WO2020235918A1

WO2020235918A1 - Electronic terminal device for performing log-in authentication process based on biometric information, and operation method of same

Info

Publication number: WO2020235918A1
Application number: PCT/KR2020/006551
Authority: WO
Inventors: 반영희
Original assignee: Ban Young Hui
Priority date: 2019-05-21
Filing date: 2020-05-19
Publication date: 2020-11-26
Also published as: KR102045488B1

Abstract

Disclosed are an electronic terminal device for performing a log-in authentication process based on biometric information, and an operation method of same. According to the present invention, when the electronic terminal device is turned on, a guidance window including a guidance message requesting a user to input a password or biometric information is displayed. Thereafter, when the user provides biometric information through a biometric information input apparatus linked with the electronic terminal device within a standby time, and biometric information data is received through the biometric information input apparatus as a result, the biometric information data is provided as an input to a hash function to calculate a biometric information hash value, and then a biometric information hash value pertaining to the user and stored in a database is extracted. If the calculated biometric information hash value is determined to be same as the extracted biometric information hash value, authentication of the user is completed, and the state of the electronic terminal device then switches to an activated state that is a useable state. Thus, the present invention can provide support so that the user can safely log in through the input of the biometric information.

Description

Electronic terminal device that performs login authentication processing based on biometric information and its operating method

The present invention relates to an electronic terminal device that performs a login authentication process based on biometric information and a method of operating the same.

Recently, although interest has shifted from PC to mobile environment, it is difficult to overlook the PC market because there are still many customers who use PCs.

In this way, as PCs are widely used, the importance of security, such as a movement to prevent information leakage in public institutions, financial institutions, and companies, is naturally increasing.

Normally, all security starts with login, and so far, login security has tended to rely on passwords and PIN (Personal Identification Number) numbers.

There was a forgery prevention solution for such passwords, but it was insufficient to prevent hackers from attacking, and to prepare for hacker attacks by requiring PC users to change their passwords periodically when they log in to public institutions or financial institutions. However, there was a problem that the password was stolen by a hacker while the PC user was changing the password.

Here, there is a need for a way to safely log in without an existing password, and this new method was to combine biometrics technology to log in.

In general, biometric technology uses biometric features such as fingerprints, irises, retinas, and finger veins, and among them, the method of using fingerprints is authentication by comparing the user's fingerprint characteristics and the user's fingerprint characteristics previously registered in the database. It is possible and the method of using fingerprints has the advantage of being relatively convenient and safe.

Therefore, in constructing a login system using biometric technology, it is necessary to study a login processing technique based on biometrics technology that not only pursues stability for security and user convenience, but also allows economic rationality to be considered. Do.

The electronic terminal device and its operation method according to the present invention include displaying a guide window including a guide message requesting a user to input a password or biometric information when the electronic terminal device is turned on, and then within a waiting time. When the biometric information is received through the biometric information input device as biometric information is applied through the biometric information input device linked to the electronic terminal device, the biometric information hash value by applying the biometric information data as input to a hash function After calculating, the biometric information hash value for the user stored in the database is extracted, and if it is determined that the calculated biometric information hash value is the same as the extracted biometric information hash value, authentication for the user is completed. Then, the electronic terminal device is switched to an active state, which is a usable state, so that a user can safely log in through inputting biometric information.

In an electronic terminal device that performs a login authentication process based on biometric information according to an embodiment of the present invention, a predetermined password of the user of the electronic terminal device and a preset biometric information hash value for the user correspond to each other. Stored composite information storage unit, when the electronic terminal device is powered on, a guide window display unit that displays a guide window including a guide message requesting the user to input a password or biometric information, and includes the guide message After the information window is displayed, when a first password input by the user is received from the user within a preset first waiting time, a password extraction unit for extracting the user's password stored in the complex information storage unit, the second 1 If it is determined that the password is the same as the extracted password, a warning message display unit that displays a warning message requesting the user to input biometric information again within a preset second waiting time, and the warning message After being displayed on the guide window, as the user applies biometric information through a biometric information input device linked to the electronic terminal device within the second waiting time, first biometric information data is received through the biometric information input device. Then, a hash calculating unit that calculates a first biometric information hash value by applying the first biometric information data as input to a preset hash function, and when the first biometric information hash value is calculated, stored in the complex information storage unit When it is determined that the biometric information extracting unit for extracting the biometric information hash value for the user and the first biometric information hash value is the same as the extracted biometric information hash value, the electronic terminal device after completing authentication for the user It includes an authentication completion unit that converts to an activated state that is a usable state.

In addition, in the method of operating the electronic terminal device for performing login authentication processing based on biometric information according to an embodiment of the present invention, a preset password of a user of the electronic terminal device and a preset hash value of biometric information for the user are Maintaining a correspondingly stored composite information storage unit, when the electronic terminal device is powered on, displaying a guide window including a guide message requesting the user to input a password or biometric information, the guide message After the information window including is displayed, when a first password input by the user is received from the user within a preset first waiting time, extracting the password of the user stored in the complex information storage unit, the If it is determined that the first password is the same as the extracted password, displaying a warning message on the guidance window for re-requesting the user to input biometric information within a preset second waiting time, the warning message After being displayed on the guide window, when the first biometric information data is received through the biometric information input device, as the user applies the biometric information through the biometric information input device linked to the electronic terminal device within the second waiting time , Calculating a first biometric information hash value by applying the first biometric information data as input to a preset hash function, when the first biometric information hash value is calculated, the user stored in the complex information storage unit Extracting a biometric information hash value for and when it is determined that the first biometric information hash value is the same as the extracted biometric information hash value, the electronic terminal device is in a usable state after completing authentication for the user. And switching to the activated state.

The electronic terminal device and its operation method according to the present invention include displaying a guide window including a guide message requesting a user to input a password or biometric information when the electronic terminal device is turned on, and then within a waiting time. When the biometric information is received through the biometric information input device as biometric information is applied through the biometric information input device linked to the electronic terminal device, the biometric information hash value by applying the biometric information data as input to a hash function After calculating, the biometric information hash value for the user stored in the database is extracted, and if it is determined that the calculated biometric information hash value is the same as the extracted biometric information hash value, authentication for the user is completed. Then, by switching the electronic terminal device to an active state that is a usable state, it is possible to support a user to safely log in through inputting biometric information.

1 is a diagram illustrating the structure of an electronic terminal device that performs a login authentication process based on biometric information according to an embodiment of the present invention.

2 is a flowchart illustrating an operation method of an electronic terminal device that performs a login authentication process based on biometric information according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. This description is not intended to limit the present invention to a specific embodiment, it is to be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the present invention. While describing each drawing, similar reference numerals have been used for similar components, and unless otherwise defined, all terms used in the present specification including technical or scientific terms refer to common knowledge in the technical field to which the present invention belongs. It has the same meaning as commonly understood by someone who has it.

In this document, when a part "includes" a certain component, it means that other components may be further included rather than excluding other components unless otherwise stated. In addition, in various embodiments of the present invention, each component, functional blocks or means may be composed of one or more sub-components, and the electrical, electronic, and mechanical functions performed by each component are electronic. A circuit, an integrated circuit, and an application specific integrated circuit (ASIC) may be implemented with various known devices or mechanical elements, and may be implemented separately or two or more may be integrated into one.

On the other hand, the blocks of the attached block diagram and the steps in the flowchart are computer program instructions that are mounted on a processor or memory of equipment capable of processing data such as a general-purpose computer, a special-purpose computer, a portable notebook computer, and a network computer to perform specified functions. It can be interpreted as meaning. Since these computer program instructions can be stored in a memory provided in a computer device or in a memory readable by a computer, the functions described in the blocks in the block diagram or in the steps in the flowchart are produced as a product containing the instruction means to perform this. It could be. In addition, each block or each step may represent a module, segment, or part of code that contains one or more executable instructions for executing the specified logical function(s). In addition, it should be noted that in some alternative embodiments, functions mentioned in blocks or steps may be executed in a different order. For example, two blocks or steps shown in succession may be performed substantially simultaneously or may be performed in reverse order, and in some cases, some blocks or steps may be omitted.

Referring to FIG. 1, an electronic terminal device 110 performing a login authentication process based on biometric information according to the present invention includes a composite information storage unit 111, a guide window display unit 112, a password extraction unit 113, and a warning. A message display unit 114, a hash operation unit 115, a biometric information extraction unit 116, and an authentication completion unit 117 are included.

In the composite information storage unit 111, a preset password of the user of the electronic terminal device 110 and a preset hash value of biometric information for the user are stored in correspondence with each other.

For example, information may be stored in the composite information storage unit 111 as shown in Table 1 below.

사용자의 비밀번호User's password	사용자에 대한 생체 정보 해시 값Biometric information hash value for the user
Connection12345Connection12345	64f803b710a41396zd63dca1540351364f803b710a41396zd63dca15403513

When the electronic terminal device 110 is powered on, the guide window display unit 112 displays a guide window including a guide message requesting the user to input a password or biometric information.

When the first password input by the user is received from the user within a preset first waiting time after the guide window including the guide message is displayed, the password extraction unit 113 stores it in the composite information storage unit 111 The password of the user is extracted.

When it is determined that the first password is the same as the extracted password, the warning message display unit 114 displays a warning message requesting the user to input biometric information again within a preset second waiting time on the guide window. do.

For example, suppose that the preset first waiting time is '3 minutes', the second preset waiting time is '30 seconds', and the first password input by the user is'Connection12345'. 'Connection12345' which is the first password input by the user within '3 minutes' of the preset first waiting time after the guide window including the guide message requesting the user to input a password or biometric information is displayed When is received by the electronic terminal device 110, the password extraction unit 113 may extract the user's password'Connection12345' stored in the complex information storage unit 111.

At this time, the warning message display unit 114 determines that the first password,'Connection12345', is the same as the extracted password,'Connection12345', so that the user can receive a living body within the preset second waiting time of '30 seconds'. The warning message re-requesting to input information may be displayed on the guide window.

After the warning message is displayed on the guide window, the hash calculating unit 115 applies the biometric information to the user through the biometric information input unit 125 linked to the electronic terminal device 110 within the second waiting time. Accordingly, when the first biometric information data is received through the biometric information input unit 125, the first biometric information hash value is calculated by applying the first biometric information data as input to a preset hash function.

Here, physical characteristics used as biometrics include fingerprints, irises, faces, and veins, and behavioral characteristics include voices and signatures.

When the first biometric information hash value is calculated, the biometric information extracting unit 116 extracts the biometric information hash value for the user stored in the complex information storage unit 111.

When it is determined that the first biometric information hash value is the same as the extracted biometric information hash value, the authentication completion unit 117 is in an activated state in which the electronic terminal device 110 can be used after completing authentication for the user. Switch to

For example, assume that the second waiting time is '30 seconds', the first biometric information data is'fingerprint data 1', and the first biometric information hash value is '64f803b710a41396zd63dca15403513'. After the warning message is displayed on the information window, as the user applies the biometric information through the biometric information input unit 125 linked to the electronic terminal device 110 within the second waiting time of '30 seconds' , When'fingerprint data 1', which is the first biometric information data, is received by the electronic terminal device 110 through the biometric information input unit 125, the hash calculation unit 115 performs'fingerprint data 1'which is the first biometric information data. Is applied to the preset hash function as an input to calculate '64f803b710a41396zd63dca15403513' which is the first biometric information hash value.

At this time, when the first biometric information hash value '64f803b710a41396zd63dca15403513' is calculated by the electronic terminal device 110, the biometric information extraction unit 116 is the biometric information hash value for the user stored in the complex information storage unit 111. '64f803b710a41396zd63dca15403513' can be extracted.

Then, the authentication completion unit 117 determines that the first biometric information hash value '64f803b710a41396zd63dca15403513' is the same as the extracted biometric information hash value '64f803b710a41396zd63dca15403513', so that the electronic terminal device ( 110) can be switched to the enabled state, which is a usable state.

At this time, according to an embodiment of the present invention, after the warning message is displayed on the guide window, the hash calculator 115 provides biometric information that the user is linked with the electronic terminal device 110 within the second waiting time. As biometric information is not applied through the input device 125, if the first biometric information data is not received through the biometric information input device 125, the electronic terminal device 110 may be powered off.

For example, assume that the second waiting time is '30 seconds' and the first biometric information data is'fingerprint data 1'. After the warning message is displayed on the information window, the user does not apply the biometric information through the biometric information input device 125 linked to the electronic terminal device 110 within the second waiting time of '30 seconds'. Accordingly, when'fingerprint data 1', which is the first biometric information data, is not received by the electronic terminal device 110 through the biometric information input unit 125, the hash calculator 115 turns on the electronic terminal device 110. Can be terminated.

That is, when the electronic terminal device 110 is powered on, the electronic terminal device 110 displays a guide window including a guide message requesting the user to input a password or biometric information, and then a preset first waiting time. If the first password input by the user is received from the user within, the password of the user stored in the complex information storage unit 111 is extracted and the first password is determined to be the same as the extracted password, After displaying a warning message re-requesting the user to input biometric information within a set second waiting time on the guidance window, the user is connected to the electronic terminal device 110 within the second waiting time. As biometric information is applied through the information input unit 125, when the first biometric information data is received through the biometric information input unit 125, the first biometric information data is applied as an input to a preset hash function. After calculating an information hash value, if the biometric information hash value for the user stored in the complex information storage unit 111 is extracted and it is determined that the first biometric information hash value is the same as the extracted biometric information hash value, , After completing the authentication for the user, by switching the electronic terminal device 110 to an active state that is a usable state, it is possible to support the user to safely log in through inputting biometric information after entering a password.

Meanwhile, a situation in which the user first inputs biometric information instead of the password may be considered after the guide window including the guide message for requesting the user to input a password or biometric information is displayed.

In particular, according to an embodiment of the present invention, after the information window including the guidance message is displayed, the hash calculation unit 115 provides biometric information in which the user is linked with the electronic terminal device 110 within the first waiting time. As the biometric information is applied through the input unit 125, when the second biometric information data is received through the biometric information input unit 125, the second biometric information is hashed by applying the second biometric information data as input to the hash function. A value can be calculated, and when the second biometric information hash value is calculated, the biometric information extraction unit 116 can extract the biometric information hash value for the user stored in the complex information storage unit 111, and , When it is determined that the second biometric information hash value is the same as the extracted biometric information hash value, the authentication completion unit 117 activates the electronic terminal device 110 in a usable state after completing authentication for the user. You can switch to the state.

For example, assume that the first waiting time is '3 minutes', the second biometric information data is'fingerprint data 2', and the second biometric information hash value is '64f803b710a41396zd63dca15403513'. After the guide window including the guide message is displayed, as the user applies biometric information through the biometric information input unit 125 linked to the electronic terminal device 110 within the first waiting time of '3 minutes' , When the second biometric information data'fingerprint data 2'is received by the electronic terminal device 110 through the biometric information input unit 125, the hash calculating unit 115 performs the second biometric information data'fingerprint data 2'. Is applied to the hash function to calculate the second biometric information hash value '64f803b710a41396zd63dca15403513', and when the second biometric information hash value '64f803b710a41396zd63dca15403513' is calculated in the electronic terminal device 110, the biometric information extraction unit 116 may extract '64f803b710a41396zd63dca15403513', which is a biometric information hash value for the user stored in the composite information storage unit 111, and the authentication completion unit 117 may extract '64f803b710a41396zd63dca15403513' which is the second biometric information hash value. By determining that the extracted biometric information hash value is the same as '64f803b710a41396zd63dca15403513', the electronic terminal device 110 can be switched to an active state that is a usable state after completing authentication for the user.

According to an embodiment of the present invention, the electronic terminal device 110 includes a matrix storage unit 118, a syndrome generation unit 119, a feedback request unit 120, a verification syndrome generation unit 121, and an authentication unit 122. ) And a log information transmission unit 123.

In the matrix storage unit 118, a parity check matrix corresponding to a preset generation matrix having error correction capability for a code of t (t is a natural number) bit for use in authentication of the log management server 130 is provided. Has been saved.

The parity check matrix is a matrix for verifying whether an error has occurred in the data received by the data receiving side when the data transmitting side transmits a codeword encoded based on a predetermined generation matrix to the data receiving side. When it is said that there is a generation matrix G of size kxn (k and n are natural numbers and n is a number greater than k), and the parity check matrix corresponding to the generation matrix G is'H', the size of the parity check matrix H Is the size of (nk) xn, and has the same characteristics as in Equation 1 below in relation to the generation matrix G.

Here, H ^T denotes a transpose matrix of the parity check matrix.

If, as the data transmitting side generates the code word c using the generation matrix G and transmits it to the data receiving side, the data received at the data receiving side is called'r', and it is assumed that no error has occurred in the data r, The data r has the same characteristics as in Equation 2 below in relation to the parity check matrix H.

However, if an error e has occurred in the codeword c transmitted by the data transmitting side, the data r received by the data receiving side is'c

It will be e', and as a result, the parity check matrix H and the data r have characteristics as shown in Equation 3 below.

here,

Means exclusive OR operation.

As in the operation in Equation 3, the data receiving side can detect whether an error exists in the data received at the data receiving side by using the parity check matrix. At this time,'S' in Equation 3 is called a syndrome, and the data receiving side calculates the syndrome based on the parity check matrix H.

The error e included in the received data r can be found by performing syndrome decoding to find e that satisfies the.

Syndrome decoding is performed only when the error correction capability of the parity check matrix is t, and when a data error occurs for bits less than t.

You can find the error code e that satisfies.

When the electronic terminal device 110 is converted to an active state in which the electronic terminal device 110 can be used, the syndrome generator 119 randomly generates an error code having a Hamming Weight t, and calculates the error code and the parity check matrix. Based on this, a syndrome for the error code is generated.

Here, the Hamming weight means the number of code values of '1' in the set of code values consisting of '0' and '1'.

In addition, the syndrome generator 119 may generate a syndrome for the error code based on Equation 4 below.

Here, e denotes an error code of hamming weight t, and S denotes syndrome.

The feedback request unit 120 transmits the error code to the log management server 130 and simultaneously transmits a feedback request to the log management server 130 for a codeword into which the error code is inserted as an error.

At this time, according to an embodiment of the present invention, the log management server 130 stores the preset generation matrix in a memory, and when the error code and the feedback request are received from the electronic terminal device 110, the It is checked whether the hamming weight of the error code is t, and if it is determined that the hamming weight of the error code is t, a random code is randomly generated, and based on the preset generation matrix stored in the memory, the A first codeword may be generated by encoding a random code, and after generating a feedback code by inserting the error code into the first codeword as an error, the feedback code may be transmitted to the electronic terminal device 110.

Relatedly, when the error code received from the electronic terminal device 110 is'e', the log management server 130 may first check whether the hamming weight of the error code e is t.

When it is confirmed that the hamming weight of the error code e is t, the log management server 130 confirms that the error code e is a code normally generated and transmitted from the electronic terminal device 110, and randomly selects a predetermined random code. The first codeword may be generated by encoding the random code based on the preset generation matrix stored in a memory after being generated.

Relatedly, when the preset generation matrix is a generation matrix G having a size of kxn, the log management server 130 randomly generates a random code having a size of k bits, and then uses the generation matrix G to perform the following math: The first codeword may be generated according to the operation of Equation 5.

Here, c denotes the first codeword and r denotes the random code.

In this way, when the first codeword c is generated, the log management server 130 may generate a feedback code by inserting the error code e into the first codeword c as an error according to the operation of Equation 6 below. have.

Here, p means the feedback code.

In this way, when the feedback code p is generated, the log management server 130 may transmit the feedback code to the electronic terminal device 110.

At this time, the verification syndrome generation unit 121 includes a first codeword generated by the log management server 130 from the log management server 130 (the first codeword is a random code generated by the log management server 130). When a feedback code in which the error code is inserted as an error is received in a codeword generated by encoding based on the preset generation matrix previously stored in the log management server 130, the parity check matrix Generate a verification syndrome from the feedback code.

In connection, when the feedback code is p generated by the operation of Equation 6, the verification syndrome generator 121 may generate the verification syndrome based on the operation of Equation 7 below. .

Here, S _c means the verification syndrome.

The authentication unit 122 compares the syndrome for the error code with the syndrome for verification, and when it is determined that both syndromes match each other, it completes the authentication for the log management server 130.

In relation to this, the authentication unit 122 manages log when it is determined that the syndrome S for the error code calculated according to Equation 4 and the verification syndrome S _c calculated according to Equation 7 match each other. Authentication for the server 130 may be completed.

The log management server 130 stores that the syndrome S for the error code calculated according to Equation 4 and the verification syndrome S _c calculated according to Equation 7 coincide with each other. Feedback generated by inserting an error code having a hamming weight t issued by the electronic terminal device 110 as an error for a codeword generated through a generation matrix having an error correction capability of t or less corresponding to the parity check matrix. It can be regarded as meaning that the code is fed back to the electronic terminal device 110.

This can be proved by the following equation (8).

After the log management server 130 generates a codeword through a generation matrix having an error correction capability of t or less corresponding to the parity check matrix stored in the electronic terminal device 110, an electronic terminal for the generated codeword When it is assumed that a feedback code is generated by inserting an error code having a hamming weight t issued by the device 110 as an error, the verification syndrome S _c is calculated according to the calculation of Equation 8 above.

Will be calculated as

Is equal to the syndrome S for the error code shown in Equation 4 above.

For this reason, when it is determined that the syndrome S for the error code calculated according to Equation 4 and the verification syndrome S _c calculated according to Equation 7 match each other, the authentication unit 122 manages the log. The server 130 may be authenticated as being a registered normal server.

In this way, when authentication for the log management server 130 is completed, the log information transmission unit 123 provides log information (the log information is for the time when the authentication for the user is completed and the electronic terminal device 110 is activated). (Meaning activation history information consisting of time information) may be generated and the log information may be transmitted to the log management server 130.

In this case, when the log information is received from the electronic terminal device 110, the log management server 130 may store the log information in a log information database.

According to an embodiment of the present invention, the electronic terminal device 110 may be configured to be equipped with a voice support function for the disabled. Specifically, the electronic terminal device 110 may include a text to speech (TTS) function to notify the disabled by voice that the solution is being operated.

In addition, according to an embodiment of the present invention, the electronic terminal device 110 supports OTP (One Time Password) to support a login function when the biometric information input device 125 is broken, stolen, lost, etc. It may further include functions.

When the electronic terminal device 110 is unable to log in, the user may receive an OTP from the OTP issuing server and log in to the electronic terminal device 110.

In step S210, a composite information storage unit in which a preset password of the user of the electronic terminal device and a preset hash value of biometric information for the user are stored in correspondence with each other is maintained.

In step S220, when the electronic terminal device is powered on, a guide window including a guide message requesting the user to input a password or biometric information is displayed.

In step S230, after the guide window including the guide message is displayed, if a first password input by the user is received from the user within a preset first waiting time, the user stored in the composite information storage unit Extract the password of

In step S240, if it is determined that the first password is the same as the extracted password, a warning message for requesting the user to input biometric information again within a preset second waiting time is displayed on the guide window.

In step S250, after the warning message is displayed on the guide window, as the user applies biometric information through a biometric information input device linked to the electronic terminal device within the second waiting time, the biometric information input unit When the first biometric information data is received through, the first biometric information data is applied as an input to a preset hash function to calculate a first biometric information hash value.

In step S260, when the first biometric information hash value is calculated, the biometric information hash value for the user stored in the complex information storage unit is extracted.

In step S270, if it is determined that the first biometric information hash value is the same as the extracted biometric information hash value, after completing authentication for the user, the electronic terminal device is converted to an active state in which the electronic terminal device is usable.

In this case, according to an embodiment of the present invention, the operating method of the electronic terminal device is, after the warning message is displayed on the guide window, the living body in which the user is linked with the electronic terminal device within the second waiting time. When biometric information is not applied through an information input device and the first biometric information data is not received through the biometric information input device, powering off the electronic terminal device may be further included.

In addition, according to an embodiment of the present invention, the operation method of the electronic terminal device includes the living body in which the user is linked with the electronic terminal device within the first waiting time after the guide window including the guide message is displayed. As biometric information is applied through an information input device, when second biometric information data is received through the biometric information input device, the second biometric information data is applied as input to the hash function to calculate a second biometric information hash value. Step, when the second biometric information hash value is calculated, extracting a biometric information hash value for the user stored in the complex information storage unit, and the second biometric information hash value is the extracted biometric information hash value If it is determined that it is the same as, after completing authentication for the user, the step of converting the electronic terminal device to an active state that is a usable state.

In addition, according to an embodiment of the present invention, the operation method of the electronic terminal device is based on a predetermined generation matrix having error correction capability for a code of t (t is a natural number) bit for use in authentication of a log management server. Maintaining a matrix storage unit in which a corresponding parity check matrix is stored, when the electronic terminal device is converted to an active state that is a usable state, an error code having a hamming weight t is randomly generated, and the error code and the parity Generating a syndrome for the error code based on a check matrix, transmitting the error code to the log management server and at the same time transmitting a feedback request for a code word in which the error code is inserted as an error to the log management server The step of, a first codeword generated by the log management server from the log management server (the first codeword is the preset generation matrix in which a random code generated by the log management server is previously stored in the log management server When a feedback code in which the error code is inserted as an error is received in the codeword generated by encoding on the basis of), generating a verification syndrome from the feedback code based on the parity check matrix, for the error code When it is confirmed that both syndromes match each other by comparing the syndrome and the verification syndrome, the step of completing authentication for the log management server and when authentication for the log management server is completed, log information (the log information is The method may further include generating (meaning activation history information consisting of time information about a time when the electronic terminal device is activated after authentication for the user is completed) and transmitting the log information to the log management server. .

In this case, according to an embodiment of the present invention, the log management server stores the preset generation matrix in a memory, and when the error code and the feedback request are received from the electronic terminal device, the error code is hamming. Check whether the weight is t, and if it is determined that the hamming weight of the error code is t, the random code is randomly generated, and the random code is generated based on the preset generation matrix stored in the memory. The first codeword is generated by encoding, and the feedback code is generated by inserting the error code into the first codeword as an error, and then the feedback code is transmitted to the electronic terminal device, and the When log information is received, the log information may be stored in a log information database.

In the above, a method of operating an electronic terminal device for performing a login authentication process based on biometric information according to an embodiment of the present invention has been described with reference to FIG. 2. Here, the method of operating the electronic terminal device for performing the biometric information-based login authentication process according to an embodiment of the present invention is the method of the electronic terminal device 110 for performing the biometric information-based login authentication process described with reference to FIG. Since it may correspond to the configuration of the operation, a more detailed description thereof will be omitted.

The method of operating an electronic terminal device that performs login authentication processing based on biometric information according to an embodiment of the present invention may be implemented as a computer program stored in a storage medium for execution through a combination with a computer.

In addition, the method of operating an electronic terminal device for performing login authentication processing based on biometric information according to an embodiment of the present invention may be implemented in the form of program commands that can be executed through various computer means and recorded in a computer-readable medium. have. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the present invention, or may be known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -A hardware device specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of the program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

As described above, in the present invention, specific matters such as specific components, etc., and limited embodiments and drawings have been described, but this is provided only to help a more general understanding of the present invention, and the present invention is not limited to the above embodiments. , If a person of ordinary skill in the field to which the present invention belongs, various modifications and variations are possible from these descriptions.

Therefore, the spirit of the present invention is limited to the described embodiments and should not be defined, and all things that are equivalent or equivalent to the claims as well as the claims to be described later fall within the scope of the spirit of the present invention. .

[Explanation of code]

110: electronic terminal device that performs login authentication processing based on biometric information

111: complex information storage unit 112: information window display unit

113: password extraction unit 114: warning message display unit

115: hash calculation unit 116: biometric information extraction unit

117: authentication completion unit 118: matrix storage unit

119: syndrome generation unit 120: feedback request unit

121: verification syndrome generation unit 122: authentication unit

123: log information transmission unit 125: biometric information input device

130: log management server

Claims

In an electronic terminal device that performs login authentication processing based on biometric information,

A complex information storage unit in which a preset password of a user of the electronic terminal device and a hash value of biometric information for the user are stored in correspondence with each other;

A guide window display unit for displaying a guide window including a guide message requesting the user to input a password or biometric information when the electronic terminal device is turned on;

After the guide window including the guide message is displayed, when a first password input by the user is received from the user within a preset first waiting time, extracting the password of the user stored in the composite information storage unit Password extraction unit;

A warning message display unit for displaying a warning message on the guide window for re-requesting the user to input biometric information within a preset second waiting time when it is determined that the first password is the same as the extracted password;

After the warning message is displayed on the information window, as the user applies the biometric information through a biometric information input device linked to the electronic terminal device within the second waiting time, the first biometric information through the biometric information input device A hash calculator configured to calculate a first biometric information hash value by inputting the first biometric information data to a preset hash function when the information data is received;

A biometric information extracting unit for extracting a biometric information hash value for the user stored in the complex information storage unit when the first biometric information hash value is calculated; And

When it is determined that the first biometric information hash value is the same as the extracted biometric information hash value, an authentication completion unit that converts the electronic terminal device to an activated state that is a usable state after completing authentication for the user

An electronic terminal device that performs login authentication processing based on biometric information, including.
The method of claim 1,

The hash calculator

After the warning message is displayed on the information window, as the user does not apply biometric information through the biometric information input device linked to the electronic terminal device within the second waiting time, the biometric information input device When the first biometric information data is not received, the electronic terminal device performs a biometric information-based login authentication process of shutting down the power of the electronic terminal device.
The method of claim 1,

The hash calculator

After the guide window including the guide message is displayed, as the user applies the biometric information through the biometric information input device interlocked with the electronic terminal device within the first waiting time, a second When the biometric information data is received, the second biometric information data is applied as an input to the hash function to calculate a second biometric information hash value,

The biometric information extraction unit

When the second biometric information hash value is calculated, a biometric information hash value for the user stored in the complex information storage unit is extracted,

The authentication completion unit

When it is determined that the second biometric information hash value is the same as the extracted biometric information hash value, after completing authentication for the user, the electronic terminal device is converted to an activated state, which is a usable state, based on biometric information. An electronic terminal device that performs processing.
The method of claim 1,

A matrix storage unit storing a parity check matrix corresponding to a preset generation matrix having error correction capability for a code of t (t is a natural number) bit for use in authentication of a log management server;

When the electronic terminal device is converted to an active state that is a usable state, an error code having a Hamming weight t is randomly generated, and a syndrome for the error code based on the error code and the parity check matrix ( Syndrome generating unit for generating Syndrome);

A feedback request unit which transmits the error code to the log management server and at the same time transmits a feedback request for a codeword in which the error code is inserted as an error to the log management server;

A first codeword generated by the log management server from the log management server-The first codeword is based on the preset generation matrix in which a random code generated by the log management server is previously stored in the log management server. A codeword generated by encoding-a verification syndrome generator configured to generate a verification syndrome from the feedback code based on the parity check matrix when a feedback code in which the error code is inserted as an error is received;

An authentication unit that compares the syndrome for the error code with the syndrome for verification and, when it is confirmed that both syndromes match each other, completes authentication for the log management server; And

When the authentication for the log management server is complete, log information-the log information means activation history information consisting of time information about the time when the user is authenticated and the electronic terminal device is activated- Log information transmission unit for transmitting the log information to the log management server

The electronic terminal device further comprising a login authentication process based on biometric information.
The method of claim 4,

The log management server

When the preset generation matrix is stored in a memory, and when the error code and the feedback request are received from the electronic terminal device, it is checked whether the hamming weight of the error code is t, and the hamming weight of the error code is When it is confirmed that it is t, the random code is randomly generated, and the first codeword is generated by encoding the random code based on the preset generation matrix stored in the memory, and the first codeword Inserting the error code as an error into the error code to generate the feedback code, and then transmitting the feedback code to the electronic terminal device,

When the log information is received from the electronic terminal device, the electronic terminal device performs a biometric information-based login authentication process for storing the log information in a log information database.
In the method of operating an electronic terminal device for performing login authentication processing based on biometric information,

Maintaining a complex information storage unit in which a preset password of the user of the electronic terminal device and a preset hash value of biometric information for the user are stored in correspondence with each other;

When the electronic terminal device is turned on, displaying a guide window including a guide message requesting the user to input a password or biometric information;

After the guide window including the guide message is displayed, when a first password input by the user is received from the user within a preset first waiting time, extracting the password of the user stored in the composite information storage unit step;

If it is determined that the first password is the same as the extracted password, displaying a warning message re-requesting the user to input biometric information within a preset second waiting time on the guide window;

After the warning message is displayed on the information window, as the user applies the biometric information through a biometric information input device linked to the electronic terminal device within the second waiting time, the first biometric information through the biometric information input device When the information data is received, applying the first biometric information data as an input to a preset hash function to calculate a first biometric information hash value;

When the first biometric information hash value is calculated, extracting a biometric information hash value for the user stored in the complex information storage unit; And

When it is determined that the first biometric information hash value is the same as the extracted biometric information hash value, after completing authentication for the user, converting the electronic terminal device to an activated state that is in a usable state

A method of operating an electronic terminal device for performing login authentication processing based on biometric information, including.
The method of claim 6,

After the warning message is displayed on the information window, as the user does not apply biometric information through the biometric information input device linked to the electronic terminal device within the second waiting time, the biometric information input device If the first biometric information data is not received, powering off the electronic terminal device

The method of operating an electronic terminal device further comprising a login authentication process based on biometric information.
The method of claim 6,

After the guide window including the guide message is displayed, as the user applies the biometric information through the biometric information input device interlocked with the electronic terminal device within the first waiting time, a second When the biometric information data is received, applying the second biometric information data as an input to the hash function to calculate a second biometric information hash value;

When the second biometric information hash value is calculated, extracting a biometric information hash value for the user stored in the complex information storage unit; And

If it is determined that the second biometric information hash value is the same as the extracted biometric information hash value, after completing authentication for the user, converting the electronic terminal device to an active state in which the electronic terminal device can be used.

The method of operating an electronic terminal device further comprising a login authentication process based on biometric information.
The method of claim 6,

Maintaining a matrix storage unit in which a parity check matrix corresponding to a predetermined generation matrix having an error correction capability for a code of t (t is a natural number) bit for use in authentication of a log management server is stored;

When the electronic terminal device is converted to an active state that is a usable state, an error code having a Hamming weight t is randomly generated, and a syndrome for the error code based on the error code and the parity check matrix ( Syndrome);

Transmitting the error code to the log management server and at the same time transmitting a feedback request for a codeword in which the error code is inserted as an error to the log management server;

A first codeword generated by the log management server from the log management server-The first codeword is based on the preset generation matrix in which a random code generated by the log management server is previously stored in the log management server. Generating a verification syndrome from the feedback code based on the parity check matrix when a feedback code with the error code inserted as an error is received in the codeword generated by encoding;

Comparing the syndrome for the error code with the syndrome for verification, and completing authentication for the log management server when it is confirmed that both syndromes match each other; And

When the authentication for the log management server is complete, log information-the log information means activation history information consisting of time information about the time when the user is authenticated and the electronic terminal device is activated- Transmitting the log information to the log management server

The method of operating an electronic terminal device further comprising a login authentication process based on biometric information.
The method of claim 9,

The log management server

When the preset generation matrix is stored in a memory, and when the error code and the feedback request are received from the electronic terminal device, it is checked whether the hamming weight of the error code is t, and the hamming weight of the error code is When it is confirmed that it is t, the random code is randomly generated, and the first codeword is generated by encoding the random code based on the preset generation matrix stored in the memory, and the first codeword Inserting the error code as an error into the error code to generate the feedback code, and then transmitting the feedback code to the electronic terminal device,

When the log information is received from the electronic terminal device, a biometric information-based login authentication process is performed to store the log information in a log information database.
A computer-readable recording medium recording a computer program for executing the method of any one of claims 6 to 10 through combination with a computer.
A computer program stored in a storage medium for executing the method of any one of claims 6 to 10 through combination with a computer.