KR20140096451A - Athentication System using mobile device and method thereof - Google Patents

Abstract

Disclosed are an authentication system connected to a terminal of a user via a network to authenticate the terminal, and a method thereof. The authentication system comprises the following: a database storing authentication information including at least one behavioral pattern registered by the user among user′s behavioral patterns including a motion of the terminal, a limit range of time taken for the motion, a specified key of the terminal, a specified identification value, and a location of the terminal; and a server asking authentication of the terminal when the terminal is connected, comparing, if receiving the authentication information including the at least one behavioral pattern from the terminal, the received authentication information with authentication information that the user has registered beforehand, and performing the authentication if the two pieces of authentication information are the same. The authentication system can enhance security by performing an authentication function with a combination of various behaviors of the user and allows the user to handle an authentication task with only one hand.

Description

[0001] The present invention relates to an authentication system using a mobile terminal,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication system, and more particularly, to an authentication system and a method for authenticating an authority to various servers or systems using a portable terminal.

2. Description of the Related Art In general, electronic devices such as mobile phones, smart phones, and tablet PCs, which are easy to carry, are widely used. In most of these devices, a touch screen or a touch pad is applied as an input device.

These mobile devices are capable of motion and position measurement, and since they are expensive, authentication functions such as password and pattern input are strengthened to protect information.

Most of such mobile devices use a touch screen or a touch pad to register a password or a predetermined pattern for authentication in a terminal in advance by touching the terminal and input a password or a predetermined pattern registered in advance on the locked screen to release the lock have.

On the other hand, users are accessing various websites and receiving various services by using portable electronic devices such as mobile phones, smart phones, and tablet PCs.

In addition, various services based on web (Web) based and Client-Server based services are operated on the assumption of user authentication. However, in the case of mobile terminal, (Password) of the user is stored in the terminal and the function of automatically authenticating the user is mainly used.

If the security of the screen lock provided by the terminal is invalidated, the security of various services used by the user through the terminal may be invalidated, thereby causing a serious problem such as leakage of personal information.

As described above, in the conventional authentication method, it is difficult to authenticate with two hands while walking or moving, and when the initial security of the terminal is released, various problems are caused due to leakage of serious personal information.

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and it is an object of the present invention to provide an authentication system and method for enabling authentication using a combination of various user actions.

It is also an object of the present invention to provide an authentication system and method that enables authentication to be performed easily with only one hand.

According to an aspect of the present invention,

An authentication system connected to a user terminal through a network and authenticating the terminal,

An authentication pattern including one or more behavior patterns previously registered by the user among the behavior patterns of the user including the motion of the terminal, the limit range of the time taken for the motion, the specific key of the terminal, the specific identification value, A database for storing information;

When the terminal accesses the terminal, requests authentication to the terminal, receives authentication information including at least one behavior pattern from the terminal, compares the received authentication information with authentication information previously registered by the user, And includes a server for authentication.

The authentication information further includes pattern combination information combining patterns and order information of a combined action pattern.

The database includes:

A member information DB for storing information of a subscriber including information of the terminal;

An authentication pattern including one or more behavior patterns previously registered by the user among the behavior patterns of the user including the motion of the terminal, the limit range of the time taken for the motion, the specific key of the terminal, the specific identification value, An authentication information DB for storing information;

And an information DB for storing information for providing a predetermined service.

The server comprises:

When the terminal accesses the terminal, requests authentication to the terminal, receives authentication information including at least one behavior pattern from the terminal, compares the received authentication information with authentication information previously registered by the user, An authentication control unit for performing authentication;

And a service providing unit for providing a predetermined service when the authentication is completed.

The terminal comprises:

A motion detection unit for detecting motion of a user;

A GPS unit for calculating and outputting the position of the terminal;

A timer for checking time;

A display unit for displaying information;

An input unit for receiving a selection of a user;

A GPS unit, a timer, and an input unit, according to a request from the authentication system, to the authentication system through the external network network according to the selection of the input unit, As shown in FIG.

According to an aspect of the present invention,

An authentication pattern in which one or more behavior patterns registered in advance by the user among the user behavior patterns including the motion of the terminal, the limit range of the time taken for the motion, the specific key of the terminal, the specific identification value, The authentication method comprising the steps of:

Displaying an authentication screen when a user accesses through a network using a terminal;

Comparing the received authentication information with authentication information stored in the database when the authentication information is received from the terminal;

And if the received authentication information matches the authentication information stored in the database, the control unit performs authentication normally.

The method comprises:

Detecting a motion of the user by the motion sensing unit of the terminal;

Calculating and outputting the position of the GPS unit of the terminal;

Checking a time of a timer of the terminal;

The control unit receives the output information of the motion sensing unit, the GPS unit, the timer, and the input unit, and transmits the received information to the authentication system.

The authentication information may include one or more behavior patterns registered in advance by the user among the behavior patterns of the user including the motion of the terminal, the restriction range of time required for the motion, the specific key of the terminal, the specific identification value, And further includes pattern combination information and order information of the combined action patterns.

The embodiment of the present invention can provide an authentication system and a method using a terminal that can perform an authentication function by combining various user actions to enhance security and enable easy authentication with only one hand.

1 is a configuration diagram of an authentication system according to an embodiment of the present invention.
2 is a configuration diagram of the terminal of FIG.
3 is a flowchart illustrating an authentication method according to an embodiment of the present invention.
FIGS. 4 to 6 are views illustrating an example of an authentication screen displayed on the terminal according to the embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when an element is referred to as "comprising ", it means that it can include other elements as well, without excluding other elements unless specifically stated otherwise.

1 is a configuration diagram of an authentication system according to an embodiment of the present invention.

Referring to FIG. 1, an authentication system according to an embodiment of the present invention includes:

The authentication system includes a database 220 and a server 210, which are connected to a user terminal through a network and authenticate the terminal 100.

The database 200 may include one or more actions previously registered by the user among the behavior patterns of the user including the motion of the terminal, the limit range of the time taken for the motion, the specific key of the terminal, the specific identification value, And stores the authentication information including the pattern.

The database (220)

A member information DB 221 for storing subscriber information including information of the terminal;

An authentication pattern including one or more behavior patterns previously registered by the user among the behavior patterns of the user including the motion of the terminal, the limit range of the time taken for the motion, the specific key of the terminal, the specific identification value, An authentication information DB 222 for storing information; And an information DB 223 for storing information for providing a predetermined service. The authentication information may further include pattern combination information combining patterns and order information of a combined action pattern.

Here, the user pattern combination information refers to a combination of various patterns such as a motion of the terminal, a limited range of time for the motion, a specific key of the terminal, a specific identification value, and a position of the terminal.

The motion of a terminal may be a combination of a moving direction and a slope of a moving direction of the terminal (up, down, left, right) and a specific position.

The limit of the time required for the motion is the time required for the motion of the terminal, which means a combination of the arrival time from the start point of the terminal motion to the end point (or division point), the waiting time of the motion, And set it as a range. For example, 1.5 to 2 seconds, 1 to 1.3 seconds, and so on.

The identification value of the terminal may be a software specific range value (for example, 0 to 9) or a specific area of the terminal (for example, 2/4 or 4/4).

The specific key of the terminal may be a menu key, a search key, an option key, or the like.

The location of the terminal may be set as information (GPS or the like) that allows the user to know the location of the terminal. For example, it can be certified only in Gangnam-gu or Dong-gu. If necessary, a combination of different behavior patterns may be stored and authenticated in each region.

If necessary, a method of inputting a password or a secret pattern, which is an existing authentication method, may be added to one action pattern among the pattern combination information.

The server 210 requests authentication from the terminal when the terminal is connected to the terminal 210. When authentication information including at least one behavior pattern is received from the terminal, the server 210 transmits the received authentication information and authentication information previously registered by the user to the database If they match, they are authenticated.

The server 210 requests authentication from the terminal when the terminal is connected to the server 210. When authentication information including at least one behavior pattern is received from the terminal, An authentication control unit (211) for comparing the information and authenticating if they are identical; And a service providing unit 212 for providing a predetermined service when the authentication is completed.

2 is a configuration diagram of the terminal of FIG.

2, a terminal according to an exemplary embodiment of the present invention includes a display unit 110, a motion sensing unit 120, a controller 130, an input unit 140, a GPS unit 150, a timer 160, Unit 170, and a communication unit 180.

Such a terminal includes an electronic device capable of communication and capable of executing multimedia contents. For example, a tablet PC, a portable phone, a smart phone, an Ultra Mobile PC (UMPC), a Personal Digital Assistance (PDA), and the like.

The motion sensing unit 120 may be a motion sensor, a gyro sensor, or the like for sensing motion of a user.

The GPS unit 150 receives at least one satellite signal and calculates and outputs the position of the terminal.

Timer 160 checks the time.

The display unit 110 displays information and can display a screen for authentication.

The input unit 140 receives the user's selection and may be mounted in a panel form to detect a user's touching operation on the screen of the display unit 110 on which data of the terminal is displayed. The touch input device 140 may be provided in combination with the display unit 110 for outputting. In addition, the input unit 140 may further include a keypad, a function key, and the like. The keypad may receive a user's selection and transmit the selection to the controller 130 as needed, and may also select power on / off or various functions.

The storage unit 170 stores various information and control programs. In addition, the authentication information may be temporarily or periodically stored if necessary.

The control unit 130 accesses the authentication system 200 through the external network 300 according to the selection of the input unit 140 and controls the motion sensing unit 120, The controller 160 controls the authentication system 200 to transmit information including at least one action pattern input from the input unit 150, the timer 160, and the input unit 140 to the authentication system 200.

The communication unit 180 performs a communication function with an external device or a base station.

An authentication method of an authentication system according to an embodiment of the present invention having such a configuration will now be described.

First, the user operates the input unit 140 using the terminal 100 to access the authentication system 200 through the network, and registers the membership.

At this time, one pattern or a combination of two or more of the action patterns of the user including the motion of the terminal, the limit range of the time taken for the motion, the specific key of the terminal, the specific identification value, And the authentication control unit 211 stores the inputted authentication information in the authentication information DB 222 as the authentication information of the corresponding member.

When the subscription is completed, the user accesses the authentication system 200 through the network 300 by facilitating the input unit 140 when using a service provided by a predetermined server (S210).

Then, the authentication control unit 211 of the server 210 transmits the authentication screen to the terminal 200, and the authentication screen is displayed on the display unit 110 (S220).

An example of such a screen is shown in Fig. 4 or Fig.

In view of the screen of the display unit 110, the user memorizes pattern combination information obtained by combining one pattern or two or more patterns previously entered by the user, and then inputs the pattern combination information as it is. That is, a pattern of a user's action including a motion of a terminal, a limit range of time taken to perform the motion, a specific key of the terminal, a specific identification value, a location of the terminal, (S240).

For example, after the terminal is shaken to the left or right, a password is input, or the terminal is shaken up and down for 4 seconds. Here, it is preferable to omit the password or secret pattern input when it is difficult to input with one hand, and it is preferable to configure the pattern combination information of the user with a combination of possible action patterns with one hand.

Meanwhile, the motion sensing unit 120 senses the motion of the user, the GPS unit 150 calculates and outputs the position of the terminal, and the timer 160 checks the time (S230).

The control unit 130 receives the output information of the motion sensing unit 120, the GPS unit 150, the timer, and the input unit and transmits the information to the authentication system 100 through the communication unit 180.

Then, the authentication control unit 211 compares the received authentication information with the authentication information previously registered by the user in the authentication information DB 222 (S250).

When the received authentication information matches the authentication information previously registered by the user in the authentication information DB 222, the authentication control unit 211 authenticates normally so that the desired service can be used.

Then, the user can use the service provided by the service providing unit 212 while operating the input unit 140 (S270).

An example of such a screen is shown in Fig. 4 or Fig.

Referring to FIGS. 4 to 6, when the authentication is completed, the terminal can be in a usable state, a picture view, and an e-mail confirmation state.

On the other hand, if the received authentication information does not match the authentication information previously registered by the user in the authentication information DB 222, the authentication control unit 211 notifies the terminal 100 of the authentication inconsistency without performing the authentication (S280) Repeat from step S220.

In the above process, the authentication may be performed at the time of initial use of the site or at the time of using a specific service, or after a predetermined time has elapsed.

In this embodiment of the present invention, the authentication function is performed by a combination of various user actions to enhance the security, and the authentication can be easily performed with only one hand.

If necessary, it is possible to implement various actions by subtracting a position or a part of functions from each other, and it is also possible to perform authentication using a single behavior pattern. In such a case, implementation can be simplified.

If two or more behavior patterns are combined as needed, time information in which one behavior pattern is input may be stored as one condition necessary for authentication, or a predetermined error range may be set for the accuracy of one pattern have.

The embodiments of the present invention described above are not only implemented by the apparatus and method but may be implemented through a program for realizing the function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded, The embodiments can be easily implemented by those skilled in the art from the description of the embodiments described above.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, It belongs to the scope of right.

Claims (8)

An authentication system connected to a user terminal through a network and authenticating the terminal,
An authentication pattern including one or more behavior patterns previously registered by the user among the behavior patterns of the user including the motion of the terminal, the limit range of the time taken for the motion, the specific key of the terminal, the specific identification value, A database for storing information;
When the terminal accesses the terminal, requests authentication to the terminal, receives authentication information including at least one behavior pattern from the terminal, compares the received authentication information with authentication information previously registered by the user, An authentication system comprising a server for authentication. The method according to claim 1,
Wherein the authentication information further includes pattern combination information combining patterns and order information of a combined action pattern. 3. The method of claim 2,
The database includes:
A member information DB for storing information of a subscriber including information of the terminal;
An authentication pattern including one or more behavior patterns previously registered by the user among the behavior patterns of the user including the motion of the terminal, the limit range of the time taken for the motion, the specific key of the terminal, the specific identification value, An authentication information DB for storing information;
And an information DB for storing information for providing a predetermined service. The method of claim 3,
The server comprises:
When the terminal accesses the terminal, requests authentication to the terminal, receives authentication information including at least one behavior pattern from the terminal, compares the received authentication information with authentication information previously registered by the user, An authentication control unit for performing authentication;
And a service providing unit for providing a predetermined service when the authentication is completed. 5. The method of claim 4,
The terminal comprises:
A motion detection unit for detecting motion of a user;
A GPS unit for calculating and outputting the position of the terminal;
A timer for checking time;
A display unit for displaying information;
An input unit for receiving a selection of a user;
A GPS unit, a timer, and an input unit, according to a request from the authentication system, to the authentication system through the external network network according to the selection of the input unit, In response to the authentication request. An authentication pattern in which one or more behavior patterns registered in advance by the user among the user behavior patterns including the motion of the terminal, the limit range of the time taken for the motion, the specific key of the terminal, the specific identification value, The authentication method comprising the steps of:
Displaying an authentication screen when a user accesses through a network using a terminal;
Comparing the received authentication information with authentication information stored in the database when the authentication information is received from the terminal;
And if the received authentication information matches the authentication information stored in the database, the control unit performs authentication normally. The method according to claim 6,
Detecting a motion of the user by the motion sensing unit of the terminal;
Calculating and outputting the position of the GPS unit of the terminal;
Checking a time of a timer of the terminal;
Wherein the control unit receives the output information of the motion sensing unit, the GPS unit, the timer, and the input unit, and transmits the received information to the authentication system. 8. The method of claim 7,
The authentication information may include one or more behavior patterns registered in advance by the user among the behavior patterns of the user including the motion of the terminal, the restriction range of time required for the motion, the specific key of the terminal, the specific identification value, And further comprising pattern combination information and order information of the combined action patterns.

Images