KR20180090733A - Fingerprint Registration and Authentication Method using Triple-Polar Minutiae - Google Patents

Abstract

A fingerprint registration method is disclosed. The fingerprint registration method comprises the following steps: (a) receiving minutiae data of a user fingerprint requiring fingerprint registration; (b) adding randomly generated dummy data to the minutiae data; and (c) generating triple polar coordinate minutiae data by using first minutiae data (M_i), arbitrarily selected from the minutiae data, and second minutiae data (M_j, M_k) arbitrarily selected except any minutiae data selected from the minutiae data to which the dummy data is added, wherein the triple polar coordinate minutiae data includes area information, distance information, first angle information, and second angle information. The present invention may provide high discrimination by comparing the minutiae more precisely than a conversion pair polar coordinate method.

Description

{Fingerprint Registration and Authentication Method using Triple-Polar Minutiae}

The present invention relates to a fingerprint registration and authentication method, and more particularly, to a method of registering and authenticating a fingerprint using minutia data based on a triple-polar structure.

The theory of fuzzy vault is a cryptographic method to safely protect biometric information. Due to the scarcity and limitations of the biometric characteristics that individuals possess when performing user authentication through biometric information, biometric templates exhibit features that are difficult to replace, unlike other authentication techniques such as passwords, pins, and token cards. Therefore, if important biometric information stored in the database is leaked to others, it can cause serious problems.

Therefore, if the fuzzy logic theory is applied to the fingerprint recognition system to enhance the security of the stored data, the fingerprint image of the user is not stored and used. In the registration process, a polynomial is generated, the fingerprint feature information of the user extracted from the fingerprint image is projected in a polynomial, and false feature information that is not placed on the generated polynomial is added to hide the real feature information from others. It is used by storing together.

After the fingerprint registration of the user is completed, the authentication process is performed between the feature information extracted from the input fingerprint image and the previously stored feature information to determine whether the fingerprint is the same as the fingerprint stored in the input fingerprint. More specifically, after the preprocessing step is performed in the same manner as the registration process, only the real feature information is extracted from the vault containing all the false feature information, and the polynomial generated therefrom is compared with the same one used in the registration process. That is, the security of the fingerprint fuzzy system based on the fuzzy logic theory depends on the difficulty of distinguishing the real fingerprint feature information from the false fingerprint feature information from the bolt.

On the other hand, pair-polar is a form of feature information extracted and stored in the user's fingerprint image. If the minutiae in each fingerprint are used individually, it can lead to a large loss in the accuracy of the authentication due to variable factors such as fingerprint registration or pressure applied at the time of authentication or moisture, current, and rotation of the skin. If we use relationship information such as their relative position or orientation rather than individual feature points within a fingerprint, we can minimize the influence from the context-dependent variable factors and maintain the characteristics of the fingerprint itself (transformation-invariant) You can increase the stage. More specifically, each feature point is matched with a polar coordinate in a fingerprint of a user to form a triangle having three points. In the authentication process, thresholds for an area and an angle are set to determine similarity with the registered fingerprint information.

In the following Non-Patent Document 1, a fingerprint authentication technique based on a pair-polar structure is proposed. Non-Patent Document 2 proposes a fingerprint encryption system based on multiple fuzzy bolts. However, in the former case, the accuracy of the authentication process is lowered because the one-dimensional line and angle are used as the authentication information. In the latter case, there is a problem that errors may occur in the process of excluding false specific information when using only fuzzy volts.

 Cai Li and Jiankun Hu, "A Security-Enhanced Alignment-Free Fuzzy Vault-Based Fingerprint Cryptosystem Using Pair-Polar Minutiae Structures", IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, VOL.11, NO.3, MARCH 2016.  Ali Akbar Nasiri and Mahmood Fathy, "Alignment-Free Fingerprint Cryptosystem Based On Multiple Fuzzy Vaults", ARTIFICAL INTELLIGENCE AND SIGNAL PROCESSING (AISP), 2015 INTERNATIONAL SYMPOSIUM ON.

It is an object of the present invention to provide a fingerprint registration and authentication method based on a triple-polar structure having a higher discrimination power than a conventional fingerprint authentication model.

) 및 상기 더미 데이터가 추가된 특징점 데이터 중에서 상기 선택된 어느 하나의 특징점 데이터를 제외하고 임의로 선택된 제2 특징점 데이터(

)를 이용하여 삼중 극좌표(triple-polar) 특징점 데이터를 생성하는 단계를 포함하고, 상기 삼중 극좌표 특징점 데이터는 넓이 정보, 거리 정보, 제1 각도 정보 및 제2 각도 정보를 포함할 수 있다.A method for registering fingerprints according to an embodiment of the present invention includes the steps of: (a) receiving minutia data, which are data on minutiae of a user fingerprint that requires registration of a fingerprint, (b) And (c) adding the first feature point data (

) And arbitrarily selected second minutia point data excluding minutia point data selected from minutia data to which the dummy data is added

), And the triplet polar feature point data may include width information, distance information, first angle information, and second angle information.

)를 이용하여 삼중 극좌표(triple-polar) 특징점 데이터를 생성하는 단계, 및 (c) 상기 삼중 극좌표 특징점 데이터와 기 등록된 볼트 데이터를 비교하여 상기 인증이 필요한 사용자에 대한 인증을 수행하는 단계를 포함하고, 상기 삼중 극좌표 특징점 데이터는 넓이 정보, 거리 정보, 제1 각도 정보 및 제2 각도 정보를 포함할 수 있다.A fingerprint authentication method according to an embodiment of the present invention includes the steps of: (a) receiving minutia data, which are data on minutiae of a user fingerprint that needs authentication, (b) extracting minutia point data arbitrarily selected from the minutia data

(C) comparing the triple polar feature point data with pre-registered vault data to perform authentication for a user requiring the authentication; and (c) And the triple polar feature point data may include the width information, the distance information, the first angle information, and the second angle information.

According to an embodiment of the present invention, it is possible to compare feature points more accurately than a conventional pair-polar technique and to provide a high discriminative power.

In addition, it is possible to provide a solution useful for protecting the template, and at the same time to provide a fingerprint cryptographic system having a small overhead.

1 is a block diagram of a fingerprint registration apparatus according to an embodiment of the present invention.
FIG. 2 shows a coordinate system for explaining the area information, the distance information, the first angle information, and the second angle information.
3 is a block diagram of a fingerprint authentication device according to an embodiment of the present invention.
4 is a flowchart of a fingerprint registration method according to an embodiment of the present invention.
5 is a flowchart of a fingerprint authentication method according to an embodiment of the present invention.
6 is a specific flowchart of a step of performing authentication by comparing triple polar feature point data with pre-registered vault data.

It is to be understood that the specific structural or functional descriptions of embodiments of the present invention disclosed herein are presented for the purpose of describing embodiments only in accordance with the concepts of the present invention, May be embodied in various forms and are not limited to the embodiments described herein.

Embodiments in accordance with the concepts of the present invention are capable of various modifications and may take various forms, so that the embodiments are illustrated in the drawings and described in detail herein. It should be understood, however, that there is no intention to limit the embodiments according to the concepts of the present invention to the particular forms disclosed, but includes modifications, equivalents, or alternatives falling within the spirit and scope of the present invention.

The terms first, second, or the like may be used to describe various elements, but the elements should not be limited by the terms. The terms may be named for the purpose of distinguishing one element from another, for example without departing from the scope of the right according to the concept of the present invention, the first element being referred to as the second element, Similarly, the second component may also be referred to as the first component.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between. Expressions that describe the relationship between components, for example, "between" and "immediately" or "directly adjacent to" should be interpreted as well.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In this specification, the terms " comprises ", or " having ", and the like, are used to specify one or more of the features, numbers, steps, operations, elements, But do not preclude the presence or addition of steps, operations, elements, parts, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the meaning of the context in the relevant art and, unless explicitly defined herein, are to be interpreted as ideal or overly formal Do not. Hereinafter, embodiments will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a fingerprint registration apparatus according to an embodiment of the present invention.

1, a fingerprint registration apparatus 10 according to an exemplary embodiment of the present invention includes an input unit 110, a dummy data adding unit 130, a tri-polar coordinate transforming unit 150, and a vault data generating unit 170 .

The input unit 110 receives minutiae data that is data on fingerprint information from a user who requires authentication. The fingerprint information required for fingerprint registration and authentication means information about feature points of the fingerprint extracted from the image of the user's fingerprint obtained through the fingerprint sensor. The extracted feature points include a ridge appearing in the image of the obtained fingerprint Ending point and a bifurcation point where one ridge is divided into two.

와 같이 나타낼 수 있다. 여기서,

는 직교좌표계에서 특징점의 좌표 정보이며,

는 특징점의 방향성(orientation)을 나타내는 각도이다. 여기에, 특징점이 지문의 융선의 끝점을 나타내는지 또는 융선의 분기점을 나타내는지를 알 수 있는 유형 정보(

)를 더 포함할 수 있다. 만일 사용자의 지문에 대하여 N개의 특징점 데이터를 입력받는 경우, 특징점 데이터는

와 같이 나타낼 수 있다.The feature point data including the information about the feature points

As shown in Fig. here,

Is the coordinate information of the minutiae in the orthogonal coordinate system,

Is an angle indicating the orientation of the feature point. Type information that indicates whether the feature point represents the end point of the ridge of the fingerprint or the ridge bifurcation point

). If N feature point data is input to the fingerprint of the user, the feature point data is

As shown in Fig.

와 같이 나타낼 수 있다.The dummy data adding unit 130 adds randomly generated dummy data to the minutia point data input through the input unit 110. [ The dummy data is added to protect the information about the real fingerprint as data on randomly generated false feature points (chaff minutiae) rather than feature points included in the user's fingerprint. When adding R dummy data, the dummy data is

As shown in Fig.

)를 임의로 선택하고, 더미 데이터 추가부(130)를 통하여 더미 데이터가 추가된 특징점 데이터 중에서 상기 선택된 제1 특징점 데이(

)터를 제외하고 두 개의 제2 특징점 데이터(

)를 임의로 선택한다. 다음으로, 상기 임의로 선택된 제1 특징점 데이터(

) 및 제2 특징점 데이터(

)를 결합하여 넓이 정보, 거리 정보, 제1 각도 정보 및 제2 각도 정보를 포함하는 삼중 극좌표 특징점 데이터를 생성한다. 생성되는 삼중 극좌표 특징점 데이터는

와 같이 나타낼 수 있으며, 이 값들을 결합시킨 값은

으로 나타낼 수 있다. 이때, B값은 넓이 정보, 거리 정보, 제1 각도 정보 및 제2 각도 정보의 비트 문자열 데이터를 의미한다.The triple polar coordinate transforming unit 150 transforms the minutia point data input through the input unit 110 into a triple-polar shape. First, the tri-polar coordinate transforming unit 150 transforms the first minutia point data (

And the dummy data adding unit 130 adds the dummy data to the selected first feature point data (

) Of the second feature point data (

). Next, the randomly selected first feature point data (

) And second feature point data (

) To generate triplet polar feature point data including the width information, the distance information, the first angle information, and the second angle information. The generated triple polar feature point data

, And the combined values of these values

. Here, the B value means bit string data of the width information, the distance information, the first angle information, and the second angle information.

) 및 제2 특징점 데이터(

) 정보가 포함되는 세 개의 특징점에 대한 넓이 정보 및 극좌표 정보를 의미한다.Each piece of information included in the tri-polar point feature point data includes first feature point data

) And second feature point data (

) Information, and polar coordinate information for the three minutiae points.

FIG. 2 shows a coordinate system for explaining the area information, the distance information, the first angle information, and the second angle information.

으로 나타낼 수 있다. 즉, 각 특징점의 직교 좌표정보를 이용하여 넓이 정보를 연산할 수 있다. 거리 정보는 두 개의 특징점 간에 거리에 대한 정보로서,

와

간에 거리 정보는

로 나타낼 수 있다. 제1 각도 정보는 제1 특징점 데이터(

)의 방향성(orientation)과

또는

가 이루는 각도 정보이다. 제2 각도 정보는 제1 특징점 데이터(

)의 방향성과 제2 특징점 데이터(

)의 방향성이 이루는 각도 정보이다.Referring to FIG. 2, the width information is information on the width of a triangle formed by three minutiae

. That is, the width information can be calculated using the orthogonal coordinate information of each feature point. The distance information is information on the distance between two feature points,

Wow

The distance information between

. The first angle information includes first feature point data (

) And the orientation of

or

. The second angle information includes first feature point data (

) And the second characteristic point data (

) Is the angle information formed by the directionality of the direction.

으로 나타낼 수 있다. 여기서, N+R은 더미 데이터가 추가된 특징점 데이터의 개수를 의미한다. 즉, 삼중 극좌표 특징점 데이터는 등록하려는 사용자의 지문의 특징점에 가짜 특징점이 추가된 특징점 집합에서 임의로 선택된 세 개의 특징점 데이터를 기존의 형태(

)와 달리 넓이 정보 및 극좌표 정보를 포함하도록 변환시킨 데이터이다.Triple polar feature point data including this information

. Here, N + R means the number of feature point data to which dummy data is added. That is, the triplet polar coordinate feature point data is obtained by converting three feature point data arbitrarily selected from a feature point set in which a pseudo feature point is added to a feature point of a fingerprint of a user to be registered,

), The data is converted to include the width information and the polar coordinate information.

The vault data generator 170 encrypts the converted tri-polar point data with a fuzzy vault structure. Prior to the description of encryption, all arithmetic operations in this specification can be performed within a finite field. A finite field is a field with a finite number of elements and can be called a Galois field. That is, the polynomial, which will be described later, and the results of all operations performed in the polynomial and the finite field can be defined in the finite field.

)를 생성하고, 상기 암호화키를 계수로 하는 퍼지볼트 다항식을 생성한다. 퍼지볼트 다항식은 아래의 수학식 1과 같이 정의될 수 있다.In order to encrypt with the purge bolt structure, the vault data generation unit 170 generates an encryption key

), And generates a fuzzy logic polynomial using the encryption key as a coefficient. The fuzzy-poled polynomial can be defined as Equation (1) below.

Here, n denotes a degree of a polynomial as a natural number, and a coefficient of a polynomial denotes an encryption key.

)가 더미 데이터에 해당되지 않을 때의 연산되는 값으로서

으로 나타내며, 제2 집합 데이터는 제2 특징점 데이터(

)가 더미 데이터에 해당될 때의 연산되는 값으로서

으로 나타낼 수 있다. 여기서,

인 난수이다.Next, the triplet polar coordinate characteristic point data is input to and computed as a variable in the generated fuzzy logic polynomial to generate the first set data and the second set data. Here, the first set data is the second minutia point data (

) As the calculated value when it does not correspond to the dummy data

, And the second set data is represented by the second minutia data (

) Is the calculated value when it corresponds to the dummy data

. here,

Is a random number.

)을 함께 저장한다.Finally, the generated first aggregation data and second aggregation data are synthesized in Galois field to generate vault data, and a hash value (

).

)를 생성하고, 상기 비밀키를 계수로 갖는 다항식을 생성한다. 생성되는 다항식은 아래의 수학식 2와 같이 정의될 수 있다.Here, the fingerprint registration device 10 may further include a secret key sharing unit. The secret key sharing part uses a secret key (" secret key ") to securely share the encryption key used for encryption by the fuzzy-

), And generates a polynomial having the secret key as a coefficient. The generated polynomial can be defined as Equation (2) below.

Here, m denotes a degree of a polynomial as a natural number, and a coefficient of a polynomial denotes a secret key.

를 생성하고, 상기 암호화키에 대한 해쉬값(

)을 함께 저장한다. 또한, 난수(

)를 생성하고 상기 난수를 이용하여

을 생성하여 암호화키와 함께 공개할 수 있다.Next, the encryption key is input and calculated as a variable in the generated polynomial

And generates a hash value for the encryption key (

). In addition,

), And using the random number

Can be generated and released together with the encryption key.

3 is a block diagram of a fingerprint authentication device according to an embodiment of the present invention.

Referring to FIG. 3, the fingerprint authentication apparatus 20 includes an input unit 210, a triple polar coordinate transformation unit 230, and an authentication unit 250. Hereinafter, a description of a configuration overlapping with a portion described in the fingerprint registration apparatus 10 will be omitted or briefly described.

으로 나타낼 수 있다.The input unit 210 receives minutia point data, which is data on minutiae points of a user fingerprint that requires authentication. The N feature point data of the user fingerprints requiring authentication

.

)를 삼중 극좌표 형태로 변환하여 삼중 극좌표 특징점 데이터를 생성한다. 이때, 생성된 삼중 극좌표 특징점 데이터는 넓이 정보, 거리 정보, 제1 각도 정보 및 제2 각도 정보를 포함하는 형태인

로 나타낼 수 있다.The triplet polar coordinate transforming unit 230 transforms three minutiae points data arbitrarily selected from the minutia point data input through the input unit 210

) Into triplet polar coordinates to generate triplet polar coordinate minutia data. At this time, the generated tri-polar point feature point data is in a form including width information, distance information, first angle information, and second angle information

.

)와 지문 등록 장치(10)를 통해 기 등록된 볼트 데이터를 비교하여 상기 인증이 필요한 사용자에 대한 인증을 수행한다. 기 등록된 볼트 데이터는 지문 등록 방법에서 생성된 볼트 데이터일 수 있다. 인증부(250)는 삼중 극좌표 특징점 데이터(

)에 포함된 넓이 정보, 거리 정보, 제1 각도 정보 및 제2 각도 정보와 상기 기 등록된 볼트 데이터에 포함된 넓이 정보, 거리 정보, 제1 각도 정보 및 제2 각도 정보를 이용하여 인증을 수행한다. 인증부(250)가 지문 인증을 수행하는 방법에 대한 보다 구체적인 설명은 도 5를 통하여 후술하기로 한다.The authentication unit 250 receives the triple polar feature point data ("

And the fingerprint registration device 10 to perform authentication for the user who needs the authentication. The previously registered vault data may be the vault data generated in the fingerprint registration method. The authentication unit 250 receives the triple polar feature point data (

, The distance information, the distance information, the first angle information, the second angle information, and the width information, the distance information, the first angle information, and the second angle information included in the previously registered vault data do. A more detailed description of how the authentication unit 250 performs fingerprint authentication will be described later with reference to FIG.

4 is a flowchart of a fingerprint registration method according to an embodiment of the present invention.

)를 입력받는다.Referring to FIG. 4, in step S110, minutia point data, which is data on N minutiae points of a user fingerprint that requires fingerprint registration

).

The method may further include a pre-processing step of extracting reliable feature points from the images of the user's fingerprints acquired through the fingerprint sensor, prior to step S110 of receiving the feature point data. At this time, the preprocessing step may include an image enhancement process for an image source included in the fingerprint image. If the preprocessing step further includes step S110, the minutia point data for the fingerprint minutiae extracted from the preprocessed image may be input.

The step S110 may further include a step of adjusting the number of feature point data to be input in advance. More specifically, the width of the triangle formed by the three feature points arbitrarily selected from the feature points extracted from the fingerprint image is calculated, and the feature points when the calculated width is less than a preset threshold value can be extracted. Next, by receiving only the minutia data of the extracted minutiae, it is possible to increase the accuracy and speed of the operations required for fingerprint registration and authentication.

로 나타낼 수 있다.In step S130, randomly generated dummy data is added to the minutia data input in step S110. The dummy data is randomly generated data, and the R dummy data is

.

) 및 더미 데이터가 추가된 특징점 데이터 중에서 상기 선택된 어느 하나의 특징점 데이터를 제외하고 임의로 선택된 제2 특징점 데이터(

)를 이용하여 삼중 극좌표 특징점 데이터를 생성한다. 생성되는 삼중 극좌표 특징점 데이터는 넓이 정보, 거리 정보, 제1 각도 정보 및 제2 각도 정보를 포함한다.In operation S150, the first feature point data arbitrarily selected from the input feature point data

) And the arbitrary selected second characteristic point data excluding the selected characteristic point data from the characteristic point data to which the dummy data is added

) To generate triplet polar coordinate feature point data. The generated tri-polar feature point data includes the width information, the distance information, the first angle information, and the second angle information.

)가 상기 더미 데이터에 해당될 때의 연산되는 값인 제1 집합 데이터(

)를 생성하고, 상기 제2 특징점 데이터(

)가 상기 더미 데이터에 해당되지 않을 때의 값인 제2 집합 데이터(

)를 생성한다.In step S170, the tri-polar point feature point data generated in step S150 is encrypted with a fuzzy logic structure. In step S171 included in step S170, the tri-polar point characteristic point data is input as a variable to a fuzzy logic polynomial using the encryption key as a coefficient, and the second characteristic point data

) Is a value to be calculated when the dummy data corresponds to the dummy data

), And the second minutia point data (

) Which is a value when the dummy data does not correspond to the dummy data

).

Next, in step S173 included in step S170, the first set data and the second set data are combined to generate vault data.

)를 생성하고, 상기 비밀키를 계수로 갖는 다항식을 생성하여 생성된 다항식에 상기 암호화키를 변수로 입력 및 연산하여

를 생성하고, 상기 암호화키에 대한 해쉬값(

)을 함께 저장한다. 마지막으로, 난수(

)를 생성하고 상기 난수를 이용하여

을 생성하여 암호화키와 함께 공개한다.Here, it may further include step S190 of sharing the encryption key. In step S190, the encryption key used for encrypting by the fuzzy-bolt structure is securely shared

), Generating a polynomial equation having the secret key as a coefficient, inputting and computing the encryption key as a variable in the generated polynomial equation

And generates a hash value for the encryption key (

). Finally,

), And using the random number

And opens it together with the encryption key.

5 is a flowchart of a fingerprint authentication method according to an embodiment of the present invention. Hereinafter, the description of the configuration overlapping with the portion described in the fingerprint registration method will be omitted or briefly described.

Referring to FIG. 5, in step S210, minutia point data, which is data on minutiae points of a user fingerprint that requires authentication, is input. Meanwhile, the step S210 may further include a step of adjusting the number of the minutia point data to be input in advance.

)를 이용하여 삼중 극좌표 특징점 데이터를 생성한다.In step S230, the minutia point data arbitrarily selected from the minutia point data input in step S210

) To generate triplet polar coordinate feature point data.

In step S250, the generated triple polar feature point data is compared with pre-registered vault data to perform authentication for the user who needs the authentication. The previously registered vault data may be the vault data generated in the fingerprint registration method. In step S250, the width information, the distance information, the first angle information, and the second angle information included in the tri-polar point feature point data and the width information, the distance information, the first angle information, and the second angle And performs authentication using information.

6 is a specific flowchart of a step of performing authentication by comparing triple polar feature point data with pre-registered vault data.

을 제2 열린 집합에 포함시키는 S257 단계를 포함할 수 있다.Referring to FIG. 6, step S250 includes a step S251 of comparing triplicate polar feature point data with pre-registered vault data, a step S253 of including vault data in a first open set, a step S255 of comparing hash values,

To the second open set.

More specifically, in step S251, the triple polar feature point data generated in step S230 is compared with pre-registered vault data to determine whether there is vault data satisfying the following similar conditions.

The similar condition is a condition for matching the minutia point data of the two triple polar coordinate types, and it can be seen that the triple polar coordinate minutia point data coincide with each other when all three conditions are satisfied.

One.

2.

3.

는 각 유사 조건에 대하여 사용자가 미리 설정해놓은 임계값이다. 또한,

는 아래와 같다.here,

Is a threshold preset by the user for each similar condition. Also,

Are as follows.

,

,

는 x를 10진수로 변환한 것을 의미한다.here,

Means that x is converted to decimal.

를 제1 열린 집합(unlocking set)

에 포함시킨다. 여기서, y는 제1 집합 데이터의

또는 제2 집합 데이터의

를 의미한다. 만약 상기 유사 조건 중 어느 하나라도 만족하지 못한다면, S251 단계로 돌아가서 다른 볼트 데이터와의 비교를 수행한다. 한편, S251 단계 내지 S253 단계는

을 만족할 때까지 반복 수행되며,

을 만족하는 경우 S255 단계가 수행된다.In step S253, it is determined whether all the similar conditions are satisfied

To the first unlocking set,

. Here, y is the number of

Or the second set of data

. If any of the similar conditions is not satisfied, the process returns to step S251 and compares with other vault data. On the other hand, in steps S251 to S253

Lt; / RTI > is satisfied,

The step S255 is performed.

을 만족할 때의

로 퍼지볼트 다항식을 재구성해서 상기 재구성된 다항식의 계수 값인

을 생성하여 해쉬값

을 계산하고,

와

의 비교를 수행한다. 다항식을 재구성하는 것은 라그랑주 보간법(Lagrange interpolation)을 이용할 수 있다.The step S255 compares the hash values,

When satisfied with

≪ / RTI > and the coefficients of the reconstructed polynomial < RTI ID = 0.0 >

And generates a hash value

Lt; / RTI >

Wow

Lt; / RTI > Reconstructing a polynomial can use Lagrange interpolation.

를 제2 열린 집합

에 포함시킨다. 만약 해쉬값이 다르다고 판단되면 S251 단계부터 다시 수행한다.If it is determined in step S257 that the hash values are the same as the comparison result in step S255

The second open set

. If it is determined that the hash values are different from each other, the process returns to step S251.

을 만족하면 사용자에 대한 인증이 성공한 것이며, 만족하지 못하면 인증이 실패한 것으로 볼 수 있다.The steps S251 through S257 are repeatedly performed on all triplet polar feature point data, and the finally generated second open set is

The authentication of the user is successful. If the authentication is not satisfactory, the authentication can be regarded as a failure.

The apparatus described above may be implemented as a hardware component, a software component, and / or a combination of hardware components and software components. For example, the apparatus and components described in the embodiments may be implemented within a computer system, such as, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable array (FPA) A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For ease of understanding, the processing apparatus may be described as being used singly, but those skilled in the art will recognize that the processing apparatus may have a plurality of processing elements and / As shown in FIG. For example, the processing unit may comprise a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as a parallel processor.

The software may include a computer program, code, instructions, or a combination of one or more of the foregoing, and may be configured to configure the processing device to operate as desired or to process it collectively or collectively Device can be commanded. The software and / or data may be in the form of any type of machine, component, physical device, virtual equipment, computer storage media, or device , Or may be permanently or temporarily embodied in a transmitted signal wave. The software may be distributed over a networked computer system and stored or executed in a distributed manner. The software and data may be stored on one or more computer readable recording media.

The method according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions to be recorded on the medium may be those specially designed and configured for the embodiments or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. For example, it is to be understood that the techniques described may be performed in a different order than the described methods, and / or that components of the described systems, structures, devices, circuits, Lt; / RTI > or equivalents, even if it is replaced or replaced.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (8)

(a) receiving minutia point data, which is data on minutiae of a user fingerprint that requires fingerprint registration;
(b) adding dummy data randomly generated to the minutia data; And
(c) first feature point data arbitrarily selected from the feature point data

) And arbitrarily selected second minutia point data excluding minutia point data selected from minutia data to which the dummy data is added

) To generate triple-polar feature point data,
Wherein the triple polar feature point data includes width information, distance information, first angle information, and second angle information.
The method according to claim 1,
The width information may include at least one of the first feature point data

) And the second characteristic point data (

) Is the width information of the triangle formed by each of the minutiae points of the triangle,
The distance information includes the first minutia point data (

) And the second minutia point data (

), ≪ / RTI >
The first angle information is the first feature point data (

) And the orientation of

or

And
And the second angle information is the first minutia point data (

) And the second characteristic point data (

) Of the fingerprint.
The method according to claim 1,
The step (a)
(a-1) extracting feature points when the width of a triangle formed by three feature points arbitrarily selected from the feature points is less than a preset threshold value; And
(a-2) receiving only minutia point data of the extracted minutiae.
The method according to claim 1,
(d) encrypting the triple polar feature point data with a fuzzy vault structure.
5. The method of claim 4,
The step (d)
(d-1) inputting the triplet polar coordinate characteristic point data as a variable into a fuzzy logic polynomial having the encryption key as a coefficient,

) Is the calculated dummy data, and the second minutia point data (

Generating a second set of data that is a value when the dummy data does not correspond to the dummy data; And
(d-2) synthesizing the first set data and the second set data to generate vault data.
(a) receiving minutia point data as minutiae of user fingerprints requiring authentication;
(b) minutia point data arbitrarily selected from the minutia data

Generating triple-polar feature point data by using the triple-polar feature point data; And
(c) comparing the triple polar feature point data with pre-registered vault data to perform authentication for a user requiring the authentication,
Wherein the triple polar feature point data includes width information, distance information, first angle information, and second angle information.
The method according to claim 6,
The width information includes three pieces of feature point data

Is the width information of the triangle formed by the minutiae points of the triangle,
The distance information includes three selected feature point data (

) Of

And

Is the distance information between the minutiae points of &
The first angle information may include at least one of the three selected feature point data

) Of

The orientation of

or

Angle information,
The second angle information may include at least one of the three selected feature point data

) Of

And

Directional or

The fingerprint authentication method comprising:
8. The method of claim 7,
The step (c) may further include the step of generating the triangular polar point feature point data including the width information, the distance information, the first angle information, the second angle information, and the width information, the distance information, A fingerprint authentication method for performing authentication using second angle information.

Images