System and control method for executing service using biometric information

Abstract

A system for performing services by using biometric information is disclosed. The system according to the present disclosure includes an electronic device, a first server, and a second server, and a control method of the system includes the following steps: enabling the electronic device to obtain first biometric information; enabling the electronic device to obtain first encrypted data that encrypts the first biometric information by using the obtained first biometric information and a first encryption key, and sending it to the first server; enabling the first server to obtain first user identity information corresponding to the first biometric information and second encrypted data that further encrypts the first encrypted data by using a second encryption key and the first encrypted data received from the electronic device, and sending it to the second server; enabling the second server to match the second encrypted data received from the first server with the first user identity information corresponding to the first biometric information, and store it; enabling the second server to obtain authentication information based on the matched second encrypted data and the first user identity information, and send the authentication information to the first server; enabling the first server to register the authentication information for the first biometric information.

Description

Technical Field

[0001] The present disclosure relates to a system for performing a service using biometric information and a control method thereof, and more particularly, to a system for performing a service using only biometric information of a user while protecting the biometric information of the user. Background Art

[0002] Recently, technology for providing various services using user information while protecting the user information has been studied. For example, a payment system using user information, a rental system using user information, etc. are provided.

[0003] For example, in the prior art, in order to use the service by offline payment, the user must pay the fee in cash or by credit card. Therefore, if the user does not have cash or credit card, there is a problem that the offline payment cannot be performed and the service cannot be used.

[0004] Technology that uses the user's biometric information to provide various services is being studied. However, since the user's biometric information is unique to the user, there is a characteristic that the biometric information cannot be changed. When the user's biometric information is stolen by an external attack, the user's immutable information may be exposed to others, and a method for protecting the biometric information is needed. Summary of the invention

[0005] Technical issues

[0006] The present disclosure has been made to solve the above-mentioned problems, and an object of the present disclosure is to provide a system for protecting biometric information of a user and providing various services by inputting only the biometric information, and a control method thereof.

[0007] Technical Solution

[0008] A method for controlling a system including an electronic device, a first server and a second server, comprising: obtaining first biometric information by the electronic device; obtaining first encrypted data in which the first biometric information is encrypted by the electronic device by using the obtained first biometric information and a first encryption key, and sending the first encrypted data to the first server; obtaining first user identity information corresponding to the first biometric information by the first server and obtaining second encrypted data in which the first encrypted data is encrypted by using a second encryption key and the first encrypted data received from the electronic device, and sending it to the second server; matching and storing the second encrypted data received from the first server and the first user identity information corresponding to the biometric information by the second server; obtaining authentication information based on the matched second encrypted data and the first user identity information by the second server, and sending it to the first server; registering the authentication information for the biometric information by the first server.

[0009] The system may also include a third server that provides services, and the method may also include: based on a biometric information registration command for using the service of the third server received by the first server, the first server sends authentication information and biometric information release request information to the third server; the third server checks the validity of the received authentication information; based on the received authentication information being valid, the third server sends the authentication information and biometric information release request information to the second server; the second server sends the second encrypted data and first user identity information corresponding to the authentication information to the third server; and the third server registers the second encrypted data and first user identity information received from the second server.

[0010] The method may also include: the electronic device obtains second biometric information based on a command input for inputting biometric information to execute a service; the electronic device obtains third encrypted data in which the first biometric information is encrypted by using a first encryption key and the obtained second biometric information, and sends it to a first server; the first server obtains fourth encrypted data in which the third encrypted data is encrypted by using a second encryption key and the third encrypted data received from the electronic device, and sends it to a third server; the third server identifies whether encrypted data corresponding to the received fourth encrypted data exists in the third server, and based on the existence of encrypted data corresponding to the fourth encrypted data in the third server, the third server executes a service corresponding to the command for inputting biometric information to execute a service.

[0011] According to another embodiment, a system includes an electronic device, a first server, and a second server, wherein the electronic device is configured to: obtain first biometric information, and obtain first encrypted data in which the first biometric information is encrypted by using a first encryption key and the obtained first biometric information; the first server is configured to: receive the first encrypted data from the electronic device, and obtain first user identity information corresponding to the first biometric information and obtain second encrypted data in which the first encrypted data is encrypted by using the first encryption data and the second encryption key; the second server is configured to receive the second encrypted data from the first server, obtain authentication information based on the second encrypted data, and send the authentication information to the first server, wherein the first server can register the authentication information received from the second server as authentication information for the first biometric information.

[0012] The system may also include a third server that provides services; the first server is configured to receive a biometric information registration command for using the services of the third server, and send authentication information and biometric information release request information to the third server; the third server is configured to check the validity of the received authentication information, and based on the received authentication information being valid, send the authentication information and biometric information release request information to the second server; the second server is configured to send second encrypted data and first user identity information corresponding to the authentication information received from the third server to the third server, and the third server is configured to register the second encrypted data and first user identity information received from the second server.

[0013] The electronic device is configured to: obtain second biometric information based on a command for inputting biometric information to execute a service, obtain third encrypted data in which the first biometric information is encrypted by using a first encryption key and the obtained second biometric information, and send the third encrypted data to a first server; the first server is configured to: obtain fourth encrypted data in which the third encrypted data is encrypted by using a second encryption key and the third encrypted data received from the electronic device, and send it to a third server; the third server is configured to identify whether encrypted data corresponding to the received fourth encrypted data exists in the third server, and based on the existence of encrypted data corresponding to the fourth encrypted data in the third server, execute a service corresponding to the command for inputting biometric information to execute a service.

[0014] The control method of the third server according to the embodiment includes: receiving authentication information and biometric information release request information from the first server based on a user command input for registering biometric information in order to perform a service; sending the authentication information and biometric information release request information to the second server based on the received authentication information being valid; and receiving second encrypted data encrypted in the first server and first user identity information corresponding to the second encrypted data from the second server, and storing them.

[0015] The control method may also include: based on the input of the biometric information registration command, receiving fourth encrypted data in which the biometric information is encrypted from the first server, identifying whether there is encrypted data corresponding to the fourth encrypted data in the third server, and executing the service based on the existence of encrypted data corresponding to the fourth encrypted data in the third server.

[0016] According to another embodiment, the third server includes a memory, a communicator and a processor, so that: based on a user command input for registering biometric information in order to use a service, authentication information and biometric information release request information are received from the first server through the communicator, and it is identified whether the received authentication information is valid; based on the authentication information being valid, the authentication information and biometric information release request information are sent to the second server through the communicator; second encrypted data encrypted in the first server and first user identity information corresponding to the second encrypted data are received from the second server through the communicator, and stored in the memory.

[0017] The processor can receive fourth encrypted data in which the biometric information is encrypted from the first server through the communicator based on the input of a biometric information registration command for executing the service, identify whether encrypted data corresponding to the fourth encrypted data exists in the memory, and execute the service based on the existence of encrypted data corresponding to the fourth encrypted data in the memory.

[0018] Effects of the Invention

[0019] According to various embodiments, the system can provide various services by inputting only the biometric information while securely protecting the biometric information. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 is a system diagram showing an authentication system according to an embodiment;

[0021] Figure 2 is a system diagram briefly illustrating the operation of the system according to the embodiment;

[0022] FIG. 3A to FIG. 3D is a block diagram briefly illustrating an electronic device, a first server, a second server, and a third server according to an embodiment;

[0023] Figure 4 is an exemplary diagram showing various modules included in an electronic device, a first server, a second server, and a third server according to an embodiment;

[0024] Figure 5 is a sequence diagram showing a biometric information registration process according to an embodiment;

[0025] Figure 6 is a sequence diagram showing a biometric information registration process for using a service according to various embodiments;

[0026] Figure 7 is a sequence diagram showing a user authentication process for providing a service according to an embodiment;

[0027] Fig. 8A and Figure 8Bis a sequence diagram showing a biometric information registration process, a biometric information registration process for using a service, and a user authentication process for providing a service according to various embodiments; and

[0028] Fig. 9 is a flowchart illustrating a method for controlling a third server according to an embodiment. DETAILED DESCRIPTION

[0029] Before describing the present disclosure in detail, a method for explaining the present specification and the accompanying drawings will be described.

[0030] The terms used in the proposed specification and claims are general terms determined in consideration of the functions of various embodiments of the present disclosure. However, these terms may vary according to the intention of those skilled in the art, legal or technical interpretations, the emergence of new technologies, etc. In addition, there may be some terms arbitrarily identified by the applicant. Unless there is a specific definition of a term, the term may be interpreted based on the overall content and the technical common sense of those skilled in the relevant field.

[0031] Various modifications may be made to the embodiments of the present disclosure, and various types of embodiments may exist. Therefore, specific embodiments will be shown in the drawings, and these embodiments will be described in detail in the detailed description. However, it should be noted that the various embodiments are not used to limit the scope of the present disclosure to specific embodiments, but they should be interpreted as including all modifications, equivalents or replacements of the embodiments included in the ideas and technical scope disclosed herein. At the same time, in the case where it is determined that the detailed description of the relevant known technology may unnecessarily confuse the main points of the present disclosure in the process of describing the embodiments, the detailed description will be omitted.

[0032] Terms such as "first", "second", etc. may be used to describe various elements, but these elements should not be limited by these terms. These terms are only used for the purpose of distinguishing one element from another.

[0033] Unless otherwise specified, singular expressions include plural expressions. It should be understood that terms such as "comprising" or "consisting of" are used herein to indicate the presence of features, numbers, steps, operations, elements, components or combinations thereof, without excluding the presence or possibility of adding one or more other features, numbers, steps, operations, elements, components or combinations thereof.

[0034] Terms such as "module", "unit", "part", etc. are used to refer to elements that perform at least one function or operation, and such elements may be implemented as hardware or software or a combination of hardware and software. In addition, except when it is necessary to implement each of multiple "modules", "units", "parts", etc. in a single hardware, the components may be integrated in at least one module or chip and may be implemented in at least one processor (not shown).

[0035] Hereinafter, the embodiments will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily make and use the embodiments. However, the present disclosure can be embodied in many different forms and should not be construed as being limited to the embodiments herein. In the accompanying drawings, for clarity of description, parts not related to the description are omitted, and the same reference numerals represent the same elements throughout the specification.

[0036] The embodiments of the present disclosure mainly describe the embodiments of encrypting the biometric information of the user, but the embodiments are not limited thereto. That is, the technical concept of the present disclosure can be applied to various user information, such as the biometric information of the user and other identity information (resident registration number, identity (ID) etc.), password, pattern etc. Various encryption methods can be applied to the encryption according to the present disclosure.

[0037] Figure 1 is a system diagram showing an authentication system according to an embodiment.

[0038] like Figure 1 As shown, the system includes an electronic device 100 , a first server 200 , a second server 300 and a third server 400 .

[0039] The electronic device 100 is a device for obtaining biometric information of a user. For example, the electronic device 100 may be a device for fingerprint recognition, a device for iris recognition, a device for palm vein recognition, a device for facial recognition, etc. In addition, the electronic device 100 may be various devices capable of generating or obtaining various information of a user (such as biometric information).

[0040] The electronic device 100 may obtain the first biometric information of the user and generate the first encrypted data using the obtained first biometric information and the first encryption key. In the same manner, the electronic device 100 may obtain the second biometric information of the user and generate the third encrypted data using the obtained second biometric information and the first encryption key. That is, the first encrypted data and the third encrypted data may be data encrypted using the same first encryption key. The first encrypted data may be the encrypted data necessary to register the encrypted data for the user's biometric information to the second server 300 and the third server 400, and the third encrypted data may be the encrypted data for the second biometric information input by the user when wishing to use the service provided by the third server 400.

[0041] According to various embodiments, the electronic device 100 may transmit a message authentication code (MAC) for verifying the validity of the third encrypted data to the first server 200 together with the third encrypted data.

[0042] The first server 200 is a device for receiving data for encryption from the electronic device 100 and communicating with the second server 300 and the third server 400 to register biometric information. The first server 200 may be various types of servers or electronic devices. For example, the first server 200 may be a user terminal device. Alternatively, the first server 200 may be a server authorized to access the user. For example, the first server 200 may be a personal cloud server authorized to access the user, etc. Alternatively, the first server 200 may be a separate server accessible by the same administrator as the administrator of the third server 400. Alternatively, the first server 200 may be a server managed independently of the electronic device 100, the second server 300, and the third server 400. The first server 200 may be various servers independent of the electronic device 100, the second server 300, and the third server 400.

[0043] The first server 200 may generate the second encrypted data using the first encrypted data and the second encryption key received from the electronic device 100. The first server 200 may also obtain the first user identity information. The first user identity information may be information for identifying a user for the second encrypted data and may be received from, for example, a user terminal device.

[0044] In the same manner, the first server 200 may generate fourth encrypted data using the third encrypted data and the second encryption key, and may obtain second user identity information corresponding to the fourth encrypted data. The first server 200 may send the second encrypted data and the first user identity information to the second server 300, or may send at least one of the fourth encrypted data and the second user identity information to the second server 300. When the first server 200 receives the message verification code from the electronic device 100, the first server 200 may send the fourth encrypted data, the second user identity information, and the message verification code to the third server 400.

[0045] The second server 300 is a device for authenticating encrypted biometric information necessary for providing services by the third server 400. The second server 300 may be a server for authenticating the authenticity of encrypted biometric information, and may be a server managed by a national agency or various certification agencies.

[0046] The second server 300 may receive the second encrypted data and the first user identity information from the first server 200, and may identify whether the received second encrypted data is encrypted data corresponding to the first user identity information. If the received second encrypted data is encrypted data corresponding to the first user identity information, the second server 300 may generate authentication information for authenticating the second encrypted data and the first user identity information, and may send it to the first server 200. In this example, the generated authentication information may include a signature value of the second server 300.

[0047] When receiving a control signal requesting encrypted data in order to use a service from the third server 400, the second server 300 may transmit the encrypted data to the third server 400, or transmit the encrypted data and user identity information corresponding to the encrypted data to the third server 400. Specifically, upon receiving authentication information from the third server 400, the second server 300 may transmit first user identity information corresponding to the received authentication information and second encrypted data to the third server 400. In this example, as described below, the authentication information transmitted from the third server 400 to the second server 300 may be authentication information received from the first server 200.

[0048] The third server 400 is configured to register the encrypted biometric information and the user identity information for using the service. When the third server 400 receives the encrypted biometric information for using the service, the third server 400 can provide the service. That is, the third server 400 can be a server managed by a service provider for providing the service.

[0049] The third server 400 may receive authentication information and biometric information release request information from the first server 200. If the received authentication information is valid, the third server 400 may send the authentication information and biometric information release request information to the second server 300. The third server 400 may receive encrypted data and user identity information corresponding to the authentication information sent to the second server 300. Specifically, the third server 400 may receive the second encrypted data and user identity information from the second server 300 and store them.

[0050] Upon receiving the encrypted data and service information for using the service from the first server 200, the third server 400 may identify the validity of the received encrypted data. If the received encrypted data is valid, the third server 400 may perform the service corresponding to the service information. The service information may be related to the type of service to be provided by the third server 400, and may be, for example, a service for paying a specific amount of money, a service for identifying user information, etc.

[0051] For example, when receiving the fourth encrypted data and the service information from the first server 200, the third server 400 may identify whether there is encrypted data (e.g., second encrypted data) corresponding to the fourth encrypted data. If the encrypted data corresponding to the fourth encrypted data exists, the third server 400 may perform the service corresponding to the service information.

[0052] In another embodiment, the third server 400 may receive encrypted data, user identity information corresponding to the encrypted data, and service information from the first server 200. For example, the third server 400 may receive fourth encrypted data, second user identity information corresponding to the fourth encrypted data, and service information from the first server 200. In this example, the third server 400 may obtain user identity information (e.g., first user identity information) corresponding to the second user identity information, and may identify whether the encrypted data (e.g., second encrypted data) corresponding to the obtained user identity information is encrypted data corresponding to the fourth encrypted data. If the encrypted data (e.g., second encrypted data) corresponding to the obtained user identity information is encrypted data corresponding to the fourth encrypted data, the third server 400 may perform a service corresponding to the service information.

[0053] In this example, the third server 400 may not decrypt the second encrypted data and the fourth encrypted data, and may identify whether the first biometric information corresponding to the second encrypted data and the second biometric information corresponding to the fourth encrypted data are biometric information of the same user.

[0054] On the other hand, each of the electronic device 100, the first server 200, the second server 300, and the third server 400 may be implemented as an independent single server, but is not limited thereto. For example, at least two of the electronic device 100, the first server 200, the second server 300, and the third server 400 may be implemented as one server as needed. As another example, each of the electronic device 100, the first server 200, the second server 300, and the third server 400 may include a cloud server or a plurality of distributed servers.

[0055] Figure 2 is a system diagram briefly illustrating the operation of the system according to the embodiment.

[0056] The system including the electronic device 100, the first server 200, the second server 300, and the third server 400 can provide services through: 1) a biometric information registration process 500; 2) a biometric information registration process 600 for using services; and 3) a user authentication process 700 for providing services. The biometric information registration process 500 can be performed by the electronic device 100, the first server 200, and the second server 300, and the biometric information registration process 600 for using services can be performed by the first server 200, the second server 300, and the third server 400, and the user authentication process 700 for providing services can be performed by the electronic device 100, the first server 200, and the third server 400.

[0057] In the following, reference will be made to Figure 2 , Figures 5 to 7 The operations of 1) the biometric information registration process 500, 2) the biometric information registration process 600 for using a service, and 3) the user authentication process 700 for providing a service are described in detail.

[0058] In the biometric information registration process 500 , the electronic device 100 may obtain first biometric information, and may obtain first encrypted data, wherein the first biometric information is encrypted using the obtained first biometric information and a first encryption key.

[0059] The first server 200 may receive the first encrypted data from the electronic device 100, and may obtain second encrypted data in which the first encrypted data is further encrypted by using the first encrypted data and the second encryption key and obtain first user identity information corresponding to the first biometric information.

[0060] The second server 300 may receive the second encrypted data from the first server 200, obtain authentication information based on the second encrypted data, and transmit the obtained authentication information to the first server 200. In this example, the authentication information may include a signature value of the second server 300.

[0061] The first server 200 may register the authentication information received from the second server as authentication information for biometric information. The first server 200 may register the authentication information received from the second server 300 as authentication information associated with the first biometric information corresponding to the first encrypted data or the first biometric information corresponding to the second encrypted data.

[0062] The first user identity information may be obtained by the first server 200. For example, the first user identity information may be obtained by a method in which the user directly registers with the first server 200.

[0063] like Figure 5As shown, a biometric information registration process 500 that associates the electronic device 100, the first server 200, and the second server 300 with each other may be operated.

[0064] In operation S510, the electronic device 100 may obtain the first biometric information. Specifically, when the electronic device 100 receives a control signal for receiving the user's biometric information, the electronic device 100 may request the user to input the user's biometric information. For example, if the electronic device 100 includes a display, the electronic device 100 may display a guide screen for guiding the biometric information input. As another example, if the electronic device 100 includes a speaker, the electronic device 100 may output an audio signal requesting the input of biometric information.

[0065] The control signal for inputting the biometric information may be received from various devices. For example, the control signal for inputting the biometric information may be received from the first server 200 or the second server 300. In this example, the control signal may also include information related to a device for transmitting encrypted data in which the biometric information is encrypted. As another example, the control signal for inputting the biometric information may be generated within the electronic device 100. In this example, the electronic device 100 may receive information related to a device for transmitting encrypted data in which the biometric information is encrypted.

[0066] In operation S520, the electronic device 100 may use the first encryption key to obtain first encrypted data in which the first biometric information is encrypted. At this time, the first encrypted data may be encrypted by a public key encryption method, such as an ElGamal encryption scheme, a Diffie-Hellman encryption scheme, an elliptic curve encryption scheme, etc. The encryption scheme using the first encryption key is characterized in that in an encryption scheme using a second encryption key (which will be described later), the first encryption key may be considered as plaintext in encryption using the second encryption key.

[0067] The first encryption key can be regarded as plain text in an encryption method using the second encryption key, and in addition to the above encryption method, the first encrypted data can also be generated by various encryption methods in which the first encryption key can be regarded as plain text in an encryption method using the second encryption key. As described below, the first encrypted data can be formed by encrypting the first biometric information by a public key encryption method such as an ElGamal encryption scheme, a Diffie-Hellman encryption scheme, an elliptic curve encryption scheme, etc., so as to identify that the first biometric information and the second biometric information are biometric information for the same user in the user authentication process 700 for providing a service.

[0068] In operation S530 , the electronic device 100 may transmit the obtained first encrypted data to the first server 200 .

[0069] In operation S540, the first server 200 may obtain second encrypted data, wherein the first encrypted data is encrypted using a second encryption key and the first user identity information for the first biometric information. In this example, the second encrypted data may be data encrypted by, for example, inner product encryption (IPE). The encryption method of IPE has the feature of checking the identity of the input biometric information without decrypting the encrypted data. In addition to the encryption method by the above-mentioned IPE, various encryption methods with homomorphic characteristics that can perform operations in a state where the data is encrypted may be used to generate the second encrypted data. At the same time, the first server 200 may receive the first user identity information for the first encrypted data. For example, the first server 200 may receive the first user identity information directly from the user. As another example, the first server 200 may obtain the first user identity information based on the biometric information pre-registered by an external authentication agency and the user identity information matching the pre-registered biometric information. At this time, if the first server 200 is a server with access rights to a user terminal device or a user, the first server 200 may store only one item of user identity information and store at least one encrypted data corresponding to the stored user identity information. However, if the first server 200 is a server that is not authorized to access the user, the first server 200 may match and store at least one encrypted data for each of the at least one item of user identity information.

[0070] In operation S550 , the first server 200 may transmit the second encrypted data and the first user identity information to the second server 300 .

[0071] In operation S560, the second server 300 may identify whether the first user identity information is the user identity information corresponding to the second encrypted data. In one embodiment, the second server 300 may send a request to the user terminal device corresponding to the first user identity information to confirm whether the first user identity information is the user identity information corresponding to the second encrypted data. For example, the second server 300 may send a text message to the user terminal device to inquire whether the first user identity information is the user identity information corresponding to the second encrypted data, and if the verification code input from the user is the same as the verification code sent by the second server 300, the second server 300 may identify that the first user identity information is the user identity information corresponding to the second encrypted data. In another embodiment, whether the second encrypted data corresponds to the first user identity information can be identified by a face-to-face method.

[0072] If the first user identity information is the user identity information corresponding to the second encrypted data, the second server 300 may obtain authentication information corresponding to the second encrypted data and the first user identity information in operation S570. At this time, the obtained authentication information may include unique signature value information of the second server 300.

[0073] In operation S580, the second server 300 may transmit the obtained authentication information to the first server 200. In operation S590, the first server 200 may register the obtained authentication information.

[0074] Through the above process, the system can encrypt the user's biometric information, match the encrypted user biometric information with the user identity information, obtain authentication information from the second server 300 indicating that the encrypted biometric information and the user identity information are legal information for using the service, and store the authentication information in the first server 200.

[0075] In the biometric information registration process 600 for using the service, the first server 200 may receive a user command for registering biometric information for using the service of the third server 400. At this time, the user command for registering biometric information for using the service may be received from the third server 400 or other external devices. The first server 200 may transmit the authentication information and the biometric information release request information registered in the biometric information registration process 500 to the third server 400.

[0076] The third server 400 may identify the validity of the received authentication information. Specifically, the third server 400 may identify the validity of the authentication information by identifying whether the signature value of the authentication information is the signature value of the second server 300. If the authentication information received from the first server 200 is valid, the third server 400 may send the authentication information and the biometric information release request information to the second server 300.

[0077] The second server 300 may transmit the second encrypted data corresponding to the authentication information and the first user identity information to the third server 400 based on the authentication information and the biometric information release request information received from the third server 400 .

[0078] The third server 400 may register the second encrypted data and the first user identity information received from the second server 300. Specifically, the third server 400 may match and register the second encrypted data and the first user identity information received from the second server 300.

[0079] like Figure 6 As shown, in the biometric information registration process 600 for using the service, the first server 200, the second server 300, and the third server 400 may operate in association with each other.

[0080] First, in operation S610, the first server 200 may receive a biometric information registration command for using a service. For example, the biometric information registration command for using a service may be received from the third server 400 or a user terminal device.

[0081] In operation S620 , the first server 200 may transmit authentication information and biometric information release request information to the third server 400 in response to a biometric information registration command for using a service.

[0082] In operation S630, the third server 400 may identify the validity of the authentication information received from the first server 200. Specifically, the third server 400 may identify the validity of the authentication information by identifying whether a signature value included in the authentication information is a signature value of the second server 300.

[0083] If the authentication information is valid, the third server 400 may transmit the authentication information and biometric information release request information to the second server 300 in operation S640.

[0084] In operation S650, the second server 300 may obtain the second encrypted data and the first user identity information corresponding to the received authentication information. In operation S660, the second server 300 may send the obtained second encrypted data and the first user identity information to the third server 400, and in operation S670, the third server 400 may register the second encrypted data and the first user identity information obtained from the second server 300. The third server 400 may match the second encrypted data and the first user identity information obtained from the second server 300 and store them.

[0085] In the user authentication process 700 for providing a service, when a command for inputting biometric information to execute a service is input, the electronic device 100 can obtain second biometric information, use the first encryption key and the obtained second biometric information to obtain third encrypted data in which the second biometric information is encrypted, and send it to the first server 200.

[0086] The first server 200 may obtain fourth encrypted data in which the third encrypted data is further encrypted using the second encryption key and the third encrypted data received from the electronic device 100 , and may transmit it to the third server 400 .

[0087] The electronic device 100 may send the message authentication code together with the third encrypted data to the first server 200. The first server 200 may send the message authentication code received from the electronic device 100 together with the fourth encrypted data to the third server 400, and the third server 400 may identify the validity of the fourth encrypted data based on the message authentication code received from the first server 200.

[0088] If the fourth encrypted data is valid, the third server 400 may identify whether encrypted data corresponding to the fourth encrypted data received from the first server 200 exists in the third server 400 .

[0089] In one embodiment, the third server 400 may compare a plurality of encrypted data stored in the third server 400 with the fourth encrypted data to identify whether there is encrypted data including biometric information corresponding to the second biometric information.

[0090] In another embodiment, when the first server 200 matches the fourth encrypted data with the second user identity information corresponding to the second biometric information and sends it to the third server 400, the third server 400 can obtain the user identity information that is the same as the second user identity information from the multiple user identity information stored in the third server 400, and compare the fourth encrypted data and the encrypted data matched with the user identity information that is the same as the second user identity information to identify whether the biometric information corresponding to the user identity information that is the same as the second user identity information is the same as the second biometric information.

[0091] The third server 400 can identify whether there is encrypted data corresponding to the fourth encrypted data without decrypting the fourth encrypted data and the plurality of encrypted data stored in the third server 400. By identifying whether there is encrypted data corresponding to the fourth encrypted data, the third server 400 can perform a service without information related to the second biometric information.

[0092] If encrypted data corresponding to the fourth encrypted data exists in the third server 400, the third server 400 may perform a service corresponding to a command for inputting biometric information in order to perform the service.

[0093] like Figure 7 As shown, a user authentication process 700 in which the electronic device 100, the first server 200, and the third server 400 are associated with each other in order to provide a service may be operated.

[0094] First, in operation S710, the electronic device 100 may obtain the second biometric information. Specifically, when the electronic device 100 receives a control signal for receiving the user's biometric information, the electronic device 100 may request the user to input the user's biometric information. For example, if the electronic device 100 includes a display, the electronic device 100 may display a guide screen for guiding the biometric information input. As another example, if the electronic device 100 includes a speaker, the electronic device 100 may output an audio signal requesting the biometric information input. The control signal for inputting the biometric information may be received from various devices. For example, the control signal for inputting the biometric information may be received from the first server 200 or the third server 400. In this case, the control signal may also include information related to a device for sending encrypted data in which the biometric information is encrypted. As another example, a biometric information input signal may be generated within the electronic device 100. In this case, the electronic device 100 may receive information related to a device for sending encrypted data in which the biometric information is encrypted.

[0095] In operation S720, the electronic device 100 may obtain third encrypted data in which the second biometric information is encrypted using the first encryption key. At this time, the third encrypted data may be encrypted using a public key encryption method, such as the ElGamal encryption scheme, the Diffie-Hellman encryption scheme, the elliptic curve encryption scheme, etc.

[0096] In operation S730 , the electronic device 100 may transmit the obtained third encrypted data to the first server 200 .

[0097] In operation S740, the first server 200 may obtain fourth encrypted data in which the third encrypted data is further encrypted using the second encryption key. At this time, the fourth encrypted data may be data encrypted by, for example, an inner product encryption method (IPE).

[0098] The first server 200 may obtain the second user identity information for the second biometric information and the fourth encrypted data. At this time, the first server 200 may directly receive the second user identity information for the fourth encrypted data from the user, or may obtain the second user identity information based on the biometric information pre-registered in the external authentication agency and the user identity information matching the previously registered biometric information.

[0099] In operation S750, the first server 200 may transmit the fourth encrypted data to the third server 400. When the fourth encrypted data and the second user identity information are obtained together, the first server 200 may transmit the fourth encrypted data and the second user identity information to the third server 400.

[0100] In operation S760, the third server 400 may identify whether there is encrypted data corresponding to the fourth encrypted data. Specifically, the third server 400 may compare each of the plurality of encrypted data stored in the third server 400 with the fourth encrypted data to identify a user corresponding to the same encrypted data as a user corresponding to the fourth encrypted data. At this time, the third server 400 may identify whether there is encrypted data corresponding to the fourth encrypted data without decrypting each of the plurality of encrypted data stored and the fourth encrypted data.

[0101] When the fourth encrypted data and the second user identity information are received together, the third server 400 can identify the user identity information that is the same as the second user identity information. If the first biometric information and the second biometric information are biometric information of the same user, the user identity information that is the same as the second user identity information will be the first user identity. In this case, the third server 400 can identify whether the fourth encrypted data and the second encrypted data are encrypted data for the same user. As described above, the third server 400 can identify whether the fourth encrypted data and the second encrypted data are encrypted data for the same user without decrypting the fourth encrypted data and the second encrypted data.

[0102] In operation S770, if there is encrypted data corresponding to the fourth encrypted data, the third server 400 may perform a service. Specifically, the third server 400 may perform a service corresponding to the fourth encrypted data. In one embodiment, the service may be an offline payment service. If there is encrypted data corresponding to the fourth encrypted data, the third server 400 may perform a payment service for a product corresponding to the fourth encrypted data. In another embodiment, the service may be a vehicle rental service. If there is encrypted data corresponding to the fourth encrypted data, the third server 400 may provide a service for forwarding a vehicle control authorization corresponding to the fourth encrypted data to the user.

[0103] In the following, reference will be made to FIG. 3A to FIG. 3D The operation of each of the electronic device 100, the first server 200, and the third server 400 is described in more detail.

[0104] FIG. 3A to FIG. 3D is a block diagram briefly illustrating an electronic device, a first server, a second server, and a third server according to an embodiment.

[0105] Figure 3A 1 is a block diagram briefly showing the configuration of the electronic device 100 according to the embodiment. Figure 3A As shown, the electronic device 100 includes a sensor 110 , a communicator 120 , a memory 130 , and a processor 140 .

[0106] The sensor 110 is configured to obtain various biometric information of the user. In order to obtain various biometric information of the user, the sensor 110 may include various configurations. For example, the sensor 110 may be at least one of a fingerprint recognition sensor for recognizing a user's fingerprint, an iris recognition sensor for recognizing a user's iris, a camera for recognizing a user's face, a microphone for recognizing a user's voice, and the like.

[0107] The communicator 120 is configured to communicate with the first server 200 and the third server 400. In this case, the communicator 120 communicating with the first server 200 and the third server 400 may include communicating via a third device (eg, a repeater, a hub, an access point, a server, a gateway, etc.).

[0108] The communicator 120 may include a configuration using various communication methods. For example, the communicator 120 may communicate with various external devices using wireless communication or wired communication. Wireless communication may include cellular communication using any one or any combination of: for example, long term evolution (LTE), LTE advanced (LTE-A), code division multiple access (CDMA), wideband CDMA (WCDMA) and universal mobile telecommunications system (UMTS), wireless broadband (WiBro) or global system for mobile communications (GSM), etc. According to an embodiment, wireless communication may include any one or any combination of: for example, wireless fidelity (Wi-Fi), Bluetooth, Bluetooth low energy (BLE), Zigbee, near field communication (NFC), magnetic secure transmission, radio frequency (RF) or body area network (BAN). Wired communication may include: for example, universal serial bus (USB), high definition multimedia interface (HDMI), recommended standard 232 (RS-232), power line communication or plain old telephone service (POTS). The network on which wireless or wired communication is performed may include any one or any combination of a telecommunication network, such as a computer network (e.g., a local area network (LAN) or a wide area network (WAN)), the Internet, or a telephone network. One of the various communication methods described above may be applied to the communicator 220 of the first server 200, the communicator 320 of the second server 300, and the communicator 420 of the third server 400.

[0109] As described above, the communicator 120 may transmit the encrypted data in which the biometric information is encrypted using the first encryption key to at least one of the first server 200 and the third server 400 .

[0110] The memory 130 is configured to store commands or data related to at least one element of the electronic device 100. The memory 130 may include at least one of an embedded memory or a removable memory. The memory embedded in the electronic device 100 may be a volatile memory, such as a dynamic random access memory (DRAM), a static random access memory (SRAM), a synchronous dynamic random access memory (SDRAM); or a non-volatile memory, such as a one-time programmable ROM (OTPROM), a programmable ROM (PROM), an erasable programmable ROM (EPROM), an electrically erasable programmable ROM (EEPROM), a mask ROM, a flash ROM, a flash memory, a hard disk drive, or a solid state drive (SSD). The external memory may include a flash drive, such as a compact flash (CF), a secure digital (SD), a micro SD, a mini SD, an extreme digital (xD), a multimedia card (MMC), a memory stick, etc. The external memory may be functionally or physically connected to the electronic device 100 through various interfaces. The memory 210 of the first server 200, the memory 310 of the second server 300, and the memory 410 of the third server 400 may be applied together with one of the various communication methods described above.

[0111] The memory 130 may store an encryption key for storing the obtained biometric information or for encrypting the biometric information.

[0112] The processor 140 is electrically connected to the memory 130 to control the overall operation and function of the electronic device 100. Specifically, the processor 140 may include one or more of a central processing unit, an application processor, and a communication processor (CP). The processor 140 may also be implemented as at least one of an application specific integrated circuit (ASIC), an embedded processor, a microprocessor, a hardware control logic, a hardware finite state machine (FSM), a digital signal processor (DSP), etc. Although not shown, the processor 140 may also include an interface, such as a bus for communicating with each configuration. The processor 140 may, for example, drive an operating system or an application program to control a plurality of hardware or software components connected to the processor 140, and may perform various data processing and operations. The processor 140 may be implemented as, for example, a system on a chip (SoC). According to one embodiment, the processor 140 may also include a graphics processing unit (GPU) and / or an image signal processor. The processor 140 may load and process commands or data received from at least one of the other components (e.g., a non-volatile memory) into a volatile memory, and store the resulting data in the non-volatile memory. The processor 230 of the first server 200 , the processor 330 of the second server 300 , and the processor 430 of the third server 400 may also be applied with one of the various communication methods described above.

[0113] The processor 140 may convert the information sensed by the sensor 110 into biometric information suitable for encryption. In the biometric information registration process 500, the processor 140 may send the first encrypted data sensed by the sensor 110 to the first server 200 through the communicator 120. As described above, the first encrypted data may be encrypted by a public key encryption scheme, such as an ElGamal encryption scheme, a Diffie-Hellman encryption scheme, an elliptic curve encryption scheme, and the like.

[0114] In the user authentication process 700 for providing a service, the processor 140 may transmit the second biometric information sensed by the sensor 110 to the first server 200 through the communicator 120. As described above, the third encrypted data may be encrypted by a public key encryption method, such as the ElGamal encryption scheme, the Diffie-Hellman encryption scheme, the elliptic curve encryption scheme, and the like.

[0115] In the user authentication process 700 for providing a service, the processor 140 may send the user verification code together with the third encrypted data to the first server 200 through the communicator 120. For example, the processor 140 may encrypt the second biometric information using the key of the electronic device 100 to obtain the message verification code. Here, the encryption key used to obtain the message verification code may be the first encryption key, but is not limited thereto, and may be a separate encryption key. That is, the first server 200 does not have an encryption key capable of decrypting the message verification code, and therefore cannot decrypt the message verification code. Therefore, the processor 140 can prevent the third encrypted data from being forged or changed using the message verification code at the first server 200.

[0116] Figure 3B 2 is a block diagram briefly showing the configuration of the first server 200 according to the embodiment. Figure 3B As shown, the first server 200 includes a memory 210 , a communicator 220 , and a processor 230 .

[0117] The memory 210 is configured to store instructions or data related to at least one other component of the first server 200. In addition, the memory 210 may store the first encrypted data or the third encrypted data received from the electronic device 100. The memory 210 may also store authenticated encrypted data and user identity information from the second server 300.

[0118] The communicator 220 is configured to communicate with the electronic device 100, the second server 300, and the third server 400. As described above, the communicator 220 can receive the first encrypted data or the third encrypted data from the electronic device 100, send the second encrypted data and the first user identity information to the second server 300, send the fourth encrypted data to the third server 400, or, if necessary, send the message verification code received from the electronic device 100 to the third server 400.

[0119] The processor 230 is electrically connected to the memory 210 for controlling the overall operation and functions of the first server 200 .

[0120] Specifically, in the biometric information registration process 500, the processor 230 may encrypt the first encrypted data received from the electronic device 100 into the second encrypted data using the second encryption key. Here, the second encrypted data may be data encrypted by, for example, an inner product encryption method (IPE). The encryption using IPE has such an effect that the third server 400 can check whether the first biometric information corresponding to the second encrypted data and the second biometric information corresponding to the fourth encrypted data are the same user biometric information without decrypting the second encrypted data and the fourth encrypted data. The processor 230 may also receive the first user identity information for the first encrypted data. The processor 230 may match and store the second encrypted data and the first user identity information, and send the matched second encrypted data and the first user identity information to the second server 300. The processor 230 may receive authentication information for the second encrypted data and the first user identity information from the second server 300. The received authentication information may be used in the biometric information registration process 600 for using the service.

[0121] In the biometric information registration process 600 for using the service, if a user command for registering biometric information for using the service is input, the processor 230 may transmit the received authentication information to the third server 400. At this time, the processor 230 may transmit biometric information release request information to the third server 400 together with the authentication information, the biometric information release request information requesting the third server 400 to register the biometric information corresponding to the authentication information.

[0122] In the user authentication process 700 for providing a service, the processor 230 may encrypt the third encrypted data received from the electronic device 100 into fourth encrypted data using the second encryption key. At this time, as described above, the fourth encrypted data may be data encrypted by inner product encryption (IPE). Through the encryption process using the above-mentioned second encryption key, even if the data is attacked by an external attack, only the encrypted data of the third server 400 may be exposed, and the user's biometric information may be protected.

[0123] The processor 230 may send the obtained fourth encrypted data to the third server 400. At this time, if necessary, the processor 230 may send the fourth encrypted data and the second user identity information corresponding to the fourth encrypted data to the third server 400. In addition, after receiving the message verification code from the electronic device 100, the processor 230 may send the fourth encrypted data, the second user identity information corresponding to the fourth encrypted data, and the message verification code received from the electronic device 100 to the third server 400. When the message verification code is sent to the third server 400, the processor 230 may encrypt the received message verification code and send the encrypted message verification code to the third server 400. By using the message verification code, the system can prevent the first server 200 from maliciously forging or altering the encrypted data. Specifically, when the first server 200 also sends encrypted data other than the third encrypted data received from the electronic device 100 to the third server 400, the third server 400 can recognize that the encrypted data for the message verification code and the encrypted data received from the first server 200 are different data.

[0124] By the first server 200 encrypting the first encrypted data and the third encrypted data using the second encryption key, there is an effect that even if one of the electronic device 100 or the third server 400 is hacked, the user's biometric information can be protected.

[0125] Figure 3C is a block diagram briefly showing the configuration of the second server 300 according to the embodiment. Figure 3C As shown, the second server 300 includes a memory 310 , a communicator 320 , and a processor 330 .

[0126] The memory 310 is configured to store instructions or data related to at least one other component of the second server 300. The memory 310 may match and store the second encrypted data received from the first server 200 and the first user identity information.

[0127] The communicator 320 is configured to communicate with the first server 200 and the third server 400. As described above, the communicator 320 may receive the second encrypted data and the first user identity information from the first server 200, or may transmit the second encrypted data and the first user identity information to the third server 400.

[0128] The processor 330 is electrically connected to the memory 310 for controlling the overall operation and functions of the second server 300 .

[0129] Specifically, in the biometric information registration process 500, the processor 330 can obtain the second encrypted data and the first user identity information from the first server 200. At this time, the processor 330 can identify whether the first user identity information is the user identity information corresponding to the second encrypted data. The method of identifying whether the first user identity information is the user identity information corresponding to the second encrypted data can vary. For example, the processor 330 can send a request to the user terminal device corresponding to the first user identity information to confirm whether the first user identity information is the user identity information corresponding to the second encrypted data. When a message indicating that the first user identity information corresponds to the second encrypted data is received from the user terminal device, the processor 330 can identify that the first user identity information is the user identity information corresponding to the second encrypted data. However, the embodiment is not limited to the above embodiment, and whether the second encrypted data corresponds to the first user identity information can be identified, for example, in a face-to-face manner.

[0130] If the second encrypted data is identified as the encrypted data corresponding to the first user identity information, the processor 330 may obtain authentication information for the second encrypted data and the first user identity information. At this time, the authentication information may include the signature value of the second server 300 and the index information for authenticating the second encrypted data and the first user identity information. Specifically, the authentication information may include the signature value of the second server 300 and the index information for authenticating the second encrypted data and the first user identity information, but not the second encrypted data and the first user identity information. However, the embodiment is not limited thereto. That is, according to various embodiments, the authentication information may include the second encrypted data and the first user identity information. If the authentication information includes the second encrypted data and the first user identity information, the processor 330 may encrypt the second encrypted data and the first user identity information to obtain the authentication information. At the same time, as described below, the signature value of the second server 300 may be information for confirming whether the authentication information received by the third server 400 is received from the second server 300 without forgery or alteration. The processor 330 may send the obtained authentication information to the first server 200.

[0131] In the biometric information registration process 600 for using the service, the processor 330 may receive authentication information from the third server 400 and obtain the encrypted data and user identity information corresponding to the received authentication information. If there is no forgery or alteration due to an external attack, the processor 330 may obtain the second encrypted data and the first user identity information using the encrypted data and the user identity information corresponding to the authentication information. In one embodiment, if the authentication information includes only index information for the encrypted data and the user identity information, the processor 330 may obtain the second encrypted data and the first user identity information from the index information for the encrypted data and the user identity information. In another embodiment, if the authentication information is data in which the encrypted data and the user identity information are encrypted, the processor 330 may decrypt the authentication information to obtain the second encrypted data and the first user identity information.

[0132] Figure 3D 4 is a block diagram briefly showing the configuration of the third server 400 according to the embodiment. Figure 3D As shown, the third server 400 includes a memory 410 , a communicator 420 , and a processor 430 .

[0133] The memory 410 is configured to store instructions or data related to at least one other component of the third server 400. The memory 410 may store the authentication information and the biometric information release request information received from the first server 200. The memory 410 may store the second encrypted data and the first user identity information received from the second server 300. In addition, the memory 410 may store at least one of the fourth encrypted data and the second user identity information received from the first server 200.

[0134] The communicator 420 is configured to communicate with the first server 200 and the second server 300. As described above, the communicator 220 may receive authentication information and biometric information release request information from the first server 200, receive the second encrypted data and the first user identity information from the second server 300, or receive at least one of the fourth encrypted data and the second user identity information from the first server 200.

[0135] The processor 430 is electrically connected to the memory 410 for controlling the overall operation and functions of the third server 400 .

[0136] In the biometric information registration process 600 for using a service, when a user command for registering biometric information for using a service is input, the processor 430 may receive authentication information and biometric information release request information from the first server 200 .

[0137] The processor 430 may identify whether the received authentication information is valid. Specifically, the processor 430 may identify the validity of the authentication information by identifying whether the signature value included in the authentication information is the signature value of the second server 300. If the signature value included in the authentication information is generated at the second server 300, the processor 430 may identify that the authentication information is valid. If the signature value included in the authentication information is not generated at the second server 300, the processor 430 may identify that the authentication information is invalid.

[0138] If the authentication information is valid, the processor 430 may send the authentication information and the biometric information release request information received from the first server 200 to the second server 300. The processor 430 may receive the second encrypted data and the first user identity information corresponding to the authentication information from the second server, and store the received second encrypted data and the first user identity information in the memory 410. Through the above process, the third server 400 may obtain only the second encrypted data without receiving the first biometric information and the first encrypted data, and may improve security.

[0139] In the user authentication process 700 for providing a service, when a command for executing a service is input, the processor 430 may receive fourth encrypted data from the first server 200. The processor 430 may identify whether encrypted data corresponding to the fourth encrypted data exists in the memory 410.

[0140] In one embodiment, the processor 430 may compare each of the plurality of encrypted data stored in the memory 410 with the fourth encrypted data to identify whether the encrypted data corresponding to the fourth encrypted data is stored in the memory 410 .

[0141] In another embodiment, the processor 430 may receive the fourth encrypted data and the second user identity information corresponding to the fourth encrypted data from the first server 200. The processor 430 may obtain the user identity information that is the same as the second user identity information. If the first biometric information and the second biometric information are biometric information of the same user, the second user identity information will be the same as the first user identity information. The processor 430 may identify whether the fourth encrypted data corresponding to the second user identity information and the second encrypted data corresponding to the first user identity information (which is the same as the second user identity information) are encrypted data for the biometric information of the same user.

[0142] The processor 430 may compare the fourth encrypted data with the plurality of encrypted data stored in the memory 410 without decryption. For example, the processor 430 may compare the fourth encrypted data and the second encrypted data stored in the memory 410 without decryption. As described above, the second encrypted data and the fourth encrypted data have a homomorphic property that can operate in a state where the data is encrypted, and in the encryption method using the second encryption key, the first encryption key used to obtain the first encrypted data and the third encrypted data can be considered as plain text. Therefore, the processor 430 may compare the first biometric information corresponding to the second encrypted data with the second biometric information corresponding to the fourth encrypted data using the features of the first encryption method and the features of the second encryption method described above without decryption.

[0143] When encrypted data corresponding to the fourth encrypted data exists in the memory 410, the processor 430 may perform a service.

[0144] Various functions performed by the electronic device 100, the first server 200, the second server 300, and the third server 400 may be performed by various modules. Figure 4 As shown, the electronic device 100 can obtain the user's biometric information through the biometric information acquisition module, and obtain the first encrypted data that encrypts the biometric information through the first encryption module. The first server 200 can encrypt the first encrypted data into second encrypted data through the second encryption module. The second server 300 can generate authentication information for the second encrypted data and the first user identity information through the authentication information generation module. The third server 400 can obtain encrypted data including the same biometric information as the second biometric information corresponding to the fourth encrypted data through the biometric information comparison module.

[0145] Figure 4 The various modules shown may be implemented in the form of software modules or at least one hardware chip. Figure 4 When the various modules shown are implemented as software modules (or program modules including instructions), the software modules may be stored in a computer-readable non-transitory computer-readable medium. In this case, the software modules may be provided by an operating system (OS) or provided by a given application. Alternatively, some software modules may be provided by the OS, while some of the remaining software modules may be provided by a predetermined application.

[0146] Fig. 8A and Figure 8B is a sequence diagram illustrating a biometric information registration process, a biometric information registration process for using a service, and a user authentication process for providing a service according to various embodiments.

[0147] Specifically, according to various embodiments, at least two of the electronic device 100, the first server 200, the second server 300, and the third server 400 may be implemented as one device. Fig. 8A and Figure 8B , the electronic device 100 and the first server 200 can be implemented with one electronic device 150. In this case, the electronic device 150 can be implemented as, for example, a user terminal device. The electronic device 150 can be an electronic device that operates in a normal mode and a safe mode. Specifically, the safe mode may represent a data processing architecture that ensures security, and the normal mode may represent a general data processing architecture. The normal mode may operate in a normal operating system (OS), or the safe mode may operate in a safe OS, and the normal mode and the safe mode may operate independently of each other. Therefore, even if an external attack occurs due to a hacker attack in the normal mode, the data in the safe mode can be protected.

[0148] Fig. 8A is a sequence diagram illustrating the operation of the system in the biometric information registration process 500.

[0149] First, in operation S811, the electronic device 150 may obtain first biometric information in a normal mode. In operation S812, the electronic device 150 may obtain first encrypted data in which the first biometric information is encrypted using a first encryption key in the normal mode.

[0150] In operation S813, the electronic device 150 may obtain the second encrypted data and the first user identity information for the first biometric information, in which the first encrypted data is encrypted using the second encryption key in the security mode. In operation S814, the electronic device 150 may send the first user identity information and the second encrypted data obtained in the security mode to the second server 300.

[0151] In operation S815, the second server 300 may identify whether the first user identity information received from the electronic device 150 is the user identity information corresponding to the second encrypted data, and if the first user identity information is the user identity information corresponding to the second encrypted data, then in operation S816, authentication information corresponding to the second encrypted data and the first user identity information may be obtained. The second server 300 may send the obtained authentication information to the electronic device 150 (S817). That is, the operation of the second server 300 is similar to that of the first user identity information received from the electronic device 150. Figure 5 Same as described in .

[0152] In operation S818, the electronic device 150 may register the authentication information received from the first server 200. Specifically, the electronic device 150 may register the authentication information received from the first server 200 in a security mode.

[0153] Figure 8B is a sequence diagram illustrating the operation of the system in the user authentication process 700.

[0154] In operation S821, the electronic device 150 may obtain the second biometric information in the normal mode. In operation S822, the electronic device 150 may obtain third encrypted data in which the second biometric information is encrypted using the first encryption key in the normal mode.

[0155] In operation S823, the electronic device 150 may obtain fourth encrypted data in which the third encrypted data is encrypted using the second encryption key in the security mode. In addition, the electronic device 150 may obtain the fourth encrypted data and the second user identity information for the second biometric information.

[0156] In operation S824, the electronic device 150 may transmit the fourth encrypted data obtained in the security mode to the third server 400. In addition, the electronic device 150 may transmit the second user identity information for the second biometric information together with the fourth encrypted data.

[0157] In operation S825, the third server 400 may identify whether there is encrypted data corresponding to the obtained fourth encrypted data, and if there is encrypted data corresponding to the fourth encrypted data, the third server 400 may perform the service in operation S826. That is, the operation of the third server 400 is similar to that of the server 400. Figure 7 Same as described in .

[0158] Fig. 8A and Figure 8B An embodiment in which the electronic device 100 and the first server 200 are implemented as a single device has been described, but the embodiment is not limited thereto. For example, if necessary, the first server 200 and the third server 400 may be implemented as a single device, or the electronic device 100 and the third server 400 may be implemented as a single device, or the electronic device 100 and the second server 300 may be implemented as a single device.

[0159] Fig. 9 is a flowchart illustrating a method for controlling a third server according to an embodiment.

[0160] First, in operation S910, when a user command for registering biometric information in order to use a service is input, the third server 400 may receive authentication information and biometric information release request information from the first server 200.

[0161] In operation S920, if the received authentication information is valid, the third server 400 may transmit the authentication information and biometric information release request information to the second server 300. As described above, the third server 400 may identify the validity of the authentication information by identifying whether the signature value of the authentication information is the signature value of the second server 300.

[0162] In operation S930, the third server 400 may receive and store the second encrypted data and the first user identity information corresponding to the second encrypted data from the second server 300. As described above, the third server 400 may store the second encrypted data and the first user identity information, and if the encrypted data corresponding to the stored data is input, the third server 400 may perform the service.

[0163] The term "unit" or "module" used herein includes a unit configured in hardware, software or firmware, and can be used interchangeably with terms such as logic, logic block, component or circuit. A "unit" or "module" can be an integral part or a minimum unit or part thereof that performs one or more functions. For example, a module can be configured as an application specific integrated circuit (ASIC).

[0164] Embodiments may be implemented as software including instructions stored in a machine-readable storage medium readable by a machine (e.g., a computer). A device may call instructions from a storage medium, and the device may operate according to the called instructions, the device including an electronic device (e.g., electronic device 100). When the instructions are executed by a processor, the processor may use other components directly or under the control of the processor to perform functions corresponding to the instructions. The instructions may include code generated or executed by a compiler or interpreter. The machine-readable storage medium may be provided in the form of a non-transitory storage medium. Here, "non-transitory" means that the storage medium does not include a signal and is tangible, but does not distinguish whether the data is permanently or temporarily stored in the storage medium.

[0165] According to one or more embodiments, the methods disclosed herein may be provided in a computer program product. The computer program product may be traded as a commodity between a seller and a buyer. The computer program product may be distributed in the form of a machine-readable storage medium (e.g., a CD-ROM) or through an application store (e.g., Playstore). TM ) Online distribution. In the case of online distribution, at least part of the computer program product may be temporarily or at least temporarily stored in a storage medium, such as a server of the manufacturer, a server in an application store, or a memory in a relay server.

[0166] Each component (e.g., module or program) according to one or more embodiments may be composed of one or more objects, and some of the subcomponents of the above-mentioned subcomponents may be omitted, or other subcomponents may be included in an embodiment. Alternatively or additionally, some components (e.g., modules or programs) may be integrated into one entity to perform the same or similar functions as those performed by each corresponding component before integration. According to an embodiment, the operations performed by modules, programs or other components may be performed sequentially in a parallel, repeated or tentative manner, or at least some operations may be performed in a different order, omitted, or other operations may be added.

Claims

1. A method for controlling a system for performing a service using biometric information, the system comprising an electronic device, a first server and a second server, the method comprising: Obtaining first biological information by the electronic device; The electronic device obtains first encrypted data obtained by encrypting the first biometric information using a first encryption key and the obtained first biometric information, and sends the obtained first encrypted data to the first server; The first server obtains first user identity information corresponding to the first biometric information and obtains second encrypted data further encrypted by using a second encryption key and the first encrypted data received from the electronic device, and sends the first user identity information and the second encrypted data to the second server; The second server identifies whether the second encrypted data received from the first server and the first user identity information corresponding to the first biometric information match by sending a request for confirming whether the first user identity information corresponds to the second encrypted data to a user terminal corresponding to the first user identity information, and stores the matched second encrypted data and the first user identity information; The second server obtains authentication information based on the matched second encrypted data and the first user identity information, and sends the authentication information to the first server; as well as The authentication information is registered by the first server as authentication information for the first biometric information.

2. The method of claim 1, wherein: The system further includes a third server providing a service, and the method includes: Based on the first server receiving a biometric information registration command for using a service of the third server, the first server sends the authentication information and the biometric information release request information to the third server; Checking, by the third server, the validity of the received authentication information; Based on the received authentication information being valid, the third server sends the authentication information and the biometric information release request information to the second server; The second server sends the second encrypted data corresponding to the authentication information and the first user identity information to the third server; and The second encrypted data and the first user identification information received from the second server are registered by the third server.

3. The method of claim 2, comprising: obtaining second biological information by the electronic device; Based on input of a command for inputting biometric information for executing a service, the electronic device obtains third encrypted data encrypted with the second biometric information using the obtained second biometric information and the first encryption key, and transmits the third encrypted data to the first server; The first server uses the second encryption key and the third encrypted data received from the electronic device to obtain fourth encrypted data that is further encrypted by the third encrypted data, and sends the fourth encrypted data to the third server; The third server identifies whether there is encrypted data corresponding to the received fourth encrypted data in the third server; as well as Based on the existence of the encrypted data corresponding to the fourth encrypted data in the third server, a service corresponding to a command for inputting biometric information in order to execute a service is executed by the third server.

4. The method of claim 3, wherein: Identifying whether encrypted data corresponding to the fourth encrypted data exists in the third server includes: The third server compares a plurality of encrypted data stored in the third server with the received fourth encrypted data, and identifies whether there is encrypted data including biometric information corresponding to the second biometric information.

5. The method of claim 3, wherein: Obtaining the fourth encrypted data by the first server and sending the fourth encrypted data to the third server includes: The fourth encrypted data is matched with the second user identification information corresponding to the second biometric information, and the fourth encrypted data and the second user identification information are sent to the third server.

6. The method of claim 5, wherein: Identifying whether encrypted data corresponding to the fourth encrypted data exists in the third server includes: obtaining, by the third server, user identity information identical to the second user identity information from among a plurality of user identity information stored in the third server; and By comparing the fourth encrypted data and the encrypted data matching the user identification information identical to the second user identification information, it is identified whether the second biometric information is identical to the biometric information corresponding to the user identification information identical to the second user identification information.

7. The method of claim 3, wherein: Obtaining the third encrypted data and sending the third encrypted data to the first server includes: sending a message verification code together with the third encrypted data to the first server, Obtaining the fourth encrypted data and sending the fourth encrypted data to the third server includes: sending the message verification code received from the electronic device together with the fourth encrypted data to the third server, The method includes: the third server identifying the validity of the fourth encrypted data based on the message authentication code received from the first server.

8. The method of claim 3, wherein: Identifying whether the encrypted data exists in the third server includes identifying encrypted data corresponding to the fourth encrypted data without decrypting the fourth encrypted data and a plurality of encrypted data stored in the third server.

9. The method of claim 1, wherein: The first user identity information is obtained by the first server from the user.

10. The method of claim 2, wherein: The second server obtaining the authentication information and sending the authentication information to the first server includes: obtaining authentication information corresponding to the matched second encrypted data and the first user identity information based on the signature value of the second server; Checking, by the third server, the validity of the received authentication information includes: identifying the validity of the authentication information based on the signature value.

11. Systems that use biometric information to perform services, including: an electronic device configured to obtain first biometric information, and obtain first encrypted data in which the first biometric information is encrypted by using a first encryption key and the obtained first biometric information; A first server is configured to receive the first encrypted data from the electronic device, obtain first user identity information corresponding to the first biometric information, and obtain second encrypted data further encrypted by using the first encrypted data and a second encryption key; as well as a second server configured to receive the first user identity information and the second encrypted data from the first server, obtain authentication information based on the second encrypted data, and send the authentication information to the first server; wherein the second server is further configured to identify whether the second encrypted data received from the first server and the first user identity information corresponding to the first biometric information match by sending a request for confirming whether the first user identity information corresponds to the second encrypted data to a user terminal corresponding to the first user identity information, and store the matched second encrypted data and the first user identity information, and obtain authentication information based on the matched second encrypted data and the first user identity information, and send the authentication information to the first server; as well as The first server is further configured to register the authentication information received from the second server as authentication information for the first biometric information.

12. The system of claim 11, wherein: The system also includes a third server providing services, The first server is configured to: receive a biometric information registration command for using a service of the third server, and send the authentication information and biometric information release request information to the third server; The third server is configured to: check the validity of the received authentication information, and based on the received authentication information being valid, send the authentication information and the biometric information release request information to the second server; The second server is configured to: send the second encrypted data corresponding to the authentication information received from the third server and the first user identity information to the third server; as well as The third server is configured to register the second encrypted data and the first user identity information received from the second server.

13. The system of claim 12, wherein: the electronic device being configured to obtain second biometric information based on input of a command for inputting biometric information in order to execute a service, obtain third encrypted data in which the second biometric information is encrypted by using the first encryption key and the obtained second biometric information, and transmit the third encrypted data to the first server, The first server is configured to obtain fourth encrypted data further encrypted with the third encrypted data by using the second encryption key and the third encrypted data received from the electronic device, and send the fourth encrypted data to the third server, The third server is configured to: identify whether there is encrypted data corresponding to the received fourth encrypted data in the third server, and Based on the existence of the encrypted data corresponding to the fourth encrypted data in the third server, a service corresponding to the command for inputting biometric information in order to execute a service is executed.

14. The system of claim 13, wherein: The third server is configured to compare a plurality of encrypted data stored in the third server with the received fourth encrypted data, and identify whether there is encrypted data including biometric information corresponding to the second biometric information.

15. A control method for a third server, the method comprising: receiving authentication information and biometric information release request information from a first server based on a user command input for registering biometric information for using a service, wherein the authentication information is obtained by a second server based on matched second encrypted data and first user identity information and sent to the first server for registration; Based on the received authentication information being valid, sending the authentication information and the biometric information release request information to a second server; and receiving second encrypted data encrypted in the first server and first user identity information corresponding to the second encrypted data from the second server, and storing the second encrypted data and the first user identity information, wherein the second server determines that the second encrypted data and the first user identity information corresponding to the second encrypted data match by sending a request to a user terminal corresponding to the first user identity information to confirm whether the first user identity information corresponds to the second encrypted data.

Images