KR20070074170A - Security certification system using a personal encryption key - Google Patents

Abstract

A system and a method for securely authenticating a user based on biometric information by using a private encryption key are provided to keep security of the biometric information and improve authentication speed of the biometric information of a user. A biometric information recognizer(100) extracts biometric feature information by recognizing the biometric information of the user. A keypad(150) is used for inputting private encryption key information. A controller(130) encrypts the extracted biometric information with the private encryption key and stores the encrypted biometric information to a biometric information storing part(140) in a user registration mode. The controller decrypts the stored biometric information with the private encryption key and compares the decrypted biometric information with the biometric feature information of the user in a user authentication mode. A display part(160) displays a user authentication result. A data communicator(170) interfaces the user authentication result to an entry control system.

Description

Biometric information security authentication system using personal encryption key and its method {SECURITY CERTIFICATION SYSTEM USING A PERSONAL ENCRYPTION KEY}

1 is a block diagram of a biometric information security authentication system according to an embodiment of the present invention.

2 is a flowchart of user registration according to an embodiment of the present invention;

3 is a flowchart of user authentication according to an embodiment of the present invention.

4 is a flowchart of user authentication according to another embodiment of the present invention;

5 is an exemplary configuration of an access control system including a biometric information security authentication system according to an embodiment of the present invention.

The present invention relates to a biometric information security authentication system, and more particularly, to a biometric information security authentication system and a method using a personal encryption key.

Unlike being able to open the lock using a key, card, password, etc., "Security authentication system using fingerprint" is a system that can simply open the door through fingerprint recognition, which is one of the fields of biometrics. It is an access control system with advanced electronic control system.

The biometric information security authentication system using a fingerprint includes a door lock controller installed in the door to receive a user's fingerprint and recognizes the user's fingerprint, and includes a door lock controller to control the opening and closing of the door by the fingerprint reader itself. The system is adopted. In other words, the fingerprint reader itself is a security authentication system.

In an advanced form, the door lock controller that controls the lock of the door is separated from the fingerprint reader, and the fingerprint reader itself receives the user's fingerprint to authenticate the user, and the door lock controller locks the door according to the authentication result. Security authentication systems are also introduced to control this.

Exemplary biometric information security authentication systems basically store and manage biometric information (fingerprint information) of users for user authentication. In reality, there is a growing concern about the leakage of biometric information. In order to alleviate this concern, it is possible to encrypt and manage biometric information, but since the common encryption methods (DES, AES, SEED, etc.) which are widely used currently use the same encryption key (system key), the system key is It could be leaked or exploited by system administrators. Therefore, a new concept of bioinformation protection technology with excellent security is required.

Accordingly, an object of the present invention is to provide a biometric information security authentication system and method using a new concept of a private encryption key that can maintain the security of biometric information.

Furthermore, another object of the present invention is to provide a biometric information security authentication system and method using a personal encryption key that can improve the authentication speed in authenticating a user's biometric information.

Biometric information security authentication system according to an embodiment of the present invention for achieving the above object,

A biometric information recognition unit for extracting biometric feature information by recognizing user biometric information;

A keypad for inputting private key information;

In the user registration mode, the extracted biometric feature information is encrypted and stored with the input private key information, and in the user authentication mode, the stored biometric feature information is decrypted with the input private key information and compared with the biometric feature information of the user to be authenticated. A control unit for performing;

A biometric information storage unit for storing biometric characteristic information;

And a display unit for displaying a result of user authentication.

According to the above-described configuration, since the user's own biometric characteristic information is encrypted with the user's own private key, there is an advantage that security can be improved compared to systems that encrypt the feature of the biometric information using the same encryption key.

However, in the above-described system, if there is a lot of stored biometric characteristic information, the authentication time may be prolonged. This can be cured with the following system configuration.

That is, the biometric information security authentication system according to another embodiment of the present invention,

A biometric information recognition unit for extracting biometric feature information by recognizing user biometric information;

A keypad for inputting user ID and private key information;

In the user registration mode, the extracted biometric characteristic information is encrypted with the input private key information and stored together with the user ID. In the user authentication mode, the biometric characteristic information matching the input user ID is decrypted with the input private key information. A control unit for comparing and authenticating the biometric characteristic information of the user to be authenticated;

A biometric information storage unit for storing biometric characteristic information together with a user ID;

And a display unit for displaying a result of user authentication.

According to the above-described configuration, the biometric characteristic information of the user is encrypted with the private key and stored together with the user ID, and only the biometric characteristic information matching the user ID is read in the authentication mode, and the biometric characteristic information is decrypted with the input user private key. Compared with each other, user authentication time can be shortened.

Furthermore, the biometric information security authentication method using a personal encryption key according to another embodiment of the present invention,

Recognizing user biometric information, extracting biometric characteristic information, and encrypting and extracting the extracted biometric characteristic information with a private key input by a user;

Decrypting the stored biometric characteristic information with a private key input by a user to be authenticated and comparing the biometric characteristic information with the biometric characteristic information of the user to be authenticated;

And displaying and outputting an authentication result.

Since this method also encrypts the user's own biometric information with the user's own private key, it is possible to improve security compared to the method of encrypting the feature of the biometric information using the same encryption key.

In the above-described method, too, when there is a large amount of biometric characteristic information, the authentication time may be prolonged. Biometric information security authentication method to overcome this disadvantage,

Recognizing user biometric information to extract biometric characteristic information, encrypting the extracted biometric characteristic information with a private key input by the user, and storing the biometric characteristic information together with the input user ID;

Reading biometric characteristic information matching the user ID input by the user to be authenticated from the biometric information storage unit and decoding the biometric characteristic information into the private key information input by the user;

Comparing and authenticating the decrypted biometric characteristic information with biometric characteristic information of a user to be authenticated;

And displaying and outputting an authentication result.

Another biometric information security authentication method for overcoming the above disadvantages,

Recognizing user biometric information to extract biometric characteristic information, and encrypting and extracting the extracted biometric characteristic information with a private key input by a user;

A second step of receiving a private key in response to a user authentication request;

A third step of extracting biometric characteristic information by recognizing biometric information of a user to be authenticated;

A fourth step of sequentially decoding the biometric characteristic information stored with the input private key, and repeatedly determining whether the decrypted data is valid data;

A fifth step of comparing and authenticating the decrypted biometric characteristic information with the biometric characteristic information extracted in the third step if the decrypted data is valid data;

And a sixth step of displaying and outputting an authentication result.

In the above two methods, the user authentication time can be shortened as compared to the first method because only the biometric characteristic matching the user ID is decrypted with the input user private key or the biometric characteristic is compared and verified by examining the validity of the decrypted data. Has the effect.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. Detailed descriptions of well-known functions or configurations related to the present invention, for example, fingerprint recognition algorithms and hardware configurations necessary for fingerprint recognition, may unnecessarily obscure the gist of the present invention. Will be omitted. In the following description, embodiments of the present invention have been described by using fingerprint information and biometric information for convenience of explanation, but the present invention may be equally applicable to a security authentication system for recognizing corneas.

Referring to the accompanying drawings, FIG. 1 is a block diagram of a biometric information security authentication system according to an embodiment of the present invention.

Biometric information security authentication system according to an embodiment of the present invention basically has a biometric information recognition unit 100, keypad 150, control unit 130, biometric information storage unit 140 and display unit 160 as a basic configuration . In addition to this configuration, the card access unit 110, the authentication result auxiliary output unit 180, and the data communication unit 170 may be selectively configured.

In the above-described basic configuration and additional configuration, the biometric information recognizing unit 100 recognizes user biometric information, more specifically fingerprint information, and extracts feature information of the fingerprint. The biometric information recognition unit 100 includes a light source for acquiring fingerprint information (not required in the case of a semiconductor type), a fingerprint sensor, and a signal processor for finally extracting fingerprint feature information from a detected image, as is already known. .

The card access unit 110 accesses the memory card in which the biometric characteristic information of the user is recorded and passes the result to the controller 130 to be described later. The biometric characteristic information of the user may be stored in the memory card, and the user ID information may be additionally stored and managed.

The memory 120 temporarily stores control program data for system control and data generated during system control operation. The memory 120 is accessed by the controller 130 to be described later and may be implemented as a one-chip processor together with the controller 130.

The controller 130 controls the overall operation of the system based on the control program data stored in the memory 120. For example, in the user registration mode, the biometric feature information extracted by the biometric information recognition unit 100 is encrypted with the input private key information and stored in the biometric information storage unit 140. In the user authentication mode, the stored biometric feature information is stored. The authentication is performed by comparing the biometric characteristic information of the user to be decrypted with the input private key information. The result is displayed on the display unit 160 and output. When the biometric information security authentication system is a fingerprint reader, the controller 130 may further transmit the authentication result to the access control system, or may release the door lock according to the authentication result.

In a modified embodiment, the control unit 130 encrypts the biometric characteristic information extracted by the biometric information recognition unit 100 with the input private key information and stores it together with the user ID in the user registration mode. The biometric characteristic information matching the user ID is read, decrypted by the input private key information, and compared with the biometric characteristic information of the user to be authenticated. The result is displayed on the display unit 160 and output. Even when the system according to the modified embodiment is the fingerprint reader, the controller 130 may further transmit the authentication result to the access control system, and may release the door lock according to the authentication result.

The biometric information storage unit 140 stores and registers biometric characteristic information by the controller 130 or registers biometric characteristic information along with user ID information.

The keypad 150 includes a plurality of number keys and function keys, and is used to input a private key or a private key and a user ID.

The display unit 160 displays the user authentication result by the controller 130.

The data communication unit 170 is for interfacing data with the access control system, and mutual data transmission and reception are possible through a data transmission protocol such as TCP / IP or RS-422.

The authentication result auxiliary output unit 180 is controlled by the controller 130 and used to display the user authentication result as an audio (voice message or bell) or an indicator.

Hereinafter, a user authentication process in the biometric information security authentication system having the above-described configuration will be described. In order to authenticate a user using biometric information, a user registration process is first required. This will be described with reference to FIG. 2.

First, FIG. 2 is a flowchart illustrating a user registration according to an embodiment of the present invention. A user requests a user registration through a keypad 150 (step 200). If there is a user registration request, the controller 130 requests input of a user ID and a private key, so that the user inputs the user ID and the private key through the keypad 150 (step 205). The user ID may be input through the card access unit 110. If there is a user ID and private key input, fingerprint input is required as part of biometric information. Accordingly, the user inputs his fingerprint to the biometric information recognition unit 100 (step 210).

When the fingerprint of the user's finger contacts the biometric information recognition unit 100, the biometric information recognition unit 100 obtains a fingerprint image and extracts fingerprint feature information from the obtained fingerprint image (step 215). The extracted fingerprint feature information is transmitted to the controller 130, so that the controller 130 encrypts the fingerprint feature information with the private key input by the user (step 220). The encryption algorithm may use any of the known methods (DES, AES, SEED, etc.).

When encryption of the fingerprint feature information is completed, the controller 130 stores the encrypted fingerprint feature information together with the user ID in the biometric information storage unit 140 as user information. For reference, in addition to the fingerprint feature information, a password may be induced to be inputted along with a user ID to program two-factor authentication.

When the information of each of the users to be granted access is registered through the above-described procedure, the users who have registered the user information thereafter may receive user authentication by an operation as shown in FIG. 3.

3 is a flowchart illustrating a user authentication according to an embodiment of the present invention.

3, if there is a user authentication request (step 300), the controller 130 requests the user ID and the private key input, and the user inputs the user ID and the private key through the keypad 150 (step 305). . Fingerprint input is required if there is a user ID and private key input. Accordingly, the user inputs his fingerprint to the biometric information recognition unit 100 (step 310).

When the fingerprint of the user's finger contacts the biometric information recognition unit 100, the biometric information recognition unit 100 acquires a fingerprint image, extracts fingerprint characteristic information from the obtained fingerprint image (step 315), and transmits the fingerprint image to the controller 130. do.

Meanwhile, the controller 130 reads fingerprint characteristic information matched with the user ID input by the user from the biometric information storage unit 140 (step 320), and decrypts it with the private key input by the user to be authenticated (step 325). )do. The controller 130 determines whether the decoded data is valid data (step 330). Performing this determination step is a step that can be made selectively. As a discriminating method, first, header information is added to the fingerprint characteristic information and encrypted, and such header information is inserted with information for discriminating the private key (for example, the front part or the rear part information of the private key). Then, it is possible to determine whether the valid data is compared by comparing the private key discrimination information added to the decrypted data header with some information of the input private key. The step of determining whether the decrypted data is valid data is to report a fingerprint authentication error more quickly.

If the decrypted data is valid data as a result of operation 330, the controller 130 compares the decrypted fingerprint feature information with the fingerprint feature information extracted in step 315, that is, the fingerprint feature information of the user to be authenticated (step 335). In addition, by displaying the authentication result according to the comparison result on the display unit 160 (step 340), the user is notified of the authentication failure or the fact that the authentication is completed, so that the user can take the following action.

If the system according to an embodiment of the present invention is a fingerprint reader, the method may further include the step of releasing the door lock according to the authentication result.

In some cases, the method may further include transmitting the authentication result to the access control system.

As described above, the present invention encrypts the fingerprint feature information of the user with the private key and stores and manages the same along with the user ID, reads only the fingerprint feature information matching the user ID in the authentication mode, and decrypts it with the input user private key. Since it is a method of comparing with the feature information, it can be said to be an invention that can improve the security of fingerprint information compared to systems using the same encryption key.

A user authentication method as another embodiment of the present invention will be described further with reference to FIG. 4. While the method described in FIG. 3 compares (1: 1) the fingerprint feature information of the user to be authenticated with one stored fingerprint feature information, the method described in FIG. 4 is the fingerprint feature of the user to be authenticated. The information is sequentially compared with a plurality of stored fingerprint feature information (1: N comparison). The former is an excellent method in terms of authentication speed.

Referring to FIG. 4, if there is a user authentication request (step 400), the controller 130 requests a private key input. In response, the user inputs a private key through the keypad 150 (step 405). Fingerprint input is required if there is a private key input.

When the fingerprint of the user's finger contacts the biometric information recognition unit 100, the biometric information recognition unit 100 obtains a fingerprint image, extracts fingerprint characteristic information from the obtained fingerprint image (step 415), and transmits the fingerprint image to the controller 130. do.

Meanwhile, the controller 130 reads the fingerprint characteristic information addressed first from the biometric information storage unit 140 and decrypts it with the private key input by the user (step 420). The controller 130 determines whether the decoded data is valid data (step 425). If the decoded data is not valid data, the next order address is newly designated (step 430) and then the process returns to step 420. That is, the controller 130 sequentially decodes the biometric characteristic information stored in the biometric information storage 140 through the input private key through steps 420 to 430, and repeatedly determines whether the decrypted data is valid data. It is. This is to improve the authentication speed.

If the decrypted data is valid data, the controller 130 compares the decrypted fingerprint feature information with the fingerprint feature information extracted in step 415 (step 435), and displays the authentication result according to the comparison result on the display unit 160. By outputting (step 440), the user is notified of the authentication failure or the completion of the authentication, and can follow up accordingly.

In this modified embodiment, the controller 130 may further perform the step of releasing the door lock according to the authentication result, and may further perform the step of transmitting the authentication result to the access control system.

As described above, the modified embodiment of the present invention also performs comparative authentication by encrypting and decrypting the user's fingerprint feature information with a private key, so that a result of improved security can be obtained as compared with systems using the same encryption key.

For reference, Figure 5 illustrates a case in which the biometric information security authentication system (A) according to an embodiment of the present invention is included as one component of the access control system. In FIG. 5, B represents a door lock, and C and D represent a door lock controller and a management server, respectively. The door lock controller C may release the door lock B according to an authentication result transmitted from the biometric information security authentication system A.

It will be apparent to those skilled in the art that the biometric information security authentication method according to the embodiment of the present invention can be executed even in the access control system having the configuration as described above.

As described above, the present invention encrypts and decrypts the user's own biometric characteristic information with the user's own private key, so that there is no fear of damage caused by system key leakage, and that the biometric information may be abused by a system administrator. It can be said that no useful invention.

Furthermore, the present invention encrypts the biometric characteristic information of the user with the private key and stores it together with the user ID, reads only the biometric characteristic information matching the user ID in the authentication mode, decrypts it with the input user private key, and compares the biometric characteristic information with each other. Therefore, the user authentication time can be relatively shortened.

On the other hand, the present invention has been described with reference to the embodiments shown in the drawings, which are merely exemplary, and those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. For example, although an embodiment of the present invention has been described using fingerprint information as an example, it may be equally applicable to authentication systems capable of recognizing biometric information such as cornea, iris, and facial recognition without any modification. Therefore, the true technical protection scope of the present invention should be defined only by the appended claims.

Claims (13)

A biometric information recognition unit for extracting biometric feature information by recognizing user biometric information; A keypad for inputting private key information; In the user registration mode, the extracted biometric feature information is encrypted and stored with the input private key information, and in the user authentication mode, the stored biometric feature information is decrypted with the input private key information and compared with the biometric feature information of the user to be authenticated. A control unit for performing; A biometric information storage unit for storing biometric characteristic information; And a display unit for displaying a result of the user authentication. The biometric information security authentication system of claim 1, further comprising a data communication unit for interfacing the user authentication result to an access control system. The biometric information security authentication system using a personal encryption key according to claim 1 or 2, further comprising a card access unit for accessing a memory card in which the biometric characteristic information of the user is recorded. A biometric information recognition unit for extracting biometric feature information by recognizing user biometric information; A keypad for inputting user ID and private key information; In the user registration mode, the extracted biometric characteristic information is encrypted with the input private key information and stored together with the user ID. In the user authentication mode, the biometric characteristic information matching the input user ID is decrypted with the input private key information. A control unit for comparing and authenticating the biometric characteristic information of the user to be authenticated; A biometric information storage unit for storing biometric characteristic information together with a user ID; And a display unit for displaying a result of the user authentication. The biometric information security authentication system of claim 4, further comprising a data communication unit for interfacing the user authentication result to an access control system. The biometric information security authentication system using a personal encryption key according to claim 4 or 5, further comprising a card access unit for accessing a memory card in which the user ID and the user biometric characteristic information are recorded. The system of claim 4 or 5, wherein the controller further requests and stores a password input for dual authentication of the user, and performs authentication of the stored password in a user authentication mode. . Recognizing user biometric information, extracting biometric characteristic information, and encrypting and extracting the extracted biometric characteristic information with a private key input by a user; Decrypting the stored biometric characteristic information with a private key input by a user to be authenticated and comparing the biometric characteristic information with the biometric characteristic information of the user to be authenticated; Displaying and outputting the authentication result; biometrics security authentication method using a personal encryption key comprising a. The method of claim 8, further comprising transmitting the authentication result to an access control system. Recognizing user biometric information to extract biometric characteristic information, encrypting the extracted biometric characteristic information with a private key input by the user, and storing the biometric characteristic information together with the input user ID; Reading biometric characteristic information matching the user ID input by the user to be authenticated from the biometric information storage unit and decoding the biometric characteristic information into the private key information input by the user; Comparing and authenticating the decrypted biometric characteristic information with biometric characteristic information of a user to be authenticated; Displaying and outputting the authentication result; biometrics security authentication method using a personal encryption key comprising a. The method of claim 10, further comprising: transmitting the authentication result to an access control system. Recognizing user biometric information to extract biometric characteristic information, and encrypting and extracting the extracted biometric characteristic information with a private key input by a user; A second step of receiving a private key in response to a user authentication request; A third step of extracting biometric characteristic information by recognizing biometric information of a user to be authenticated; A fourth step of sequentially decoding the biometric characteristic information stored with the input private key, and repeatedly determining whether the decrypted data is valid data; A fifth step of comparing and authenticating the decrypted biometric characteristic information with the biometric characteristic information extracted in the third step if the decrypted data is valid data; And a sixth step of displaying and outputting an authentication result. The biometric security authentication method of claim 12, further comprising transmitting the authentication result to an access control system.

Images