KR20160079310A - Method and server for authenticating password based on pattern information - Google Patents

Abstract

An embodiment of the present invention provides a method for authenticating a password based on pattern information in a service providing server. The method for authenticating a password based on pattern information comprises the steps of: providing a user terminal with a virtual keypad on which numbers, symbols, or texts are randomly arranged, so as to allow a user to input a combination of the numbers, the symbols, or the texts according to preregistered patterns in the virtual keypad; generating a one-time password from the numbers, the symbols, or the texts according to the preregistered patterns on the virtual keypad; and receiving the combination of the numbers, the symbols, or the texts inputted by the user as a password and performing authentication through a comparison between the received combination and the generated one-time password.

Description

METHOD AND SERVER FOR AUTHENTICATING PASSWORD BASED ON PATTERN INFORMATION [0002]

The present invention relates to a method and a server for authenticating a password based on pattern information, and more particularly, to a method and server for inputting a password in a predetermined pattern each time a user uses a real password And a server.

With the development of information and communication technology, services requiring security such as internet banking, stock trading, and electronic payment in an Internet shopping mall through a connection to an internet network or the like are being performed through a personal mobile terminal that is usually carried by a person.

When using services such as financial transactions or e-commerce transactions, the user is subjected to an authentication process of inputting an ID, a password, a certificate password, a credit card number, or a resident registration number to prove his or her identity.

However, in the process of inputting such important information by the user, it is possible to take out input information by a third party, and the number of cases in which acquired personal important information is illegally stolen is increasing.

In order to solve this problem, there is a method of installing an antivirus or a spyware removal tool on a user terminal to detect and remove a malicious program. However, in the case where a malicious program such as a modification or a new malicious program occurs, Since it is possible to cope with only after that, it was only a function of the after measures.

Another method is to provide a virtual keypad in which a number, a symbol or text is randomly arranged in a user terminal so that a user can input a pre-registered password through the virtual keypad.

However, even in this case, since the information transmitted to the authentication subject is the password inputted by the user, if such a password is captured in the transmission process, there is still a damage such as theft. In addition, the user must always remember his / her password. Since the virtual keypad itself is a keypad in which numbers, symbols, or texts are randomly arranged, the user feels inconvenience in inputting the password in the virtual keypad having the first touching array There was a problem that can not be solved.

Therefore, there is a need for a technique that allows the user to feel the convenience in inputting the password of the user, and to maintain the security even if the middle-deodorization occurs due to the attack by the third party.

It is an object of the present invention to improve the convenience of inputting a password in inputting a password for proof of identity and to minimize the possibility of third party misuse of the exposed password.

Another object of the present invention is to further improve the security by encrypting the authentication password.

According to an embodiment of the present invention, there is provided a method for authenticating a password based on pattern information in a service providing server, the method comprising: providing a virtual keypad to a user terminal to allow a user to input, Or a combination of texts; Generating a number, a symbol or text according to the registration pattern on the virtual keypad as a one-time password; And receiving the password, the combination of numbers, symbols, or texts input by the user as a password, and performing authentication through comparison with the generated one-time password.

The pattern information based password authentication method may further include receiving pattern information input by the user from a user terminal before the virtual keypad providing step; And storing, as the registration pattern, a combination of numbers, symbols, or texts that match the pattern information input by the user on the standard keypad.

The pattern information receiving step may include providing a pattern registration interface having a plurality of points arranged in a matrix form to the user terminal; And receiving pattern input information input by the user through the pattern registration interface.

The standard keypad may be a keypad in which numbers, symbols, or text are sequentially arranged.

The virtual keypad may be a keypad in which numbers, symbols, or texts are randomly arranged.

The authentication step may include comparing the encrypted value of the one-time password with the encrypted value of the password received from the user terminal.

According to another embodiment of the present invention, there is provided a server for authenticating a password based on pattern information, comprising: a server for providing a virtual keypad to a user terminal so as to allow a user to input a number, A virtual keypad for inputting a combination; An OTP (One Time Password) generating unit for generating a one-time password with numbers, symbols or texts conforming to the registration pattern on the virtual keypad; And a password authentication unit for receiving a combination of a number, a symbol or a text input by the user as a password and performing authentication by comparing the created one-time password with the generated one-time password.

The pattern information-based password authentication server receives pattern information input by the user from a user terminal, and stores a combination of numbers, symbols, or texts matched with the pattern information input by the user on a standard keypad as the registration pattern And a pattern registration unit for storing the pattern registration information.

The pattern registration unit may provide a pattern registration interface having a plurality of points arranged in a matrix form to the user terminal and receive pattern input information input by the user through the pattern registration interface.

The standard keypad may be a keypad in which numbers, symbols, or text are sequentially arranged.

The virtual keypad may be a keypad in which numbers, symbols, or texts are randomly arranged.

The password authentication unit may perform the authentication by comparing the encryption value of the one-time password with the encryption value of the password received from the user terminal.

According to the present invention, since only a pattern having a specific shape can be input in the case of inputting a password for security, convenience of inputting a password can be improved even on a virtual keypad in which numbers, symbols, or texts are randomly arranged.

According to the present invention, since the information transmitted through the communication network for the actual authentication is a one-time password that is changed every time, even if the third party attack is deceived, the possibility of the subsequent stealing can be eliminated.

In addition, according to the present invention, the security can be further improved as the password transmitted through the communication network is encrypted.

1 is a diagram schematically showing the overall configuration of a pattern information based disposable password authentication system according to an embodiment of the present invention.
2 is a diagram showing an example of registering a pattern for password authentication according to an embodiment of the present invention.
3A and 3B are views showing an embodiment of a standard keypad according to an embodiment of the present invention.
4 is a diagram for explaining a pattern information-based password authentication process according to an embodiment of the present invention.
5A and 5B are views showing an embodiment of a virtual keypad according to an embodiment of the present invention.
6 is a block diagram illustrating a function of a service providing server according to an embodiment of the present invention.

The following detailed description of the invention refers to the accompanying drawings, which illustrate, by way of illustration, specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that the various embodiments of the present invention are different, but need not be mutually exclusive. For example, certain features, structures, and characteristics described herein may be implemented in other embodiments without departing from the spirit and scope of the invention in connection with an embodiment. It is also to be understood that the position or arrangement of the individual components within each disclosed embodiment may be varied without departing from the spirit and scope of the invention. The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present invention is to be limited only by the appended claims, along with the full scope of equivalents to which such claims are entitled, if properly explained. In the drawings, like reference numerals refer to the same or similar functions throughout the several views.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings, so that those skilled in the art can easily carry out the present invention.

[Preferred Embodiment of the Present Invention]

1 is a diagram schematically showing the overall configuration of a pattern information based disposable password authentication system according to an embodiment of the present invention.

Referring to FIG. 1, the system of the present invention may include a user terminal 100 and a service providing server 200.

The user terminal 100 and the service providing server 200 can perform data communication through a communication network. The communication network can be configured without regard to its communication mode such as wired and wireless communication and can be connected to various communication networks such as a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN) . In addition, when the service providing server 200 is implemented as a financial institution server such as a bank server, the communication network may be a financial common network.

The user terminal 100 accesses the service providing server 200 and receives various services provided by the service providing server 200. [ To this end, the user terminal 100 may be provided with a web browser or an application for connection to the service providing server 200. The user terminal 100 can log in, select a desired service, receive a selected service, and the like through a web browser of the service providing server 200 connected through a web browser or an application. In this process, the service providing server 200 may request the user terminal 100 to provide a numeric password. For example, when the service providing server 200 is a financial institution server and the service selected from the user terminal 100 is a money transfer service, the service providing server 200 transmits a transfer password for the user holding account to the user terminal 100 As shown in FIG.

According to an embodiment of the present invention, instead of directly inputting the password through the keypad of the user terminal 100, the user inputs numbers constituting a pre-registered pattern on the virtual keypad provided from the service providing server 200 do.

The number pattern of the virtual keypad is different each time it is provided. Since the user always inputs the numbers forming the pattern according to the same pattern, the user can enjoy the convenience of memorizing only the pattern. On the other hand, the pattern inputted every time is the same, but since the number of the pattern is changed in the virtual keypad, the actual password inputted by the user is different every time. Therefore, even if the password is exposed by a third party attack, it is only a result of exposure of a one-time password.

Details related to the registration of the pattern input by the user and the password authentication based on the pattern input will be described later.

The service providing server 200 functions to provide a service requested from the user terminal 100. The service providing server 200 may provide a virtual keypad to the user terminal 100 in order to input a password required for providing the service. The numbers on the virtual keypad can vary in arrangement as they are presented. When the user inputs a number conforming to the pattern previously registered in the virtual keypad, the inputted information is transmitted to the service providing server 200. The service providing server 200 transmits the inputted pattern to the user registered in the virtual keypad And compares the number with the number transmitted from the current user terminal 100 to perform authentication.

The service providing server 200 may be a server that provides a service that requires a user to input a password in its use. As an example, it can be implemented as a financial institution server that provides a service such as a money transfer. The service providing server 200 may distribute an application that allows a user to access a web page provided by the service providing server 200 through the user terminal 100. [ The user terminal 100 may access the service providing server 200 or a separate app store server to download the application.

2 is a diagram showing an example of registering a pattern for password authentication according to an embodiment of the present invention.

Referring to FIG. 2, since there may be a service to which a password is to be inputted among the services provided by the service providing server 200, the service providing server 200 transmits a password Pattern registration can be requested. For example, when the service providing server 200 is a financial institution server, the user must register a transfer password for his or her own account.

The user can access the service providing server 200 through the user terminal 100 and then register a pattern for password authentication when using the service later.

First, the service providing server 200 may provide an interface (PI) for pattern input to the user terminal 100. Since the virtual keypad to be provided by the service providing server 200 for the pattern input will include the numbers from 0 to 9 and the symbols of '#' and '*' in the future, all 12 points are arranged in a matrix form A pattern input interface (PI) may be provided. In FIG. 2, an interface (PI) having a matrix of four rows and three columns is illustrated, but the present invention is not limited thereto. In addition, although FIG. 2 illustrates the masking process in which no information is displayed on each point included in the interface PI, numbers and symbols may be displayed at each point. For example, the first to fourth lines may be set to '1', '2', '3', '4', '5', '6', '7', '8', '9' A standard keypad in which '0' and '*' are sequentially displayed may be provided as an interface (PI) for pattern registration.

The interface (PI) for registering the pattern may be provided by the service providing server 200, or may be provided through an application installed in the user terminal 100.

The user can input a pattern to be used in future password authentication through the interface (PI) for pattern registration (1).

The input pattern can be freely set using the plurality of points described above. In FIG. 2, the first straight line pattern starting from the point of the first row and the first column to the point of the third row and the first column in the interface (PI) provided in the form of a matrix of three rows and four columns, An example is shown in which a pattern in which the second straight line patterns are sequentially combined is registered. The pattern input may be a combination of straight lines that are continuous with each other.

The pattern input by the user is transmitted to the service providing server 200. The service providing server 200 converts the information about the pattern into a password on the standard keypad and stores the converted password. Here, the standard keypad is a keypad in which each point included in an interface (PI) for pattern registration is matched with one number, symbol or text (e.g., alphabetic character) , Alphabetic characters, etc.) are arranged in order. For example, '1', '2', '3', '4', '5', '6', '7', '8', ' 0 ', and' * 'may be provided as a standard keypad. That is, when a standard keypad is configured in the form of a matrix of four rows and three columns, it may be a standard keypad having a number arrangement as shown in FIGS. 2 and 3A, where the symbols " The mutual position can be changed.

On the other hand, as another example, a standard keypad may be provided in which alphabetic characters are arranged in alphabetical order, and then numerals are sequentially arranged, as shown in FIG. 3B. It goes without saying that the number of rows and columns of the standard keypad may vary.

When the pattern information transmitted from the user terminal 100 is matched to the standard keypad, numerals, symbols or text (for example, alphabetic characters, etc.) sequentially passing through the patterns exist. For example, alphabetic characters, etc.) is registered as the password of the corresponding user. In FIG. 2, the user inputs a first straight line pattern starting from the point of the first row and the first column to a point of the third row and the first column, and a second straight line pattern extending from the point of the third row and the first column to the point of the third row and the second column, The password of '1478' is stored in the service providing server 200 as a registration pattern of the corresponding user in the order that these patterns go through. The actual stored information is " 1478 ", but if it is matched to the standard keypad, the first straight line pattern starting from the point of the first row and the first column to the point of the third row and the first column, The second linear pattern connected pattern to the point becomes the registration pattern of the user.

After the pattern information is transmitted from the user terminal 100 (①), the service providing server 200 may convert the number into a number (②), but the conversion to the password according to the inputted pattern information is performed by the user terminal 100 ). ≪ / RTI > At this time, information on which number and symbol each of the points included in the interface (PI) for pattern registration will be converted from may be provided from the service providing server 200 together.

4 is a diagram for explaining a pattern information-based password authentication process according to an embodiment of the present invention.

4, a user accesses a service providing server 200 through a user terminal 100 to receive a service provided by the service providing server 200, for example, a money transfer service ). Such a money transfer service may be provided through a web page provided by the service providing server 200. [

When the service is provided, the service providing server 200 may request the user to input the password for authentication of the user. The user can prepare a password input by selecting a password input field on a web page provided by the service providing server 200.

When the user inputs a password, a virtual keypad is provided by the service providing server 200 (2). In a virtual keypad provided when a password is input, numbers, symbols, or text (e.g., alphabetic characters, etc.) may be randomly arranged. For example, as shown in FIG. 5A, a virtual keypad in which numbers and symbols are randomly arranged may be provided, and a virtual keypad may be provided in which alphabetic characters and numbers are randomly arranged, as shown in FIG. 5B .

The service providing server 200 generates a one-time password, i.e., an OTP (One Time Password), by overlapping the pre-registered pattern with the virtual keypad provided to the user currently provided with the service. In other words, when the user follows the pre-registered pattern of the provided virtual keypad, the OTP to be used for providing the service is generated through a number, a symbol or a text (for example, alphabetic characters and the like) sequentially selected.

The virtual keypad provided is a virtual keypad having a number of '2', '0', '6', '7', '1', '9', '3', ' , A first straight line pattern in which the pattern registered by the user extends from the point of the first row and the first column to the point of the third row and the first column, 273 # ', which is a sequence of overlapping the registered patterns on the virtual keypad, is generated as an OTP when the second straight line pattern leading from the point of the row 1 column to the point of the third row 2 column is a sequential combination pattern.

The virtual keypad provision step (2) and the OTP creation step (3) may be performed at the same time, or may be performed after the mutual relationship is reversed.

The user can input the password according to the pattern previously registered on the virtual keypad provided through the user terminal 100 (4). The arrangement of numbers, symbols, or text (such as alphabetic characters) on the virtual keypad is not important, and the user only needs to enter the password according to the pattern he or she has previously registered. That is, in the case where the previously registered pattern is a pattern in which a first straight line pattern extending from the point of the first row and the first column to the point of the third row and the first column and a second straight line pattern extending from the point of the third row and the first column to the point of the third row and the second column are sequentially combined 273 # " may be input as a password on the virtual keypad provided in accordance with the pattern. The password thus inputted is transmitted to the service providing server 200 (5).

The service providing server 200 performs authentication by comparing the password transmitted from the user terminal 100 with the OTP generated by itself (6). The OTP generated by itself and the password transmitted from the user terminal 100 are all equal to '273 #', and thus it is determined that the authentication is successful. The service providing server 200 may compare the OTP and the password '273 #' by their own number, but may compare the number with the encrypted value. For example, the OTP generated by the service providing server 200 itself may be encrypted (for example, a hash function value), and the password input from the user terminal 100 may be transmitted in encrypted form to compare the two . For this, the user terminal 100 needs to encrypt the password entered by the user before it is transmitted to the service providing server 200. According to this, since even a one-time password that can not be used at the time of using the same service in the future is encrypted, its security can be further improved.

The number and symbol arrangement of virtual keypads generated by the service providing server 200 and provided to the user terminal 100 may be changed every time. Therefore, the pattern inputted by the user is always the same in the virtual keypad, but the password actually input is different at every authentication. Therefore, since only the previously registered pattern can be stored in the user's position, the convenience can be improved while the password transmitted for authentication is changed every time. Therefore, even if the password is exposed by the third party attack, It can not be used at the time of use.

FIG. 6 is a block diagram illustrating functions of the service providing server 200 according to an embodiment of the present invention.

6, the service providing server 200 includes a service providing unit 210, a pattern registering unit 220, a virtual keypad providing unit 230, an OTP generating unit 240, a password authenticating unit 250, 260, and a control unit 270.

A pattern registering unit 220, a virtual keypad providing unit 230, an OTP generating unit 240, a password authenticating unit 250, a communication unit 260, and a control unit 270 according to an embodiment of the present invention. And program modules capable of communicating with an external device other than the service providing server 200. These program modules may be included in an operating system, an application program module, and other program modules, or may be stored in various known devices. In addition, these program modules may be stored in a remote storage device capable of communicating in addition to the service providing server 200. [ These program modules include, but are not limited to, routines, subroutines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types as described below in accordance with the present invention.

The service providing unit 210 provides a service requested through the user terminal 100. The service provision may be performed through a web page provided by the service provision server 200 or the like. The service provider 210 can log in through the user identification information input through the web page, and can identify the user through the login.

The pattern registration unit 220 performs a function of registering a pattern to be input when a user uses a service requiring authentication in advance. The pattern registration unit 220 may provide an interface for allowing a user to input a pattern. In the interface for pattern registration, a plurality of points may be arranged in a matrix form. When the user inputs a desired pattern through the interface, the pattern information is transmitted to the service providing server 200. The pattern registration unit 220 overlaps the transmitted pattern information with the standard keypad, For example, alphabetic characters, etc.) as a registration pattern for the user. As described above, a combination of numbers, symbols or text (e.g., alphabetic characters, etc.) stored as an actual registration pattern, but a combination of corresponding numbers, symbols, or text (e.g., alphabetic characters, etc.) The user can grasp the registration pattern of the user through a combination of numbers, symbols, or text (e.g., alphabetic characters, etc.) in the future. Also, according to another embodiment, the pattern input by the user may be converted into a number, symbol or text (e.g., alphabetic character) in the user terminal 100 and transmitted to the service providing server 200.

The virtual keypad providing unit 230 provides a virtual keypad to the user terminal 100 when a password is required when using the service. A virtual keypad is a keypad in the form of a random frame of numbers, symbols or text (e.g., alphabetic characters, etc.) within a fixed number of rows and columns of fixed frame, for example, a matrix.

The OTP generation unit 240 generates a number, a symbol, or text (e.g., alphabetic characters) corresponding to a pattern previously registered by a user who is provided with the service in the virtual keypad provided by the virtual keypad providing unit 230, , I.e., OTP. The pattern previously registered by the user is stored in the form of a password, and the user can grasp the previously registered pattern through the location of the corresponding password in the standard keypad. The pattern thus identified can be generated in the OTP by overlapping within the generated virtual keypad and sequentially combining numbers, symbols or text (e.g., alphabetic characters) arranged at positions where the patterns overlap.

The password authentication unit 250 receives the password input by the user on the provided virtual keypad, and compares the password with the OTP generated by the OTP generation unit 240 to perform authentication.

The virtual keypad providing unit 230, the OTP generating unit 240 and the password authenticating unit 250 may be included in a separate authentication server (not shown) other than the service providing server 200. In this case, the password authenticating unit 250 can receive the identification information from the user terminal 100, distinguish the user terminal 100, directly provide the virtual keypad to the user terminal 100, 100) and can perform authentication. At this time, the virtual keypad may be generated by the service providing server 200 and transmitted to the authentication server.

The communication unit 260 receives pattern information and input password from the user terminal 100, provides a virtual keypad to the user terminal 100, and provides an OTP. The communication unit 260 functions as a whole to enable the service providing server 200 to perform data communication with other components.

The control unit 270 controls data flow between the service providing unit 210, the pattern registration unit 220, the virtual keypad providing unit 230, the OTP generating unit 240, the password authenticating unit 250 and the communication unit 260 Function can be performed. That is, the control unit 270 receives a service unique to the service providing unit 210, the pattern registering unit 220, the virtual keypad providing unit 230, the OTP generating unit 240, the password authenticating unit 250, Function can be controlled.

The embodiments of the present invention described above can be implemented in the form of program instructions that can be executed through various computer components and recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, and the like, alone or in combination. The program instructions recorded on the computer-readable recording medium may be those specially designed and constructed for the present invention or may be those known and used by those skilled in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tape, optical recording media such as CD-ROMs and DVDs, magneto-optical media such as floptical disks, media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules for performing the processing according to the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, Those skilled in the art will appreciate that various modifications, additions and substitutions are possible, without departing from the scope and spirit of the invention as disclosed in the accompanying claims.

Therefore, the spirit of the present invention should not be construed as being limited to the above-described embodiments, and all of the equivalents or equivalents of the claims, as well as the following claims, I will say.

100: User terminal
200: service providing server
210: Service provider
220: pattern registration section
230: Virtual keypad provisioning
240: OTP generation unit
250: Password authentication unit
260:
270:

Claims (12)

A method for authenticating a password based on pattern information in a service providing server,
Providing a virtual keypad to a user terminal to allow a user to enter a combination of numbers, symbols, or text in the virtual keypad according to pre-registration patterns;
Generating a number, a symbol or text according to the registration pattern on the virtual keypad as a one-time password; And
Receiving a combination of numbers, symbols, or texts input by the user as a password, and performing authentication through comparison with the generated one-time password. The method according to claim 1,
Before the virtual keypad providing step,
Receiving pattern information input by the user from a user terminal; And
Further comprising the step of storing, as the registration pattern, a combination of numbers, symbols, or texts that match pattern information entered by the user on a standard keypad. 3. The method of claim 2,
Wherein the pattern information receiving step comprises:
Providing a pattern registration interface having a plurality of points arranged in a matrix form to the user terminal; And
And receiving pattern input information input by a user through the pattern registration interface. 3. The method of claim 2,
The standard keypad may be a keypad in which numbers, symbols, or text are sequentially arranged. The method according to claim 1,
Wherein the virtual keypad is a keypad in which numbers, symbols, or texts are randomly arranged. The method according to claim 1,
In the authentication step,
And comparing the encrypted value of the one-time password with an encrypted value of a password received from the user terminal. A server for authenticating a password based on pattern information,
A virtual keypad providing means for providing a virtual keypad to a user terminal to allow a user to input a number, a symbol or a combination of texts according to a pre-registration pattern in the virtual keypad;
An OTP (One Time Password) generating unit for generating a one-time password with numbers, symbols or texts conforming to the registration pattern on the virtual keypad; And
And a password authentication unit that receives a combination of numbers, symbols, or texts input by the user as a password and performs authentication through comparison with the generated one-time password. 8. The method of claim 7,
Further comprising a pattern registration unit for receiving the pattern information input by the user from the user terminal and storing a combination of numbers, symbols or texts matched with the pattern information input by the user on the standard keypad as the registration pattern, Pattern information based password authentication server. 9. The method of claim 8,
Wherein the pattern registration unit comprises:
Wherein the pattern registration interface provides the pattern registration interface in which a plurality of points are arranged in a matrix form, and receives pattern input information input by a user through the pattern registration interface. 9. The method of claim 8,
Wherein the standard keypad is a keypad in which numbers, symbols, or texts are sequentially arranged. 8. The method of claim 7,
Wherein the virtual keypad is a keypad in which numbers, symbols, or texts are randomly arranged. 8. The method of claim 7,
The password authenticating unit,
Wherein the authentication is performed by comparing an encryption value of the one-time password with an encryption value of a password received from the user terminal.

Images