, financial transactions are made or door control is released. If the authentication is not confirmed, it returns to the step of inputting the password in cursive again (340). Of course, this return can be limited to a certain number of times.

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the scope of the following claims, but also by those equivalent to the scope of the claims.

As described above, according to the present invention, by combining the handwriting recognition and the password to use as an authentication means, it provides an advantage that the authentication of the user's identity, such as financial transactions or access control, can be more securely performed.

Claims (4)

In the user authentication device for financial transactions or access control, A user information input device for inputting secret information such as a password by hand by the user as information for recognizing the user; And a user information confirmation device for confirming the handwritten secret information which is the user authentication information input to the user information input device. The method of claim 1, The user information input device is a user authentication device, characterized in that the touch screen or pin pad. In the user authentication method for financial transactions or access control, A user information input step of inputting secret information such as a password by hand by the user as information for recognizing the user; And a user information confirmation step of confirming the handwritten secret information which is the user authentication information input to the user information input device. The method of claim 3, The user information input step is a step of inputting the user information on the touch screen or pin pad.

Images