KR20190017551A - Method and apparatus for user authentication - Google Patents

Abstract

Disclosed are a user authentication method and an apparatus thereof. The user authentication method comprises the following steps: receiving a plurality of images including a first object to perform user authentication; performing first authentication by obtaining biometric information on the first object from at least one of the plurality of images; and performing second authentication by measuring a change in the first object from the plurality of images. According to an embodiment of the present invention, security and reliability can be obtained by performing user authentication using the biometric information on the first object. User authentication is performed using information on a change of the first object. Thus, security and authentication problems, which may occur when information on the first object is leaked, can be prevented.

Description

[0001] METHOD AND APPARATUS FOR USER AUTHENTICATION [0002]

The present invention relates to user authentication, and more particularly, to a method for performing biometric authentication using an object image obtained from a user, performing additional authentication using a change of the biometric authentication object image, .

Recently, a technology for user authentication is required in electronic devices and financial applications. Techniques for implementing the authentication function include a password or PIN (Personal Identification Number) input method, and a pattern lock method using a touch screen.

In addition, fingerprints, irises, voices, faces, vein recognition methods, and the like are used as biometric methods for recognizing characteristics of a user's body and utilizing the same in a security system or an authentication system.

The authentication methods include contact type authentication methods such as fingerprint recognition and contactless authentication methods such as iris, voice, face, and blood vessel recognition.

In the biometric method, the user can compare the data registered in the database of the authentication system with the data detected by the user at the time of authentication, and the success or failure of the authentication can be determined.

Korean Patent Publication No. 10-2017-0045813 Korean Patent Publication No. 10-2015-0037628

And an object of the present invention is to provide a method and apparatus for authenticating a user using an object image obtained from a user.

According to an aspect, a method for user authentication includes receiving a plurality of images including a first object to perform authentication of a user; Performing first authentication by acquiring biometric information of a first object from at least one of a plurality of images; And performing a secondary authentication by measuring a change of the first object from the plurality of images.

According to another aspect, an apparatus for authenticating a user includes an image acquiring unit acquiring a plurality of images including a first object for performing authentication of a user; And a processing unit for receiving a plurality of images from the image acquiring unit, wherein the processing unit acquires biometric information of the first object from at least one of the plurality of images to perform first authentication, Secondary authentication can be performed by measuring the change.

The first object may be one of a fingerprint, an iris, a vein or a face, and the first authentication may be performed by comparing the biometric information of the first object with the biometric information of a predetermined user.

The secondary authentication may be to perform authentication by comparing the change of the first object measured from the plurality of images with predetermined change information.

The plurality of images may further include a second object.

Secondary authentication can perform additional authentication by measuring changes in the second object.

The change of the first object may be a relative change of the first object and the second object.

The first authentication can acquire biometric information of the second object from at least one of the plurality of images to perform additional authentication.

According to an embodiment of the present invention, security and reliability can be obtained by performing user authentication using biometric information of a first object, and secondly, user authentication is performed using information on the change of the first object Thereby preventing the security and authentication problems that may occur when the information about the first object is leaked.

1 is a flowchart illustrating a method of authenticating a user according to an embodiment of the present invention.
2 is a diagram for explaining iris recognition according to an embodiment of the present invention.
3 is a view for explaining iris recognition according to another embodiment of the present invention.
4 is a diagram for explaining fingerprint recognition according to an embodiment of the present invention.
5 is a configuration diagram of a user authentication apparatus according to an embodiment of the present invention.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The following detailed description, together with the accompanying drawings, is intended to illustrate exemplary embodiments of the invention and is not intended to represent the only embodiments in which the invention may be practiced. The following detailed description includes specific details in order to provide a thorough understanding of the present invention. However, those skilled in the art will recognize that the present invention may be practiced without these specific details.

In some instances, well-known structures and devices may be omitted or may be shown in block diagram form, centering on the core functionality of each structure and device, to avoid obscuring the concepts of the present invention. In the following description, the same components are denoted by the same reference numerals throughout the specification.

1 is a flowchart illustrating a method of authenticating a user according to an embodiment of the present invention.

Referring to FIG. 1, the user authentication apparatus may receive a plurality of images including a first object for performing a user authentication (S110).

For example, the first object may be any one of a user's iris, retina, fingerprint, hand, vein, or face. Also, the first object is not limited to this, and may be any body part of a user who can perform biometric authentication.

As an example, the plurality of images may be images acquired over a specific time interval. For example, the plurality of images may be photographs taken at specific time intervals. Alternatively, the plurality of images may be a moving image.

In one example, the user authentication apparatus may include an image acquisition unit for acquiring a plurality of images. For example, the image acquiring unit may be a device capable of acquiring images such as photographs, moving images, and infrared images. As another example, the user authentication apparatus can receive a plurality of images from an external apparatus.

The user authentication apparatus may perform primary authentication by acquiring biometric information of the first object from at least one of the plurality of images (S120).

As an example, the first object may be an iris. Reference is made to Fig. 2 for explaining an embodiment thereof. 2 is a diagram for explaining iris recognition according to an embodiment of the present invention.

Referring to FIG. 2, the user authentication apparatus may receive at least two images among a plurality of images (a), (b), and (C) including the first object 210, 220, 230, Any one of the drawings can be selected for the primary authentication. For example, the user authentication device can select (a).

In this case, the user authentication apparatus can (a) acquire biometric information of the first object 210 from the image. Also, the user authentication apparatus can perform the primary authentication using the biometric information of the first object 210.

For example, the primary authentication may be iris authentication. The specific method of iris authentication may be any one of various methods disclosed in this technical field, and a detailed description thereof will be omitted.

Referring to FIG. 1, the user authentication apparatus may perform secondary authentication by measuring a change of a first object from a plurality of images (S130).

Referring to FIG. 2, when comparing the first object 210 of (a) with the first object 220 of (b), the first object moves in a specific direction For example, the right direction).

As an example of the secondary authentication, the change of the first object may be the movement of the first object itself. That is, the user authentication apparatus can perform the secondary authentication only by the movement of the first object. If movement of the first object is not confirmed in a plurality of images acquired at specific time intervals, the user authentication device may determine that the acquired first object is duplicated, and may not allow the secondary authentication. For example, if the user authentication device acquires a plurality of images from a photograph of a duplicate of the first object, the first object of the duplicated photograph can not be moved. Accordingly, the user authentication apparatus can permit the secondary authentication only when there is movement of the first object.

As another example, the change of the first object may be the information that the first object has moved to the right. That is, the movement of the specific pattern of the first object can be used as the authentication method. For example, when an operation of moving the pupil to the right at the time of authentication is predetermined as the authentication information, the user authentication device obtains the direction information of the movement of the first object from the plurality of images and compares the information with predetermined information You may then grant a second authorization. The predetermined information may be information stored in the user authentication apparatus, or may be information provided from an external apparatus.

As another example, the user authentication device can inform the user of specific information in order to change the direction of the user's eyes. For example, the user authentication device may include a display capable of providing specific information, and may display a symbol (e.g., an arrow, a dot, a triangle, etc.) . In this case, the user can recognize the symbol and move the pupil in the direction indicated by the symbol. At this time, the user authentication apparatus can acquire movement information of the first object from a plurality of images, and can perform secondary authentication by comparing with specific information provided by the user authentication apparatus. As another example, the user authentication device may include various types of information delivery devices such as speakers capable of providing specific information, and may provide information necessary for changing the first object, as in the above example. Also, the secondary authentication can be performed by sensing the change of the first object due to the information as described above.

As another example, if the first objects 210 and 230 of (a) and (c) are compared, it can be seen that the iris size of the first object is different. That is, the secondary authentication can be performed using the change information of the specific part in the first object. For example, the user authentication device can irradiate a user with a specific light. In this case, the pupil size of the user may change according to the brightness of the light, and the user authentication device can measure the change to perform the secondary authentication.

According to another embodiment, the plurality of images may further include a second object.

3 is a view for explaining iris recognition according to another embodiment of the present invention. Referring to FIG. 3, a plurality of images (a) and (b) may include a first object 310, 320 and a second object 315, 325.

For example, the user authentication apparatus can perform secondary authentication using the relative positions of the first object and the second object. For example, in (a), it can be seen that the first object 310 is biased to the left in the middle of the second object 315. On the other hand, in (b), it can be seen that the first object 320 is biased to the right of the second object 325. When the change in the relative position of the two objects is used, movement information of the first object can be more accurately known as in the embodiment described with reference to FIG. In other words, the embodiment described above with reference to Fig. 2 can be combined with the embodiment described in Fig.

As another example, the secondary authentication can be performed using the change of the second object. For example, if the second object is an eyelid, the eyelid can perform a blinking operation as shown in FIG. 3 (c). At this time, the user authentication apparatus can perform the secondary authentication using the change of the second object itself. As another example, the user authentication apparatus can perform the secondary authentication using the specific pattern information on the change of the second object. For example, the user authentication apparatus can use predetermined pattern information such as a specific period and frequency with respect to a change of the second object. For example, the user may blink the eyelid according to a certain period and a certain number of times, and the user authentication apparatus can recognize the eyelid and perform the secondary authentication. In other words, the user authentication apparatus can perform the secondary authentication using the change information of the second object and the predetermined pattern information.

As another example, the user authentication apparatus can perform additional authentication using the biometric information of the second object. For example, if the second object is an eyelid, authentication can be performed using eyelid type information.

According to one embodiment, the user authentication apparatus may include a storage unit for storing information for the primary authentication and the secondary authentication. Alternatively, the user authentication device can receive the information from an external device and use it for authentication. In addition, the user authentication device may include a camera for image acquisition, through which a plurality of images may be acquired. Alternatively, the user authentication apparatus can receive and use a plurality of images from an external apparatus.

According to an embodiment of the present invention, biometric information other than the iris described above can be used.

As an example, the first object may be a fingerprint. 4 is a diagram for explaining fingerprint recognition according to an embodiment of the present invention. Referring to FIG. 4 (a), the first object may be a fingerprint 410. Accordingly, the user authentication apparatus can acquire the fingerprint information 410 from a plurality of images, and can perform the primary authentication by comparing with the predetermined user fingerprint information. Here, the fingerprint recognition method may be a non-contact type fingerprint recognition method. For this purpose, the present invention can be implemented using any one of the conventional non-contact type fingerprint recognition methods in the art, and a detailed description thereof will be omitted.

After the user authentication apparatus performs the primary authentication using the fingerprint information of the user, the secondary authentication can be performed using the change of the first object. Referring to FIG. 4B, when a user moves a finger according to a specific pattern 420, the user authentication apparatus can acquire movement pattern information of the first object from a plurality of images, Secondary authentication can be performed using the determined information. For example, when the user uses his / her finger to perform his or her signature, the user authentication device can perform the primary authentication by obtaining the first object, i.e., the fingerprint information, from the user's finger, And can perform secondary authentication. A method of authenticating using a signature can be implemented using a conventional method in the art, and a detailed description thereof will be omitted.

In this embodiment, the second object may be a finger or a hand including a fingerprint. In this case, as in the above embodiment, when the user uses his / her finger to perform his / her signature, the user authentication device can perform the primary authentication by obtaining the first object, i.e. fingerprint information, from the user finger, It is possible to perform the secondary authentication by grasping the movement pattern of the second object using the authenticated finger as the second object.

Alternatively, it may be a background or user face contained in a plurality of images. For example, when there is a fixed background in a plurality of images, the change of the first object can be grasped by using the relative positions of the first object and the second object. As another example, when the user's face is included in a plurality of images, the movement of the finger relative to the user's face can be grasped and utilized. Alternatively, additional biometric authentication can be performed using the shape of the face of the user included in the plurality of images.

According to yet another embodiment, the first object may be an intravenous form of the finger or a palm of the palm. In this case, as in the above embodiment, the user authentication device can perform the primary authentication using the vein shape, and can perform the secondary authentication by sensing the movement of the finger or the palm. At this time, the second object may be a finger or a palm. Alternatively, the background included in the plurality of images may be the second object.

According to another embodiment, the first object may be in the form of a face of the user. In this case, the first authentication can be performed using the user's face type information, and the second authentication can be performed by sensing the movement of the face. The background included in the plurality of images can be the second object.

5 is a configuration diagram of a user authentication apparatus according to an embodiment of the present invention.

Referring to FIG. 5, the user authentication apparatus 500 may include an image acquisition unit 510 and a processing unit 520.

For example, the image acquisition unit 510 may include a camera for acquiring an image. In this case, the image obtaining unit 510 may directly obtain the image of the first object. As another example, the image acquisition unit 510 may include a receiver for acquiring a plurality of images from an external device. In this case, the image acquisition unit 510 may acquire a plurality of images including a first object for performing authentication of a user from an external device.

The processing unit 520 may perform the primary authentication by acquiring the biometric information of the first object from at least one of the plurality of images and perform the secondary authentication by measuring the change of the first object from the plurality of images. The processing unit 520 may be configured to implement the embodiment described in FIGS. 1 to 4 above.

The user authentication device 500 may include a program configured to perform an embodiment of the present invention and a storage device for storing information for user authentication. For example, the image may be any one of all kinds of images such as a photograph, a moving image, and an infrared image.

The various embodiments and features described herein may be implemented in software, hardware, or a combination thereof. For example, a computer program executing a method and apparatus for performing embodiments of the present invention (executed by a processor, controller, CPU, etc., mobile terminal and / or network device of a computer) And may include at least one program code section or module. Likewise, a software tool that performs methods and apparatus for performing embodiments of the present disclosure (executed by a processor, controller, CPU, etc., mobile terminal and / or network device of a computer) And may include at least one program code section or module for performing the functions described herein.

The present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. The detailed description above should not be construed as limiting unless expressly specified otherwise, and should be interpreted broadly within the scope of the claims. Accordingly, it is intended that all changes and modifications within the equivalent scope of the invention be included within the scope of the present invention and interpreted within the scope of the claims.

The embodiments described above are those in which the elements and features of the present invention are combined in a predetermined form. Each component or feature shall be considered optional unless otherwise expressly stated. Each component or feature may be implemented in a form that is not combined with other components or features. It is also possible to construct embodiments of the present invention by combining some of the elements and / or features. The order of the operations described in the embodiments of the present invention may be changed. Some configurations or features of certain embodiments may be included in other embodiments, or may be replaced with corresponding configurations or features of other embodiments. It is clear that the claims that are not expressly cited in the claims may be combined to form an embodiment or be included in a new claim by an amendment after the application.

It will be apparent to those skilled in the art that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. Accordingly, the above description should not be construed in a limiting sense in all respects and should be considered illustrative. The scope of the present invention should be determined by rational interpretation of the appended claims, and all changes within the scope of equivalents of the present invention are included in the scope of the present invention.

500: User authentication device
510:
520:

Claims (8)

A method for user authentication,
The method comprising: receiving a plurality of images including a first object to perform authentication of a user;
Performing first authentication by acquiring biometric information of a first object from at least one of the plurality of images;
And performing a secondary authentication by measuring a change of the first object from the plurality of images. The method according to claim 1,
Wherein the first authentication step performs authentication by comparing biometric information of the first object with biometric information of a predetermined user. The method according to claim 1,
Wherein the secondary authentication step performs authentication by comparing the change of the first object measured from the plurality of images with predetermined change information. The method according to claim 1,
Wherein the plurality of images further comprise a second object. 5. The method of claim 4,
Wherein the second authentication step further comprises measuring a change in the second object to perform authentication. 5. The method of claim 4,
Wherein the change of the first object is a relative change of the first object and the second entity. 5. The method of claim 4,
Wherein performing the primary authentication further comprises obtaining biometric information of a second object from at least one of the plurality of images to perform authentication. An apparatus for user authentication,
An image acquiring unit acquiring a plurality of images including a first object for performing authentication of a user; And
And a processing unit for receiving the plurality of images from the image acquiring unit,
The processing unit
Acquiring biometric information of a first object from at least one of the plurality of images to perform primary authentication,
And performs a secondary authentication by measuring a change of the first object from the plurality of images.

Images