Personal information infringement prevention method and system, in which biometric authentication and phase division of authentication process are combined

Abstract

The present invention relates to a personal information infringement prevention method and system, in which biometric authentication and phase division of an authentication process are combined. A personal information infringement prevention system in which biometric authentication and phase division of an authentication process are combined according to the present invention comprises: a portableterminal in which an application capable of photographing a QR code and performing biometric recognition is installed, wherein when biometric recognition provided through the application is completed, the portable terminal stores input personal information and encrypts the personal information by using a value included in the QR code so as to transmit the encrypted personal information, or loadsand transmits a previously stored ID; a service server for storing the encrypted personal information, generating a user ID, and transmitting the user ID to the portable terminal for storage, or notifying the portable terminal of completion of logging-in when the ID received from the portable terminal is a valid ID; and a key server for generating a key value for encryption and decryption of the encrypted personal information, classifying and storing the key value for each user, and providing the key value to the service server.

Description

technical field [0001] Embodiments of the present invention relate to a personal information infringement prevention method and system that combine authentication program stage division and biometric authentication. Background technique [0002] The authentication methods used in the user authentication function are divided into knowledge-based, ownership-based, and biological-based authentication methods, and each authentication method differs in terms of convenience, cost, and security. [0003] The knowledge-based authentication method is the most common authentication system based on the user name (ID) and password (Password), which has low security, relies on the user's memory, is easy to be invaded, and needs to be recreated if it is lost. . [0004] In addition, all basic authentication methods are authenticated by a specific method owned by them. The security is ordinary, but OTP or security card is used, so it is not easy for others to infringe on the knowledge bas...

AI Technical Summary

Problems solved by technology

[0003] The knowledge-based authentication method is the most common authentication system based on the user name (ID) and password (Password), which has low security, relies on the user's memory, is easy to be invaded, and needs to be recreated if it is lost.

[0004] In addition, all basic authentication methods are authenticated by a specific method owned by them. The security is ordinary, but OTP or security card is used, so it is not easy for others to infringe on the knowledge base, but corresponding additional costs will be incurred, and it will also need to be replaced when lost. means of creation

[0005] In addition, the bio-based authentication method is based on biometric information processing authentication of body tissues such as iris, fingerprint, and face, and has high security due to the application of biometric information. most severely damaged

[0006] If we explain more specifically the representative authentication method, that is, the knowledge-based authentication method, most Internet services are formed by users (Person), media (PC, Mobile) and service agents (Server), especially in the case of network services These three types of units can all be robbed individually, and there is a fatal problem that only one intrusion will directly lead to the leakage of the entire personal information, so a fundamental solution to this kind of information piracy is needed

Images