WO2012026793A2

WO2012026793A2 - System and method for verifying user identity for non-repudiation using bio-information

Info

Publication number: WO2012026793A2
Application number: PCT/KR2011/006345
Authority: WO
Inventors: 김종규
Original assignee: 주식회사 디바이스랩
Priority date: 2010-08-26
Filing date: 2011-08-26
Publication date: 2012-03-01
Also published as: KR101020754B1; WO2012026793A3

Abstract

The present invention provides a system and a method for verifying a user identity for non-repudiation using bio-information, wherein said bio-information is registered in order to perform the user authentication by using the bio-information. The system for verifying the user identity for non-repudiation using the bio-information, in which the bio-information is registered, comprises: a bio-identification terminal; a user terminal; a web server; a bio-information verification server; and an authentication server, wherein when the bio-information is registered, bio-information that is linked with a bio-information identification number is registered after a user verification has been performed via the authentication server, whereby only a user having the bio-information identification number that is stored in the bio-identification terminal can receive the user verification.

Description

Non-repudiation identity verification system and method using bio information

The present invention is a non-repudiation self-identification verification system and method using bio information, more specifically, identity verification for verifying the identity using the user's bio information and authorized authentication information for the user's non-repudiation A verification system and method.

Resident ID number has been used as the most common and convenient means of identification, but it is a larger individual than other information, including various personal information. There is a problem of generating a social security number stealing problem by using the social security number of another person collected offline and using the social security number replacement or adult authentication on the Internet.

In addition, while entering and using a password for a private key during public authentication, we use security tokens to prevent illegal duplication through hacking of a public certificate, and also use a keyboard security program for the purpose of blocking hacking. .

However, there is a difficulty in securing the communication process between the signature plug-in and the HTML (HyperText Markup Language) of the data, the password for the public certificate private key is fixed, and the keyboard security program also prevents hacking. It is also difficult to prevent the leakage of the password for the public certificate private key from another website.

In addition, many cases of using the same website login password and public certificate private key password do not solve this problem, and various methods enable hacking and simple illegal copying of public certificate private keys.

Therefore, it is difficult for a domestic certificate that can be duplicated to have a non-repudiation function, register a fingerprint by checking off-line of a specific web site, and store a fingerprint in a fingerprint security token and store it in the fingerprint security token. Some improvements have been made to scan the user's fingerprint and compare it with the stored fingerprint information and then enter the private key password of the certificate.

However, in the conventional authentication method that provides the non-repudiation function, there is a problem in that there is a limitation in the inconvenience of registration and the prevention of hacking and illegal copying of the certificate.

The present invention has been proposed to solve the problems described above, in order to disregard the concerns about hacking and illegal copying of the existing public certificate, the first verification of whether the user in the web server, the public authentication in the authentication server The purpose of the present invention is to provide a non-repudiation self-identification verification system and method using bio-information that performs non-repudiation function by registering bio information on a bio identity verification server on the basis of second user verification as information.

In addition, by registering the bio-information, when the user performs the self-authentication, because the bio-information acts as the authentication itself, the purpose is to provide a verification that can be verified without personal information exposure.

In order to achieve the above object, the non-repudiation self-identification verification system using bio information according to an embodiment of the present invention recognizes and scans bio information of a user through a bio information recognition unit, and is generated when a user registers use of the recognized bio information. A biometric terminal for receiving and storing the bioinformation identification number; Receiving and managing the scanned bio information from the bio-recognition terminal, and applying for bio information usage registration by transmitting the user information including the user's identity information, ID, password and authorized authentication information input through the user information input unit A user terminal; When the bio-information registration request is requested from the user terminal, the user's identity is verified based on the identification information, ID, and password of the user information received from the user terminal, and the public authentication information of the received user information is authenticated. Request the user verification by transmitting to the server, and determines whether to approve the use of the bio information registration based on the user identity verification and the user verification result, and the bio information identification number generated when the user information and the bio information usage registration A web server for receiving and storing the user information in association; If the bio information usage registration is approved from the web server, the bio information scanned in the user terminal is received from the web server, a bio information identification number assigned to the received bio information is generated and stored, and the generated It includes; bio-identification server for transmitting a bio information identification number to the web server and the user terminal.

The biometric terminal may include one or more of a user's face, iris, vein, voice, cornea, hand shape, and fingerprint to recognize the biometric information through the bioinformation recognition unit.

In addition, the user terminal is characterized in that to receive the authentication information, including one or more of the authentication certificate identification number, credit card identification number, mobile phone authentication number.

In order to achieve the above object, a non-repudiation identity verification system using bioinformation for performing user identity authentication using bioinformation according to another embodiment of the present invention recognizes bioinformation of a user through a bioinformation recognition unit. A bio-recognition terminal that scans and stores one or more bio-information identification numbers, and extracts and transmits the previously-stored one or more bio-information identification numbers when requesting a list of bio-information identification numbers; The biometric identification terminal lists and receives the bioinformation identification number list, and outputs the biometric identification number. The biometric identification number of the bioinformation identification number included in the output bioinformation identification number list is the biometric identification number. A user terminal for transmitting the bio information received from the mobile terminal; When the bio information identification number and the bio information are received and stored in association with the plurality of bio information identification numbers and the bio information, the bio information associated with the received bio information identification number is detected and the received bio information identification number and the detection are performed. A bioinformation verification server which performs identity verification on the basis of the bioinformation and the bioinformation identification number and transmits the identity verification result; And verifying the user's identity whether the bio information identification number and the bio information received from the user terminal correspond to a plurality of corresponding stored user information, and the bio information identification number and the bio information received from the user terminal. Sending to the verification server to request identity verification, based on the identity verification result received from the bio-information verification server, the web server determination unit determines whether or not the user, and if determined as the user himself, providing a service to the user terminal Web server; includes.

In order to achieve the above object, a non-repudiation verification method using bio information according to an embodiment of the present invention includes: applying for bio information usage registration to a web server to register bio information of a user in a user terminal; Requesting user information from the user terminal to verify user identity and user verification in the web server when the bio information usage registration request is requested; Retransmitting the requested user information to the web server by inputting the user information including the user's identity information, ID, password and authorized authentication information through the user information input unit of the user terminal; Verifying whether or not the user is based on identification information, ID, and password among the user information received from the web server; Transmitting a user authentication request from the user information received from the web server to a public authentication server; Transmitting the verification of the user's identity requested by the web server and a user verification result to the web server; Determining whether or not to approve the bio information use registration based on the verification result received from the web server, and permitting the use registration approval from the web server to the bio information checking server upon successful authentication; Requesting the user terminal to scan the bio information in the web server in order to register the bio information in the bio information confirmation server approved for the use registration; Receiving, by the user terminal, the scan request, scanning bio information to a biometric terminal; Recognizing and scanning the bio information of the user in the biometric terminal receiving the scan request; Transmitting the scanned bioinformation to the user terminal; Transmitting the scanned bio information received from the user terminal to the web server; Transmitting the bio information received from the web server to the bio information confirmation server; Registering bio information received by the bio information confirmation server on the bio information confirmation server and generating a bio information identification number assigned to the registered bio information; Storing the registered bio information and the generated bio information identification number in association with the bio information confirmation server; Transmitting the bio information identification number stored in the bio information confirmation server to the web server; Storing the user's identity information and authorized authentication information in the web server among the bio information identification number received from the web server and the user information received through the user information input unit of the user terminal; Transmitting the bio information identification number stored in the bio information confirmation server to the user terminal; Transmitting the bio information identification number received by the user terminal to the bio recognition terminal; And storing the bioinformation identification number in the biometric terminal storage unit after receiving the biometric terminal.

The applying of the bio information registration to the web server may include recognizing the bio information including one or more of a user's face, iris, vein, voice, cornea, hand shape, fingerprint, and the like.

In addition, the step of re-transmitting the user information by inputting to the web server is characterized in that for receiving the authentication information including at least one of the authentication certificate identification number, credit card identification number, mobile phone authentication number.

In order to achieve the above object, non-repudiation identity verification method using bio-information for performing user identity using bio-information according to another embodiment of the present invention is to connect / login to a web server through a user terminal. Steps; Making a bio information authentication request from the web server to the user terminal for verifying identity verification; Requesting the biometric identification terminal for the bioinformation identification number list and the bioinformation from the user terminal receiving the authentication request; Extracting one or more bioinformation identification numbers previously stored in the biometric identification terminal from the requested bioinformation identification number list and bioinformation, and scanning the bioinformation of a user for performing personal authentication through a bioinformation recognition unit; Transmitting the extracted bio information identification number list and the scanned bio information to a user terminal; Outputting the extracted bio information identification number list and the scanned bio information received by the user terminal, selecting a bio information identification number to be authenticated from a plurality of bio information identification numbers included in the bio information identification number list, and Selecting bio information associated with it; Transmitting the selected bio information identification number and the scanned bio information associated with the selected bio information identification number to a web server; The bio information identification number received from the web server and the scanned bio information associated with the bio information identification number among the plurality of user information previously stored in the web server and Verifying whether the user is identical to the linked identity information; Transmitting a bio-information associated with the selected bio-information identification number received from the web server to a bio-information verification server to perform a verification request; The bio information associated with the bio information identification number received from the bio information identification server performs a personal authentication on whether a plurality of bio information identification numbers and bio information matches the previously stored bio information confirmation server, and the bio information verification server Comparing and determining through the determining unit; Transmitting the verification result of the comparison and determination through the bio information confirmation server determination unit to the web server; Determining, by the web server determining unit, whether the user authentication is successful based on the result of the user authentication received by the web server; And transmitting the identity verification result determined by the web server determination unit to the user terminal.

In addition, the step of verifying the identity of the user comprises the steps of extracting the authentication information associated with the bio information identification number received from the user terminal from a plurality of authentication information previously stored in the web server; Transmitting user authentication and validation request by transmitting the authentication information extracted from the web server to an authentication server; The method may further include transmitting a verification result regarding the certification authentication information received from the validation certification server to the web server.

In addition, the step of transmitting the verification result for the authentication information to the web server

Characterized in that the certification period of the extracted certification information is expired or check whether it is valid.

According to the present invention, the non-repudiation self-identification verification system and method using bio information performs the authentication through the authentication information of the user stored in the web server, the user using the bio information identification number and bio information from the user terminal By verifying the identity, there is an effect that can prevent the non-repudiation function so that when the bio-recognition terminal is lost, it is not possible to perform identity authentication with the bio-information of others.

In addition, by registering the bio-information, when the user performs the self-authentication, there is an effect that can verify the identity verification without exposing personal information because the bio-information acts as an authorized authentication.

1 is a view for explaining the configuration of a non-repudiation identity verification system using bio information according to an embodiment of the present invention.

FIG. 2 is a block diagram illustrating a user terminal and a biometric terminal of FIG. 1. FIG.

3 is a block diagram illustrating a web server and a bioinformation verification server of FIG. 1.

4 is a block diagram illustrating bio information registration of a non-repudiation identity verification system using bio information according to an embodiment of the present invention.

Figure 5 is a block diagram for explaining the user identity of the non-repudiation identity verification system using bio information according to an embodiment of the present invention.

6 is a flowchart illustrating a bio information registration method for identity authentication using bio information according to an embodiment of the present invention.

7 is a flowchart illustrating a user identity authentication method using bio information according to an embodiment of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION In order to explain in detail that a person skilled in the art can easily implement the technical idea of the present invention, the most preferred embodiment of the present invention will be described with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

Hereinafter, the non-repudiation identity verification system and method using bioinformation according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

As shown in FIG. 1, a non-repudiation identity verification system using bioinformation for registering bioinformation to perform identity verification using bioinformation includes a bio recognition terminal 10 and a user terminal 20. , A web server 30, a bio information verification server 40, and an authorized authentication server 50.

FIG. 2 is a block diagram illustrating a user terminal and a biometric terminal of FIG. 1.

As shown in FIG. 2, in the non-repudiation identity verification system using bio information, the bio recognition terminal 10 first recognizes and scans the bio information of the user through the bio information recognition unit 12, and stores the bio recognition terminal. The bio information (scanned bio information) recognized in the unit 13 is stored.

Here, the bio information refers to a user's face, iris, vein, voice, cornea, hand shape, fingerprint, etc. Among them, bio information (bio information) is selected and recognized through the bio information recognition unit 12.

In addition, the bio-information identification number generated when the use of the recognized bio-information is stored in the bio-recognition terminal storage unit 13, the bio-information identification list extracting unit 14 for biometrics in the future identity authentication The bio information identification number stored in the recognition terminal storage unit 13 is extracted, and the extraction information is transmitted through the bio recognition terminal interface unit 11.

Here, the biometric terminal interface 11 receives the data of the biometric information recognition unit 12 and the biometric terminal storage unit 13 described above, and transmits the data to the user terminal interface 24 included in the user terminal 20. do.

In this case, the biometric terminal 10 may be connected to the user terminal 20 by wire or wirelessly.

In addition, the user terminal 20 receives the bio information scanned from the bio-recognition terminal 10 and the bio information identification number list extracted by the identification number list extracting unit 14 for identity authentication when performing the later authentication The data is stored in the temporary storage unit 22 and managed through the user terminal control unit 21.

The selection unit 23 selects the scanned bio information and the bio information identification number list stored in the temporary storage unit 22 as data corresponding to the user and transmits the data to the user terminal communication unit 25 through the user terminal control unit 21. .

In addition, the user information input unit 26 inputs user information such as identity information, ID, password, and authentication information of the user and transmits the user information through the user terminal communication unit 25.

Here, the user terminal communication unit 25 is communicated with the web server 30 and the bio information confirmation server 40, respectively.

As shown in FIG. 3, when the user information is input from the user terminal 20 in the non-repudiation identity verification system using bio information, the web server determination unit 34 verifies whether the user is the user. And, the authentication information from the user information requests the user verification to the authorized authentication server (50).

In addition, the web server storage unit 33 stores the user's identity information, authorized authentication information and bio information identification number, and when performing the later authentication, the authentication information through the management of the web server control unit 32 as necessary The extraction unit 35 may extract the corresponding authorized authentication information stored in the web server storage unit, and request the validation certificate server 50 to validate whether the user's official authentication information is valid.

Here, the web server communication unit 31 is communicated with the user terminal 20, the bio information confirmation server 40, the authorized authentication server 50, respectively.

In addition, when the bio information usage registration is approved from the web server 20, the bio information confirmation server 40 receives the bio information transmitted from the user terminal 20 and receives the bio information received in the bio information confirmation server storage 44. In addition to storing the bio information identification number through the bio information verification server generation unit 42 and stores.

In addition, the bio information check whether the bio information identification number stored in the bio information confirmation server storage unit 44 and the bio information identification number received from the web server 30 is identical for the user authentication at a later time when performing the authentication The server determination unit 43 may determine.

The bioinformation verification server controller 41 manages data stored in the bioinformation verification server storage unit 44 and controls the bioinformation verification server generator 42 and the bioinformation verification server determiner 43 based on the data. do.

Here, the bio information confirmation server communication unit 45 is communicated with the user terminal 20 and the web server 30, respectively.

As shown in FIG. 4, the biometric terminal 10 stores bioinformation recognized through the bioinformation recognition unit 12 in the biometric terminal storage unit 13, and generates bioinformation upon registration of use of the bioinformation. Receive and save the identification number.

The bio information recognition unit 12 is linked with the bio recognition terminal interface unit 11.

In addition, when the user terminal 20 transmits data about the biometric terminal 10 to the user terminal controller 21 through the user terminal interface unit 24, the temporary storage unit 22 interworking with the biometric terminal 10 is scanned. Bio information (recognized bio information) is stored.

The user information input unit 26 inputs user information to apply for bioinformation registration, and the user terminal communication unit 25 transmits user information.

Here, the user information includes the user's identity information, ID, password, authorized authentication information.

The public certification information includes a public certificate identification number, a credit card identification number, and a mobile phone authentication number, and is selected from these and sent to the public certification server 50 to be described later to be verified.

In addition, when the web server 30 is requested to use bio information registration from the user terminal 20, the web server determination unit 34 based on the identification information, ID, password among the user information received through the web server communication unit 31 Verifies whether or not the user, and the authentication information of the user information is sent to the authentication server 50 to request the user verification.

Through the control of the web server control unit 32, it is determined whether or not to approve the registration of the use of bio information based on the user's identity and the user verification result, and the web server communication unit generates the bio information identification number generated at the time of registration of the use of the user information and the bio information. Received through 31) and managed by the web server control unit 32, and stores in the web server storage unit 33 in association with the user's identity information and authorized authentication information of the user information.

In addition, when the bio information confirmation server 40 is approved for bio information usage registration from the web server 30, the user terminal communication unit 25 transmits the scanned bio information to the web server communication unit 31, the bio information confirmation server The bio information confirmation generation unit 42 is transferred to the bio information confirmation server control unit 41 received by the communication unit 45 and assigned to the bio information.

At this time, the bioinformation confirmation generation unit 42 generates a bioinformation identification number assigned to the scanned bioinformation and generates the bioinformation and the bioinformation in the bioinformation confirmation server storage unit 44 through the bioinformation confirmation server control unit 41. The bio information identification number is stored and transmits the bio information identification number to the web server 30 and the user terminal 10.

That is, in order to apply for registration of the user's use of bioinformation, the user can register the user's bioinformation only when the web server 30 and the authorized authentication server 50 are verified and approved, respectively, and the web server ( 30) By preventing accidents due to hacking and theft of user information, there is an effect that can strengthen the non-repudiation function.

5 is a block diagram illustrating user identity verification of a non-repudiation identity verification system using bioinformation according to an embodiment of the present invention.

As shown in FIG. 5, the bio recognition terminal 10 includes a bio recognition terminal 10 in which the user recognizes the bio information through the bio information recognition unit 12 so as to perform the user authentication. When the biometric identification number list is requested from the biometric identification terminal storage unit 13 in which the biometric information identification number is previously stored, the biometric identification number list extracting unit 14 extracts one or more biometric identification numbers previously stored. The bio information and the bio information identification number list scanned through the terminal interface 11 are transmitted to the user terminal interface 24.

The user terminal 20 requests the biometric identification number list from the biometric identification terminal 10 and receives the biometric identification number list from the biometric identification terminal 10 and outputs the scanned biometric information and the biometric information identification number through the user terminal controller 21. The list is stored in the temporary storage unit 22.

The selecting unit 23 may transmit the bio information identification number and the scanned bio information to be authenticated from the plurality of bio information identification numbers included in the bio information identification number list stored in the temporary storage unit 22 to the user terminal communication unit 25. Select and send through.

In addition, when the bio information confirmation server 40 receives the bio information identification number and the bio information to be the authentication request object, the bio information confirmation server determination unit 43 detects the bio information associated with the received bio information identification number. .

The bio information confirmation server storage unit 44 is a plurality of bio information identification numbers stored in advance and the bio information registered by the user is linked to the bio information received from the bio information confirmation server determiner 43 through the bio information confirmation server controller 41 The identification is performed based on the identification number and the detected bioinformation, and the authentication is performed. The authentication result is transmitted through the bioinformation verification server communication unit 45.

Here, the bioinformation verification server 40 is preferably implemented to be physically and logically separated from the web server 30 or the authorized authentication server 50 in terms of security.

In addition, the web server 30 verifies whether the user himself or herself matches the bio information identification number and the bio information received from the user terminal 20 and the plurality of user information previously stored in the corresponding web server storage unit 33. After determining whether the user is the user in the web server determination unit 34 based on the result of the user authentication received from the bio-information confirmation server, the service is provided to the user terminal 20 through the web server communication unit 31.

When verifying the user's identity or user's identity, the user's bio information is pre-registered in the bio information verification server 40, and thus performs personal authentication without exposing personal information because the bio information itself plays an authorized certification role. do.

However, when the validation of the pre-stored authentication information in the web server storage unit 33 is required, the authentication information extraction unit 35 extracts the biometric information received from the user terminal 20 and the corresponding authentication information. The web server control unit 32 may transmit the public certification information extracted to the public certification server 50 through the web server communication unit to request for validation of whether the validity period of the public certification information has expired or is still valid.

As shown in FIG. 6, in order to register the user's bio information, the user terminal 20 requests the bio information use registration from the web server 30 (S1), and if the bio information use registration request is requested, the user himself or herself User information is requested to the user terminal 20 for verification and user verification (S2).

The user information is selected from the user's face, iris, vein, voice, cornea, hand shape and fingerprint as described in the non-repudiation identity verification system using bio information.

The user terminal 20 receives the request for user information and inputs the user information including the user's identity information, ID, password, and authorized authentication information through the user information input unit 26 to transmit to the web server 30 (S3). ).

The web server verifies the user's identity based on the identification information, ID and password among the user information received from the user terminal 20 (S4), and the authorized authentication information is sent to the authorized authentication server 50 to request the user verification (S5). )do.

Then, the user's identity verification and user verification results are transmitted to the web server (S6), and on the basis of the received verification results, the bio information usage registration is determined to be approved, and upon successful authentication, the web server to the bio information verification server 40. Allow use registration approval (S7).

Here, when the web server 30 determines whether to approve or generates two or more approval errors, the user may not register the bio in a secure dimension for a predetermined time or a predetermined time.

This is because the present invention is to verify the non-repudiation identity verification, because it is difficult to determine that the normal case if the approval error continues to occur.

Subsequently, when the user registration is approved from the web server 30, the web server 30 requests the user terminal 20 to scan the bio information in order to register the bio information to the bio information confirmation server 40 (S8).

After receiving the scan request, the user terminal 20 scans the bio information to the biometric terminal 10 again (S9), and recognizes and scans the bio information of the user in the biometric terminal 10 (S10).

The biometric terminal 10 transmits the scanned bio-information to the user terminal (S11), and then again via the web server 30 (S12) to the bio-information verification server (S13).

The bioinformation confirmation server 40 registers the received bioinformation, generates a pair of bioinformation identification numbers assigned to the registered bioinformation (S14), and stores the bioinformation verification server storage 44 in association with the bioinformation verification server storage unit 44. After (S15) transmits the stored one bio information identification number to the web server 30 (S16).

In addition, the web server 30 stores the identification information and the authentication information of the user in the web server storage unit 33 of the received bio information identification number and the user information received through the user information input unit 26 of the user terminal. (S17).

In addition, the web server 30 transmits another bio information identification number stored in the bio information confirmation server through the user terminal 20 (S18) and the bio recognition terminal 10 (S19).

Finally, after receiving the bioinformation identification number from the user terminal 20, the bioinformation identification number storage unit 13 stores the bioinformation identification number (S20).

The biometric terminal 10 may be implemented so that only the user who stores the bioinformation identification number may prevent the theft of another person.

When the user who is registered bio information is connected to the web server through the user terminal 20 to log in (S100), the web server 30 to the user terminal 20 for verification of identity verification The bio-information authentication request of the user performing the identity authentication (S101).

Upon receiving the authentication request, the user terminal 20 requests the bio information identification number list and the bio information to the bio recognition terminal 10 (S102), and stores one or more bio information identification numbers previously stored in the bio recognition terminal. The biometric information is extracted through the extraction unit 14 and the bio information of the user for performing the personal authentication through the bio information recognition unit 12 (S103).

Thereafter, the bio information identification number list extracted from the bio recognition terminal 10 and the scanned bio information are transmitted to the user terminal 20 (S104).

The user terminal 20 outputs the extracted bio information identification number list and the scanned bio information, and selects the bio information identification number to be the authentication request from among the plurality of bio information identification numbers included in the bio information identification number list. The bio information to be linked is selected (S105) and transmitted to the web server 30 (S106).

In addition, the web server 30 verifies whether the user is identical to the identification information associated with the received bio information identification number among the plurality of previously stored identification information (S107).

In addition, the web server 30 transmits the bio information associated with the selected bio information identification number received from the user terminal 20 to the authorized authentication server 50 to make a verification request (S108),

The authorized authentication server 50 performs a personal authentication for matching with a plurality of previously stored bio information identification numbers and bio information, compares and judges through a bio information verification server determination unit, and then compares the identity verification result to the web server 30. To transmit (S109),

In other words, the user goes through the authentication process to perform the authentication, after the verification of the identity and the bio information identification number in the web server 30, the bio information verification server 40 to verify the bio information You will have a non-repudiation function because you will be authenticated in two places.

Subsequently, the bio information confirmation server 40 receives the bio information identification number and the bio information from the web server 30 (S110), compares the previously stored bio information identification number and the bio information (S111), and then the web server ( The verification result is transmitted to 30 (S112).

The web server 30 determines whether the user authentication is successful (S113), and transmits the determination result to the user terminal (S114) and provides a service.

In addition, by pre-registering the bio information to the bio information confirmation server 40, when the user performs the self-authentication, because the bio-information authentication role as the bio-information itself, the identity verification verification without exposing personal information.

However, in step (S107) of verifying whether the user is the user, from the plurality of authentication information previously stored in the web server, the authentication authentication information associated with the bio information identification number received from the user terminal is extracted, and the authentication is extracted from the web server Sending the authentication information to the authorized authentication server, the validation request, and may further include the step of transmitting a verification result about the authentication information received on the validation request to the authentication server to the web server if necessary.

Therefore, when the user is subjected to the certification certification verification, it is to check whether the certification period of the extracted certification information is expired or valid.

Although a preferred embodiment according to the present invention has been described above, it is possible to modify in various forms, and those skilled in the art to various modifications and modifications without departing from the claims of the present invention It is understood that it may be practiced.

Claims

In the non-repudiation identity verification system using the bio-information to register the bio-information to perform identity verification using bio-information,

A bio-recognition terminal for recognizing and scanning bio-information of a user through a bio-information recognition unit, and receiving and storing a bio-information identification number generated at the time of use registration of the recognized bio-information;

Receiving and managing the scanned bio information from the bio-recognition terminal, and applying for bio information usage registration by transmitting the user information including the user's identity information, ID, password and authorized authentication information input through the user information input unit A user terminal;

When the bio-information registration request is requested from the user terminal, the user's identity is verified based on the identification information, ID, and password of the user information received from the user terminal, and the public authentication information of the received user information is authenticated. Request the user verification by transmitting to the server, and determines whether to approve the use of the bio information registration based on the user identity verification and the user verification result, and the bio information identification number generated when the user information and the bio information usage registration Web server for receiving and storing the user information in association with; And

If the bio information usage registration is approved from the web server, the bio information scanned in the user terminal is received from the web server, a bio information identification number assigned to the received bio information is generated and stored, and the generated Non-identification identity verification system using bio-information, including; bio-identification server for transmitting a bio information identification number to the web server and the user terminal.
The method of claim 1,

The biometric terminal

Non-repudiation identity verification system using bio-information, characterized in that the bio-information recognition unit including one or more of the user's face, iris, vein, voice, cornea, hand shape, fingerprint.
The method of claim 1,

The user terminal

Non-repudiation identity verification system using bio-information, characterized in that receiving authentication information including at least one of an accredited certificate identification number, credit card identification number, mobile phone authentication number.
In the non-repudiation identity verification system using bio-information that performs bio-identification using bio-information,

Recognizing and scanning the bio information of the user through the bio information recognition unit, one or more bio information identification number is pre-stored, the bio-recognition terminal for extracting and transmitting the at least one previously stored bio information identification number when the bio information identification number list request ;

The biometric identification terminal lists and receives the bioinformation identification number list, and outputs the biometric identification number. The biometric identification number of the bioinformation identification number included in the output bioinformation identification number list is the biometric identification number. A user terminal for transmitting the bio information received from the terminal;

When the bio information identification number and the bio information are received and stored in association with the plurality of bio information identification numbers and the bio information, the bio information associated with the received bio information identification number is detected and the received bio information identification number and the detection are performed. A bioinformation verification server which performs identity verification on the basis of the bioinformation and the bioinformation identification number and transmits the identity verification result; And

The bio information identification number and the bio information received from the user terminal after verifying whether or not the user and whether it matches the plurality of pre-stored user information, the bio information identification number and bio information received from the user terminal to confirm the bio Request for identity verification by transmitting to the server, the web server determination unit determines whether the user is based on the identity verification result received from the bio-information verification server, and if it is determined as the user, the web that provides the service to the user terminal Non-repudiation identity verification system using the bio-information including a server.
The method of claim 4, wherein

The web server

By detecting the bio information identification number and the corresponding authorized authentication information received from the user terminal, the non-repudiation identity verification using the bio information further comprising the request for validation by transmitting the detected certified authentication information to the authorized authentication server Verification system.
In the non-repudiation identity verification method using bio-information for registering the bio-information to perform identity verification using bio-information,

Applying for bio information usage registration to a web server in order to register bio information of a user in a user terminal;

Requesting user information from the web server to verify the user's identity and verify the user when the bio information usage registration request is requested;

Retransmitting the requested user information to the web server by inputting the user information including the user's identity information, ID, password, and public authentication information through the user information input unit of the user terminal;

Verifying whether the user is based on identification information, ID, and password among the user information received from the web server;

Transmitting a user authentication request from the user information received from the web server to a public authentication server;

Transmitting the verification request of the user identity verified by the web server and the user verification result to the web server;

Determining whether to approve the use of the bio information registration based on the verification result received from the web server and permitting the use registration approval from the web server to the bio information verification server upon successful authentication;

Requesting the user terminal to scan the bio information from the web server to register the bio information to the bio information confirmation server approved for the use registration;

Receiving, by the user terminal, the scan request, scanning bio information to a biometric terminal;

Recognizing and scanning bio information of a user in a biometric terminal receiving the scan request;

Transmitting the scanned bio information to the user terminal;

Transmitting the scanned bio information received from the user terminal to the web server;

Transmitting the bio information received from the web server to the bio information confirmation server;

Registering bio information received from the bio information confirmation server on the bio information confirmation server and generating a bio information identification number assigned to the registered bio information;

Storing the registered bio information and the generated bio information identification number in association with the bio information confirmation server;

Transmitting the bio information identification number stored in the bio information confirmation server to the web server;

Storing the user's identity information and authorized authentication information among the bio information identification number received from the web server and the user information received through the user information input unit of the user terminal in the web server;

Transmitting the bio information identification number stored in the bio information confirmation server to the user terminal;

Transmitting the bio information identification number received from the user terminal to the bio recognition terminal;

And receiving the biometric identification terminal and storing the biometric identification number in the biometric terminal storage unit.
The method of claim 6,

Re-transmitting the user information to the web server

Non-repudiation identity verification method using bio-information, characterized in that the authentication information is input including one or more of an authentication certificate identification number, credit card identification number, mobile phone authentication number.
In the non-repudiation identity verification method using bio-information that performs user identity using bio-information,

Accessing / logging in to a web server through a user terminal;

Making a bio information authentication request from the web server to the user terminal to verify identity verification;

Requesting the biometric identification terminal for the bioinformation identification number list and the bioinformation from the user terminal receiving the authentication request;

Extracting one or more bioinformation identification numbers previously stored in the biometric identification terminal from the requested bioinformation identification number list and bioinformation, and scanning the bioinformation of the user to perform identity authentication through a bioinformation recognition unit;

Transmitting the extracted bio information identification number list and the scanned bio information to a user terminal;

Outputting the extracted bio information identification number list and the scanned bio information received by the user terminal, selecting a bio information identification number to be authenticated from a plurality of bio information identification numbers included in the bio information identification number list, and Selecting bio information associated with it;

Transmitting the selected bio information identification number and the scanned bio information associated with the selected bio information identification number to a web server;

The bio information identification number received from the web server and the scanned bio information associated with the bio information identification number among the plurality of user information previously stored in the web server and Verifying whether the user is identical to the linked identity information;

Transmitting the bio information associated with the selected bio information identification number received by the web server to a bio information verification server to perform a verification request;

The bio information associated with the bio information identification number received from the bio information identification server performs a personal authentication on whether a plurality of bio information identification numbers and bio information matches the previously stored bio information confirmation server, and the bio information verification server Comparing and determining through the determining unit;

Transmitting a comparison result of the personal authentication to the web server through the bio information confirmation server determination unit;

Determining whether the user authentication is successful by the web server determination unit based on the result of the user authentication received from the web server;

And transmitting the authentication result determined by the web server determination unit to the user terminal.
The method of claim 8,

The step of verifying whether the user is yourself

Extracting authentication authentication information associated with a bioinformation identification number received from the user terminal from a plurality of authentication authentication information previously stored in the web server;

Transmitting validation information extracted from the web server to a certification server to request validation;

The non-repudiation identity verification method using the bio-information further comprising the step of transmitting to the web server a verification result about the authentication information received the validation request to the authorized authentication server.
The method of claim 9,

The step of transmitting the verification result of the authentication information to the web server

Non-repudiation self-identification verification method using the bio-information, characterized in that to confirm whether or not the period of the certificate of the authorized certification information has expired or valid.