KR20170135444A - Method and apparatus for authentication using layered pattern - Google Patents

Abstract

Disclosed are a method for authenticating use of a user terminal using a layered pattern, and an apparatus thereof. A method for registering a layered pattern performed by a user terminal comprises the steps of: determining the number of layers having a pattern to be registered on the basis of setting information for a pattern registration; providing a pattern registration interface using a plurality of layers in accordance with the determined number of layers; receiving pattern registration information using a layer movement function provided by the pattern registration interface; and registering the pattern on the layers in accordance with the pattern registration information. Accordingly, a pattern is layered by using a plurality of layers, and thus vulnerabilities of a pattern authentication with respect to a shoulder-surfing attack, a recording attack, a smudge attack, etc. can be remedied.

Description

[0001] METHOD AND APPARATUS FOR AUTHENTICATION USING LAYERED PATTERN [0002]

The present invention relates to pattern-based authentication techniques, and more particularly, to a method and apparatus for authenticating use of a user terminal using a layered pattern.

As the number of smartphone users increases, a variety of services using smartphones are being provided, and personal information necessary for using them is stored in smartphones. The importance of user authentication such as passwords is also increasing to prevent such information from being exposed.

Generally, 4 digit PIN (Personal Identification Number) or text-based password can be easily authenticated by using their own knowledge without need of additional hardware. However, this authentication method is vulnerable to a recording attack (Recording Attack), which takes a user's authentication process by using a recording device such as a shoulder-surfing attack or a camera, Do.

Also, Smudge Attack is an attack that is reported to be vulnerable to devices that incorporate touch screen based input devices, mainly smartphones.

FIG. 1 is an exemplary view for explaining a smear attack for a user terminal having a touch screen based input device incorporated therein. This attack technique is mainly used in an Android-based smartphone using pattern-based user authentication software. When a user draws a pattern using a user's finger on a touch screen in order to input a unique pattern of the user, This remains on the screen of the smartphone leaving a trace of the pattern, and the attacker who obtained this information is a way to infer the pattern of the user. That is, since the pattern as shown in FIG. 1 (a) can leave the pattern trace as shown in FIG. 1 (b), the pattern of the user can be leaked.

In particular, according to a recent study, as shown in FIG. 1, a lock pattern used by a user has a limited number of patterns with an average of 5 points, and 8776 of 879112 patterns of actual patterns using 9 points are 2.3% It is very vulnerable due to security. However, there is a lack of technology that complements the vulnerability of user authentication technology based on this pattern.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a method of registering a layered pattern.

It is another object of the present invention to provide a method of authenticating a layered pattern.

Another object of the present invention is to provide a user terminal for performing authentication of a layered pattern.

According to another aspect of the present invention, there is provided a method of registering a layered pattern performed by a user terminal, the method comprising: determining a number of layers to be registered with a pattern based on setting information for pattern registration; Providing a pattern registration interface using a plurality of layers according to a determined number of layers; Receiving pattern registration information using a layer movement function provided by a pattern registration interface; And registering the pattern on the plurality of layers in accordance with the pattern registration information.

Here, the setting information for pattern registration may include at least one of information on the number of layers and information on the number of dots for inputting a pattern included in each layer.

Here, the pattern registration interface may provide a layer moving function using a volume control button of a user terminal or a slide of a touch screen.

Here, the pattern registration interface may display only a layer in which a pattern is input among a plurality of layers through a user terminal.

Here, the step of registering a pattern on the plurality of layers may include: determining a first layer in which a pattern starts according to pattern registration information; And a pattern starting from the initial layer and moving the layer according to the pattern registration information on a plurality of layers to register the input pattern.

According to another aspect of the present invention, there is provided a method of authenticating a layered pattern performed by a user terminal, the method comprising: receiving pattern input information input using a layer movement function; Determining a layered input pattern that is input on the plurality of layers in accordance with the received pattern input information; Comparing a layered registration pattern previously registered on a plurality of layers with a layered input pattern; And allowing access to the user terminal if the layered registration pattern and the layered input pattern match.

Here, the layer moving function can move the layer on a plurality of layers using a volume control button of a user terminal or a slide of a touch screen.

Here, the step of determining a layered input pattern input on the plurality of layers may display only a layer in which a pattern is input from among a plurality of layers through the user terminal.

The step of determining a layered input pattern input on the plurality of layers may include: determining a first layer in which a pattern starts according to pattern input information; And moving the layer in accordance with the pattern input information on the plurality of layers starting from the initial layer and determining the input pattern as a layered input pattern.

According to another aspect of the present invention, there is provided a user terminal for performing authentication of a layered pattern, the layer including a plurality of layers, A recognition unit; A pattern recognition unit that recognizes a layered input pattern input through layer movement on a plurality of layers; A pattern registration unit for storing layered registration patterns previously registered on a plurality of layers; And an authentication processing unit for allowing access to the user terminal when the layered registration pattern and the layered input pattern coincide with each other.

Here, the layer movement recognizing unit may receive layer movement information input by using a volume control button of a user terminal or a slide of a touch screen.

Here, the layer movement recognition unit may feed back the completion of movement of the layer in accordance with the layer movement information, using a signal set in advance.

In the authentication method and apparatus using the layered pattern according to the embodiment of the present invention, the patterns are layered by using a plurality of layers, and thereby a shoulder-surfing attack, a recording attack, and a smear attack Smudge Attack) can be improved.

Also, there is an advantage that the user convenience can be maintained by implementing the layer moving function using the existing functions of the user terminal.

FIG. 1 is an exemplary view for explaining a smear attack for a user terminal having a touch screen based input device incorporated therein.
2 is an exemplary diagram illustrating a layered pattern according to an embodiment of the present invention.
3 is an exemplary diagram illustrating registration and authentication for a layered pattern according to an embodiment of the present invention.
4 is an exemplary view for explaining a layered pattern according to another embodiment of the present invention.
5 is a flowchart illustrating a method of registering a layered pattern performed by a user terminal according to an embodiment of the present invention.
6 is a flowchart illustrating a method of authenticating a layered pattern performed by a user terminal according to an embodiment of the present invention.
FIG. 7 is a block diagram illustrating a user terminal that performs authentication for a layered pattern according to an embodiment of the present invention. Referring to FIG.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. Like reference numerals are used for like elements in describing each drawing.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

2 is an exemplary diagram illustrating a layered pattern according to an embodiment of the present invention.

Referring to FIG. 2, according to an embodiment of the present invention, a pattern may be set on a plurality of layers.

First, FIG. 2 (a) shows the structure of a plurality of layers. Specifically, a pattern can be registered or inputted on n layers. Layer-2, Layer-3, ... with the highest level of Layer-1. , A layer- (n-1), and a layer-n. Here, the depth of a plurality of layers may be determined by n, and n may be set to infinity. Referring to FIG. 2 (a), a pattern may be registered or input on a plurality of layers such as Layer-1, Layer-2 and Layer-3.

2 (b) is a top view of the patterns set in Layer-1, Layer-2 and Layer-3 as shown in FIG. 2 (b), the pattern appears to be registered or input on the same plane, but it can be seen that the pattern actually has a three-dimensional three-dimensional structure spanning three layers as shown in FIG. 2 (c).

FIG. 2 shows a case where a pattern is registered or input in successive layers such as Layer-1, Layer-2 and Layer-3. However, the pattern may start in a layer other than Layer-1, Or may be registered or entered on a non-discontinuous layer. In FIG. 2, each layer includes nine dots. However, the present invention is not limited thereto.

3 is an exemplary diagram illustrating registration and authentication for a layered pattern according to an embodiment of the present invention.

First, referring to FIG. 3 (a), a pattern can be entered and registered for each layer on a plurality of layers. For example, patterns can be sequentially entered and registered for Layer-1, Layer-2, and Layer-3.

Further, according to the present invention, the number of layers is infinite, the user can arbitrarily define them, and the movement between layers can be freely moved at any point. Furthermore, the present invention does not exclude the registration of all patterns in one layer.

It is a matter of course that the slide movement and the volume adjustment button of the touch screen of the user terminal can be used for layer movement at the time of pattern registration, and the layer movement can be performed by various methods set by the user.

Next, referring to FIG. 3 (b), when there are a plurality of layers, it is necessary to input additional information, so that layer movement information can be input using a volume control button of a user terminal such as a smart phone.

For example, when the pattern is divided into three layers as shown in FIG. 3 (b), the user presses the volume control button of the user terminal at the arrow point of each layer in FIG. 3 (b) As shown in FIG.

In this case, the pattern information input screen for authentication may have the same configuration as the screen for the existing pattern authentication, so that it is possible for the others to know whether or not the layer is moved. Also, in order to prevent false entry of the user, the user holding the user terminal in the hand can recognize the layer movement through the operation of the vibration sensor corresponding to the number of button input times of the user.

Therefore, the user who inputs the pattern information authenticates the user by drawing the patterns recorded on the three layers. However, since the attacker who performs the peeping attack or the smudge attack can only acquire the 2D information displayed on the screen of the user terminal, It becomes impossible. In addition, this can be a factor that makes the random attack and recording attack difficult.

4 is an exemplary view for explaining a layered pattern according to another embodiment of the present invention.

Referring to FIG. 4 (a), there may be a plurality of layers without a pattern, and the pattern can be registered or inputted only to one layer. 4 (a), by inserting n empty layers (for example, Layer-1, Layer-2, ..., Layer-n) before registering or inputting a pattern, It can be difficult to know whether the pattern starts. That is, the pattern can be registered or input only in Layer- (n + 1).

4B, by registering n layer information between layers in a process of registering or inputting a pattern, it is possible for an attacker to make it difficult to know layer information between patterns. Specifically, according to Fig. 4B, n layers can be added between a pattern registered or input in the first layer and a pattern registered or input next thereto.

Therefore, the two methods according to FIGS. 4 (a) and 4 (b) can be used in combination to improve the complexity, thereby increasing the complexity of the attack.

Patterns registered or input on a plurality of layers by the techniques shown in Figs. 2 to 4 may be defined as a layered pattern.

A pattern previously registered on a plurality of layers may be defined as a layered registration pattern, and a pattern input on a plurality of layers for authentication may be defined as a layered input pattern.

Accordingly, the user terminal can perform authentication by comparing the layered input pattern with the layered registration pattern, which will be described in more detail below.

5 is a flowchart illustrating a method of registering a layered pattern performed by a user terminal according to an embodiment of the present invention.

Referring to FIG. 5, the user terminal can determine the number of layers to be registered with the pattern based on the setting information for pattern registration (S510). That is, the user can preset the number of layers to be registered with the pattern. For example, the number of layers to which a pattern is registered may be set from 1 to infinity. Here, the setting information for pattern registration may include at least one of information on the number of layers and information on the number of dots for inputting a pattern included in each layer.

The user terminal can provide a pattern registration interface using a plurality of layers according to the number of layers (S520). The pattern registration interface may provide a layer shift function using a volume control button of a user terminal or a slide of a touch screen. In addition, the pattern registration interface can display only a layer in which a pattern is input from among a plurality of layers through the user terminal, thereby preventing the movement of the layer from being exposed to the attacker.

The user terminal can receive the pattern registration information using the layer movement function provided by the pattern registration interface (S530). Here, the pattern registration information may include movement information on a layer, information on a region in which a pattern is registered, and the like. In addition, the pattern registration information can be generated through input through the touch screen of the user terminal and input through the volume control button.

The user terminal can register a pattern on a plurality of layers according to pattern registration information (S540). That is, the pattern generated according to the pattern registration information can be stored in the user terminal. In detail, the user terminal can determine the initial layer in which the pattern starts according to the pattern registration information. Also, the user terminal starts from the first layer, and can move the layer according to the pattern registration information on a plurality of layers to register the input pattern.

6 is a flowchart illustrating a method of authenticating a layered pattern performed by a user terminal according to an embodiment of the present invention.

Referring to FIG. 6, the user terminal can receive pattern input information input using the layer moving function (S610). Here, the layer moving function can move a layer on a plurality of layers by using a volume control button of a user terminal or a slide of a touch screen.

The user terminal may determine a layered input pattern that is input on the plurality of layers in accordance with the pattern input information (S620). That is, the user terminal can display only a layer in which a pattern is input from among a plurality of layers through the user terminal, thereby preventing the movement of the layer from being exposed to the attacker. For example, the user terminal may determine the initial layer from which the pattern begins based on the pattern input information. Also, the user terminal may start from the initial layer, and move the layer according to the pattern input information on a plurality of layers to determine a pattern to be input as a layered input pattern.

The user terminal may compare the layered registration pattern previously registered on the plurality of layers with the layered input pattern (S630). In detail, the layered registration pattern may be registered in the user terminal through the process of FIG. 5, and the layered registration pattern registered in advance may be compared with the layered input pattern inputted to access the user terminal.

Accordingly, the user terminal may allow access to the user terminal when the layered registration pattern and the layered input pattern coincide (S640).

FIG. 7 is a block diagram illustrating a user terminal that performs authentication for a layered pattern according to an embodiment of the present invention. Referring to FIG.

The user terminal 10 according to an embodiment of the present invention may refer to various smart computing devices such as smart phones, tablet computers, tabletop computers, and the like.

Referring to FIG. 7, a user terminal 10 that performs authentication of a layered pattern according to an embodiment of the present invention includes a layer movement recognition unit 100, a pattern recognition unit 200, a pattern registration unit 300, And an authentication processing unit (400).

The layer movement recognition unit 100 can recognize the layer movement on a plurality of layers in accordance with the layer movement information generated based on the layer movement function. Here, the layer moving function can move a layer on a plurality of layers using a volume control button of the user terminal 10 or a slide of a touch screen. For example, the layer movement recognition unit 100 may receive layer movement information input using a volume control button of the user terminal 10 or a slide of the touch screen. In addition, the layer movement recognition unit 100 may feed back the completion of movement of the layer according to the layer movement information using a preset signal, and the previously set signal may be vibration, sound, or the like.

The pattern recognition unit 200 can recognize a layered input pattern input through layer movement on a plurality of layers and the pattern registration unit 300 can store a layered registration pattern registered in advance on a plurality of layers . That is, the pattern registration unit 300 can store a pattern input by the pattern recognition unit 200. [

The authentication processing unit 400 may allow access to the user terminal 10 when the layered registration pattern matches the layered input pattern. In addition, the authentication processing unit 400 may restrict access to the user terminal 10 when the layered registration pattern and the layered input pattern do not match, and in this case, may request further information.

The authentication method and apparatus using a layered pattern according to an embodiment of the present invention may be classified into a layered pattern using a plurality of layers, thereby providing a layered pattern by using a layered pattern such as a shoulder-surfing attack, a recording attack, and a smudge attack Attack and so on.

Also, there is an advantage that the user convenience can be maintained by implementing the layer moving function using the existing functions of the user terminal.

Although the authentication device using the layered pattern according to the embodiment of the present invention has been described as being arranged in each constituent part for convenience of explanation, at least two of the constituent parts may be combined to form one constituent part, It is to be understood that the invention is not limited to the disclosed embodiments, but may be embodied in many other specific forms without departing from the spirit or essential characteristics thereof.

In addition, the operation of the authentication apparatus using the layered pattern according to the embodiment of the present invention can be implemented as a computer-readable program or code on a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. The computer-readable recording medium may also be distributed and distributed in a networked computer system so that a computer-readable program or code can be stored and executed in a distributed manner.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

10: User terminal 100: Layer movement recognition unit
200: pattern recognition unit 300: pattern registration unit
400: authentication processing unit

Claims (12)

A method for registering a layered pattern performed by a user terminal,
Determining a number of layers to be registered with a pattern based on setting information for pattern registration;
Providing a pattern registration interface using a plurality of layers according to the determined number of layers;
Receiving pattern registration information using a layer movement function provided by the pattern registration interface; And
And registering the pattern on the plurality of layers in accordance with the pattern registration information. The method according to claim 1,
The setting information for the pattern registration includes:
Information on the number of layers, and information on the number of dots for inputting a pattern included in each layer. The method according to claim 1,
Wherein the pattern registration interface comprises:
Wherein the layer moving function is provided by using a volume control button of the user terminal or a slide of a touch screen. The method according to claim 1,
Wherein the pattern registration interface comprises:
Wherein only the layer to which a pattern is inputted among the plurality of layers is displayed through the user terminal. The method according to claim 1,
Wherein the step of registering a pattern on the plurality of layers comprises:
Determining a first layer in which a pattern starts according to the pattern registration information; And
And registering a pattern to be inputted, starting from the first layer, moving the layer according to the pattern registration information on the plurality of layers, and registering the input pattern. A method for authenticating a layered pattern performed by a user terminal,
Receiving pattern input information inputted using a layer moving function;
Determining a layered input pattern that is input on the plurality of layers in accordance with the received pattern input information;
Comparing the layered registration pattern previously registered on the plurality of layers with the layered input pattern; And
And allowing access to the user terminal if the layered registration pattern and the layered input pattern match. The method of claim 6,
The layer moving function includes:
Wherein a layer shift operation is performed on the plurality of layers using a volume control button of the user terminal or a slide of a touch screen. The method of claim 6,
Wherein the step of determining a layered input pattern input on the plurality of layers comprises:
Wherein only a layer to which a pattern is input among the plurality of layers is displayed through the user terminal. The method of claim 6,
Wherein the step of determining a layered input pattern input on the plurality of layers comprises:
Determining a first layer in which a pattern starts according to the pattern input information; And
And moving the layer in accordance with the pattern input information on the plurality of layers, starting from the first layer, and determining the input pattern as the layered input pattern. A user terminal for performing authentication on a layered pattern,
A layer movement recognizing unit for recognizing a layer movement on a plurality of layers in accordance with the layer movement information generated based on the layer movement function;
A pattern recognition unit for recognizing a layered input pattern input through layer movement on the plurality of layers;
A pattern registration unit for storing layered registration patterns previously registered on the plurality of layers; And
And an authentication processing unit for allowing access to the user terminal when the layered registration pattern and the layered input pattern coincide with each other. The method of claim 10,
Wherein the layer movement recognition unit comprises:
Wherein the controller receives the layer shift information input using a volume control button of the user terminal or a slide of a touch screen. The method of claim 11,
Wherein the layer movement recognition unit comprises:
Wherein feedback of the completion of movement of the layer in accordance with the layer movement information is fed back by using a preset signal.

Images