KR20140070709A - User Authentication Method Using Input Rhythm and Apparatus thereof - Google Patents

Abstract

In the present specification, disclosed are a user authenticating method and an apparatus thereof. More particularly, disclosed are a user authenticating method using an input rhythm and an apparatus thereof. The user authenticating method using the input rhythm disclosed in the present specification includes the steps of: extracting the authentication information rhythm of authentication information by receiving the authentication information for registration; extracting the input information rhythm of input information by receiving the input information for user authentication; determining the authentication similarity of the authentication information rhythm and the input information rhythm; and comparing the authentication similarity with a preset value.

Description

Technical Field [0001] The present invention relates to a user authentication method using an input rhythm,

The present invention discloses a user authentication method and apparatus, and more particularly, to a user authentication method and apparatus using an input rhythm.

The inventions disclosed in the present specification are derived from the SCARF project [development of source technology for preventing subchannel attack and safety verification technology], which is a part of the broadcasting communication technology development project of the Korea Communications Commission and the Korea Communications Development Agency.

In order to provide various online services provided by wired and wireless communication service companies as well as banks, securities, and public services, authentication is required to determine whether the user of the terminal is a true user or a user.

As a method for authenticating a user, there is an authentication method by inputting an ID (Identifier) and a password. This is a method of inputting and storing ID and password, inputting the ID and the authentication password for authentication, and comparing them. The ID and the authentication password are registered at the time of joining various online services, the ID and the authentication password are input as the authentication information every time when the service providing server is accessed to use the service, and the inputted authentication information and the ID and authentication It is a method of authenticating a user by comparing passwords.

However, such an authentication method has a problem that it is likely to be leaked out because it often uses the ID, the authentication password, etc. that can easily be guessed by others such as the resident registration number of the user, the back of the telephone number, and the like. Further, it is often found that IDs, authentication passwords, etc. are leaked out entirely by hacking or the like. In such a case, there is no way to prevent the use of a third party who has acquired information once the information is stolen or leaked.

Conventionally, as a method for solving such a problem, there has been proposed a method of using physical characteristics such as a fingerprint or a pupil of a user as authentication information. However, additional hardware is required to scan a fingerprint or a pupil, There is a problem.

Meanwhile, in order to enhance the security of the password, a method of authenticating not only the text of the password but also the rhythm in which the text is inputted is called a rhythmic password. The currently used rhymed password scheme is based on the measured time between key inputs. However, since the user can input a fast rhythm or a slow rhythm depending on the situation, the current method does not fully reflect the intention of the user to easily memorize the rhythm, and the false rejection rate The height is causing.

The present invention discloses a method and apparatus for authenticating a user using a similarity degree of a rhythm inputted by a user when registering a password.

The user authentication method using the input rhythm disclosed in this specification includes a step of extracting authentication information rhythm of authentication information by receiving authentication information for registration, input information for user authentication, and extracting input information rhythm of input information Determining an authentication similarity of the authentication information rhythm and the input information rhythm, and comparing the authentication similarity with a preset value.

Here, the step of extracting the authentication information rhythm may include extracting a first authentication information rhythm of the first authentication information by receiving the first authentication information, receiving the second authentication information, and receiving the second authentication information rhythm of the second authentication information And determining the average value of the first authentication information rhythm and the second authentication information rhythm as the authentication information rhythm. The step of extracting the authentication information rhythm may further include determining a registration similarity degree of the first authentication information rhythm and the second authentication information rhythm and determining an average value as the authentication information rhythm when the registration similarity degree is larger than a predetermined value can do. Here, the registration similarity may be determined by calculating a cosine similarity of the first authentication information rhythm and the second authentication information rhythm.

The aforementioned authentication similarity may be determined by calculating the cosine similarity of the authentication information rhythm and the input information rhythm.

The apparatus for authenticating a user using the input rhythm disclosed in this specification receives authentication information for registration from an input unit and an input unit and extracts an authentication information rhythm of the authentication information and receives input information for user authentication from the input unit, A rhythm extracting unit for extracting an information rhythm, and a control unit for determining an authentication similarity of the authentication information rhythm and the input information rhythm, and comparing the authentication similarity with a predetermined value.

The extracting unit receives the first authentication information, extracts a first authentication information rhythm of the first authentication information, receives the second authentication information, extracts a second authentication information rhythm of the second authentication information, The average value of the second authentication information rhythm can be determined as the authentication information rhythm. Also, the extracting unit may determine the registration similarity of the first authentication information rhythm and the second authentication information rhythm, and may determine the average value as the authentication information rhythm when the registered similarity degree is greater than a preset value. Here, the registration similarity may be determined by calculating the cosine similarity between the first authentication information rhythm and the second authentication information rhythm.

On the other hand, the aforementioned authentication similarity may be determined by calculating the cosine similarity between the authentication information rhythm and the input information rhythm.

According to the inventions disclosed in the present specification, since the authentication criteria of the rhymed password are based on the ratio of the time between key inputs to the total input time, not on the actual time between key inputs, It is possible to reduce the false rejection rate by eliminating the disadvantage of storing the information.

In addition, in consideration of the characteristics of the touch screen terminal operating in a touch manner, it is possible to realize a simplified rhythm password method in which a user is authenticated by simply touching the screen without a text.

1 is a diagram for explaining a user authentication method using an input rhythm disclosed in the present specification.
2 is a diagram for explaining a user authentication apparatus using an input rhythm disclosed in the present specification.
FIGS. 3 and 4 are diagrams for explaining an example of inputting authentication information twice.

The following merely illustrates the principles of the invention. Therefore, those skilled in the art will be able to devise various apparatuses which, although not explicitly described or shown herein, embody the principles of the invention and are included in the concept and scope of the invention. It is also to be understood that all conditional terms and examples recited in this specification are, in principle, expressly intended for the purpose of enabling the inventive concept to be understood and are not to be construed as limited to such specifically recited embodiments and conditions do.

It is also to be understood that the detailed description, as well as the principles, aspects and embodiments of the invention, as well as specific embodiments thereof, are intended to cover structural and functional equivalents thereof. It is also to be understood that such equivalents include all elements contemplated to perform the same function irrespective of the currently known equivalents as well as the equivalents to be developed in the future, i.e., the structure.

Thus, for example, it should be understood that the block diagrams herein illustrate exemplary conceptual aspects embodying the principles of the invention. Similarly, all flowcharts, state transition diagrams, pseudo code, and the like are representative of various processes that may be substantially represented on a computer-readable medium and executed by a computer or processor, whether or not the computer or processor is explicitly shown .

The functions of the various elements shown in the figures, including the functional blocks depicted in the processor or similar concept, may be provided by use of dedicated hardware as well as hardware capable of executing software in connection with appropriate software. When provided by a processor, the functions may be provided by a single dedicated processor, a single shared processor, or a plurality of individual processors, some of which may be shared.

Also, the explicit use of terms such as processor, control, or similar concepts should not be interpreted exclusively as hardware capable of running software, and may be used without limitation as a digital signal processor (DSP) (ROM), random access memory (RAM), and non-volatile memory. Other hardware may also be included.

In the claims of the present specification, the elements represented as means for performing the functions described in the detailed description may include, for example, a combination of circuit elements performing the function or any type of software including firmware / And is coupled with appropriate circuitry for executing the software to perform the function. It is to be understood that the invention as defined by the appended claims is not to be interpreted as limiting the scope of the invention as defined by the appended claims, as the functions provided by the various enumerated means are combined and combined with the manner in which the claims require. .

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: . In the following description, a detailed description of known technologies related to the present invention will be omitted when it is determined that the gist of the present invention may be unnecessarily blurred. Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Often, an electronic device such as a personal computer or a terminal authenticates the user or whether the user is authorized by using a password input to drive the system or access specific information. In this case, the user first registers the password, determines whether or not the password to be subsequently input is the same as the registered password, and determines whether or not to authenticate.

The user authentication method and apparatus using the input rhythm disclosed in this specification registers the authentication information such as registering a password and compares input information inputted later with the registered authentication information to determine whether or not to authenticate. However, when the authentication information is compared with the input information, the rhythm of the registered authentication information and the rhythm of the input information are calculated based on the ratio of the actual input time to the total input time, Is measured. Therefore, the rhythm of each key input of the authentication information and the input information (for example, the ratio of the time between each key input to the total input time) is calculated and the similarity of the authentication information and the input information to the rhythm ) To perform authentication.

Here, the authentication information and the input information may be text, such as a typical password, but are not limited thereto. For example, in the case of a touch screen terminal operating in a touch manner, an interval for simply touching an arbitrary portion of the screen several times may be included in the authentication information and the input information, rather than inputting a specific character. When such a touch interval is used as the authentication information and the input information, a simplified rhythm password method for authenticating a user by simply touching a screen without a text, in consideration of the characteristics of a touch screen terminal operating in a touch manner, can be realized .

Hereinafter, a user authentication method and an apparatus using the input rhythm disclosed in the present specification will be described in detail with reference to the drawings.

1 is a diagram for explaining a user authentication method using an input rhythm disclosed in the present specification.

Referring to FIG. 1, a method for authenticating a user using an input rhythm includes inputting authentication information for registration and extracting an authentication information rhythm of authentication information (S110), inputting input information for user authentication, A step S120 of determining an authentication similarity degree between the authentication information rhythm and the input information rhythm, and a step S140 of comparing the authentication similarity with a predetermined value.

The authentication information can be inputted twice to increase the reliability of the authentication information to be registered. In this case, the step of extracting the authentication information rhythm (S110) may include extracting a first authentication information rhythm of the first authentication information by receiving the first authentication information (S111), receiving the second authentication information, (S112) of extracting a second authentication information rhythm of the first authentication information rhythm and determining an average value of the first authentication information rhythm and the second authentication information rhythm as the authentication information rhythm.

The similarity of the first authentication information rhythm and the second authentication information rhythm can be determined for proper determination of the authentication information rhythm. In this case, the step of extracting the authentication information rhythm (S110) includes a step of determining registration similarity degrees of the first authentication information rhythm and the second authentication information rhythm, and an average value when the registration similarity degree is larger than a preset value, Step < / RTI > Here, the registration similarity may be determined by calculating a cosine similarity of the first authentication information rhythm and the second authentication information rhythm.

On the other hand, the aforementioned authentication similarity may be determined by calculating the cosine similarity between the authentication information rhythm and the input information rhythm.

2 is a diagram for explaining a user authentication apparatus using an input rhythm disclosed in the present specification.

2, the user authentication apparatus using the input rhythm receives authentication information for registration from the input unit 201 and the input unit 201, extracts an authentication information rhythm of the authentication information, and receives user authentication from the input unit 201 A control unit 203 for determining an authentication similarity of the authentication information rhythm and the input information rhythm and comparing the authentication similarity with a preset value, .

The extracting unit 202 receives the first authentication information, extracts the first authentication information rhythm of the first authentication information, receives the second authentication information, extracts the second authentication information rhythm of the second authentication information, The average value of the authentication information rhythm and the second authentication information rhythm can be determined by the authentication information rhythm. In this case, the extracting unit 202 may determine the registered similarity degree of the first authentication information rhythm and the second authentication information rhythm, and may further determine the average value as the authentication information rhythm when the registered similarity degree is greater than a predetermined value have. The registration similarity here can be determined by calculating the cosine similarity between the first authentication information rhythm and the second authentication information rhythm.

On the other hand, the aforementioned authentication similarity may be determined by calculating the cosine similarity between the authentication information rhythm and the input information rhythm.

The description of the user authentication device using the other input rhythm will be omitted from the description of the user authentication method using the input rhythm described in FIG.

Hereinafter, a specific embodiment of a user authentication method using an input rhythm will be described with reference to the drawings.

First, the registration process of authentication information will be described.

As with the existing password registration, the user inputs the same authentication information twice to prove that the text of the authentication information is correctly input. Here, the authentication information is not limited to text as described above.

When inputting the authentication information, the user inputs each character with a unique rhythm to be registered, and the end of the input is recognized through the '\ n' (newline) key.

FIGS. 3 and 4 are diagrams for explaining an example of inputting authentication information twice. For example, if the authentication information is " HAPPY ", the user inputs the first authentication information as shown in FIG. 3 and inputs the second authentication information with the same rhythm as the first authentication information input as shown in FIG. 4 .

After inputting authentication information twice, confirm that the same key ("HAPPY") has been input. If the same string is input, the process of extracting the rhythm is performed.

)라 하고, 제2회 인증정보입력의 총 시간을 B(B=

)라하면, 제1회 인증정보입력의 리듬은 (“HAPPY”, {

})이 되고, 제2회 인증정보입력의 리듬은 (“HAPPY”, {

})이 된다.If the total time of the first authentication information input is A (A =

), The total time of the second authentication information input is B (B =

), The rhythm of the first authentication information input (" HAPPY ","

}), And the rhythm of the second authentication information input is ("HAPPY", {

}).

In order to determine whether the rhythm of the authentication information is input in a similar manner, the cosine similarity for the rhythm of the input of the first authentication information and the rhythm of the input of the second authentication information is calculated as shown in Equation (1) . Such a calculation can be performed through an operator, but similarity can be output through an output of a type corresponding to an input value, such as a lookup table.

[Equation 1]

Cosine similarity =

}과 {

}는 유사하다. 인증을 위해 요구되는 보안의 안전도에 따라 유사도의 기준값을 설정할 수 있다. 기준값 이상의 유사도를 보일 경우 인증정보를 등록한다. 인증정보의 리듬은 {

}과 {

}의 평균값인 {

}을 저장한다.
At this time, the closer the similarity value is to 1,

} And {

} Is similar. The reference value of the degree of similarity can be set according to the security degree of security required for the authentication. When the degree of similarity equal to or greater than the reference value is shown, authentication information is registered. The rhythm of the authentication information is {

} And {

}, Which is an average value of {

}.

The following describes the process of user authentication by input information.

The user authentication process calculates the similarity between the input information input by the user and the authentication information stored at the time of registration, and the calculation method is the same as the above-described method used at the time of registration.

First, make sure that the text of the input information entered by the user is correct. As described above, this process can be omitted when the authentication information and the input information are composed of time intervals for touching the touch screen rather than text.

If the texts are the same, check that the rhythm of the input information entered matches the rhythm of the stored accreditation information within the reference range.

}, 여기서, C=

)인 경우, {

}와 {

}의 코사인 유사도를 계산하고 설정된 기준범위 이내에서 유사한지를 확인함으로써, 사용자 인증을 수행한다.If the input information entered is ("HAPPY", {

}, Where C =

), Then {

}Wow {

}, And confirms similarity within the set reference range, thereby performing user authentication.

The user authentication method and apparatus using the input rhythm described above can be installed in various apparatuses to perform user authentication. In the case of a terminal equipped with a touch screen, the authentication information and the input information including the text may be used, and only the rhythm of touching the screen without the text may be used.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood that various modifications and applications are possible. For example, each component specifically shown in the embodiments can be modified and implemented. It is to be understood that all changes and modifications that come within the meaning and range of equivalency of the claims are therefore intended to be embraced therein.

201: input unit
202: rhythm extracting unit
203:

Claims (1)

Receiving authentication information for registration and extracting an authentication information rhythm of the authentication information;
Receiving input information for user authentication and extracting an input information rhythm of the input information;
Determining an authentication similarity of the authentication information rhythm and the input information rhythm; And
And comparing the authentication similarity with a preset value.

Images