KR20190041084A - Method of telebiometric authentication based on mobile devices - Google Patents

Abstract

The present invention relates to a mobile device-based biometric information verification method performed in a biometric authentication terminal linked with a biometric information capture element, a reference biometric information storage element, an authentication performing element. The present invention can process personal information for authentication at a high security level. According to the present invention, the biometric information verification method comprises: a step (a) of receiving a biometric authentication request for a verification target; a step (b) of allowing the biometric information capture element to capture biometric information of the verification target in accordance with the biometric authentication request; a step (c) of determining an authentication model; a step (d) of detecting reference biometric information storage element and the authentication performing element based on the determined authentication model; a step (e) of allowing the authentication performing element to perform authentication for the verification target based on the biometric information of the verification target received from the biometric information capture element and the reference biometric information of an authentication target received from the reference biometric information storage element; and a step (f) of receiving an authentication result for the verification target from the authentication performing element.

Description

[0001] METHOD OF TELEBIOMETRIC AUTHENTICATION BASED ON MOBILE DEVICES [0002]

The present invention relates to a biometric authentication technique, and more particularly, to a mobile device-based biometric information verification method capable of processing personal information for authentication with a high security level by applying an authentication model based on a mobile device .

The biometric based user authentication technology can authenticate the user by comparing the sensor data of the user acquired based on the biometric sensor with the original data in the database to determine whether the user is the same user. The prior art has a disadvantage in that the reliability is low due to a difference in the result depending on the state of the measurer or the measurement environment, and when the attacker is stolen or falsified the user authentication using a false hardware security module, it is difficult to cope with the security.

Korean Patent Laid-Open Publication No. 10-2017-0034618 (Apr. 29, 2017) discloses a user authentication method using biometric information and an authentication server and a biometric authentication device for user authentication. Collecting first bioinformation; Transmitting the first bioinformation to an authentication server; Collecting second biometric information of the user; And transmitting the second bioinformation to the authentication server when user authentication of the first bioinformation is successful.

Korean Patent Registration No. 10-0875923 (Dec. 18, 2008) discloses a user search system and method for searching a user by merging recognition results of respective single biometric recognition systems. The user search system receives and stores a plurality of bio information of a user Biometric information database; A distribution estimator for estimating a probability distribution of each bio information of the stored plurality of bio information using an accumulated distribution function; A bio information retrieval unit for retrieving a plurality of bio information of a user to be retrieved from the respective bio information, determining whether the bio information is matched, and assigning a matching score to each piece of information of the plurality of bio information of the target user; And a fusion unit for fusing each of the matching scores by using CBF (Cumulative Bayes Fusion) with reference to the estimated probability distribution, and extracting a search result (authentication result) of the target user from the fusion result.

Korean Patent Laid-Open Publication No. 10-2017-0034618 (Apr. 29, 2017) Korean Patent No. 10-0875923 (Dec. 18, 2008)

An embodiment of the present invention is to provide a biometric information verification method based on a mobile device capable of processing personal information for authentication using a mobile device-based authentication model at a high security level.

An embodiment of the present invention provides a method for verifying biometric information based on a mobile device capable of selecting one of a plurality of authentication models in response to a security threat, thereby responding to a security threat factor.

In embodiments, the biometric authentication method is performed in a biometric authentication terminal interlocked with a biometric information capture element, a reference biometric information storage element, and an authentication performing element. Wherein the biometric authentication method comprises the steps of: (a) receiving a biometric authentication request for an object to be verified; (b) capturing the biometric information of the object to be verified according to the biometric authentication request; , (c) determining an authentication model, (d) detecting the reference biometric information storage element and the authentication performing element based on the determined authentication model, (e) Performing authentication on the verification target based on the biometric authentication information received from the capture element and the reference biometric authentication information received from the reference biometric information storage element; and (f) And receiving an authentication result for the verification target from the element.

The biometric information capture element, the reference biometric information storage element, and the authentication performing element may be installed in at least some of the biometric sensor, the biometric authentication terminal, and the biometric authentication server to process remote biometric information according to security threats. have.

The step (c) may include the step of determining one of the plurality of authentication model candidates defining the subject of each of the reference biometric information storage element and the authentication performing element as the authentication model.

The step (c) may further comprise selecting one of the plurality of authentication model candidates according to a security threat of the biometric authentication terminal.

The step (d) may include obtaining an access point of each of the reference biometric information storage element and the authentication performing element defined in the determined authentication model.

The step (e) may include causing the authentication performing element to receive the biometric information of the original turned on from the biometric information capturing element if the authentication performing element is implemented in the biometric authentication server.

Wherein the step (e) includes the step of causing the authentication execution element to receive processed reference biometric information by the reference biometric information storage element when the authentication execution element is implemented in the biometric authentication terminal .

Wherein the step (e) includes: when the authentication execution element is implemented as a biometric sensor, the authentication execution element generates processed biometric information without storing the captured biometric information and stores the processed biometric information in the reference biometric information storage element And to receive the processed biometric identification information of the processed data.

The step (e) includes the step of storing the reference biometric information on a USIM (Universal Subscriber Identity Module) chip through a TEE (Trusted Execution Environment) when the reference biometric storage element is implemented in the biometric authentication terminal can do.

Wherein the step (e) includes the step of allowing the biometric information capturing element to encrypt the captured biometric information based on the public key and transmit the encrypted biometric information to the authentication performing element when the authentication performing element is implemented as a biometric authentication server . ≪ / RTI >

The step (f) may include receiving the authentication result through the biometric authentication agent installed by the biometric authentication terminal.

The method of claim 1, wherein, in the step (f), when the authentication execution element is implemented as a biometric authentication server, the biometric authentication agent is provided from the authentication execution element and only when the user authentication through the biometric authentication agent is successful, And allowing the reception of the result.

In embodiments, the biometric authentication terminal is associated with a biometric information capture element, a reference biometric information storage element, and an authentication performing element. Wherein the biometric authentication terminal comprises: a biometric authentication request receiving unit for receiving a biometric authentication request related to an object to be verified; a biometric information capturing element for capturing biometric information to be verified according to the biometric authentication request; A capture control unit, an authentication model determination unit for determining an authentication model, and detecting the reference biometric information storage element and the authentication performing element based on the determined authentication model; An authentication execution control unit for performing authentication on the verification target based on biometric identification information to be verified and reference biometric authentication information to be verified received from the reference biometric information storage element; Receive the authentication result Includes an authentication result reception unit.

The disclosed technique may have the following effects. It is to be understood, however, that the scope of the disclosed technology is not to be construed as limited thereby, as it is not meant to imply that a particular embodiment should include all of the following effects or only the following effects.

The method of verifying biometrics information based on a mobile device according to an embodiment of the present invention can process personal information for authentication with a high security level by applying an authentication model based on a mobile device.

The method for verifying biometrics information based on a mobile device according to an embodiment of the present invention can correspond to a threat factor for security by selecting one of a plurality of authentication models according to a security threat.

1 is a view for explaining a biometric authentication system according to an embodiment of the present invention.
Fig. 2 is a diagram showing a configuration of the biometric authentication terminal shown in Fig. 1. Fig.
FIG. 3 is a flowchart illustrating a process of the biometric authentication procedure performed by the processor of FIG. 2 for biometric authentication.
FIG. 4 is a view for explaining an embodiment of a process of determining an authentication model based on an authentication model candidate table in which the processor in FIG. 2 defines a plurality of authentication model candidates.
5 is a diagram illustrating a standard environment for a biometric authentication system according to an embodiment of the present invention.
FIG. 6 is a view for explaining 12 authentication models according to an embodiment of the present invention.
FIG. 7 is a view for explaining a security threat that a biometric authentication terminal according to an exemplary embodiment of the present invention can access based on a public key infrastructure (PKI) and a standard environment.
8 is a flowchart illustrating a biometric authentication terminal to which a model 1 is applied and a biometric authentication system including the biometric authentication terminal according to an embodiment of the present invention.
9 is a diagram illustrating a process of acquiring biometric data of an application program by the biometric authentication terminal according to an embodiment of the present invention.
10 is a diagram illustrating a process of a user performing a pre-registration procedure and a login procedure for biometric authentication according to an embodiment of the present invention.

The description of the present invention is merely an example for structural or functional explanation, and the scope of the present invention should not be construed as being limited by the embodiments described in the text. That is, the embodiments are to be construed as being variously embodied and having various forms, so that the scope of the present invention should be understood to include equivalents capable of realizing technical ideas. Also, the purpose or effect of the present invention should not be construed as limiting the scope of the present invention, since it does not mean that a specific embodiment should include all or only such effect.

Meanwhile, the meaning of the terms described in the present application should be understood as follows.

The terms " first ", " second ", and the like are intended to distinguish one element from another, and the scope of the right should not be limited by these terms. For example, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component.

It is to be understood that when an element is referred to as being "connected" to another element, it may be directly connected to the other element, but there may be other elements in between. On the other hand, when an element is referred to as being "directly connected" to another element, it should be understood that there are no other elements in between. On the other hand, other expressions that describe the relationship between components, such as "between" and "between" or "neighboring to" and "directly adjacent to" should be interpreted as well.

It is to be understood that the singular " include " or " have " are to be construed as including the stated feature, number, step, operation, It is to be understood that the combination is intended to specify that it does not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

In each step, the identification code (e.g., a, b, c, etc.) is used for convenience of explanation, the identification code does not describe the order of each step, Unless otherwise stated, it may occur differently from the stated order. That is, each step may occur in the same order as described, may be performed substantially concurrently, or may be performed in reverse order.

The present invention can be embodied as computer-readable code on a computer-readable recording medium, and the computer-readable recording medium includes all kinds of recording devices for storing data that can be read by a computer system . Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like. In addition, the computer-readable recording medium may be distributed over network-connected computer systems so that computer readable codes can be stored and executed in a distributed manner.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise defined. Commonly used predefined terms should be interpreted to be consistent with the meanings in the context of the related art and can not be interpreted as having ideal or overly formal meaning unless explicitly defined in the present application.

1 is a view for explaining a biometric authentication system according to an embodiment of the present invention.

Referring to FIG. 1, the biometric authentication system 100 may include a biometric authentication terminal 110, a biometric sensor 120, and a biometric authentication server 130, which may be interconnected.

The biometric authentication terminal 110 is connected to the biometric authentication information capturing element 140, the reference biometric information storage element 150 and the authentication performing element 160 to generate biometric authentication information It can perform the recognition authentication procedure. Here, the biometric information capturing element 140 may capture the biometric information to be verified, and the reference biometric information storage element 150 may store the reference biometric information to be authenticated The authentication performing element 160 may compare the biometric information to be verified with the reference biometric information to be authenticated to perform verification of the verification target. The biometric information capturing element 140, the reference biometric information storage element 150 and the authentication performing element 160 may be at least one of the biometric sensor 120, the biometric authentication terminal 110 and the biometric authentication server 130 In some embodiments, they may be implemented on at least some of the biometric sensor 120, the biometric authentication terminal 110 and the biometric authentication server 130 to process remote biometric information according to security threats Can be installed. This is described in more detail later.

The biometric authentication terminal 110 may be connected to the biometric sensor 120 and the biometric authentication server 130 via a network or may be electrically connected to the biometric authentication server 110 using, for example, a biometric sensor And may be connected to the biometrics authentication server 130 through a Bluetooth or WiFi connection with the biometrics authentication server 120 via the Internet.

In one embodiment, the biometric authentication terminal 110 may interact with the biometric information capture element 140, the reference biometric information storage element 150, and the authentication performing element 160 via a biometric authentication agent. When the biometric authentication terminal 110 is installed in the biometric authentication terminal 110, the biometric authentication terminal 110 transmits the biometric information capture element 140, the reference biometric information storage element 150, and the authentication execution element 160 ), And in one embodiment may be implemented in mobile application software.

The biometric authentication terminal 110 may be implemented as a computing device having a central processing unit, a memory device, an input / output means, and a network means. For example, the biometric authentication terminal 110 may be a PC, a notebook, a smart phone, PC or by separate hardware means.

The biometric sensor 120 may obtain biometric information of the user. In one embodiment, the biometric sensor 120 may be implemented as a bio-metric sensor capable of sensing biometric information of a user. The biometric sensor 120 may be provided with a biometric information capture element 140 for capturing biometric information of a user and in one embodiment may be implemented with a biometric authentication terminal 110 and a device independent mobile device The biometric authentication terminal 110 may be connected to the biometric authentication terminal 110 either electrically or via a local area network. In another embodiment, the biometric authentication terminal 110 may be implemented as a unitary integrated computing device, As shown in FIG.

The biometric authentication server 130 may be connected to the biometric authentication terminal 110 and the biometric sensor 120, and may perform biometric authentication in cooperation with the biometric authentication terminal 110 and the biometric sensor 120, respectively. The biometric authentication server 130 may be implemented in a computing device having a central processing unit, a memory device, input / output means, and network means, and in one embodiment, at least one biometric authentication terminal 110 or at least one And can function as a server that is connected to the biometric sensor 120 and can perform biometric authentication on the user based on each request to provide an authentication result.

Fig. 2 is a diagram showing a configuration of the biometric authentication terminal shown in Fig. 1. Fig.

2, the biometric authentication terminal 110 may include a processor 210, a memory 220, a user input / output unit 230, and a network input / output unit 240.

The processor 210 may execute a biometric authentication procedure related to biometric authentication in FIG. 3, execute a message-based file sharing procedure, manage the memory 220 to be read or written in this process, The synchronization time between the volatile memory and the nonvolatile memory in the memory 220 can be scheduled. The processor 210 may control the overall operation of the biometric authentication terminal 110 and may control the flow of data between the memory 220, the user input / output unit 230 and the network input / output unit 240, And may be implemented in a central processing unit (CPU) of the authentication terminal 110.

The memory 220 may include an auxiliary storage device that is implemented as a nonvolatile memory such as a solid state disk (SSD) or a hard disk drive (HDD) and stores data required for the biometric authentication terminal 110 , And a RAM (Random Access Memory).

The user input / output unit 230 includes an environment for receiving user input and an environment for outputting specific information (for example, authentication result data) to the user, and may include a mouse, a trackball, a touchpad, , An input device including an adapter such as a scanner, a touch screen, a keyboard or a pointing device, and an output device including an adapter such as a monitor or touch screen.

The network input / output unit 240 includes an environment for connecting to at least one of the biometric sensor 120 and the biometric authentication server 130 through a network. For example, an adapter for LAN (Local Area Network) ≪ / RTI >

2 is a block diagram illustrating the functional elements of the processor 210. As shown in FIG. The processor 210 includes a biometric authentication request receiving unit 211, a biometric information capturing control unit 212, an authentication model determining unit 213, an authentication performing control unit 214, an authentication result receiving unit 215, (216).

The biometric authentication request receiving unit 211 may receive the biometric authentication request regarding the verification target. More specifically, the biometric authentication request receiving unit 211 may receive a biometric authentication request according to a request of the user or the service provider in connection with the use of the specific service, and in one embodiment, The biometric authentication request including the user information on the authentication target and the authentication target identifier that is the target of the authentication request. The biometric authentication request receiving unit 211 may start a biometric authentication procedure for biometric authentication when a biometric authentication request is received. Here, the object to be verified corresponds to a person (for example, the first user currently using the biometric information capturing element 140) who intends to perform biometric authentication by capturing his / her biometric information, (For example, a second user having previously registered reference biometric information) to be compared with the biometric information to be verified for biometric authentication, and the first user and the second user are the same or different can do.

The biometric information capturing control unit 212 may cause the biometric information capturing element 140 to capture the biometric information of the verification target in response to the biometric authentication request. More specifically, the biometric information capturing control unit 212 may request to capture the biometric information to be verified to the biometric information capturing element 140 electrically connected or connected via the network when the biometric authentication request is received . The biometric information capturing element 140 may be implemented with a biometric sensor 120 and the biometric information capture controller 212 may request the biometric sensor 120 to capture the biometric information, The biometric information capturing element 140 can capture the biometric information of the verification target corresponding to the user at the point in time.

Here, the biometric information may be at least one of fingerprint, iris, retina, hand shape, face, voice, and signature information as a unique signal of each user. The biometric information capture element 140 may be associated with at least one of a user's body characteristics and behavior characteristics via a biometric sensor module that is placed in contact with a user ' s body surface, Biometric information can be sensed and acquired as a digital signal.

The authentication model determination unit 213 can determine the authentication model. In one embodiment, the authentication model includes a subject, an authentication flow, security threats, and a subject of each of the biometric information capture element 140, the reference biometric information storage element 150 and the authentication performing element 160, And may include authentication model data defining at least one of possible countermeasures. Each subject corresponds to an object in which the corresponding element is implemented and performs the function of the corresponding element and corresponds to one of the biometric sensor 120, the biometric authentication terminal 110 and the biometric authentication server 130 . The authentication flow can define the transmission / reception information and the authentication sequence for each subject according to the corresponding authentication model. The security threat can include at least one threat factor due to unauthorized use of the unauthorized user. Possible countermeasures may be included.

In one embodiment, the authentication model determining unit 213 may determine one of a plurality of authentication model candidates that define a subject of each of the reference biometric information storage element 150 and the authentication performing element 160 as an authentication model. As described above, the biometric information capture element 140, the reference biometric information storage element 150, and the authentication performing element 160 are coupled to the biometric sensor 120, the biometric authentication terminal 110, 130 may be implemented in at least a part of the plurality of authentication model candidates 130 and may be divided into a plurality of authentication model candidates having different subjects depending on where the respective elements are installed. In one embodiment, the authentication model determination unit 213 may update at least a part of information on a plurality of authentication model candidates in a specific period.

In one embodiment, each of the plurality of authentication model candidates may be defined on the basis of the authentication model candidate table 400. As shown in FIG. 4, a plurality of authentication model candidates may be defined as first to twelfth models (Models 1 to 12) according to each subject. For example, in the first model (Model 1), which is one of a plurality of authentication model candidates, the subject of the biometric information capturing element 140 capturing the verification target biometric information is the biometric sensor 120 And the subject of the reference biometric information storage element 150 storing the reference biometric reference template corresponding to the reference biometric information to be authenticated is defined as the biometric authentication terminal 110 , The subject of the authentication performing element 160 that performs authentication with respect to the verification target by comparing the verification target biometric authentication information with the reference target biometric authentication information may be defined as the biometric authentication terminal 110 have.

In one embodiment, the authentication model determination unit 213 may select one of a plurality of authentication model candidates in accordance with the security threat of the biometric authentication terminal 110. [ More specifically, the authentication model determination unit 213 analyzes the communication environment of the corresponding biometric authentication terminal 110 to detect an authentication model candidate applicable to the corresponding biometric authentication terminal 110 among a plurality of authentication model candidates If there are a plurality of detected authentication model candidates, the security risk is calculated based on the security threats and the corresponding guideline in the corresponding authentication model candidate, and the calculated authentication model candidate having the smallest security risk can be selected as the final authentication model .

In the above embodiment, the authentication model determination unit 213 can calculate the security risk degree d of each of the detected authentication model candidates based on Equation (1) below. For example, of risk factors previously given threat by _{(f 1, f 2, ...} , f T) factor weights reflect _{(v 1, v 2, ...} , v T) processes the weighted average calculation to calculate a d _1, and the corresponding instructions (w ₁ , w ₂ , ..., w _C ) preliminarily assigned for each of the pseudo random numbers p ₁ , p ₂ , ..., p _C to calculate d ₂ to finally calculate d can do. Here, T and C respectively denote the number of threat factors and the number of countermeasures of the corresponding authentication model candidate, and the threat factor weights and the corresponding instruction weights can be preset by the user or the designer.

[Equation 1]

In another embodiment, the authentication model determining unit 213 can read information on the authentication model applicable from the corresponding biometric authentication terminal 110 from the memory 220 and determine an authentication model based on the information. For example, the authentication model determination unit 213 analyzes the components of the biometric authentication terminal 110 according to the criteria of the mobile terminal specification corresponding to the biometric authentication terminal 110, and determines an applicable authentication model .

The authentication model determining unit 213 may detect the reference biometric information storage element 150 and the authentication performing element 160 based on the determined authentication model. In one embodiment, the authentication model determining unit 213 searches the subject of each of the reference biometric information storage element 150 and the authentication performing element 160 in the determined authentication model, And the like. For example, when the second model (Model) in the authentication model candidate table 400 is determined as the authentication model, the authentication model determination unit 213 determines that the biometric information capturing element 140 is in accordance with the determined authentication model The biometric authentication server 120 and the reference biometric authentication server 120 are prepared for data transmission and reception with respect to the installed biometric sensor 120 and the verification target biometric information, And preparation for authentication through the authentication performing element 160 installed in the corresponding biometric authentication terminal 110 can be prepared.

In the above embodiment, the authentication model determining unit 213 can determine whether to perform encryption and mutual authentication in the process of transmitting and receiving data between each subject based on the security threats and the corresponding instructions in the determined authentication model. For example, when the first model (Model 1) is determined as the authentication model, the authentication model determining unit 213 determines the authentication model based on the biometric information captured by the biometric sensor 120 and the biometric authentication terminal 110, It is possible to further confirm whether the biometric authentication information corresponds to the authorized biometric sensor 120 through the mutual authentication in the interlocking process between the biometric authentication terminal 110 and the corresponding biometric authentication terminal 110 ), When the reference biometric information is generated, it is possible to immediately perform encryption on the generated reference biometric information to perform a corresponding guideline capable of coping with a security threat.

The authentication model determining unit 213 may obtain the access point of each of the reference biometric information storage element 150 and the authentication performing element 160 defined in the determined authentication model. For example, the authentication model determining unit 213 may include at least one of a network address and a host address for accessing each of the reference biometric information storage element 150 in the determined authentication model and each of the subjects of the authentication performing element 160 IP (Internet Protocol) address, and access the element through the corresponding IP address.

In the above embodiments, the biometric information capture element 140, the reference biometric information storage element 150 and the authentication performing element 160 may include a biometric sensor 120, a biometric authentication terminal 110, Server 130 to allow remote biometric information to be processed in accordance with security threats. The authentication model determination unit 213 may obtain information on the security threats and the corresponding guideline in the determined authentication model among the plurality of authentication model candidates stored in the memory 220 and determine whether the biometric information is transmitted / The subject of each element processes the biometric information in accordance with the corresponding instruction regarding the authentication model, thereby preventing unauthorized use of the unauthorized user and enhancing security. In one embodiment, the security threats and corresponding guidance for each of the plurality of authentication model candidates may be defined based on Table 1 below, and the authentication model determination unit 213 may determine whether the biometric authentication procedure related to biometric authentication The corresponding guidance of the corresponding authentication model in the authentication model-security threat table 500 may be performed.

Authentication model Threat factor Response Guidelines Model 1 - Attacker can replace illegal capture data (biosignal information) such as stolen or altered data
- Attacker can use illegal biometric reference template data
- Attacker can use illegal comparison program
- Template may leak due to device damage of the biometric authentication terminal (110) - Mutual authentication between the biometric authentication terminal (110) and the biometric sensor (120)
- Encryption of reference biometric information (reference data) Model 2 - Attacker can replace illegal capture data (biosignal information) such as stolen or altered data
- Attacker can illegally change data when sending capture data
- Attacker can use illegal biometric reference template data
- Attacker can use illegal comparison program
- Reference biometric information leak.
- Data can be transmitted to the illegal server, template can be leaked due to device damage of the biometric authentication terminal (110), template can be leaked if the central server is lost or stolen Authentication of the biometric authentication terminal 110, the biometric sensor 120 and the biometric authentication server 130
For example, when a cryptographic operation is performed, process key generation and digital signature generation are performed within the Universal Subscriber Identity Module (USIM) card
- Encryption of transport channels
- Encryption of reference biometric information (reference data) Model 3 - Attacker can replace illegal capture data (biosignal information) such as stolen or altered data
- Attacker can illegally change data when sending capture data
- Attackers can attack transport channels, send data to illegal servers, templates can be leaked if a central server is lost or stolen. Authentication of the biometric sensor 120 and the biometric authentication server 130
- Encryption of transport channels
- Encryption of transmitted data Model 4 - Attacker can replace illegal capture data (biosignal information) such as stolen or altered data
- Attacker can use illegal biometric reference template data or illegal comparison program
Template may leak when biometric sensor (120) is lost or stolen
- Attacker can attack transport channel, template may be leaked if central server is lost or stolen Authentication of the biometric sensor 120 and the biometric authentication server 130
- Encryption of reference biometric information (reference data)
- Encryption of transport channels
- Encryption of transmitted data Model 5 - Attacker can replace illegal capture data (biosignal information) such as stolen or altered data
- Attacker can use illegal biometric reference template data or illegal comparison program
Template may leak when biometric sensor (120) is lost or stolen Authentication of the biometric sensor 120 and authentication of the biometric authentication terminal 110
- Encryption of reference biometric information (reference data) Model 6 - Attacker can replace illegal capture data (biosignal information) such as stolen or altered data
- Attacker can use illegal biometric reference template data or illegal comparison program
Template may leak when biometric sensor (120) is lost or stolen - Encryption of reference biometric information (reference data) Model 7 - Attacker can replace illegal capture data (biosignal information) such as stolen or altered data
- Attacker can illegally change data when sending capture data
- Attacker can use illegal biometric reference template data or illegal comparison program
- Template may leak due to device damage of the biometric authentication terminal (110) Authentication of the biometric sensor 120 and authentication of the biometric authentication terminal 110
- Encryption of reference biometric information (reference data) Model 8 - Attacker can replace illegal capture data (biosignal information) such as stolen or altered data
- Attacker can illegally change data when sending capture data
- Attacker can attack transport channel and send data to illegal server Authentication of the biometric sensor 120 and the biometric authentication server 130
- Encryption of transport channels Model 9 - Misuse of the biometric sensor (120) (related apps that do not use sensors)
Inappropriate apps can use the captured data as a result of inappropriate app attacks such as man-in-the-middle attacks
- Attacker can use illegal biometric reference template data or illegal comparison program
- Template may leak due to device damage of the biometric authentication terminal (110) Authentication of the biometric sensor 120 and the biometric authentication agent (application program)
- Encryption of reference biometric information (reference data) Model 10 - Misuse of the biometric sensor (120) (related apps that do not use sensors)
Inappropriate apps can use the captured data as a result of inappropriate app attacks such as man-in-the-middle attacks
- Attackers can attack transport channels, send data to illegal servers, templates can be leaked if a central server is lost or stolen. Authentication of the biometric sensor 120 and the biometric authentication agent (application program)
Authentication of the biometric authentication agent and authentication of the biometric authentication server 130
- Encryption of transport channels
- Encryption of transmitted data Model 11 - Misuse of the biometric sensor (120) (related apps that do not use sensors)
Inappropriate apps can use the captured data as a result of inappropriate app attacks such as man-in-the-middle attacks
- Attacker can use illegal biometric reference template data or illegal comparison program
- Template may leak due to device damage of the biometric authentication terminal (110)
- Attackers can attack transport channels, send data to illegal servers, templates can be leaked if a central server is lost or stolen. Authentication of the biometric sensor 120 and the biometric authentication agent (application program)
Authentication of the biometric authentication agent and authentication of the biometric authentication server 130
- Encryption of reference biometric information (reference data)
- Encryption of transport channels
- Encryption of transmitted data Model 12 - Misuse of the biometric sensor (120) (related apps that do not use sensors)
Inappropriate apps can use the captured data as a result of inappropriate app attacks such as man-in-the-middle attacks
An attacker can attack a transport channel and send data to an illegal server Authentication of the biometric sensor 120 and the biometric authentication agent (application program)
Authentication of the biometric authentication agent and authentication of the biometric authentication server 130
- Encryption of transport channels

The authentication model determination unit 213 may receive information on a plurality of authentication model candidates in advance and store the information in the memory 220. In an embodiment, in the process of installing the biometric authentication agent, information on a plurality of authentication model candidates Can be received and stored.

The authentication performing control unit 214 may be configured to determine whether the authentication performing element 160 receives the biometric information of the verification subject received from the biometric information capture element 130 and the reference biometric information of the authentication subject received from the reference biometric information storage element 140 The authentication of the verification target can be performed based on the information. The authentication execution control unit 214 determines that the authentication model is determined and when the subject of each element is detected from the authentication model, the biometric information capturing element 130 provides the captured biometric information to be verified to the authentication execution element 160 can do. The authentication execution control unit 214 transmits at least one of the user information and the authentication object identifier related to the authentication target to the reference biometric information storage element 140 so that the reference biometric information storage element 140 can transmit the reference biometric information Information and to transmit the detected reference biometric information to the authentication performing element 160. [

In one embodiment, the authentication performing control unit 214 may be configured such that when the authentication performing element 160 is embodied in the biometric authentication server 130, the authentication performing element 160 may be a source that is turned on from the biometric information capturing element 140 The biometrics information of the user can be received. For example, when the authentication model is determined to be one of the third, eighth, ninth, and eleventh models (Model 3, 8, 9, 11) in the authentication model candidate table 400, The recognition information capturing element 140 may capture the biometric information to be verified as an image and provide the original image to the authentication performing element 160 implemented in the biometric authentication server 130 without any additional processing, The execution element 160 can perform feature extraction and authentication based on the feature extraction algorithm from the original image of the verification target provided.

In the above embodiment, the authentication performing element 160 implemented in the biometric authentication server 130 extracts a first feature point associated with the dynamic element and a second feature point associated with the static element from the biometric information of the received original, An overall matching degree is calculated through a weighted averaging operation that assigns a weight higher than the first feature point to the matching degree with respect to the second minutiae point, and authentication is performed based on whether the reference matching degree is equal to or greater than the reference matching degree. Accordingly, when the authentication performing element 160 is implemented in the biometric authentication server 130, feature point extraction and comparison analysis can be performed more in depth using the biometric authentication server 130 as a main body.

In one embodiment, the authentication performing control unit 214 determines whether the authentication execution element 160 is processed by the reference biometric information storage element 150 when the authentication execution element 160 is implemented in the biometric authentication terminal 110 It is possible to receive the processed reference biometric information. For example, the authentication execution control unit 214 determines whether the authentication model is the first, second, seventh, tenth, and twelfth models (Models 1, 2, 7, and 1012) in the authentication model candidate table 400 If it is determined to be one, the feature extraction processing is performed from the reference biometric identification information storage element 150 through the authentication execution element 160 to extract feature points from the biometric information to be authenticated based on the feature extraction algorithm, Biometric identification information of the reference biometric information. Accordingly, when the authentication execution element 160 is implemented in the biometric authentication terminal 110, the biometric authentication terminal 110 can perform a quick comparison analysis.

In one embodiment, the authentication performing control 214 controls the authentication performing element 160 when the authentication performing element 160 is implemented with the biometric sensor 120, And receive the processed biometric identification information processed by the reference biometric information storage element 150. [ For example, when the authentication model is determined to be one of the fourth to fifth models (Models 4 to 5) in the authentication model candidate table 400, the authentication execution control unit 214 determines that the authentication execution element 160 is biometrics Information is not stored in a separate memory and feature points are extracted from the captured biometric information to generate processed biometric information immediately, and after receiving reference biometric information from the reference biometric information storage element 150, It is possible to authenticate the biometric sensor 120 in a low-capacity and low-write environment as a main body.

In one embodiment, when the reference biometric authentication storage element 150 is implemented in the biometric authentication terminal 110, the authentication execution control unit 214 transmits the reference biometric information to be authenticated through the TEE (Trusted Execution Environment) (Universal Subscriber Identity Module) chip. In this case, TEE supports separation of security area and non-security area to provide a trusted execution environment, and when accessing to security area, TEE processing (application programming interface) The process can be executed to provide security services. The authentication execution control unit 214 stores the reference biometric information to be authenticated corresponding to the personal information of the user through the TEE in the USIM chip mounted on the biometric authentication terminal 110 implemented in the mobile communication terminal, Integrity and security can be guaranteed.

In one embodiment, the authentication performing control unit 214 may be configured such that when the authentication performing element 160 is implemented in the biometric authentication server 110, the biometric information capturing element 140 associates the captured biometric information with the public key And transmit it to the authentication performing element 160. For example, the authentication performing control unit 214 can generate the encrypted biometric information using the public key promised between the biometric authentication servers 110 based on the PKI (Public Key Infrastructure) The biometrics information encrypted through the channel may be transmitted to the authentication performing element 160. [

In the above embodiment, the biometric information capture element 140 may provide encrypted biometric information to the authentication enforcement element 160 that encodes the biometric information based on a public key based encryption algorithm. Here, the public key and the private key can be obtained in advance through an authentication target registration process through a separate authorized registration server (not shown). In this case, the authentication performing element 160 can detect the biometric information to be verified by decoding the received encrypted biometric information on the basis of the promised public key-based encryption algorithm.

The authentication execution control unit 214 may include user information associated with the biometric authentication request in the biometric information capturing element 140, the reference biometric information storing element 150, and the authentication performing element 160, respectively, An authentication object identifier, an authentication model identifier, and an authentication model version. Here, the authentication model identifier may correspond to an ID or an identification number that can identify the determined authentication model.

The authentication result receiving unit 215 can receive the authentication result for the verification target from the authentication execution element 160. [ In one embodiment, the authentication result receiving unit 215 can receive the authentication result through the biometric authentication agent installed by the biometric authentication terminal 110. [ The authentication result receiving unit 215 can receive the result of the biometric authentication related to the verification target through the biometric authentication agent provided from the biometric authentication server 130, The authentication result can be visualized.

The authentication result reception unit 215 receives the biometric authentication agent from the authentication execution element 160 when the authentication execution element 160 is implemented in the biometric authentication server 130, It is possible to allow the reception of the authentication result only when the user authentication through the agent is successful. For example, the authentication result receiving unit 215 additionally performs user authentication for confirming user information including a user identifier and a password through the biometric authentication agent even if the biometric authentication result is successful, And may decide to visualize the authentication result only when appropriate.

When the biometric authentication is successful, the authentication result receiving unit 215 can approve the provision of the user requested service associated with the biometric authentication request, and can reject the request. The authentication result receiving unit 215 can retry the biometric authentication until a specific number of times and can visualize the process and the notification message regarding the authentication result through the display panel.

The control unit 216 can control the overall operation of the processor 210 and includes a biometric authentication request receiving unit 211, a biometric information capture control unit 212, an authentication model determination unit 213, And the authentication result receiving unit 215 can be controlled.

In this case, the reference biometric information storage element 150 may generate the reference biometric information to be authenticated as a biometric reference through an authentication target registration process with respect to the user. In one embodiment, the reference biometric information storage element 150 may perform an authentication object registration process for a user in conjunction with a public registration server operated by an authorized registration authority based on a user's request, for example, , Generates a user identifier for the user, captures the biometric information of the user, extracts the feature points from the captured biometric information, and generates reference biometric information of the user corresponding to the authentication target based on the extracted feature points And may be stored in association with the corresponding user identifier. In this process, at least some of the user identifier, the reference biometric information, the public key and private key for biometric authentication, and the public certificate are stored in a biometric authentication agent implemented as a biometric hardware security module And may be provided to the biometric authentication terminal 110 of the corresponding user.

The authentication performing element 160 analyzes the biometric information of the verification object received from the biometric information capturing element 140 to extract the characteristic points, The feature points are detected from the reference biometric information, and the biometric authentication is determined to be successful if the feature points are matched with each other by comparing and analyzing them. The authentication performing element 160 may include a feature point extraction algorithm for extracting at least a part of at least one biometric characteristic parameter in the biometric information to be verified as a feature point and for extracting feature points unique to each person .

In one embodiment, the authentication performing element 160 may compare these minutiae in terms of value range, area range and pattern range to calculate a degree of matching between them, and if the calculated matching degree is less than a predetermined reference value 90%), the authentication can be regarded as successful. In another embodiment, the authentication performing element 160 compares a plurality of minutiae points extracted from the biometric information to be verified with a plurality of minutiae points in the reference biometric information to be authenticated, It is possible to determine that the biometric authentication is successful if a predetermined number or more of the predetermined number is detected or if the average matching degree is equal to or greater than a specific reference value.

In one embodiment, the authentication performing element 160 may extract from the biometric information to be verified a first feature point associated with the dynamic component and a second feature point associated with the static component. Here, the dynamic element corresponds to a dynamic parameter related to a biometric characteristic, in which data measured from a user depending on a time or a situation is mainly variable, and a static element corresponds to a static parameter related to a biometric characteristic can do. The authentication performing element 160 may assign a higher weight to the second feature point associated with the static element than to the first feature point associated with the dynamic element and may provide a weighted average operation that gives a higher weight to the degree of match for the second feature point It is possible to determine whether the biometric authentication is successful or not. Here, each weight can be adjusted by a user or a designer.

In one embodiment, the authentication performing element 160 may determine that the feature point is not valid if the first feature point associated with the dynamic component is not within a predetermined validity range through validity analysis. The authentication performing element 160 may not reflect the matching degree with respect to the minutiae determined to be invalid in the process of determining whether the biometric authentication is successful or may reflect the matching degree with a predetermined minimum weight.

FIG. 3 is a flowchart illustrating a process of the biometric authentication procedure performed by the processor of FIG. 2 for biometric authentication.

3, the biometric authentication request receiving unit 211 may receive a biometric authentication request related to the verification target (step S310). The biometric information capturing control unit 212 may cause the biometric information capturing element 140 to capture the biometric information to be verified according to the biometric authentication request (step S320). The authentication model determination unit 213 can determine the authentication model (step S330). The authentication model determining unit 213 may detect the reference biometric information storage element 150 and the authentication performing element 160 based on the determined authentication model (step S340). The authentication performing control unit 214 may be configured to determine whether the authentication performing element 160 receives the biometric information of the verification subject received from the biometric information capture element 130 and the reference biometric information of the authentication subject received from the reference biometric information storage element 140 The authentication of the verification target can be performed based on the information (step S350). The authentication result receiving unit 215 can receive the authentication result for the verification target from the authentication execution element 160 (step S360).

<Appendix 1: Technical and operational countermeasures of remote biometric applications using mobile devices>

The biometric technology of mobile devices is often used in a variety of fields requiring high levels of stability, such as e-banking and procurement services. Efforts are needed to develop a security system that can preemptively address potential security threats to ensure mobile biometric data security. Because biometric technologies handle sensitive personally identifiable information (PII), some privacy concerns about biometrics on mobile devices need to be considered.

One embodiment of the present invention provides implementation guidance and threats in the operation of a biometric system of a mobile device and provides general guidance on security measures in terms of technology and operations to create a secure mobile environment for use of a remote biometric system do.

1. Range

One embodiment of the present invention provides a framework for securing the security and reliability of a biometric information flow for an automatic meter reading application program using a mobile device. One embodiment of the present invention defines 12 telemetric authentication models according to the configuration of the biometric sensor 120, the biometric authentication terminal 110 and the biometric authentication server 130, It specifies the threats of the system and suggests general guidance on security measures in terms of technology and operations to enable the use of remote biometric systems and to create a secure mobile environment.

The following topics may be addressed in the present invention.

- Remote biometric security reference model of remote biometric system operation using mobile devices, including cloud computing services.

- General related threats and countermeasures to ensure the security and stability of the remote meter reading application using the mobile device (biometric authentication terminal 110)

The relevant standard environment is shown in Fig.

3. Definitions

3.1.1 biometric, adjective [b-ISO / IEC 19784-1]: belongs to the field of biometrics.

3.1.2 biometrics (n-1) [b-ISO / IEC 19784-1]: automatic recognition of individuals based on behavioral and biological characteristics.

3.1.3 biometric reference [b-ISO / IEC 19784-1]: a biometric model used for comparison due to one or more stored biometric sample, biometric template or biometric data subject.

3.1.4 biometric sample [b-ISO / IEC 2382-37]: An analog or digital representation of a biometric characteristic prior to the biometric feature extraction process.

3.1.5 biometric template [b-ISO / IEC 19784-1]: A set of stored biometric features that can be directly compared to probe biometric features.

3.1.6 comparison (match / matching) [b-ISO / IEC 19794-1]: Estimation, calculation or measurement of similarity or dissimilarity between biometric probes (biometric basis).

3.1.7 comparison decision [b-ISO / IEC 2382-37]: a comparison score, a recognition biometric (s) and a biometric threshold (s) based on a decision policy, and possibly other Inputs may be included.

3.1.8 comparison score [b-ISO / IEC 19784-1]: The numerical value (or set of values) of the comparison result.

3.1.9 false match [b-ISO / IEC 2382-37]: A "match" comparison of biometric probes with other biometric targets and biometric references.

3.1.10 false non-match [b-ISO / IEC 2382-37]: a "mismatch" comparison of biometric probes and biometric references of the same biometric subject and of the same biometric characteristic.

3.1.11 match [b-ISO / IEC 2382-37]: A comparison decision that the biometric probe and the biometric reference come from the same source.

3.1.12 mobile device [b-ITU-T X.1158]: usually has a touch input and / or a small keyboard, has a display screen, has a subscriber identity module (SIM) card, Computing device, and not heavy.

3.1.13 non-match [b-ISO / IEC 2382-37]: A comparison decision indicating that the biometric probe and the biometric reference are not the same source.

3.2.1 biometric hardware security module: Physically combined hardware consisting of a hardware security module and a biometric module with one or more biometric sensors.

4. Abbreviations and acronyms

APDU Application Protocol Data Unit (Application Protocol Data Unit)

API Application Programming Interface

App Application

BC Biometric Certificate

BioAPI Biometric Application Programming Interface

CPU Central Processing Unit (Central Processing Unit)

FIDO Fast Identity On-line

ICC Integrated Circuit Card

ID Identification (Identification)

MNO Mobile Network Operator

MoC Match on Card (MoC match on card)

NFC Near Field Communication

OS Operating System

OTA Over The Air

PAN Private Access Network (private network)

PII Personally Identifiable Information

PKI Public Key Infrastructure

POS Point-Of-Sale

SD Secure Digital (Secure Digital)

SE Secure Element (security element)

SP Service Provider

TSP Token Service Provider

USB Universal Serial Bus (Universal Serial Bus)

USIM Universal Subscriber Identity Module (Universal Subscriber Identity Module)

TLS Transport Layer Security (Transport Layer Security)

TSM Telebiometrics System Mechanism (Remote (Mobile) Biometric System Mechanism)

WiFi Wireless Fidelity

7. Authentication model

7.1 Overview

According to one embodiment of the present invention, the model is divided into 12 categories according to the configuration of the biometric sensor 120, the biometric authentication terminal 110, and the biometric authentication server 130, and the following three aspects are considered. In order to designate a threat of the biometric operating system of the biometric authentication terminal 110 implemented in the mobile device and to establish a safe mobile environment for the use of the remote biometric system, a general guideline on security measures in terms of technology and operation . This is described in FIG. 4 and Table 1.

7.2 Model 1 (Model 1)

6A, the biometric information capturing element 140 is embodied in the biometric sensor 120 and includes a reference biometric information storage element 150 and an authentication performing element 160, Is implemented in the biometric authentication terminal (110).

The biometric authentication terminal 110 may receive a request for biometric authentication through a biometric authentication agent implemented in an application program (App), and the biometric sensor 120 may receive a biometric authentication request The biometric authentication terminal 110 may compare the sample data of the received verification target with the template of the registered user as the reference biometric information to be authenticated. And the authentication result can be provided to the user through the biometric authentication agent. In this process, the biometric authentication terminal 110 can detect the template of the registered user based on the template identifier (ID) (for example, the authentication target identifier) and generate the authentication result.

Since the model 1 assumes that the mobile environment is in an environment where it is difficult to communicate with the biometric authentication server 130, the biometric authentication terminal 110 such as a smart phone may be provided with sufficient processing resources to perform biometric authentication have. The processing resources should be sufficient to collect and compare the sample data. The external biometric sensor 120 can detect the biometric sensor 120 using the local communication (NFC) when the biometric authentication terminal 110 can not support the biometric sensor 120 due to its modality or applicability. And can communicate with the recognition authentication terminal 110. The model 1 can be used when the processing procedure of the biometric authentication terminal 110 is reliable in the biometric authentication server 130.

7.3 Model 2 (Model 2)

6B, the biometric information capture element 140 is embodied as a biometric sensor 120 and the reference biometric information storage element 150 is embodied in a biometric authentication server 130 ), And the authentication performing element 160 is implemented by the biometric authentication terminal 110.

The biometric authentication terminal 110 may request verification from the biometric authentication server 130 through a biometric authentication agent implemented in an application program (App), and the biometric authentication server 130 may register the registration corresponding to the request The biometric authentication terminal 110 can provide the template of the user (authentication subject) as the reference biometric authentication information. The biometric authentication terminal 110 acquires, as sample data, biometric information of a user (verification subject) captured from the biometric sensor 120 when a biometric authentication request is received via the biometric authentication agent, The sample data to be verified may be compared with the template of the received authentication target, and the authentication result may be provided to the user through the biometric authentication agent. Similarly, in this process, the biometric authentication terminal 110 provides the template identifier (ID) (for example, the authentication target identifier) to the biometric authentication server 130 to receive the template of the authentication target associated with the template identifier can do.

The model 2 is preferably used as many terminals as possible, which is suitable for a web confirmation model since the user can connect to the biometric authentication server 130 from all of the biometric authentication terminals 110. The model 2 registers the biometric reference template in the biometric authentication server 130 and requests the biometric authentication server 130 to trust the processing procedure of the biometric authentication terminal 110. [

7.3 Model 3 (Model 3)

6C, the biometric information capturing element 140 is embodied in the biometric sensor 120 and includes a reference biometric information storage element 150 and an authentication performing element 160, Is implemented in the biometric authentication server (130).

The biometric authentication server 130 requests sample data to be verified for biometric authentication to the biometric sensor 120. The biometric sensor 120 captures the user's biometric information and transmits the same to the biometric authentication terminal 110 The biometric authentication server 130 compares the received sample data of the verification target with the template of the authentication target and transmits the authentication result to the biometric authentication terminal 120 through the biometric authentication agent 120. [ (110).

The model 3 assumes that the biometric authentication terminal 110 can not guarantee a sufficient resource in terms of processing capability, memory, security, and the like, and thus uses only the biometric authentication terminal 110 in a communication process. The external biometric sensor 120 may communicate with the biometric authentication terminal 110 using local communication when the biometric authentication terminal 110 can not support the biometric sensor 120 due to the nature of the modality or applicability can do.

For this authentication, the user can register his or her reference biometric information as a biometric reference in advance to the biometric authentication server 130 having the trusted biometric reference template. In the model 3, the biometric authentication server 130 must trust the data captured by the biometric sensor 120.

7.4 Model 4 (Model 4)

6D shows model 4 in the authentication model where biometric information capturing element 140 and authentication performing element 160 are embodied in biometric sensor 120 and reference biometric information storage element 150, Is implemented in the biometric authentication server (130).

The biometric authentication terminal 110 may receive a biometric authentication request through a biometric authentication agent implemented in an application program (App). The biometric sensor 120 may capture sample data of the verification target, The authentication server 130 can request the template of the authentication target. The biometric sensor 120 may compare the captured sample data of the verification target with the template of the authentication target received from the biometric authentication server 130 and transmit the authentication result to the biometric authentication terminal 110.

In Model 4, the biometric sensor 120 may be implemented as a hardware security module. Here, the hardware security module corresponds to a physical device provided in the form of a smart card or other universal serial bus (USB) type security token, to prevent tampering with intrusion or modification of internal data, Adding a tapping mechanism, or changing the operation of the apparatus.

The model 4 assumes that the biometric authentication terminal 110 can not guarantee a sufficient resource in terms of processing capability, memory, security, and the like, and thus uses only the biometric authentication terminal 110 in the communication process.

7.5 Model 5 (Model 5)

6E, the biometric information capturing element 140 and the authentication performing element 160 are embodied in the biometric sensor 120 and the reference biometric information storage element 150, Is implemented in the biometric authentication terminal (110).

The biometric sensor 120 may compare the template as the reference biometric information of the user transmitted from the biometric authentication terminal 110 with the captured sample data and transmit the authentication result to the biometric authentication terminal 110. The model 5 has the same order as that of the model 4 except that the template is transmitted from the biometric authentication terminal 110. In Model 5, the biometric sensor 120 may be implemented as a hardware security module. It is assumed that the model 5 is difficult for the biometric authentication terminal 110 to communicate with the biometric authentication server 130 including the wireless environment.

7.6 Model 6 (Model 6)

6F, the biometric information capturing element 140, the authentication performing element 160 and the reference biometric information storing element 150 are embodied in the biometric sensor 120 .

The biometric sensor 120 receives the biometric authentication request through the biometric authentication agent (App) installed in the biometric authentication terminal 110, captures the user's sample data, compares the biometric authentication data with the template of the registered user, And transmit the result to the biometric authentication terminal 110 through the biometric authentication agent. Similarly, template ID information is needed to detect the template of the registered user.

The external biometric sensor 120 may communicate with the biometric authentication terminal 110 using local communication when the biometric authentication terminal 110 can not support the biometric sensor 120 due to the nature of the modality or applicability do.

In the model 6, it is assumed that the biometric sensor 120 can be implemented as a hardware security module, and the model 6 can not guarantee security in the biometric authentication terminal 110. This model 6 can be practical when used in a national infrastructure system that requires a high level of security.

7.7 Model 7 (Model 7)

In FIG. 6G, the biometric information capture element 140 and the reference biometric information storage element 150 are embodied in the biometric sensor 120, and the authentication performing element 160, Is implemented in the biometric authentication terminal (110).

The biometric sensor 120 can capture the sample data to be verified, detect the registered authentication target template, and transmit them to the biometric authentication terminal 110. [ The biometric authentication terminal 110 may perform authentication for comparing the sample data of the verification target received from the biometric sensor 120 with the template of the authentication target and provide the authentication result to the user through the biometric authentication agent. Model 7 may be practical using a particular approval system where a comparison algorithm is not required of the biometric sensor 120.

7.8 Model 8 (Model 8)

6H, the biometric information capture element 140 and the reference biometric information storage element 150 are embodied in the biometric sensor 120 and the authentication performing element 160 is implemented in the biometric sensor 120, Is implemented in the biometric authentication server (130).

The biometric sensor 120 may receive the request from the application of the biometric authentication terminal 110 to capture the sample data of the verification target, detect the registered template of the authentication target, and transmit them to the biometric authentication server 130. The biometric authentication server 130 may compare the received sample data of the verification target with the template of the authentication target and transmit the authentication result to the application of the biometric authentication terminal 110. [ In the model 8, the biometric authentication terminal 110 is used only in a communication process, and the biometric authentication server 130 has to trust the sample data captured by the biometric sensor 120.

7.9 Model 9 (Model 9)

6i, a biometric information capture element 140 is embodied as a biometric sensor 120 and a reference biometric information storage element 150 is coupled to the biometric authentication terminal 110 ), And the authentication performing element 160 is implemented in the biometric authentication server 130.

The biometric authentication server 130 requests user's sample data for verification to the biometric authentication terminal 110. The biometric sensor 120 captures user's sample data and transmits the captured sample data to the biometric authentication terminal 110 The biometric authentication terminal 110 transmits the template of the registered user to the biometric authentication server 130 in this process. The biometric authentication server 130 may finally compare the sample data of the user with the template of the registered user. In model 9, the biometric authentication server 130 must trust the sample data captured by the biometric sensor 120.

7.10 Model 10 (Model 10)

The biometric information capture element 140, the reference biometric information storage element 150 and the authentication performing element 160 are implemented in the biometric authentication terminal 110 do.

The biometric authentication terminal 110 can capture the user's sample data through the biometric information capturing element 140 implemented by the biometric authentication sensor 120 itself and a device integrated with the registered user's template And transmit the authentication result to the installed biometric authentication agent. Similarly, template ID information is needed in this process. The model 10 assumes that the biometric authentication terminal 110 is capable of supporting the biometric processing load and is provided with sufficient processing resources to perform biometric authentication.

7.11 Model 11 (Model 11)

6K, the biometric information capturing element 140 is implemented in the biometric authentication terminal 110 and includes a reference biometric information storage element 150 and an authentication performing element 160 Is implemented in the biometric authentication server 130. [

The biometric authentication terminal 110 may receive the biometric authentication request via the application and may receive the user's sample data via the biometric information capture element 140 implemented by the biometric sensor 120, And may provide the captured sample data to the biometric authentication server 130 to request authentication. The biometric authentication server 130 may compare the received sample data with the template of the registered user and transmit the authentication result to the application of the biometric authentication terminal 110. [ The user can register the biometric reference template in the biometric authentication server 130 in advance and similarly, the template ID information is necessary for performing the comparison. The model 11 assumes that the biometric authentication terminal 110 does not have sufficient resources such as memory, disks, and the like.

7.12 Model 12 (Model 12)

In FIG. 61, the biometric information capturing element 140 and the authentication performing element 160 are implemented in the biometric authentication terminal 110, and the reference biometric information storage element 150 Is implemented in the biometric authentication server 130. [

The model 12 has the same order as the model 10 except that the template of the user registered in the biometric authentication server 130 is transmitted. Similarly, template ID information is needed to perform the comparison. The model 12 assumes that the biometric authentication terminal 110 can support the biometric processing load and is provided with sufficient processing resources to perform biometric authentication.

8. Vulnerability of Remote Biometric Mobile Devices

The vulnerability refers to the weakness of the biometric authentication terminal 110 implemented as a mobile device and its ability to withstand hostile environmental impacts. Attacks can be unauthorized use, deliberate destruction, malicious modification, or illegal attempt to acquire mobile device assets. That is, the vulnerability is an internal characteristic of the biometric authentication terminal 110, and the attack means an external attack activity of the biometric authentication terminal 110.

8.1 Inadequate Application Programming Interface Management

The most important feature of mobile devices is the flexible application programming interface (API), which is mainly used for application development. Most malware, however, lacks application programming interface (API) management. API management refers to the process of developing, publishing, and managing application APIs. In general, mobile device APIs are classified as open APIs for third party application development and control APIs for remote maintenance. Control APIs generally have excellent or specific privileges that can be used for remote system updates, file deletion, and information retrieval. Once a malicious user obtains a controlled API, they can initiate negative activities such as backdoor attacks. On the other hand, some public APIs have improper privileges, so they can acquire specific privileges and start attacks.

8.2 Insecure wireless channel

User data and control signals transmitted between mobile devices and network devices in a wireless environment, including cellular networks, can be captured when transmitted over the air (OTA). Keeping these communication channels unprotected or unencrypted can expose information. In fact, most wireless channels do not have enough security features for the following reasons:

a) There is insufficient security protection in the protocol stack.

b) Consider the cost of high cost of security solutions

c) Government policy to prevent the implementation of security mechanisms

Although security mechanisms such as authentication, encryption, access control, etc. have been implemented, mobile devices can not respond to some enhanced attacks due to the limited security strength of existing security mechanisms.

9. Security Threats for Each Model

Table 1 shows security threats that unauthorized users can use illegally and possible countermeasures against each model.

Figure 7 also shows certain threats to collaboration between biometric authentication such as the public key infrastructure (PKI) and the environment of this standard. In the case of the model including the PKI, there is a risk that the private key will be leaked and that someone can use illegally as in (a) in FIG. 7, and even if there is no private key leakage as in (b) May not be guaranteed. Therefore, the biometric template information should request the identification information of the PKI certificate and the validity information on itself. In one embodiment, the biometric certificate (BC) of [ITU-T X.1089] may be used as the biometric template.

Potential threats to personal information processed by the biometric authentication terminal 110, the biometric sensor 120, or the trusted biometric authentication server 130 are as follows.

- Biometric and personal information fraud through illegal sensors

- Biometric and fraudulent information fraud through illegal mobile devices

- Biometric and personal information fraud through illegal servers

- Biometrics and fraudulent information fraud by connecting to illegal networks

The countermeasures are as follows.

Authenticate the biometric sensor 120 using a PKI

- authenticate the biometric authentication terminal 110 using the PKI

Authenticate the biometric authentication server 130 using the PKI

- encrypts the session key exchange using the Transport Layer Security (TLS) protocol specified in [IETF RFC 4346]

<Appendix 2: Micro SD (Secure Digital) card-based approach using applets>

As defined in Model 1, the biometric authentication terminal 110 may receive the biometric authentication request through the biometric authentication agent implemented in the mobile application, and may register the captured sample data through the biometric sensor 120 The authentication result can be transmitted to the application in comparison with the user's template. 8 shows an example of a flow of a mobile biometric application system to which model 1 is applied.

In FIG. 8, the model 1 can compare and store the micro SD card (MoC) embedded in the applet, thereby improving the security vulnerability of the biometric authentication terminal 110. Micro SD can be applied to mobile remote biometric systems as follows.

a) the biometric sensor 120 captures a user &apos; s biometric sample

b) The biometric sample in the form of a biometric template is immediately converted to WiFi communication and then transmitted to the biometric authentication terminal 110

c) biometric template with fingerprint authentication applet in security element (SE) area of micro SD fingerprint authentication is sent to applet

d) The fingerprint template transferred to the applet is registered in micro SD SE and compared with biometric reference as reference biometric information.

e) User authentication via mobile app to verify the authentication result

The process of comparing and storing the process of the biometric authentication terminal 110 mounted in the micro SD security element of the applet may be fundamentally blocked in order to block information leakage due to the security threat. Figure 8 shows how the concepts described in this invention can be applied to the following features.

- Fingerprint authentication algorithms and fingerprint information are stored in micro SD's smart card (SE)

- It is free to move and mount on smartphone when moving.

Independence of the fingerprint authentication applet is guaranteed regardless of operating system (OS) and smartphone model

- Since all stored fingerprint information is in micro SD, the flow of information is basically blocked. In most cases, it is safe from external security threats.

- The fingerprint applet runs under the control of the Java card and the real-time environment is verified

- Encryption of biometric information is supported

Security The SE of the micro SD maintains the same level as the hardware security module, so biometric information can be stored to provide personal authentication and biometric information of the mobile device conveniently and at a high level of security. Accordingly, the application provides an environment suitable for implementing a distribution solution.

<Appendix 3: Research on mobile storage for biometrics>

In this appendix, technical requirements for a method of acquiring biometric data of an application program at the biometric authentication terminal 110 are described. To perform the registration, a biometric sample from the user is captured for biometric reference generation and then the user information is uploaded to the card.

1. Off-card comparison

The off-card comparison means that the biometric authentication system performs biometric authentication. This card serves as a storage device for storing biometric references of the user. Figure 9 (a) schematically illustrates the various stages of this process.

To perform the verification, the biometric system will obtain access to the integrated circuit card (ICC) and read the biometric reference of the user. The role of the biometric system is to capture biometric samples and perform biometric. If the biometric is successful, the biometric system can change the security status. This may include downloading additional information from the card for subsequent processing. If unsuccessful, additional access is denied.

Passwords are commonly used to authenticate cards and biometric systems. To protect communication between the biometric system and the card, you must set up a secure channel before transferring the template or data.

For example, suppose a physical access system in which a biometric reference and access code is stored in the ICC, the biometric system reads the biometric reference from the card and performs biometrics to read the access code from the card if the verification is successful You can send it to an open backend system.

2. On-card comparison (sensor-off card)

The on-card comparison means that biometric sample verification is performed on the card. The procedure is schematically shown in Fig. 9 (b). The ICC central processing unit (CPU) must have sufficient processing capability to perform this matching. The registration procedure is the same as or similar to off-card matching.

To perform the on-card comparison, the biometric authentication system captures the biometric sample and extracts the biometric data, and the generated biometric data is uploaded to the card for verification. The verification process runs on the card, and if biometrics succeeds, the security status of the card is updated and the appropriate signal is sent to the backend system. A secure and reliable channel is recommended to protect communication between the biometric system and the card (eg, security messaging according to [b-ISO / IEC 7816] and mechanisms defined in [b-ISO / IEC 24761] And distributed comparison verification).

For example, assume a card that can generate a digital signature using a key that does not leave the card. A request sent to the card to initiate digital signature generation receives a security status error response message, which indicates that the user needs confirmation. The user provides the biometric samples needed for the biometric system to generate the biometric data and sends it to the ICC. The ICC compares the newly captured biometric data with the stored biometric data and updates the security state that causes the ICC to generate a digital signature when the ICC receives the APDU command when the comparison is successful.

3. Work-sharing On-card based comparison

The task-shared on-card comparison is similar to the on-card comparison of 2 above except for the comparison procedure. This process is schematically shown in Figure 9 (c). This type of comparison can be designed for ICCs that do not have enough processing power to perform biometric data comparisons. In this case, a computationally intensive activity (such as a mathematical transformation) can be sent to the biometric system to perform the computation and the result is sent back to the ICC, so the final decision of the matching score is calculated on the card. During the dictionary comparison calculation, communication between the card and the biometric system is performed. A secure and reliable channel is used to protect communication between the terminal and the card unless explicit protection is required in a particular operating environment, and the final comparison must be performed on the card.

4. System-on-card comparison

The system-on-card comparison means that the entire biometric sample verification process is performed on the card. This process is schematically shown in Fig. 9 (d). To perform the sensor-card comparison, a sensor embedded in the card captures the biometric specimen and extracts the biometric data. The generated biometric data is used for verification, and the verification process is performed on the card. The security status of the card is updated when the verification of the card is completed. The biometric sample or reference data is not transmitted to or from the card.

<Appendix 4: Case study of mobile payment service>

A case study on mobile payment environment using biometrics was conducted to analyze the mobile payment environment based on biometrics to establish security threats and countermeasures against biometric - based payment systems such as Type A Pay and Type B Pay. This type of payment system applies to Model 10.

1. Type A Pay payment procedure

(Enrollment)

a) Activate your billing app

b) Enter payment card information (Add Card menu)

c) Check card registration

(Payment) App activation: Paying progress via point of sale (POS) tagging

a) Activate your billing app

b) Select the main card to be paid

c) fingerprint authentication

d) Ready to pay (flashing green light around payment card)

e) POS card tagging (both NFC and self available)

f) Verify payment information for type A paid apps

2. Type B Pay payment procedure

a) Pay is opened on smartphone

b) NFC tap connection between NFC POS terminal and smartphone

c) The NFC POS terminal connects to Pay on iPhone and selects the card information specified by the buyer

d) The security element chip (part of the NFC hardware of the phone) validates the transaction and sends the user's approval to the NFC POS terminal

f) The purchase information is transferred through the seller system to the relevant bank

g) The bank confirms the seller and stores the transaction data in the payment processing network

h) The payment processor (Visa, MasterCard, etc.) matches the transaction data (purchase information and device account number) with the buyer's credit card account.

i) The purchase is processed and the verification result is transmitted to the POS device through the system

3. Built-in security for type B Pay

NFC and other credit payment methodologies can be used to make the entire process more secure. The differences are as follows.

- Credit card information is not exchanged

- Each purchase requires a new transaction number

- The absence of card swiping can eliminate the problems of bad-guy skimming and memory-scraping malware that harass many target shoppers

Type B has the following potential security issues:

- User authentication: Type B Pay uses a logical choice of biometrics, but it took the attacker only two days to bypass the TouchID used on the iPhone 5

- Validating mobile applications: Typing a user's credit card information into a passbook and taking or typing a picture can be a weak link. Malware installed on the iPhone can capture data and send information to remote servers that an attacker can control.

Type B Pay works using existing device-based security elements. Type B does not store any real card or token data in the cloud server at all. The security element on the device basically performs card emulation in addition to secure storage. When you tap and pay, the payment data is transferred to the contactless terminal.

First, Type B Pay does not store actual card data in SE. Instead, it stores a token that conforms to the EMVCo tokenization specification. This is a token (with ciphertext) sent to the contactless terminal. During the authentication flow, the card network identifies the token and, with the assistance of a token service provider (TSP), de-tokenizes it to the actual private access network (PAN) and sends the actual PAN to the issuer for approval.

Second, Type B owns and controls the security elements embedded inside the device, thereby avoiding unnecessary problems of the MNO.

Finally, Type B can greatly simplify the provisioning model. If you need to provision actual card information, you must rely on complex and complex processes. Fortunately, you have the opportunity to provide tokens and simplify the process. Fast Identity Verification Online (FIDO) Alliance protocol uses standard public key cryptography to provide stronger authentication. During registration with the online service, your client device creates a new key pair. Holds the private key and registers the public key with the online service. Authentication verifies that the client device possesses the private key for the service by signing the challenge. The client's private key can only be used after the user has unlocked locally on the device. Local unlocking can be accomplished through user-friendly and secure measures such as swiping a finger, typing a PIN, speaking into a microphone, inserting a second factor device, or pressing a button.

The FIDO protocol is designed to protect user privacy. The protocol does not provide information that users can use to collaborate on various online services and to track users through services. Using biometric information never leaves your device. The registration procedure is as follows. This is shown in Fig. 10 (a).

a) The user may be prompted to select an available FIDO authenticator that matches the authorization policy of the online service.

b) The user can unlock the FIDO authenticator using a fingerprint reader, a button on the second factor device, a securely typed PIN or other method.

c) The user device creates a new public / private key pair unique to the local device, online service, and user account

d) The public key is sent to the online service and associated with the user's account. All information about the private key and the local authentication method (eg biometric or template) does not leave the local device.

The login procedure is as follows. This is shown in Fig. 10 (b).

a) The online service allows the user to log in with a previously registered device that matches the service's authorization policy

b) The user unlocks the FIDO authenticator in the same way as when registering

c) The device uses the account identifier of the user provided by the service to select the correct key and sign the problem of the service

d) The client device sends the signed challenge back to the service and the service verifies the stored public key and the user's log

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it will be understood by those of ordinary skill in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as set forth in the following claims And changes may be made without departing from the spirit and scope of the invention.

100: Biometric authentication system
110: biometric authentication terminal 120: biometric sensor
130: biometric authentication server 140: biometric information capture element
150: Reference biometric information storage element
160: authentication performing element 210:
211: biometric authentication request receiving unit 212: biometric information capturing control unit
213: Authentication model determination unit 214: Authentication performing control unit
215: authentication result reception unit 216:
220: memory 230: user input / output section
240: Network I /

Claims (13)

A biometric authentication method performed by a biometric authentication terminal interlocked with a biometric information capture element, a reference biometric information storage element, and an authentication performing element,
(a) receiving a biometric authentication request regarding an object to be verified;
(b) capturing the biometric information capture element in response to the biometric authentication request;
(c) determining an authentication model;
(d) detecting the reference biometric information storage element and the authentication performing element based on the determined authentication model;
(e) the authentication performing element authenticates the verification target based on the biometric authentication information received from the biometric information capturing element and the reference biometric authentication information received from the reference biometric information storage element ; And
(f) receiving an authentication result for the verification object from the authentication performing element.
4. The method of claim 1, wherein the biometric information capture element, the reference biometric information storage element,
A biometric authentication terminal, and a biometric authentication server to process remote biometric information according to a security threat.
2. The method of claim 1, wherein step (c)
Determining one of a plurality of authentication model candidates defining a subject of each of the reference biometric information storage element and the authentication performing element as the authentication model.
4. The method of claim 3, wherein step (c)
And selecting one of the plurality of authentication model candidates according to a security threat of the biometric authentication terminal.
4. The method of claim 3, wherein step (d)
And acquiring an access point of each of the reference biometric information storage element and the authentication performing element defined in the determined authentication model.
2. The method of claim 1, wherein step (e)
And if the authentication enforcement element is implemented as a biometric authentication server, causing the authentication enforcement element to receive biometric information of the original turned on from the biometric information capture element.
2. The method of claim 1, wherein step (e)
When the authentication execution element is implemented in a biometric authentication terminal, allowing the authentication execution element to receive processed biometric identification information processed by the reference biometric information storage element. Authentication method.
2. The method of claim 1, wherein step (e)
If the authentication enforcement element is implemented as a biometric sensor, cause the authentication enforcement element to generate processed biometric information without storing the captured biometric information, And receiving the biometric information.
2. The method of claim 1, wherein step (e)
And storing the reference biometric information in a USIM (Universal Subscriber Identity Module) chip through a TEE (Trusted Execution Environment) when the reference biometric storage element is implemented as a biometric authentication terminal. Recognition authentication method.
2. The method of claim 1, wherein step (e)
And if the authentication performing element is implemented as a biometric authentication server, the biometric information capturing element encrypts the captured biometric information based on a public key and transmits the encrypted biometric information to the authentication performing element. A biometric authentication method.
2. The method of claim 1, wherein step (f)
And receiving the authentication result through a biometric authentication agent installed by the biometric authentication terminal.
12. The method of claim 11, wherein step (f)
When the authentication execution element is implemented as a biometric authentication server, the biometric authentication agent is provided from the authentication execution element, and only when the user authentication through the biometric authentication agent is successful, reception of the authentication result is permitted The biometric authentication method comprising the steps of:
A biometric authentication terminal coupled to a biometric information capture element, a reference biometric information storage element and an authentication performing element,
A biometric authentication request receiving unit which receives a biometric authentication request related to a verification target;
A biometric information capturing control unit for causing the biometric information capturing element to capture biometric information of a verification object according to the biometric authentication request;
An authentication model determination unit for determining an authentication model and detecting the reference biometric information storage element and the authentication performing element based on the determined authentication model;
The authentication performing element performs authentication on the verification target based on the biometric information of the verification subject received from the biometric information capturing element and the reference biometric information of the authentication subject received from the reference biometric information storage element An authentication execution control unit; And
And an authentication result receiving unit that receives the authentication result for the verification target from the authentication performing element.

Images