TWI489312B - Authentication method and authentication system - Google Patents

Description

Authentication method and authentication system

The present invention relates to an information security technology, and more particularly to an authentication method and an authentication system.

Due to the development of technology, the Internet has become an indispensable information acquisition pipeline for modern people. However, as more and more technologies are developed through the Internet, information security has become one of the most important topics in web applications, and it is about user identity authentication.

The most common method of authentication is to log in to the correct account and password through the user. However, due to the rapid changes in Hack technology, in order to improve the information security of Internet users, the fully differentiated computer and human Turing test (CAPTCHA, Completely Automated Public Turing Test to Tell Computers and Humans Apart) has become important. One of the authentication code technologies.

The text-based CAPTCHA technology is one of the most widely accepted and highly accepted methods. It mainly cooperates with different combinations of text and digital groups (for example, rotation, deformation, distortion, segmentation, etc.) to make Users are more easily identifiable, but it is difficult to automatically identify robots or automatic programs. knowledge. However, characters that are excessively distorted in order to increase their security often cause the user to be difficult to recognize. In addition, there is a computer optical character recognition (OCR) software that is cracked by text separation and background noise filtering. The CAPTCHA technology based on the voice scheme mainly allows the user to recognize by providing a piece of voice content. However, the disadvantage is that if the speech content is not the native language that the user is accustomed to, it will cause an obstacle in recognition. In addition, the CAPTCHA technology based on the video scheme can provide high security, but its disadvantage is that it lacks good scalability and consumes a large amount of resources.

In addition to the security considerations, the authentication mechanism should also consider the user's convenience and practical application feasibility.

The present invention provides an authentication method and an authentication system for providing a user with a rotation operation to place an image in a correct state, and determining whether an image after the rotation operation conforms to an allowable error range, and performing authentication The process can be combined with personalized information to improve overall information security to effectively avoid attacks or blockages by robots or automated programs.

The present invention provides an authentication method, including: providing a specific real-life map according to registration information; responding to a rotation operation to obtain a selected image from a specific real-life map; and calculating a respective image hash value of the selected image and the preset image The difference between the two; and if the difference is less than the threshold value, it is determined that the authentication is successful, wherein the preset image is corresponding to the preset viewing angle to be generated from the specific real-life map.

The invention provides an authentication system, comprising: an identity identification information database for storing registration information; a geographic information real-time map database for storing a plurality of real-life maps; and a control unit coupled to the geographic information real-time map database and The identification information database, the control unit is configured to: provide a specific real-life map from the geographic information real-time map database according to the registration information; react to the rotation operation to obtain the selected image from the specific real-life map; calculate the selected image and preset The difference between the image hash values of the images; and if the difference is less than the threshold, it is determined that the authentication is successful, wherein the preset image is corresponding to the preset perspective to be generated from the specific real map.

Based on the above, the present invention provides a specific real-life map according to the registration information, so that the user performs a rotation operation to obtain a selected image, and if the image is compared with the image hash value of the preset image corresponding to the preset viewing angle, If the value is less than the threshold, it is determined that the authentication is successful.

The above described features and advantages of the invention will be apparent from the following description.

100‧‧‧Certification System

110‧‧‧Interface unit

130‧‧‧Identification Information Database

150‧‧‧real map database

170‧‧‧ Back-end service unit

190‧‧‧Control unit

200‧‧‧User device

Steps for the S330, S350, S360, S370, S380‧‧‧ authentication methods

Steps for the S400, S500‧‧‧ authentication method

Steps for the S510~S590‧‧‧ certification method

1 is a block diagram of an authentication system and a user device in accordance with an embodiment of the present invention.

2A and 2B are schematic diagrams of an authentication interface in accordance with an embodiment of the present invention.

3 is a flow chart of an authentication method in accordance with an embodiment of the present invention.

4 is a flow chart of an authentication method in accordance with an embodiment of the present invention.

5 is a flow chart of an authentication procedure in an authentication method in accordance with an embodiment of the present invention.

1 is a block diagram of an authentication system and a user device in accordance with an embodiment of the present invention. As shown in FIG. 1 , the authentication system 100 of the embodiment of the present invention includes an interface unit 110 , an identity information database 130 , a real-time map database 150 , a back-end service unit 170 , and a control unit 190 . The control unit 190 is coupled to the interface unit 110, the identity information repository 130, the live view database 150, and the backend service unit 170. The user device 200 of the user can communicate with the authentication system 100 via the network. In the embodiment of the present invention, the authentication system 100 can be a network server, a personal computer, a workstation, a host computer, or various other types of electronic devices, and the user device 200 can be a notebook computer, a personal computer, a tablet computer, Personal digital assistants, smart phones or other electronic devices with Internet access. The interface unit 110 is configured to provide a registration interface and an authentication interface, and the identity information database 130 is configured to store registration information. The real-time map database 150 is configured to store a real map corresponding to a plurality of location coordinates, and the backend service unit 170 is configured to determine The backend service is provided for the authentication success, and the control unit 190 is used to control the process of registering the program and the authentication program. In the embodiment of the present invention, the interface unit 110, the backend service unit 170, and the control unit 190 can be various types of function modules or microprocessors, and the registration interface and the authentication interface can be a web interface, a software interface, or various other forms. Human-machine interface The knowledge database 130 and the live view database 150 can be various forms of storage media. In the embodiment of the present invention, the real-time map database 150 can be various forms of storage media. The authentication interface can be a web interface, a software interface, or various other forms of human-machine interfaces. The control unit 190 can be various types of function modules. Or a microprocessor. In another embodiment of the present invention, the authentication system may not include a real-time map database, but provide a real-life map corresponding to a plurality of location coordinates by other databases of the outside world.

2A and 2B are schematic diagrams of an authentication interface in accordance with an embodiment of the present invention. Please refer to FIG. 1 , FIG. 2A and FIG. 2B simultaneously.

In the embodiment of the present invention, when the user enters the authentication system 100 for authentication, the authentication interface outputs a specific real-life map according to the user's registration information to allow the user to perform image-based authentication. Initially, as shown in FIG. 2A, the specific live view outputted in the authentication interface may be rotated before being presented at a random viewing angle. For the user, it is easy to recognize whether the specific real scene in the authentication interface is in the perspective that is preset in the registration information. If not, as shown in FIG. 2B, in the authentication interface, the user can The selected image in the specific live view is selected by a rotation operation. However, this will be a difficult task for robots or automated programs, because robots or automated programs are often difficult to recognize the relationship between real-life maps corresponding to different perspectives. Therefore, the authentication method according to the present invention can effectively prevent flaws. The guest attacks by robot or automatic program. When the user actually rotates the specific real scene in the authentication interface to a selected image within the acceptable range (corresponding to the preset viewing angle or approximate to the preset viewing angle), it can be determined that the authentication is successful. In the embodiment of the present invention, the user's rotary operation The operation may be a drag operation on the authentication interface, a button operation, and various other input operations, which are not limited herein. The following will be described in detail for the authentication method of the embodiment of the present invention. The following operations related to the user are performed by the user device 200. For the sake of convenience, the description of the "user device 200" will be omitted and the user will be briefly described.

3 is a flow chart of an authentication method in accordance with an embodiment of the present invention. As shown in FIG. 3, the authentication method of the embodiment of the present invention includes steps S330, S350, S360, S370, and S380. Please refer to FIG. 1 , FIG. 2A, FIG. 2B and FIG. 3 simultaneously.

In step S330, a specific live view is provided based on the registration information. For example, the control unit 190 may output a specific real map corresponding to the registration information from the real-time map database 150 in the authentication interface according to the registration information provided by the user in advance. Since the specific real-time map can present different images in the authentication interface corresponding to different viewing angles, in the embodiment of the present invention, the output specific real-life map can be processed through a pre-random rotation to make the authentication interface The specific real scene map is presented in a random image corresponding to a random angle of view, as shown in FIG. 2A.

In step S350, a rotation operation is performed to obtain a selected image from a specific live view. For example, the user can easily determine whether the specific live view in the authentication interface is in the view angle preset by the user in the registration information. If not, the user can perform the rotation operation to present the authentication interface to the random address. The specific scene view of the angle of view is rotated to an image that is "approximate" to the angle of view that is preset in the registration information (the human operation and the visual judgment may have some errors), and at this time, the control unit 190 can obtain the specific real map corresponding The selected image of this rotation operation is as shown in Fig. 2B.

In step S360, a difference between the selected image and the image hash value of each of the preset images is calculated. As described above, the preset image is corresponding to the preset angle of view to be generated from the specific live view. In the embodiment of the present invention, the control unit 190 may calculate the image hash value of the selected image after the rotation operation corresponding to the specific real scene by using a hash function or other software or hardware module having a hash value calculation function. And the image hash value of the preset image corresponding to the preset perspective of the specific real image, and calculating the difference between the two image hash values.

In step S370, it is determined whether the difference is less than the threshold value. If the difference is less than the threshold value, it is determined in step S380 that the authentication is successful. For example, if the difference between the two image hash values before and after the rotation operation is less than the threshold value, it may represent a selected image of the specific real scene image after the user's rotation operation, and the deviation from the preset image. The shift or error is within an allowable range, and thus it can be determined that the authentication is successful. In the embodiment of the present invention, the image hash value corresponding to the selected image of the specific real image is used as the judgment manner, and the relationship of the selected image corresponding to the image hash value is difficult to predict. For example, suppose that the user selects two different selected images in a specific real scene at different times, and if the two different selected images correspond to the difference of the image hash values calculated by the preset images respectively, The values are the same. However, the difference between the two differently selected images in the corresponding preset images may be different. Therefore, the present invention can be more effective by using the difference of the image hash value as a method of judging by selecting the angle of view difference between the image and the preset image. Prevent attacks from robots or automated programs.

4 is a flow chart of an authentication method in accordance with an embodiment of the present invention. Such as As shown in FIG. 4, the authentication method of the embodiment of the present invention includes the registration procedure of step S400 and the authentication procedure of S500.

In the registration process of step S400, the user can store the preset account, the preset password, and the address information to the identity information database 130 by using a registration interface (not shown). The address information can be the user's home address, company address, school address, or the address of the location that the user is familiar with. Therefore, in the registration process, when the control unit 190 receives the address information of the user, the specific real scene corresponding to the location coordinate can be obtained from the real-time map database 150 for the location coordinates corresponding to the address information, and output. In the registration interface, the user can select a preset image corresponding to the preset viewing angle in the specific real scene view. The preset angle of view may include a horizontal axis preset angle and a vertical axis preset angle, and this preset image will be used as one of the conditions for authentication in the authentication procedure of step S500. The following will be further explained with respect to the authentication procedure of step S500.

5 is a flow chart of an authentication procedure in an authentication method in accordance with an embodiment of the present invention. As shown in FIG. 5, the authentication procedure of step S500 includes steps S510 to S590.

In step S510, the login account number and the login password are received. For example, the authentication interface is used to receive the login account and the login password as one of the conditions for authentication.

In step S520, it is determined whether the login account and the login password respectively match the preset account and the preset password. If the login account and the login password respectively match the preset account and the preset password, step S530 may be performed. If the login account or login password is not If the preset account or the preset password is matched, step S590 may be performed. For example, the default account and the preset password are information stored by the user in the registration program to the identity information database 130. If the login account and the login password do not match the preset account and the preset password, it may be Intrusion by others, so they can no longer be allowed to continue the subsequent certification steps. However, this may also be due to a user's temporary misinterpretation or input error. Therefore, the user may be authenticated in step S590.

In step S530, a specific live view is provided according to the location coordinates corresponding to the address information of the registration information. For example, the control unit 190 can obtain a specific real-life map of the location coordinates of the corresponding address information in the real-time map database 150 according to the address information in the registration information provided by the user in advance. Since the specific real-life map of the coordinates of the location can be a familiar environment with respect to the user, the authentication program combines personalized information, which not only improves information security but also is more humanized.

In step S540, a random image corresponding to a random perspective of the specific live view is output. For example, after the control unit 190 obtains the specific real-life map of the location coordinates of the corresponding address information in the real-time map database 150, in order to improve the information security, a random image corresponding to the random viewing angle may be selected and outputted in the specific real-life map. To the authentication interface, as shown in Figure 2A. The random viewing angle may include a random angle of the horizontal axis and a random angle of the vertical axis.

In step S550, a rotation operation is performed to obtain a selected image from a specific live view. This step is similar to step S350. Control unit 190 by user The rotation operation is performed to obtain a selected image corresponding to the selected viewing angle of the specific real scene image, as shown in FIG. 2B. The selected viewing angle may include a horizontal axis selection angle and a vertical axis selection angle.

In step S560, a difference between the selected image and the image hash value of each of the preset images is calculated. This step is similar to step S360. The control unit 190 may calculate an image hash value of the selected image corresponding to the rotation operation of the specific real image, and an image hash value of the preset image corresponding to the preset perspective of the specific real image, and calculate the between the two image hash values The difference.

In step S570, it is determined whether the difference is less than the threshold value. If the difference is less than the threshold value, it is determined in step S580 that the authentication is successful, and the backend service can be provided. Step S570 is similar to step S370. If the difference between the two image hash values before and after the rotation operation is less than the threshold value, it may be determined that the authentication is successful, and the control unit 190 may further pass the backend service unit 170 in step S580. To provide backend services. If the difference between the two image hash values before and after the rotation operation is greater than the threshold value, it may represent an invasion by an unknown person or software, or the user has forgotten the original preset image, and may execute at this time. S590. In the embodiment of the present invention, if the difference between the two image hash values is equal to the threshold value, it may be determined that the authentication is successful, or may be determined as the authentication failure, which is not limited herein.

In step S590, the security of the registration information is confirmed by the identity re-authentication procedure. For example, in the identity re-authentication process, the control unit 170 may re-authenticate the user's account and password data, or allow the user to reset the password and use other contact methods of the user (such as a mobile phone number or an e-mail address). Address) to send a new password to the user, or to reconfirm the use of the prompt question and answer The identity of the person, or through various other mechanisms to confirm the identity of the user, is not limited here.

In summary, the present invention obtains a specific real map of the location coordinates of the account and password information, the address information, the corresponding address information in the registration process, and a preset map corresponding to the preset angle of the horizontal axis and the preset angle of the vertical axis. Like, and confirm in the authentication program that the login account and password are correct, and provide a specific real-life map according to the registration information and output a random image in the authentication interface, and then obtain a selected image through the user's rotation operation, if selected If the difference between the image and the image hash value of the preset image corresponding to the horizontal axis preset angle and the vertical axis preset angle is less than the threshold value, it is determined that the authentication is successful to provide the backend service.

Although the present invention has been disclosed in the above embodiments, it is not intended to limit the present invention, and any one of ordinary skill in the art can make some changes and refinements without departing from the spirit and scope of the present invention. The scope of the invention is defined by the scope of the appended claims.

Steps for the S330, S350, S360, S370, S380‧‧‧ authentication methods

Claims (10)

An authentication method includes: providing a specific real map according to an address information of a registration information, wherein the registration information further includes a preset account, a preset view, and a preset password; and randomly rotating the specific real map Processing; generating, by the input control of the authentication interface, a rotation operation to obtain a selected image from the specific real image; calculating a first image hash value of the selected image and a second image of a preset image a difference between the hash values; and if the difference is less than a threshold, the authentication is determined to be successful, wherein the preset image is corresponding to the preset perspective to be generated from the specific real map. The authentication method of claim 1, wherein the random rotation processing step outputs a random image corresponding to a random perspective of the specific real scene before the step of obtaining the selected image. The method of claim 2, wherein the step of providing the specific real map according to the registration information further comprises: providing the specific real map according to a location coordinate corresponding to the address information. The authentication method of claim 2, wherein before the step of providing the specific real map according to the registration information, the method further comprises: receiving a login account and a login password; and if the login account and the login password After the preset account and the preset password are respectively matched, the subsequent steps are performed. The authentication method of claim 2, wherein the preset viewing angle further comprises a horizontal axis preset angle and a vertical axis preset angle, wherein the selected viewing angle further comprises a horizontal axis selection angle and a vertical axis selection angle. The random viewing angle further includes a horizontal axis random angle and a vertical axis random angle. An authentication system includes: an identity identification information database for storing a registration information, wherein the registration information includes an address information, a preset account number, a preset perspective, and a preset password; and a geographic information map data a library for storing a plurality of real-life maps; and a control unit coupled to the geographic information real-time map database and the identification information database, the control unit configured to: according to the address information of the registration information The geographic information map database provides a specific real map; random rotation processing is performed on the specific real scene; and a rotation operation is generated by the input control of the authentication interface to obtain a selected image from the specific real map; Selecting a difference between the first image hash value of the image and the second image hash value of the predetermined image; and if the difference is less than a threshold, determining that the authentication is successful, wherein the pre- Let the image be corresponding to the preset perspective to be generated from the particular live view. The authentication system of claim 6, wherein the control unit is further configured to: And outputting, in the random rotation processing step, a random image corresponding to a random perspective of the specific real scene. The authentication system of claim 7, wherein the control unit is further configured to: provide the specific real map according to a location coordinate corresponding to the address information. The authentication system of claim 7, wherein the control unit is further configured to: receive a login account and a login password; and determine whether the login account and the login password respectively match the preset account and the Default password. The authentication system of claim 7, wherein the preset viewing angle further comprises a horizontal axis preset angle and a vertical axis preset angle, wherein the selected viewing angle further comprises a horizontal axis selection angle and a vertical axis selection angle. The random viewing angle further includes a horizontal axis random angle and a vertical axis random angle.