KR20240050784A - Context Authentication System and Method of Logical Domain - Google Patents

Abstract

A logical domain context authentication system according to an embodiment of the present invention includes an answer key collection unit that receives genetic information from a genetic information generation unit and derives the answer key using the received genetic information; a user genetic information generator that generates logical domain context genetic information by utilizing environmental information that can be generated in real time when a user who wishes to perform authentication uses a PC/mobile device for a predetermined period of time through an input means; And, by comparing the genetic information of the logical domain context data generated when the user who wishes to proceed with the authentication uses a PC/mobile and the genetic information contained in the answer key data derived from the answer key collection unit, it is determined whether the user is a legitimate user or not. It is characterized by comprising a user authentication unit that determines whether the user is a user.

Description

Logical domain context authentication system and method {Context Authentication System and Method of Logical Domain}

The present invention relates to a logical domain context authentication system and method, and more particularly, to a logical domain context authentication system and method using a genetic algorithm.

In order for users to receive various services from service providers non-face-to-face or online, user authentication is essential. In conventional user authentication technology, the user's identity is generally authenticated by verifying the password (for example, a 6-digit number sequence) entered by the user, and the user can perform service provision after this identity authentication. However, in this case, the user must always remember the password, so the convenience of use by the user is greatly reduced. Moreover, since this password is essentially a static password, if the password is stolen, it may pose a serious threat to the security of the user's assets after the theft.

Due to the insecurity of user authentication using conventional passwords, various methods of identity authentication are in progress, for example, identity authentication using a pre-paid OTP number, user personal information (biometric information, etc.), etc. However, there is a problem that even this information is easily exposed and there is no correction to ensure that the information provided by the user for authentication is provided by a trustworthy authenticated user.

Accordingly, in order to provide services requiring high security, a more secure user authentication process is required.

Japanese Patent Publication No. 2018-532301 (2018.11.1.)

Accordingly, the present invention was conceived to solve the problems of the prior art as described above, and its purpose is to provide a logical domain context authentication system and method.

However, the object of the present invention is not limited to the object mentioned above, and other objects not mentioned will be clearly understood by those skilled in the art from the description below.

The logical domain context authentication system according to an embodiment of the present invention to solve the problems described above is an environment that can occur in real time when a legitimate user who has been authenticated in advance uses a PC/mobile device for a predetermined period of time through an input means. An authentication genetic information generation unit that generates logical domain context genetic information using information; An answer key collection unit that receives genetic information from the genetic information generation unit and derives the answer key using the received genetic information; a user genetic information generator that generates logical domain context genetic information by utilizing environmental information that can be generated in real time when a user who wishes to perform authentication uses a PC/mobile device for a predetermined period of time through an input means; And, by comparing the genetic information of the logical domain context data generated when the user who wishes to proceed with the authentication uses PC/mobile and the genetic information contained in the answer key data derived from the answer key collection unit, it is determined whether the user is a legitimate user or not. It is characterized by comprising a user authentication unit that determines whether the user is a user.

Preferably, the user authentication unit ensures that each piece of genetic information included in the answer sheet includes a certain margin in order to control sensitivity, and the genetic information including the margin has a certain range, and the user authentication unit determines that each piece of genetic information included in the answer sheet contains a certain margin. If the genetic value of the given genetic information includes the genetic value of the genetic information of the logical domain context data generated when the user who wishes to proceed with authentication uses a PC/mobile, the genetic information is determined to match each other. Do this.

Preferably, the user authentication unit calculates the score using the following formula using the number of genetic information and the total number of gene items within a certain range, Score = (number of genes within the range / total number of gene items) * 100, If the calculated score is greater than or equal to a threshold, the user is authenticated as a legitimate user.

Preferably, the environmental information distinguishes between active processes and general processes among processes running in the system, and includes CPU occupancy rate for each process, memory usage, amount of sending and receiving traffic, amount of TCP sending and receiving traffic on open ports, and open ports. It is characterized in that it is configured to include two or more of the UDP transmission and reception traffic amounts in .

Preferably, the user authentication unit extracts the average value for each gene and compares it with the answer key when K or more genes corresponding to the same ID (PN + AP) as the answer key are gathered, and compares the unique PN value corresponding to the process, It is characterized by grouping AP values indicating activation into one and processing them as an ID.

Preferably, when a certain number of IDs or more are collected for each ID, comparison is performed with the answer key, gene IDs processed below a first specific score are discarded and the discarded count is recorded, and genes with a second specific score or more are successful as superior genes. It is characterized by recording the number of discarded genes of the first generation genes and the number of surviving superior genes.

Preferably, in order to generate second-generation genes by extracting and combining genes, M genes of the first generation are combined and set into N groups, N genes are combined to create second-generation genes, and 2 The score is calculated by comparing the generation genes with the answer sheet, the remaining genes are discarded except for the superior genes that appear above a certain third score, the discarded genes of the second generation genes and the number of surviving superior genes are recorded, and the number of superior genes selected for the second generation is recorded. If more than L% of superior genes remain among the genes, it is judged as success and the user is judged to be a legitimate user. If it is less than L%, it is judged not to be a legitimate user. The second-generation superior genes judged to be legitimate users are additionally applied as answer sheets and are judged to be legitimate users. It is characterized by utilizing context authentication accuracy to process it more accurately and sensitively.

Preferably, the margin is adjustable by an administrator of the context authentication system.

A method of operating a logical domain context authentication system according to another embodiment of the present invention is an authentication method that collects environmental information that may occur in real time when a legitimate user who has been authenticated in advance uses a PC/mobile device for a predetermined period of time through an input means. User environment information collection step; An authenticated user genetic information generation step of generating logical domain context genetic information using the environmental information collected in the authenticated user environmental information collection step; A correct answer index collection step of receiving genetic information from the authentication genetic information generation unit and deriving the correct answer key using the received genetic information; A user environment information collection step of collecting environmental information that may occur in real time when a user who wishes to perform authentication uses a PC/mobile device for a predetermined period of time through an input means; A user genetic information generation step of generating logical domain context genetic information using the environmental information collected in the user environmental information collection step; And, by comparing the genetic information of the logical domain context data generated when the user who wishes to proceed with the authentication uses a PC/mobile, and the genetic information contained in the answer key data derived from the answer key collection step, it is determined whether the user is a legitimate user or not. It is characterized by comprising a user authentication step to determine whether the user is a user.

Preferably, the user authentication step includes a process of ensuring that each piece of genetic information included in the answer sheet includes a certain margin to adjust sensitivity, and that the genetic information including the margin has a certain range; In the user authentication step, if the genetic value of the genetic information given a margin in the answer sheet includes the genetic value of the genetic information of the logical domain context data generated when the user seeking authentication uses a PC/mobile, the genetic information is It is characterized by including a process of determining that they match each other.

Preferably, the user authentication step calculates the score using the following formula using the number of genetic information and the total number of gene items within a certain range, Score = (number of genes within the range / total number of gene items) * 100 , If the calculated score is greater than or equal to a threshold, the method further includes a process of authenticating a legitimate user.

Preferably, the environmental information distinguishes between active processes and general processes among processes running in the system, and includes CPU occupancy rate for each process, memory usage, amount of sending and receiving traffic, amount of TCP sending and receiving traffic on open ports, and open ports. It is characterized in that it is configured to include two or more of the UDP transmission and reception traffic amounts in .

Preferably, the user authentication step includes a process of extracting the average value for each gene and comparing it with the answer key when more than K genes corresponding to the same ID (PN + AP) as the answer key are gathered, and a unique PN corresponding to the process. It is characterized by including a process of combining the value and the AP value indicating whether it is active or not and processing it as an ID.

Preferably, the user authentication step includes the process of comparing with the answer key when a certain number of IDs are collected for each genetic ID (PN + AP); As a result of calculating the score using Formula 1, discarding gene IDs that are processed below a first specific score and recording the discarded counts; A process of treating genes with a second specific score or higher as superior genes as success; and a process of recording the number of discarded genes of the first generation genes and the number of surviving superior genes.

Preferably, the user authentication step extracts genes and sets them into N groups by combining the genes of M items of the first generation to generate second-generation genes through combination, and combines N genes to create second-generation genes. The process of creating; A process of calculating scores by comparing second-generation genes with the answer key; Third, a process of discarding the remaining genes except superior genes that appear above a certain score, and recording the number of discarded genes of the second generation genes and the number of surviving superior genes; A process in which, among the genes selected for the second generation, if more than L% of superior genes remain, it is judged as success and the user is judged to be a legitimate user; if less than L%, the user is judged not to be a legitimate user; The second-generation superior gene determined to be a legitimate user is further applied as an answer sheet to further process the user's context authentication accuracy in a more accurate and sensitive manner.

Preferably, the margin further includes a process of being adjusted by an administrator of the context authentication system.

A computer-readable recording medium according to another embodiment of the present invention is characterized by recording a program that executes a method of operating a logical domain context authentication system.

In the logical domain context authentication system and method according to an embodiment of the present invention, resource elements that may appear differently in each user's process use are set as a logic-based context to extract each item and utilize a genetic algorithm to achieve faster speed. Context authentication can be performed, and accuracy gradually increases as data that can determine user identity accumulates with each generation.

Figure 1 illustrates a logical domain context authentication system according to an embodiment of the present invention.
Figure 2 shows a method of operating a logical domain context authentication system according to another embodiment of the present invention.

Since the present invention can be modified in various ways and can have various embodiments, specific embodiments will be illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to specific embodiments, and should be understood to include all transformations, equivalents, and substitutes included in the spirit and technical scope of the present invention. In describing the present invention, if it is determined that a detailed description of related known technologies may obscure the gist of the present invention, the detailed description will be omitted.

The terms used in this application are only used to describe specific embodiments and are not intended to limit the invention. Singular expressions include plural expressions unless the context clearly dictates otherwise. In this application, terms such as “comprise” or “consist of” are intended to designate the presence of features, numbers, steps, operations, components, parts, or combinations thereof described in the specification, but are intended to indicate the presence of one or more other It should be understood that this does not exclude in advance the presence or addition of features, numbers, steps, operations, components, parts, or combinations thereof.

The present invention relates to a logical domain context authentication system and method for determining whether a user is a legitimate user by using a genetic algorithm for logical domain context authentication. While physical domain context refers to values that occur when performing actions through physical input devices such as keyboard and mouse, logical domain context refers to context information that may occur environmentally when a user uses devices such as PC/mobile. it means. It corresponds to information such as which WiFi in the wireless environment is set to, which device Bluetooth is connected to, what process is currently active, how much CPU and memory are used, and where the user is connected.

The logical domain context authentication system and method of the present invention relate to logical domain context authentication using a genetic algorithm, and are related to logical domain context authentication that may occur environmentally when a legitimate user who has been authenticated in advance is using a PC/mobile device. After extracting the information, genetic information is derived from the relevant context and defined as legitimate user data (authentication data), and the data is set as the answer key. Afterwards, it is determined whether the user seeking user authentication is a legitimate user by comparing the genetic information in the logical domain context data generated when using the PC/mobile and the genetic information contained in the answer key data, which is the legitimate user data (authentication data) derived earlier. Genetic algorithms are used in the comparison and analysis process to determine whether a user is an unauthorized user.

Genetic algorithm is an optimization algorithm that mimics the genetic/evolution process of living things. For example, when first-generation parents with different DNA give birth to a child, the child inherits half of each parent's DNA. When first-generation parents pair up and create children, a second generation is born, each inheriting half of their DNA. Some second-generation individuals that cannot adapt to the environment are eliminated and disappear, and only some second-generation individuals that have adapted to the environment survive. The third generation, created by pairing up the surviving second generation, may have higher survivability than the previous generation.

Genetic algorithms derive genetic traits that will be passed on to the next generation through several major operations such as selection, crossover, mutation, and substitution. Selection refers to selecting candidates for pairing, and crossing refers to generating the next generation through mating. Mutations have a chance of surviving by directly crossing over to a random value, so it can be said to be a process of generating the next generation by crossing over a random value with this possibility. Replacement is an operation that selects and excludes inferior individuals among the new generation individuals created through the crossover/mutation process. In order to apply a genetic algorithm to a problem, the solution must be expressed in the form of a gene, and the suitability of the solution must be calculated through a fitness function.

Below, in consideration of the characteristics of the genetic algorithm described above, a logical domain context authentication system and method according to an embodiment of the present invention will be described.

Figure 1 illustrates a logical domain context authentication system according to an embodiment of the present invention.

As shown in Figure 1, the logical domain context authentication system according to an embodiment of the present invention includes an authentication genetic information generation unit 100, an answer key collection unit 200, a user genetic information generation unit 300, and a user authentication unit 400. ) and consists of. Each component of the authentication system may perform operations individually or integrated into at least one processor including a computer.

In the authentication genetic information generation unit 100, a legitimate user who has been authenticated in advance can generate information in real time when using a PC/mobile device for a predetermined period of time (e.g., tens to hundreds of seconds) through an input means (keyboard, mouse, etc.). Generate logical domain context genetic information using environmental information. In other words, logical domain context information that may occur environmentally when a pre-authenticated legitimate user is using a PC/mobile device is extracted, and then genetic information is derived from that context.

The answer key collection unit 200 receives genetic information from the authentication genetic information generation unit 100 and determines the answer key based on this. In other words, the received genetic information is used to define legitimate user data (authentication data), and the corresponding data is derived from the answer key.

The user genetic information generation unit 300 proceeds with a similar procedure to the authentication genetic information generation unit 100, where the user who wishes to proceed with authentication uses an input means (keyboard, mouse, etc.) for a predetermined period of time (e.g., tens of seconds or more). Generates logical domain context genetic information by utilizing environmental information that can occur in real time when using a PC/mobile device (hundreds of seconds). In other words, when a user who wishes to perform authentication is using a PC/mobile device, logical domain context information that may occur environmentally is extracted and then genetic information is derived from that context.

The user authentication unit 400 determines whether the user seeking authentication is a legitimate user. That is, the genetic information of the logical domain context data generated when the user who wishes to proceed with the authentication generated by the user genetic information generation unit 300 uses a PC/mobile, and the answer key data derived from the answer key collection unit 200 By comparing the genetic information held by the user, it is determined whether the user is a legitimate user or an unauthorized user.

To control sensitivity, a certain margin is included in each piece of genetic information included in the answer sheet. Therefore, genetic information including margins has a certain range. That is, in order to consider the margin when comparing, a certain range of margin is given to each genetic information contained in the answer key data derived from the answer key collection unit 200, and the genetic information to which the margin is given is used by the user who wishes to proceed with authentication. If genetic information is included in the logical domain context data generated when using PC/mobile, the genetic information is determined to match.

A certain range of margin is given to each genetic information contained in the answer key data derived from the answer key collection unit 200, so that the genetic information to which the margin of the answer key is given is generated when the user who wishes to proceed with authentication uses a PC/mobile. If the logical domain context data includes genetic information, the corresponding genetic information is considered to match, and if the number of matching genetic information is more than a certain level, the user is certified as a legitimate user.

The specific procedure for performing logic-based context authentication using a genetic algorithm in the logical domain context authentication system of the present invention is as follows.

First, the procedure for generating logic-based context genetic information performed by the authentication genetic information generation unit 100 and the user genetic information generation unit 300 will be described.

The logical domain context information generated when a user uses a PC/mobile device, etc. is defined as genetic information, and the information is then used to determine whether the user is a normal user. Logical domain context utilizes environmental information that can occur in real time when using a PC/mobile device. Here, among the processes running in the system, active processes and general processes are distinguished, and CPU occupancy rate for each process, memory usage, amount of sending and receiving traffic, amount of TCP sending and receiving traffic on open ports, amount of UDP sending and receiving traffic on open ports, etc. is measured. Accordingly, the logical domain context items and their output value format are defined as the items shown in Table 1 below. Table 1 shows information about only one process.

Logical domain context entry Output value format (example) explanation Process chrome.exe process name Is Active Process TRUE/FALSE Is the process active? Process X Run frequency 3 Operating frequency for each process Process 23,543 seconds Running time for each process Process X CPU Usage 55% CPU share for each process Process 12.3GB Memory usage for each process Process X Traffic TX Usage 3Mbps Transmission traffic volume for each process Process 23Mbps Incoming traffic volume for each process Process X Open port count One Number of open ports for each process Process X Open port TX Usage(TCP) 1.2Mbps TCP outgoing traffic volume to open ports Process X Open port RX Usage(TCP) 13Mbps TCP incoming traffic volume to open ports Process X Open port TX Usage(UDP) 0.6Mbps UDP outgoing traffic to open ports Process X Open port RX Usage(UDP) 0.7Mbps UDP incoming traffic volume to open ports

Logical domain values that occur while using a PC/mobile device are converted into numbers through a preprocessing process, and converted into numbers in the range of 0 to 1 through a scaling process. Values in character form are indexed, converted into numbers, and converted to numbers in the range of 0 to 1 through a scaling process. The abbreviation for each logical domain context item, its output value format, and preprocessing results are shown in Table 2 below.

Abbreviations for each item Logical domain context entry Output value format (example) Preprocessing results (example) PN Process chrome.exe 0.01 AP Is Active Process TRUE 1.0 RF Process X Run frequency 3 0.03 RT Process 23,543 seconds 0.23543 CU Process X CPU Usage 55% 0.55 MU Process 12.3GB 0.34 TX Process X Traffic TX Usage 3Mbps 0.03 RX Process X RX Usage 23Mbps 0.23 OC Process X Open port count One 0.01 OTT Process X Open port TX Usage(TCP) 1.2Mbps 0.012 ORT Process X Open port RX Usage(TCP) 13Mbps 0.13 OTU Process X Open port TX Usage(UDP) 0.6Mbps 0.006 ORU Process X Open port RX Usage(UDP) 0.7Mbps 0.007

The abbreviation PN+AP is set as a unique ID, and based on this, 11 values, including RF, RT, CU, MU, TX, RX, OC, OTT, ORT, OTU, and ORU, are defined as genes.

Next, the procedure for collecting the answer sheet performed by the answer sheet collection unit 200 will be described.

Genetic information for each process is collected at T second intervals, for example, at 1 second intervals, and the collection process is described below based on five processes as shown in Table 3 below.

Process Preprocessing value (PN) chrome.exe 0.01 powerpnt.exe 0.02 devenv.exe 0.03 hwp.exe 0.04 kakao.exe 0.05

If running processes are collected at 1-second intervals, data can be collected as follows. Assume that chrome.exe (PN: 0.01) is an active process (AP: 1.0). In a situation where a general user is using a PC, information is collected for S seconds, for example 90 seconds, and the collected data is used as an answer sheet (examples of genetic values for each genetic information) as shown in Table 4 below.

ID Each dielectric value PN AP RF RT CU MU TX RX OC OTT ORT OTU ORU 0.01 1.0 0.03 0.23 0.13 0.02 0.0 0.2 0.0 0.0 0.0 0.0 0.0 0.02 0.0 0.01 0.01 0.02 0.1 0.32 0.12 0.1 0.22 0.1 0.01 0.1 0.03 0.0 0.02 0.32 0.03 0.32 0.01 0.0 0.1 0.0 0.0 0.01 0.0 0.01 1.0 0.03 0.23 0.25 0.02 0.0 0.12 0.0 0.0 0.0 0.0 0.0 0.02 0.0 0.01 0.01 0.01 0.1 0.12 0.23 0.1 0.02 0.20 0.1 0.01 0.03 0.0 0.02 0.32 0.33 0.32 0.02 0.1 0.1 0.02 0.05 0.0 0.01 0.04 0.0 0.01 0.01 0.21 0.15 0.03 0.0 0.3 0.0 0.0 0.0 0.0 0.01 1.0 0.03 0.23 0.00 0.02 0.1 0.0 0.0 0.0 0.0 0.0 0.0 0.02 0.0 0.02 0.01 0.02 0.1 0.23 0.01 0.1 0.18 0.003 0.03 0.0 ..

Next, the user authentication procedure performed by the user authentication unit 400 will be described.

In a situation where there is an answer key, collection is continued in a situation where a legitimate user is using it to verify that the user is the user. Genes collected in this way are designated as first generation genes.

When collecting, if there are more than K genes corresponding to the same ID (PN+AP) as the answer key, the average value for each gene is extracted and compared with the answer key. Since the genetic value may be derived differently from the activated process currently in use by the user, the unique PN value corresponding to the process and the AP value indicating activation are combined into one and processed as an ID.

Specify the sensitivity to measure accuracy before comparing. Sensitivity is applied to the values of 11 genetic items: RF, RT, CU, MU, TX, RX, OC, OTT, ORT, OTU, and ORU, and is assigned a +/- N value. That is, when the RF value is 0.03 and the sensitivity is 0.1, the range is from ??0.07 to 0.13. Assign a sensitivity of 0.1 to the same gene as the gene on the answer sheet to check whether each genetic value falls within the range.

If all 11 genes (RF, RT, CU, MU, TX, RX, OC, OTT, ORT, OTU, ORU) except AP are within the range, 100 points, 90 points if 10 genes, 81 points if 9 genes are included. Scores are processed in a dot format. Equation 1 represents the score calculation formula.

Gene IDs with scores below 30 are discarded and the discarded count is recorded. When a certain number of IDs, for example 10 or more, are collected for each gene ID, comparison is performed with the answer key. Genes with a certain score, such as 60 points or higher, are considered superior genes and are treated as success. The number of discarded genes in the first generation genes and the number of surviving superior genes are recorded.

In order to extract genes and create second-generation genes through combination, 11 genes are set into 3 groups.

- Group 1: RF, RT, CU, MU, OC

- Group 2: TX, OTT, OTU

- Group 3: RX, ORT, ORU

If there are three or more genes with a score of 50 or more, random gene group elements are extracted from the genes with a score of 50 or more. (Example: Group 1: RF, RT, CU, MU, OC)

Genes of different groups with different genetic elements are extracted from other genes with a score of 50 or more. (Example 2 groups: TX, OTT, OTU)

Genes of different groups with different genetic elements are extracted from other genes with a score of 50 or more. (Example: 3 groups: RX, ORT, ORU)

Combining three genes (RF, RT, CU, MU, OC +TX, OTT, OTU +RX, ORT, ORU) creates a second generation gene.

The score is calculated by comparing the second generation genes with the answer sheet. Except for superior genes with a certain score, such as 75 or higher, the remaining genes are discarded. The number of discarded genes and surviving superior genes in the second generation genes is recorded.

Among the genes selected for the second generation, if more than 70% (% can be adjusted) of superior genes remain, it is judged to be a success and a legitimate user. If it is less than 70%, it is judged not to be a legitimate user. The second-generation superior genes determined to be legitimate users are additionally applied as answer sheets to process the user's context authentication accuracy more accurately and sensitively.

If the performance is poor as a result of the experiment, the sensitivity range is expanded to produce more superior genes. If the performance is excellent, the sensitivity range is repeatedly performed to find the optimized sensitivity.

Figure 2 shows a method of operating a logical domain context authentication system according to another embodiment of the present invention.

As shown in Figure 2, the operating method of the logical domain context authentication system according to an embodiment of the present invention includes an authenticated user environmental information collection step (S100), an authenticated user genetic information generation step (S200), an answer key collection step (S300), It consists of a user environment information collection step (S400), a user genetic information generation step (S500), and a user authentication step (S600).

To be more specific,

In the authentication user environmental information collection step (S100), the authentication genetic information generation unit 100 collects environmental information that can occur in real time when a legitimate user who has been authenticated in advance uses a PC/mobile device for a predetermined period of time through an input means. . The above environmental information distinguishes between active processes and general processes among the processes running on the system, and includes CPU occupancy rate for each process, memory usage, amount of sending and receiving traffic, amount of TCP sending and receiving traffic on open ports, and UDP sending and receiving on open ports. It can be configured to include two or more of the traffic volumes.

In the authenticated user genetic information generation step (S200), the authentication genetic information generating unit 100 generates logical domain context genetic information using the environmental information collected in the authenticated user environmental information collection step (S100).

In the answer key collection step (S300), the answer key collection unit 200 receives genetic information from the authentication genetic information generation unit 100 and derives the answer key using the received genetic information.

In the user environmental information collection step (S400), the user genetic information generation unit 300 collects environmental information that can be generated in real time when the user who wishes to perform authentication uses a PC/mobile device for a predetermined period of time through an input means.

In the user genetic information generation step (S500), the user genetic information generation unit 300 generates logical domain context genetic information using the environmental information collected in the user environment information collection step (S400).

In the user authentication step (S600), the user authentication unit 400 collects the genetic information of the logical domain context data generated when the user who wishes to proceed with the authentication uses a PC/mobile, and the answer key derived from the correct answer index collection step (S300). Compare the genetic information contained in the answer key data to determine whether the user is a legitimate or unauthorized user.

More specifically, the user authentication step (S600) includes a process of ensuring that each piece of genetic information included in the answer sheet includes a certain margin to adjust sensitivity, and that the genetic information including the margin has a certain range; In the user authentication step, if the genetic value of the genetic information given a margin in the answer sheet includes the genetic value of the genetic information of the logical domain context data generated when the user seeking authentication uses a PC/mobile, the genetic information is It further includes a process of determining that they match each other and a process of adjusting the margin by an administrator of the context authentication system.

The user authentication step (S600) calculates a score using Equation 1 above using the number of genetic information within a certain range and the total number of genetic items, and if the calculated score is greater than the threshold, the process of authenticating the user as a legitimate user. It further includes.

The user authentication step (S600) is a process of extracting the average value for each gene and comparing it with the answer key when more than K genes corresponding to the same ID (PN + AP) as the answer key are gathered, and the unique PN value corresponding to the process It includes the process of grouping AP values indicating activation into one and processing them into an ID. The user authentication step (S600) is a process of comparing with the answer key when a certain number of IDs are collected for each genetic ID (PN + AP); As a result of calculating the score using Formula 1, discarding gene IDs that are processed below a first specific score and recording the discarded counts; A process of treating genes with a second specific score or higher as superior genes as success; and a process of recording the number of discarded genes of the first generation genes and the number of surviving superior genes.

In addition, in the user authentication step, in order to extract and combine genes to create second-generation genes, the genes of M items of the first generation are combined to set N groups, and the N genes are combined to create second-generation genes. process; A process of calculating scores by comparing second-generation genes with the answer key; Third, a process of discarding the remaining genes except superior genes that appear above a certain score, and recording the number of discarded genes of the second generation genes and the number of surviving superior genes; A process in which, among the genes selected for the second generation, if more than L% of superior genes remain, it is judged as success and the user is judged to be a legitimate user; if less than L%, the user is judged not to be a legitimate user; The second-generation superior gene determined to be a legitimate user is further applied as an answer sheet to further process the user's context authentication accuracy in a more accurate and sensitive manner.

As described above, although the present invention has been described with reference to limited embodiments and drawings, the present invention is not limited to the above embodiments, and those skilled in the art can make various modifications and modifications from these descriptions. Transformation is possible. Accordingly, the spirit of the present invention should be understood only by the scope of the claims stated below, and all equivalent or equivalent modifications shall fall within the scope of the spirit of the present invention.

Additionally, the operating method of the logical domain context authentication system according to the present invention can be implemented as computer-readable code on a computer-readable recording medium. Computer-readable recording media include all types of recording devices that store data that can be read by a computer system. Examples of recording media include ROM, RAM, CD ROM, magnetic tape, floppy disks, optical data storage devices, hard disks, flash drives, etc. They can also be implemented in the form of a carrier wave (e.g. transmission via the Internet). Includes. Additionally, computer-readable recording media can be distributed across networked computer systems so that computer-readable code can be stored and executed in a distributed manner.

Claims (16)

In the logical domain context authentication system,
An authentication genetic information generation unit that generates logical domain context genetic information using environmental information that can be generated in real time when a legitimate user who has been authenticated in advance uses a PC/mobile device for a predetermined period of time through an input means;
An answer key collection unit that receives genetic information from the authentication genetic information generation unit and derives the answer key using the received genetic information;
a user genetic information generator that generates logical domain context genetic information by utilizing environmental information that can be generated in real time when a user who wishes to perform authentication uses a PC/mobile device for a predetermined period of time through an input means; and
The user who wishes to proceed with the authentication is compared with the genetic information in the logical domain context data generated when using the PC/mobile and the genetic information contained in the answer key data derived from the answer key collection unit to determine whether the user is a legitimate user or not. A logical domain context authentication system comprising a user authentication unit that determines authentication.
The method of claim 1, wherein the user authentication unit
In order to control sensitivity, a certain margin is included in each piece of genetic information included in the answer sheet, and the genetic information including the margin is made to have a certain range,
If the genetic value of the genetic information given a margin in the answer sheet includes the genetic value of the genetic information of the logical domain context data generated when the user who wishes to proceed with authentication uses a PC/mobile, the user authentication unit A logical domain context authentication system characterized by determining that it matches.
According to claim 2,
The user authentication unit calculates the score using the following formula using the number of genetic information within a certain range and the total number of genetic items,
Score = (Number of genes in range / Total number of gene items) * 100,
A logical domain context authentication system that authenticates a legitimate user when the calculated score is greater than or equal to a threshold.
The method of claim 1, wherein the environmental information is
Among the processes running on the system, it distinguishes between active processes and regular processes and calculates two of the following: CPU occupancy rate for each process, memory usage, amount of sending/receiving traffic, amount of TCP sending/receiving traffic on open ports, and amount of UDP sending/receiving traffic on open ports. A logical domain context authentication system comprising the above.
The method of claim 1, wherein the user authentication unit
If there are more than K genes with the same ID (PN+AP) as the answer key, extract the average value for each gene and compare it with the answer key.
A logical domain context authentication system characterized by combining a unique PN value corresponding to a process and an AP value indicating activation into one and processing it as an ID.
The method of claim 3, wherein the user authentication unit
When more than a certain number of IDs are collected for each gene ID (PN+AP), comparison is performed with the answer key.
As a result of calculating the score using the above equation, gene IDs processed below the first specific score are discarded and the discarded count is recorded, gene IDs processed below the second specific score are treated as success as superior genes, and discarded genes of the first generation genes are recorded. Wow, a logical domain context authentication system featuring recording the number of surviving superior genes.
The method of claim 6, wherein the user authentication unit
To generate second-generation genes by extracting and combining genes, M genes of the first generation are combined and set into N groups, and N genes are combined to create second-generation genes.
The score is calculated by comparing the 2nd generation genes with the answer key,
Third, except for the superior genes that appear above a certain score, the remaining genes are discarded, and the number of discarded genes in the second generation genes and the number of surviving superior genes is recorded.
Among the genes selected for the second generation, if more than L% of superior genes remain, it is judged to be a success and a legitimate user. If it is less than L%, it is judged not to be a legitimate user.
A logical domain context authentication system characterized in that the second-generation superior genes determined to be legitimate users are additionally applied as answer sheets to process the context authentication accuracy for the user more accurately and sensitively.
According to claim 2,
A logical domain context authentication system, characterized in that the margin can be adjusted by an administrator of the context authentication system.
In the operating method of the context authentication system,
A user environment information collection step of collecting environmental information that may occur in real time when a user who wishes to perform authentication uses a PC/mobile device for a predetermined period of time through an input means;
A user genetic information generation step of generating logical domain context genetic information using the environmental information collected in the user environmental information collection step; and
The genetic information in the logical domain context data generated when the user who wishes to proceed with the authentication uses a PC/mobile is compared with the genetic information contained in the answer key derived from the answer key collection stage to determine whether the user is a legitimate user or an unauthorized user. A method of operating a logical domain context authentication system comprising a user authentication step of determining.
According to clause 9,
An authenticated user environmental information collection step in which environmental information that may occur in real time is collected when a pre-authenticated legitimate user uses a PC/mobile device for a predetermined period of time through an input means;
An authenticated user genetic information generation step of generating logical domain context genetic information using the environmental information collected in the authenticated user environmental information collection step; and
A method of operating a logical domain context authentication system further comprising a correct answer index collection step of receiving genetic information from an authentication genetic information generation unit and deriving a correct answer index using the received genetic information.
The method of claim 9, wherein the user authentication step is
In order to control sensitivity, a process of ensuring that each piece of genetic information included in the answer sheet includes a certain margin, and that the genetic information including the margin has a certain range; and
If the genetic value of the genetic information given a margin in the answer sheet includes the genetic value of the genetic information in the logical domain context data generated when the user seeking authentication uses a PC/mobile, the genetic information is judged to match each other. A method of operating a logical domain context authentication system comprising the process of:
The method of claim 11, wherein the user authentication step is
The score is calculated using the following equation using the number of genetic information within a certain range and the total number of genetic items,
Score = (Number of genes in range / Total number of gene items) * 100,
A method of operating a logical domain context authentication system, further comprising a process of authenticating a legitimate user when the calculated score is greater than or equal to a threshold.
The method of claim 9, wherein the user authentication step is
When more than K genes corresponding to the same ID (PN+AP) as the answer key are gathered, the average value for each gene is extracted and compared with the answer key,
A method of operating a logical domain context authentication system, comprising the process of combining a unique PN value corresponding to a process and an AP value indicating activation into one and processing it as an ID.
The method of claim 12, wherein the user authentication step is
A process of comparing with the answer sheet when more than a certain number of IDs are collected for each gene ID (PN+AP);
As a result of calculating the score using the above equation, discarding gene IDs processed below a first specific score and recording the discarded counts;
A process of treating genes with a second specific score or higher as superior genes as success; and a method of operating a logical domain context authentication system, further comprising recording the number of discarded genes of the first generation genes and the number of surviving superior genes.
The method of claim 14, wherein the user authentication step is
A process of extracting genes and combining them to create second-generation genes by combining M genes of the first generation and setting them into N groups, and combining N genes to create second-generation genes;
A process of calculating scores by comparing second-generation genes with the answer key;
Third, a process of discarding the remaining genes except superior genes that appear above a certain score, and recording the number of discarded genes of the second generation genes and the number of surviving superior genes;
A process in which, among the genes selected for the second generation, if more than L% of superior genes remain, it is judged as success and the user is judged to be a legitimate user; if less than L%, the user is judged not to be a legitimate user;
A method of operating a logical domain context authentication system, further comprising the process of utilizing the second-generation superior genes determined to be legitimate users as an answer key so that the accuracy of context authentication for the user can be processed more accurately and sensitively. .
According to claim 11,
A method of operating a logical domain context authentication system, further comprising adjusting the margin by an administrator of the context authentication system.