KR20160080976A - Method for certificating user identity using wood grain - Google Patents

Abstract

Provided is a user authentication method comprising: a step of mapping a reference wood grain image extracted from wood grain of wood inserted into a user authentication object with the user authentication object, and storing the mapping result; a step of receiving user authentication data including identification data which identifies the recognized wood grain image of the user authentication object recognized from a user authentication terminal, and the user authentication object; and a step of authenticating a user comparing the reference wood grain image and the recognized wood image.

Description

METHOD FOR CERTIFICATING USER IDENTITY USING WOOD GRAIN BACKGROUND OF THE INVENTION [0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a user authentication method using a grain image, and a method of authenticating a user using a unique image of a grain.

Recently, as the use of resident registration number is totally banned and the security problem due to leakage of user information becomes serious, various studies are being conducted on a method of identifying a user while maintaining security.

At this time, a method of authenticating a login using an image object is performed by a method of recognizing an image object and authenticating a user. In this connection, Korean Prior Publication No. 2012-0037330 (published on April 19, 2012) discloses a method of generating an image object corresponding to a QR code according to user identification information, authenticating a user using the generated image object, A method for handling whether or not to approve a request is disclosed.

However, in order to generate the image object according to the user identification information, the QR code must be used. Since the QR code is generated by a predetermined algorithm, the user information can be leaked when the algorithm or information is leaked.

Korean Patent Laid-Open No. 10-2012-0037330 (published on April 19, 2012) discloses a "login authentication method and system using an image object ".

One embodiment of the present invention is a method of replacing a replicable identification object such as an existing QR code by embedding or extinguishing a tree in an authentication object to be authenticated and performing authentication using the inherent grain of the tree, At the same time, by inserting a chip into the authentication object and authentication with the grain image, it is possible to provide a method of enhancing and duplicating the security level for identifying and authenticating the user. It should be understood, however, that the technical scope of the present invention is not limited to the above-described technical problems, and other technical problems may exist.

According to an aspect of the present invention, there is provided a method of managing a user authentication object, the method comprising: storing a reference grain image extracted from a wood grain inserted into a user authentication object, Receiving user authentication data including a recognized grain image of the user authentication object recognized from the user authentication terminal and identification data identifying the user authentication object, and authenticating the user by comparing the reference grain image and the recognized grain image do.

According to any one of the above-mentioned objects of the present invention, there is an effect that security can be enhanced by embedding or extinguishing a tree in an authentication object and authenticating a user using a unique grain image of the tree.

1 is a block diagram illustrating a user authentication system using a grain image according to an embodiment of the present invention.
2 is a block diagram illustrating the user authentication server shown in FIG.
3 is a diagram for explaining a user authentication object and a minutiae point extraction method shown in FIG.
FIG. 4 is a view for explaining an embodiment for extracting feature points from the user authentication object shown in FIG. 1. Referring to FIG.
FIG. 5 is a diagram illustrating a process of transmitting and receiving data between respective components included in the user authentication system using the grain image of FIG. 1 according to an embodiment of the present invention.
FIG. 6 is a flowchart illustrating a method for authenticating a user using a grain image according to an exemplary embodiment of the present invention. Referring to FIG.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "including" an element, it is to be understood that the element may include other elements as well as other elements, And does not preclude the presence or addition of one or more other features, integers, steps, operations, components, parts, or combinations thereof.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating a user authentication system using a grain image according to an embodiment of the present invention. Referring to FIG. 1, a user authentication system 1 using a grain image may include a user authentication object 100, a user authentication terminal 200, and a user authentication server 400. However, since the user authentication system 1 using the grain image of FIG. 1 is only an embodiment of the present invention, the present invention is not limited to FIG.

At this time, the respective components of FIG. 1 are generally connected through a network 300. For example, as shown in FIG. 1, a user terminal 200 and a user authentication server 400 may be connected through a network 300.

An example of such a network 300 is an Internet, a LAN (Local Area Network), a local area network (LAN), and the like. The network 300 is a connection structure in which information can be exchanged between respective nodes such as terminals and servers. ), Wireless LAN (Local Area Network), WAN (Wide Area Network), PAN (Personal Area Network), 3G, 4G, LTE, Wi-Fi and the like. The user authentication terminal 200 and the user authentication server 400 shown in FIG. 1 are not limited to those shown in FIG.

The user authentication object 100 may be an object capable of authenticating a user. For example, the user authentication object 100 may be a passport, a credit card, a personal identification card, or the like. Alternatively, the user authentication object 100 may be a document requiring any identification and security, such as a security document. Then, in the user authentication object 100, a tree can be inserted, and the inserted tree can be sliced and embedded or enclosed. Here, a tree can have a unique grain (wood grain), depending on the type of tree, the country of origin, the place of production, the manufacturer, and the years of growth. Accordingly, the user authentication object 100 according to an embodiment of the present invention may include a tree so that the user authentication terminal 200 can authenticate the user by using a unique grain. In addition, the user authentication object 100 may further include a chip, an image, a tag, and the like that can store user information in addition to the tree. Here, the chip may be an RFID chip, an IC chip, or the like, and the image may be a QR code, a bar code, etc., and the tag may be an RFID tag, an NFC tag, or the like. Accordingly, the user authentication object 100 allows the user authentication terminal 200 to authenticate the user through a wood grain, a chip, an image, a tag, and the like.

The user authentication terminal 200 may be a terminal that authenticates a user through the user authentication object 100 through recognition such as scanning, reading, or photographing the user authentication object 100. Here, the user authentication terminal 200 can recognize an image or a tag including the grain of the user authentication object 100 through irradiation of light such as infrared rays, ultraviolet rays, laser, or the like. Also, the user authentication terminal 200 may recognize an image or a tag including a grain of the user authentication object 100 through photographing or scanning. The user authentication terminal 200 may recognize the information of the user authentication object 100 by reading chips or tags. Here, the user authentication terminal 200 may be implemented as a terminal capable of connecting to a remote server or terminal through the network 300. [ At this time, the user authentication terminal 200 can be implemented as a computer that can access a remote server or terminal through the network 300. Here, the computer may include, for example, a notebook, a desktop, a laptop, and the like. In addition, the user authentication terminal 200 can be implemented as a terminal that can access a remote server or a terminal through the network 300. The credit inquiry terminal 100 is a wireless communication device that is guaranteed to be portable and mobility, for example, a personal communication system (PCS), a global system for mobile communications (GSM), a personal digital cellular (PDC) ), PDA (Personal Digital Assistant), IMT (International Mobile Telecommunication) -2000, Code Division Multiple Access (CDMA) -2000, W-CDMA (W-Code Division Multiple Access), Wibro (Wireless Broadband Internet) based wireless communication device, such as a smartphone, a smartpad, a tablet PC, and the like.

The user authentication server 400 may store information of the user authentication object 100. [ Here, the information of the user authentication object 100 to be stored may include information such as an image such as a grain image, a chip, a tag or a barcode or a QR code, information capable of identifying the user authentication object 100, Information. The user authentication server 400 can receive the information of the user authentication object 100 recognized by the user authentication terminal 200 from the user authentication terminal 200. [ Also, when the information of the user authentication object 100 is a grain image, the user authentication server 400 can extract the minutiae from the grain image, and confirm whether the information matches the recognized grain image. If the user is not authenticated or authenticated, the user authentication server 400 may transmit the authentication result to the user authentication terminal 200. [ Here, the user authentication server 400 may be implemented as a terminal capable of connecting to a remote server or terminal through the network 300. [ At this time, the user authentication server 400 may be implemented as a computer capable of connecting to a remote server or terminal through the network 300. Here, the computer may include, for example, a notebook, a desktop, a laptop, and the like.

FIG. 2 is a block diagram for explaining the user authentication server shown in FIG. 1, FIG. 3 is a view for explaining a user authentication object and a minutia point extraction method shown in FIG. 1, And extracting feature points from the authentication object according to an embodiment of the present invention.

Referring to FIG. 2, the user authentication server 400 may include a storage unit 410, a receiving unit 430, and an authentication unit 450.

A server (not shown) operating in conjunction with the user authentication server 400 according to an embodiment of the present invention may install or open a user authentication application, a program, a web page, or the like. Also, the user authentication program may be driven by the credit inquiry terminal 100 using a script executed in the web browser. Here, the web browser is a program that enables the use of the WWW (World Wide Web) service and is a program for receiving and displaying hypertext described in HTML (hyper text mark-up language). For example, , Chrome, and the like. Further, the application refers to an application on the terminal, for example, an app (app) running on a mobile terminal (smart phone). An app can be downloaded and installed from the mobile app marketplace, a virtual marketplace where mobile content can be bought and sold freely.

The connection of the network 300 means that the user authentication terminal 200 and the user authentication server 400 are connected to each other. Means that a server which is connected to the network 300 creates a communication object at a communication contact for communication with a terminal connected to the network 300. The server interworking with the user authentication terminal 200 can exchange data with each other through the communication object.

2, the storage unit 410 may map and store a reference grain image extracted from the wood grain inserted into the user authentication object 100, with the user authentication object 100. FIG. Here, the tree inserted into the user authentication object 100 may be a log sheet obtained by slicing a log. That is, the logs are cut to a predetermined size and processed into individual pieces, the processed pieces are boiled in a steam, dried to a moisture content of 20 to 25%, dried, and the dried pieces are sliced, It can be molded into a log sheet having a thickness. In addition, the reference grain image may be mapped and stored with identification data, such as the serial number of the user authentication object 100.

The receiving unit 430 can receive the user authentication data including the recognition grain image of the user authentication object 100 recognized from the user authentication terminal 200 and the identification data for identifying the user authentication object 100. [ Here, the identification data identifying the user authentication object may include text or image-based data identifying the user authentication object 100. The identification data for identifying the user authentication object 100 may be data stored in the IC chip, the RFID chip, or the NFC chip recognized from the user authentication object 100. [ The identification data may be data unique to the user, such as a resident registration number, or an encrypted key. The user authentication object may be any one of a passport, a credit card, a check card, a chip, an information security document, and a resident registration card. Here, the storage unit 410 may store at least one of metadata of the tree inserted in the user authentication object 100 stored in the IC chip of the user authentication object 100, the date of cutting, the date of manufacture, the slice thickness, To the user authentication object 100. When the authentication unit 450 authenticates the user, the user can be authenticated by comparing the metadata stored in the IC chip with the metadata stored in the user authentication server 100 . Accordingly, the user authentication server 400 can duplicate the authentication security using the grain image and the metadata.

The user authentication method of FIGS. 2 to 4 will be described with reference to FIG. 1, which is the same as or similar to the description of the user authentication method.

FIG. 5 is a diagram illustrating a process of transmitting and receiving data between respective components included in the user authentication system using the grain image of FIG. 1 according to an embodiment of the present invention. Hereinafter, an example of a process of transmitting and receiving a signal according to an embodiment of the present invention will be described with reference to FIG. 5. However, the present invention is not limited to such an embodiment, and according to various embodiments described above, It is apparent to those skilled in the art that the process of transmitting and receiving the shown data can be changed.

5, the user authentication server 400 maps and stores a reference grain image embedded in the user authentication object 100 with the user authentication object 100 (S5100), and stores at least one The metadata of the identification object and the identification data are mapped with the user authentication object 100 and stored (S5200).

Then, when reading the user authentication object 100 (S5300), the user authentication terminal 200 loads metadata and identification data of at least one identification object including the recognized grain image and the IC chip card (S5400) ).

Also, the user authentication terminal 200 transmits the loaded recognition grain data, the metadata of the identification object, and the identification data to the user authentication server 400 (S5500).

If at least one of the grain image, the metadata, and the identification data is the same as the previously stored grain image, metadata, and identification data (S5700), the user authentication server 400 extracts feature points of the grain image (S5600) , The authentication data is transmitted to the user authentication terminal 200 (S5900), and the user authentication terminal 200 can output the authentication data (S5910). Alternatively, when at least one of the grain image, the metadata, and the identification data is not the same as the previously stored grain image, metadata, and identification data, the user authentication server 400 transmits the unauthenticable data to the user authentication terminal 100 , So that the authentication authentication data can be output from the user authentication terminal 100 (S58O0).

The order between the above-described steps S5100 to S5910 is merely an example, but is not limited thereto. That is, the order between the above-described steps S5100 to S5910 may be mutually varied, and some of the steps may be executed or deleted at the same time.

The user authentication method of FIG. 5, which is not described herein, can be easily deduced from the same or described contents of the user authentication method described above with reference to FIGS. 1 to 4, and the description thereof will be omitted.

FIG. 6 is a flowchart illustrating a method for authenticating a user using a grain image according to an exemplary embodiment of the present invention. Referring to FIG.

The user authentication server maps the reference grain image extracted from the wood grain inserted into the user authentication object to the user authentication object and stores the same in operation S6100.

Then, the user authentication server receives the user authentication data including the recognition image of the user authentication object recognized from the user authentication terminal and the identification data for identifying the user authentication object (S6200).

Finally, the user authentication server authenticates the user by comparing the reference grain image with the recognized grain image (S6300).

The user authentication method of FIG. 6, which is not described, can be easily deduced from the same or described contents of the user authentication method described above with reference to FIG. 1 to FIG. 5, and therefore will not be described below.

The user authentication method according to the embodiment described with reference to FIG. 6 may also be implemented in the form of a recording medium including instructions executable by a computer, such as an application or a program module executed by a computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, the computer-readable medium can include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes any information delivery media, including computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism.

The user authentication method according to an embodiment of the present invention described above can be executed by an application installed in a terminal (which may include a program included in a platform or an operating system basically installed in the terminal) (I.e., a program) installed directly on the master terminal through an application providing server such as an application store server, an application, or a web server associated with the service. In this sense, the user authentication method according to an embodiment of the present invention described above is implemented as an application (i.e., a program) installed basically in a terminal or directly installed by a user and stored in a computer-readable recording medium Lt; / RTI >

It will be understood by those skilled in the art that the foregoing description of the present invention is for illustrative purposes only and that those of ordinary skill in the art can readily understand that various changes and modifications may be made without departing from the spirit or essential characteristics of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

Claims (10)

A user authentication method using a grain executed in a user authentication server,
Mapping and storing a reference grain image extracted from a wood grain inserted in a user authentication object with the user authentication object;
Receiving user authentication data including a recognition grain image of the user authentication object recognized from the user authentication terminal and identification data for identifying the user authentication object;
Authenticating a user by comparing the reference grain image with the recognized grain image;
And a user authentication method using a grain image.
The method according to claim 1,
Wherein the tree inserted into the user authentication object is a log sheet obtained by slicing a log.
The method according to claim 1,
After the step of authenticating the user by comparing the reference grain image with the recognized grain image,
Comparing the user authentication object data of the mapped and stored user authentication object with the identification data if the reference grain image and the recognized grain image are identical;
Authenticating the user as a party user when the user authentication object data and the identification data are identical;
Wherein the user authentication method further comprises:
The method according to claim 1,
Wherein the step of authenticating a user by comparing the reference grain image with the recognized grain image comprises:
Extracting feature points based on the reference grain image and the recognized grain or convex of the recognized grain image;
Comparing the extracted minutiae;
And a user authentication method using a grain.
5. The method of claim 4,
The feature points include a feature point extraction algorithm based on an image, a gradient based feature point extraction algorithm, an edge point extraction algorithm, a Scale-Invariant Feature Transform (SIFT) based feature point extraction algorithm, a SURF (Speeded Up Robust Features) Based feature extraction algorithm is extracted by any one of algorithms based on the feature extraction algorithm.
The method according to claim 1,
The identification data identifying the user authentication object,
Text or image-based data identifying the user authentication object; And
Wherein the authentication data is data stored in an IC chip, an RFID chip, or an NFC chip recognized from the user authentication object.
The method according to claim 1,
Wherein the user authentication object is any one of a passport, a credit card, a check card, a chip, an information security document, and a resident registration card.
The method according to claim 1,
Wherein the user authentication terminal is a mobile terminal storing the recognized grain image,
Wherein the user authentication server compares the stored reference grain image with the recognized grain image when an authentication request event using the recognized grain image occurs from the mobile terminal,
Wherein the mobile terminal is authenticated when the reference grain image and the recognized grain image are identical.
The method according to claim 1,
Wherein the user authentication server stores at least one of metadata of the tree inserted in the user authentication object, which is stored in the IC chip of the user authentication object, Mapping and storing,
Authenticating the user by comparing the metadata stored in the IC chip with the metadata stored in the user authentication server when the user is authenticated;
Wherein the user authentication method further comprises:
A method for providing an application that operates in a user authentication terminal in cooperation with a user authentication server that executes a user authentication method using a grain,
Wherein the user authentication server performs the method according to any one of claims 1 to 9.

Images