System for authenticating user in plurality of electronic devices by using biometric information and control method therefor

Abstract

Provided are an electronic device and a control method for a system for authenticating the electronic device by using biometric information. The control method includes the steps in which: a first electronic device generates biometric signature information on the basis of first biometric information for authentication of an electronic device and identification information of the first electronic device; the first electronic device transmits the generated biometric signature information to a server and broadcasts the identification information of the first electronic device; a second electronic device receives the broadcasted identification information and transmits the received identification information to the server; the server transmits biometric signature information corresponding to the identification information to the second electronic device; the second electronic device generates biometric hash information on the basis of the biometric signature information and second biometric information obtained by the second electronic device and transmits the generated biometric hash information and the identification information to the server; and the server authenticates the second electronic device on the basis of the biometric hash information and the identification information.

Description

System for authenticating users in multiple electronic devices using biometric information and control method thereof

[0001] The present disclosure relates to a control method of a system for authenticating a user in another electronic device using an electronic device and biometric information, and more particularly, to an authentication method for authenticating an electronic device using biometric information to perform synchronization with another electronic device, and a control method of a system for authenticating a user in another electronic device using biometric information.

[0002] Nowadays, users possess a diverse range of electronic devices. Globally, it's estimated that each individual uses 3.6 devices. Against this backdrop, demand is growing for user scenarios that provide services across various electronic devices through connectivity.

[0003] From the user's perspective in this multi-device environment, the most challenging part is synchronizing user information across multiple electronic devices. The most common approach involves logging into individual services on each device and synchronizing via a cloud service. However, the process is complex and requires significant network resources, a significant drawback. The same problem arises not only when personal electronic devices are linked to shared electronic devices used by multiple users, but also when personal electronic devices are linked to shared electronic devices.

[0004] According to one embodiment of the present disclosure, a control method of a system for authenticating an electronic device using biometric information includes: a step in which a first electronic device generates biometric signature information based on first biometric information for authentication of the electronic device and identification information of the first electronic device; a step in which the first electronic device transmits the generated biometric signature information to a server and broadcasts identification information of the first electronic device; a step in which the second electronic device receives the broadcasted identification information and transmits the received identification information to the server; a step in which the server transmits the biometric signature information corresponding to the identification information to the second electronic device; a step in which the second electronic device generates biometric hash information based on second biometric information acquired by the second electronic device and the biometric signature information, and transmits the generated biometric hash information and the identification information to the server; and a step in which the server authenticates the second electronic device based on the biometric hash information and the identification information.

[0005] The biometric signature information may include identification information of the first electronic device, an algorithm for generating biometric hash information, information related to a first public key for authenticating the biometric signature information, and information related to a second public key for synchronization between electronic devices.

[0006] The method may include: generating a verification code including biometric hash information for comparison with biometric hash information generated by the second electronic device; and transmitting the generated verification code together with the biometric signature information to the server.

[0007] The second electronic device may include a step of verifying the integrity of the received identification information based on information related to the second public key included in the biometric signature information received from the server.

[0008] After the integrity of the received identification information is verified and the second biometric information is obtained, the second electronic device may include a step of identifying whether the type of the second biometric information and the type of the first biometric information included in the biometric signature information are the same.

[0009] The step of transmitting the generated biometric hash information and the identification information to the server may include a step of, when the type of the second biometric information and the type of the first biometric information are the same, generating the biometric hash information based on the algorithm included in the second biometric information and the biometric signature information by the second electronic device; and a step of transmitting the generated biometric hash information and the identification information to the server by the second electronic device.

[0010] The above-described authentication step may include a step of the server identifying whether the acquired biometric hash information matches the biometric hash information generated by the second electronic device by running a verification code corresponding to the identification information; and a step of authenticating the second electronic device based on the identification result.

[0011] The method may include: when the second electronic device is authenticated, transmitting a signal for a synchronization request to the first electronic device; and performing synchronization with the second electronic device in response to the signal.

[0012] The above server is composed of blockchain nodes based on a distributed ledger, and the identification information and the biometric signature information can be registered in a paired form in the distributed ledger on the blockchain.

[0013] Meanwhile, according to one embodiment of the present disclosure, an electronic device includes a communication interface; a memory; and a processor. When biometric signature information is generated based on first biometric information for authentication of an electronic device by another electronic device and identification information of the other electronic device, the processor receives the identification information of the other electronic device from the other electronic device through the communication interface. The processor transmits the received identification information to a server through the communication interface. The processor receives the biometric signature information corresponding to the identification information from the server through the communication interface. When second biometric information is acquired, the processor generates biometric hash information for authenticating the electronic device based on the acquired second biometric information and the biometric signature information. The processor transmits the generated biometric hash information and the identification information to the server through the communication interface.

[0014] The biometric signature information may include identification information of the other electronic device, an algorithm for generating biometric hash information, information related to a first public key for authenticating biometric signature information, and information related to a second public key for synchronization between electronic devices.

[0015] The other electronic device may generate a verification code including biometric hash information for comparison with biometric hash information generated by the electronic device, and transmit the generated verification code together with the biometric signature information to the server.

[0016] The processor can verify the integrity of the received identification information based on information related to the second public key included in the biometric signature information received from the server.

[0017] The processor can identify whether the type of the second biometric information and the type of the first biometric information included in the biometric signature information are the same when the integrity of the received identification information is verified and the second biometric information is obtained.

[0018] The processor may generate the biometric hash information based on the algorithm included in the second biometric information and the biometric signature information, if the type of the second biometric information and the type of the first biometric information are the same, and transmit the generated biometric hash information and the identification information to the server through the communication interface.

[0019] The server can identify whether the biometric hash information obtained by running a verification code corresponding to the identification information matches the biometric hash information generated by the electronic device, and authenticate the electronic device based on the identification result.

[0020] The processor, when the electronic device is authenticated by the server, transmits a signal for a synchronization request to the other electronic device through the communication interface, and the other electronic device can perform synchronization with the electronic device in response to the signal.

[0021] The above server is composed of blockchain nodes based on a distributed ledger, and the identification information and the biometric signature information can be registered in a paired form in the distributed ledger on the blockchain.

[0022] FIG. 1 is a diagram illustrating a system for authenticating an electronic device using biometric information according to one embodiment of the present disclosure;

[0023] FIG. 2 is a flowchart illustrating a control method of a first electronic device for transmitting biometric signature information and broadcasting identification information according to one embodiment of the present disclosure;

[0024] FIG. 3 is a flowchart for explaining a method of controlling a server for authenticating a second electronic device according to one embodiment of the present disclosure;

[0025] FIG. 4 is a flowchart for explaining a control method of a second electronic device for performing synchronization with a first electronic device according to one embodiment of the present disclosure;

[0026] FIG. 5 is a sequence diagram for explaining a control method of a system for synchronizing a first electronic device and a second electronic device by authenticating the second electronic device through biometric information according to one embodiment of the present disclosure;

[0027] FIG. 6 is a block diagram illustrating a configuration of an electronic device according to one embodiment of the present disclosure, and

[0028] FIG. 7 is a block diagram illustrating a configuration of a server according to one embodiment of the present disclosure.

[0029] The present embodiments may be modified and have various embodiments. Specific embodiments are illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the scope to specific embodiments, but should be understood to encompass various modifications, equivalents, and / or alternatives of the embodiments of the present disclosure. In connection with the description of the drawings, similar reference numerals may be used for similar components.

[0030] In describing the present disclosure, if it is determined that a specific description of a related known function or configuration may unnecessarily obscure the gist of the present disclosure, a detailed description thereof will be omitted.

[0031] Additionally, the following embodiments may be modified in various other forms, and the scope of the technical concepts of the present disclosure is not limited to the following embodiments. Rather, these embodiments are provided to further faithfully and completely convey the technical concepts of the present disclosure to those skilled in the art.

[0032] The terminology used in this disclosure is for the purpose of describing specific embodiments only and is not intended to limit the scope of the rights. Singular expressions include plural expressions unless the context clearly dictates otherwise.

[0033] In this disclosure, expressions such as “has,” “can have,” “includes,” or “may include” indicate the presence of a corresponding feature (e.g., a component such as a number, function, operation, or part), and do not exclude the presence of additional features.

[0034] In this disclosure, expressions such as “A or B,” “at least one of A and / or B,” or “one or more of A or / and B” can include all possible combinations of the listed items. For example, “A or B,” “at least one of A and B,” or “at least one of A or B” can all refer to (1) including at least one A, (2) including at least one B, or (3) including both at least one A and at least one B.

[0035] The expressions “first,” “second,” “first,” or “second,” etc., used in this disclosure can describe various components, regardless of order and / or importance, and are only used to distinguish one component from another, but do not limit the components.

[0036] When it is said that a component (e.g., a first component) is “(operatively or communicatively) coupled with / to” or “connected to” another component (e.g., a second component), it should be understood that said component may be directly coupled to said other component, or may be coupled via another component (e.g., a third component).

[0037] On the other hand, when it is said that a component (e.g., a first component) is "directly connected" or "directly connected" to another component (e.g., a second component), it can be understood that no other component (e.g., a third component) exists between said component and said other component.

[0038] The expression "configured to" as used in the present disclosure may be used interchangeably with, for example, "suitable for," "having the capacity to," "designed to," "adapted to," "made to," or "capable of." The term "configured to" may not necessarily mean only "specifically designed to" in terms of hardware.

[0039] Instead, in some contexts, the phrase "a device configured to" may mean that the device, in conjunction with other devices or components, is "capable of" performing A, B, and C. For example, the phrase "a processor configured (or set) to perform A, B, and C" may refer to a dedicated processor (e.g., an embedded processor) for performing those operations, or a general-purpose processor (e.g., a CPU or application processor) that can perform those operations by executing one or more software programs stored in a memory device.

[0040] In the embodiments, a 'module' or 'part' performs at least one function or operation, and may be implemented as hardware or software, or as a combination of hardware and software. Furthermore, a plurality of 'modules' or 'parts' may be integrated into at least one module and implemented as at least one processor, except for a 'module' or 'part' that needs to be implemented as a specific hardware.

[0041] Meanwhile, the various elements and areas in the drawings are schematically drawn. Therefore, the technical concept of the present invention is not limited by the relative sizes or spacing depicted in the attached drawings.

[0042] Hereinafter, with reference to the attached drawings, embodiments according to the present disclosure will be described in detail so that a person having ordinary knowledge in the technical field to which the present disclosure pertains can easily implement the present disclosure.

[0043]

[0044] FIG. 1 is a diagram illustrating a system for authenticating an electronic device using biometric information according to one embodiment of the present disclosure. The system (10) may include a first electronic device (100), a server (200), and a second electronic device (300). At this time, the first electronic device (100) (or main electronic device) and the second electronic device (300) (or sub-electronic device) may be implemented as user terminals such as a smart phone, a tablet PC, a laptop PC, etc., but this is only one embodiment, and may be implemented as home appliances such as a smart TV, a refrigerator, a washing machine, etc. In addition, although FIG. 1 illustrates one second electronic device (300), this is only one embodiment, and a plurality of second electronic devices (300) may be implemented. Furthermore, it goes without saying that a plurality of servers (200) may also be implemented.

[0045] The first electronic device (100) generates biometric signature information (or biometric signature generation information) (①). At this time, the biometric signature information is information for generating biometric hash information for authenticating an electronic device used by the same user as the user of the first electronic device (100), and may include identification information of the first electronic device (100), an algorithm for generating biometric hash information, information related to a first public key for authenticating biometric signature information, and information related to a second public key for synchronization between electronic devices.

[0046] The first electronic device (100) transmits biometric signature information to the server (200) (②). At this time, the first electronic device (100) may also transmit a verification code (or smart contract code). The verification code is a code for verifying the biometric hash information generated by the second electronic device (300), and may include biometric hash information for comparison with the biometric hash information generated by the second electronic device (300).

[0047] Additionally, the first electronic device (100) may broadcast identification information of the first electronic device (100) to transmit the identification information of the first electronic device (100) to a second electronic device (300) located around the first electronic device (100).

[0048] The server (200) registers biometric signature information (③). At this time, the server (200) may be composed of blockchain nodes based on a distributed ledger. Furthermore, the server (200) may register the identification information and biometric signature information of the first electronic device (100) in a paired form in the distributed ledger on the blockchain.

[0049] Meanwhile, the second electronic device (300) can receive the identification information of the first electronic device (100) broadcasted by the first electronic device (100).

[0050] Then, the second electronic device (300) requests biometric signature information from the server (200) (④). Specifically, the second electronic device (300) can transmit a request signal containing identification information of the first electronic device (100) received by the first electronic device (100) to the server (200).

[0051] The server (200) can transmit biometric signature information corresponding to the identification information of the first electronic device (100) included in the request signal to the second electronic device (300).

[0052] The second electronic device (300) generates biometric hash information using the second biometric information acquired by the second electronic device (300) and the biometric signature information received from the server (200) (⑤). At this time, the biometric hash information is information generated by a biometric hash algorithm included in the biometric signature information, and may also be referred to as a biometric hash value.

[0053] The second electronic device (300) transmits biometric hash information to the server (200) (⑥).

[0054] The server (200) authenticates the second electronic device (300) based on the biometric hash information received by the second electronic device (300) (⑦). Specifically, the server (200) can authenticate the second electronic device (300) by comparing the biometric hash information received from the second electronic device (300) with the biometric hash information generated by the verification code. Then, the server (200) can transmit the authentication result to the second electronic device (300).

[0055] The second electronic device (300) performs synchronization with the first electronic device (100) based on the authentication result (⑧). Specifically, when the second electronic device (300) is authenticated, the second electronic device (300) can transmit synchronization information of the second electronic device (300) to the first electronic device (100) using a synchronization public key, and the first electronic device (100) and the second electronic device (300) can perform synchronization through a synchronization protocol. In this case, synchronization may mean a task of exchanging information (or data) between electronic devices to update the information stored in the electronic devices with the latest information.

[0056] According to the embodiments of the present disclosure as described above, biometric authentication of the same user can be performed on multiple electronic devices and the electronic devices can be synchronized based on the results without storing the biometric information itself, which is sensitive information of the user, within the server.

[0057] By authenticating and synchronizing electronic devices using biometric information, the user experience of using multiple electronic devices equipped with biometric sensors located around the user can be significantly improved.

[0058] In addition, unlike existing authentication servers, a server (200) utilizing a distributed ledger can be built to provide a fair authentication environment to platform participants.

[0059] In addition, reset can be easily performed by generating new biometric signature information in the user's first electronic device (100) and registering the new biometric signature information in the distributed ledger.

[0060]

[0061] FIG. 2 is a flowchart illustrating a control method of a first electronic device for transmitting biometric signature information and broadcasting identification information according to one embodiment of the present disclosure.

[0062] The first electronic device (100) can acquire first biometric information (S210). Specifically, the first electronic device (100) can acquire the first biometric information through various biometric sensors (e.g., a fingerprint sensor, a camera, etc.). In this case, the first electronic device (100) can acquire at least one of various biometric information, such as fingerprint information, iris information, facial information, voice information, etc.

[0063] The first electronic device (100) can generate identification information of the first electronic device (100) (S220). Specifically, the first electronic device (100) can obtain identification information using at least one of the device ID of the first electronic device, an International Mobile Equipment Identity (IMEI)-based value, a generation value within the trust zone, and a timestamp indicating the generation time. In particular, the first electronic device (100) can generate identification information using different values ​​each time it is re-registered or depending on the type of service. In this case, the generated identification information of the first electronic device (100) can be used during the synchronization process.

[0064] The first electronic device (100) can generate biometric hash information (S230). Specifically, the first electronic device (100) can define an algorithm for generating unique biometric hash information from the input first biometric information, and can generate the biometric hash information. First, the first electronic device (100) can determine the value of the relative coordinates, not the absolute value, of the input first biometric information, and define an acceptable range for the difference therebetween. If the input first biometric information exists within the acceptable range, the first electronic device (100) can define a basic template value of the first biometric information using a combination of binary values. In addition, the first electronic device (100) can define an operation for generating a seed value through a binary operation using the basic template value together with the biometric identification information of the first electronic device (100) generated in step S220. In addition, the first electronic device (100) can define a combination of hash operations to which the seed value will be applied, the number of overlapping operations and the method, and salt values. The first electronic device (100) can store the process defined as described above as an algorithm for generating biometric hash information. Furthermore, the first electronic device (100) can apply the first biometric information acquired in step S210 to this algorithm to generate biometric hash information.

[0065] The first electronic device (100) can generate a verification code (S240). At this time, the first electronic device (100) can generate a verification code to be used in the electronic device authentication process to be performed on the server (200) (or biometric authentication server). At this time, the verification code can perform the function of receiving biometric hash information received from the second electronic device (300) as an input value and comparing it with the biometric hash information included in the verification code. At this time, the verification code is code executed within the distributed ledger of the server (200), and thus, even if it is disclosed, there is no problem in the verification process.

[0066] The first electronic device (100) can generate a key pair (S250). At this time, the first electronic device (10) can generate information related to a first public key for biometric signature authentication and information related to a second public key for synchronization between electronic devices. At this time, the first public key can be used to verify the integrity of biometric information, and the second public key can be used to verify the integrity of communication with the first electronic device (100).

[0067] At this time, the first and second public keys can determine the type of public key algorithm, hash type, salt value, etc. This determined information can be included within the biometric signature information. Furthermore, the private key of the first and second public keys can be stored in a location that is inaccessible to external parties, such as a trust zone.

[0068] The first electronic device (100) can generate biometric signature information using the information generated in steps S210 to S250 (S260). At this time, the biometric signature information may include identification information of the first electronic device (100), an algorithm for generating biometric hash information, information related to the first public key (type of biometric authentication public key algorithm and related information, and the first public key value), information related to the second public key (type of synchronization public key algorithm and related information, and the second public key value), and a signature value obtained by signing a hash of the above information with a biometric authentication private key.

[0069] The first electronic device (100) can transmit biometric signature information to the server (200) and broadcast identification information of the first electronic device (100) (S270). At this time, the first electronic device (100) can transmit biometric signature information to the server (200) through a first communication interface (e.g., a long-distance communication interface such as an LTE module, a 5G module, a Wi-Fi module, etc.) and can broadcast identification information of the first electronic device (100) through a second communication interface (e.g., a short-distance communication interface such as a Bluetooth module, a Wi-Fi Direct module, a UWB module, etc.), but is not limited thereto.

[0070]

[0071] FIG. 3 is a flowchart illustrating a method for controlling a server for authenticating a second electronic device according to one embodiment of the present disclosure.

[0072] The server (200) can receive biometric signature information from the first electronic device (100) (S310). At this time, the server (200) can receive biometric signature information from the first electronic device (100), and can receive a verification code simultaneously with or before or after receiving the biometric signature information.

[0073] The server (200) can register biometric signature information (S320). Specifically, the server (200) may be comprised of blockchain nodes based on a distributed ledger. At this time, the server (200) can pair the biometric signature information with identification information and register it in a distributed ledger on the blockchain. While the biometric signature information itself is public information that can be exposed, registering the biometric signature information on the blockchain can prevent the possibility of forgery or falsification.

[0074] The server (200) may receive a signal requesting biometric signature information from the second electronic device (300) (S330). At this time, the signal requesting biometric signature information may include identification information of the first electronic device (100) broadcast by the first electronic device (100).

[0075] The server (200) can transmit biometric signature information to the second electronic device (300) (S340). Specifically, the server (200) can search for biometric signature information paired with the identification information of the first electronic device (100) and transmit the searched biometric signature information to the second electronic device (300).

[0076] The server (200) can receive biometric hash information and identification information from the second electronic device (300) (S350). Specifically, when the second electronic device (300) generates biometric hash information using biometric signature information, the server (200) can receive identification information of the first electronic device (100) together with the biometric hash information from the second electronic device (300).

[0077] The server (200) can obtain biometric hash information based on the verification code and identification information (S360). The server (200) can obtain biometric hash information by inputting the identification information received from the second electronic device (300) into the verification code received from the first electronic device (100).

[0078] The server (200) can authenticate the second electronic device (300) based on the biometric hash information obtained based on the verification code and identification information and the biometric hash information received from the second electronic device (300) (S370). Specifically, the server (200) can compare the obtained biometric hash information with the biometric hash information received from the second electronic device (300). If the obtained biometric hash information matches the biometric hash information received from the second electronic device (300), the server (200) can authenticate the second electronic device (300).

[0079] The server (200) can transmit the authentication result to the second electronic device (300) (S380). That is, the server (200) can transmit the authentication result, including the authentication success or failure result, to the second electronic device (300).

[0080]

[0081] FIG. 4 is a flowchart illustrating a method of controlling a second electronic device to perform synchronization with a first electronic device according to one embodiment of the present disclosure.

[0082] The second electronic device (300) can receive the identification information of the first electronic device (100) broadcast by the first electronic device (100) (S410). At this time, the second electronic device (300) can receive the identification information of the first electronic device (100) through a short-range communication interface.

[0083] The second electronic device (300) may transmit a signal requesting biometric signature information to the server (200) (S420). At this time, the signal requesting biometric signature information may include identification information of the first electronic device (100).

[0084] The second electronic device (300) can receive biometric signature information from the server (200) (S430). Specifically, the second electronic device (300) can receive biometric signature information corresponding to the identification information of the first electronic device (100) from the server (200).

[0085] The second electronic device (300) can verify the broadcasted identification information using the public key related to synchronization (i.e., the second public key) included in the biometric signature information (S440). Specifically, if there is no biometric signature information corresponding to the identification information of the first electronic device (100) or if the synchronization signature using the second public key does not match, the second electronic device (300) may regard the first electronic device (100) as an attacker and ignore the broadcast of the first electronic device (100). However, if the synchronization signature using the second public key matches, the second electronic device (300) can verify the integrity of the identification information broadcast from the first electronic device (100).

[0086] The second electronic device (300) can generate biometric hash information using biometric signature information and second biometric information (S450). In one embodiment, the second electronic device (300) can obtain the user's second biometric information through a biometric sensor. In one embodiment, the second electronic device (300) can pre-store the user's second biometric information.

[0087] Specifically, the second electronic device (300) can identify whether the type of the second biometric information is the same as the type of the first biometric information included in the biometric signature information. If the type of the second biometric information is the same as the type of the first biometric information, the second electronic device (300) can input the biometric information into an algorithm for generating biometric hash information included in the biometric signature information to generate biometric hash information. At this time, the generated biometric hash information is a value generated through application of a seed value and repetition and combination of a hash function, and can be a secure value that cannot be traced back to the biometric information even if it is disclosed. Meanwhile, although it has been described that the second electronic device (300) generates biometric hash information when the types of the first biometric information and the second biometric information are the same, this is only one embodiment, and the technical idea of ​​the present invention can be applied even if the types of the first biometric information and the second biometric information are different. That is, synchronization with the second electronic device (300) that has only some types of sensors can be possible by multiplexing biometric signature information.

[0088] The second electronic device (300) can transmit biometric hash information and identification information to the server (200) (S460). At this time, the server (200) can authenticate the second electronic device (300) by comparing the biometric hash information received from the second electronic device (300) with the biometric hash information generated by the verification code, as described in steps S360 and S370 of FIG. 3.

[0089] The second electronic device (300) can receive an authentication result from the server (200) (S470).

[0090] The second electronic device (300) can perform synchronization with the first electronic device (100) based on the authentication result received from the server (200) (S480).

[0091] Specifically, when the second electronic device is authenticated, the second electronic device (300) can transmit a signal for a synchronization request to the first electronic device (100), and the first electronic device (100) can perform synchronization with the second electronic device (300) in response to the signal. At this time, synchronization refers to an operation of transmitting and receiving data between the first electronic device (100) and the second electronic device (300) to update them with the latest information, and information such as mail, contacts, photos, and calendars can be updated through the synchronization process.

[0092]

[0093] FIG. 5 is a sequence diagram illustrating a control method of a system for synchronizing a first electronic device and a second electronic device by authenticating the second electronic device through biometric information according to one embodiment of the present disclosure.

[0094] The first electronic device (100) can obtain first biometric information and identification information (S505). Specifically, the first electronic device (100) can obtain first biometric information through a biometric sensor, and can obtain identification information based on information about the first electronic device (100) (e.g., device ID, IMEI (International Mobile Equipment Identity)-based value, creation value within the trust zone, timestamp of creation time, etc.).

[0095] The first electronic device (100) may generate biometric signature information based on biometric information and identification information (S510). At this time, the biometric signature information does not directly include the user's biometric information, but may include information for future biometric authentication and synchronization with the second electronic device (300). Specifically, the biometric signature information may include identification information of the first electronic device (100), an algorithm for generating biometric hash information, information related to a first public key for authenticating the biometric signature information, and information related to a second public key for synchronization between electronic devices. In addition, the first electronic device (100) may generate a verification code for verifying the biometric hash information in addition to the biometric signature.

[0096] The first electronic device (100) can broadcast identification information (S515). At this time, the first electronic device (100) can broadcast the identification information via a short-range communication interface.

[0097] Additionally, the first electronic device (100) can transmit biometric signature information to the server (200) (S520). At this time, the first electronic device (100) can transmit a verification code together with the biometric signature information to the server (200) via a remote communication interface.

[0098] The server (200) can register biometric signature information (S525). At this time, the server (200) may be composed of blockchain nodes based on a distributed ledger, and the biometric signature information and the identification information of the first electronic device (100) may be registered in a paired form on the distributed ledger on the blockchain. In particular, since the server (200) is a blockchain based on a distributed ledger and includes multiple nodes, it is resistant to forgery and tampering, and new nodes can be added or existing nodes can be freely deleted.

[0099] The second electronic device (300) can transmit the identification information of the first electronic device (100) received from the first electronic device (100) to the server (200) (S530).

[0100] The server (200) can transmit biometric signature information corresponding to the identification information of the first electronic device (100) to the second electronic device (300) (S535).

[0101] The second electronic device (300) can generate biometric hash information (S540). Specifically, the second electronic device (300) can input the second biometric information acquired by the second electronic device (300) into an algorithm included in the biometric signature information to generate biometric hash information.

[0102] The second electronic device (300) can transmit biometric hash information to the server (200) (S550).

[0103] The server (200) can authenticate the second electronic device (300) based on the biometric hash information (S555). Specifically, the server (200) can compare the biometric hash information obtained based on the verification code and identification information with the biometric hash information received from the second electronic device (300). If the obtained biometric hash information matches the biometric hash information received from the second electronic device (300), the server (200) can authenticate the second electronic device (300).

[0104] The server (200) can transmit the authentication result to the second electronic device (300) (S560).

[0105] The second electronic device (300) can perform synchronization with the first electronic device (100) based on the authentication result received from the server (200) (S565).

[0106]

[0107] FIG. 6 is a block diagram illustrating a configuration of an electronic device (600) according to an embodiment of the present disclosure. As illustrated in FIG. 6, the electronic device (600) may include a communication interface (610), a memory (620), a sensor (630), a display (640), and a processor (650). However, this is merely an embodiment, and it is to be understood that some components may be removed or added depending on the type of the electronic device (600). For example, the electronic device (600) may include additional components such as a biometric sensor, a display, and the like. Meanwhile, the electronic device (600) illustrated in FIG. 6 may be the second electronic device (300) described with reference to FIGS. 1 to 5 , but this is merely an embodiment, and may be the first electronic device (100).

[0108] The communication interface (610) includes at least one circuit and can communicate with various types of external electronic devices or servers. The communication interface (610) can include at least one of a BLE (Bluetooth Low Energy) module, a Wi-Fi communication module, a cellular communication module, a 3G (third generation) mobile communication module, a 4G (fourth generation) mobile communication module, a 4th generation LTE (Long Term Evolution) communication module, and a 5G (fifth generation) mobile communication module.

[0109] In particular, the communication interface (610) may include two types of communication interfaces. For example, the communication interface (610) may include a long-distance communication interface for performing communication with the server (200) and a short-distance communication interface for performing communication with other electronic devices. As the long-distance communication interface, a Wi-Fi communication module, a cellular communication module, a 3G (third generation) mobile communication module, a 4G (fourth generation) mobile communication module, a 4th generation LTE (Long Term Evolution) communication module, a 5G (fifth generation) mobile communication module, etc. may be included, and as the short-distance communication interface, a BLE (Bluetooth Low Energy) module, a Wi-Fi communication module, a Wi-Fi direct communication module, an UWB communication module, etc. may be included.

[0110] If the electronic device (600) of FIG. 6 is the first electronic device (100), the communication interface (610) can transmit biometric signature information to the server (200). In addition, the communication interface (610) can broadcast identification information of the first electronic device (100).

[0111] When the electronic device (600) of FIG. 6 is the second electronic device (300), the communication interface (610) can receive the identification information of the first electronic device (100) broadcast by the first electronic device (100). In addition, the communication interface (610) can transmit the identification information of the first electronic device (100) to the server (200) and receive biometric signature information corresponding to the identification information of the first electronic device (100) from the server (200). In addition, the communication interface (610) can transmit biometric hash information generated by the biometric signature information to the server (200) and receive an authentication result from the server (200). In addition, the communication interface (610) can transmit and receive data with the first electronic device (100) to perform a synchronization task based on the authentication result.

[0112] The memory (620) may store an operating system (OS) for controlling the overall operation of the components of the electronic device (600) and instructions or data related to the components of the electronic device (100). In particular, the memory (620) may include various modules for performing a function for authenticating the electronic device (600) and performing synchronization with other electronic devices. In particular, when the function for authenticating the electronic device (600) and performing synchronization with other electronic devices is executed, the electronic device (600) may load data for various modules for authenticating the electronic device (600) and performing synchronization with other electronic devices, stored in a non-volatile memory, into a volatile memory. Here, loading means an operation of loading and storing data stored in a non-volatile memory into a volatile memory so that at least one processor (650) can access it.

[0113] Meanwhile, the memory (620) may be implemented as a non-volatile memory (e.g., hard disk, SSD (Solid state drive), flash memory), volatile memory (may also include memory within the processor (650)), etc.

[0114] If the electronic device (600) of FIG. 6 is the first electronic device (100), the memory (620) can store biometric signature information generated based on the first biometric information and identification information. In addition, the memory (620) can store identification information of the first electronic device (100).

[0115] If the electronic device (600) of FIG. 6 is a second electronic device (300), the memory (620) can store identification information of the first electronic device (100). In addition, the memory (620) can store data for synchronization with the first electronic device (100).

[0116] The sensor (630) can obtain various information related to the electronic device (600). In particular, the sensor (630) can include a biometric sensor (e.g., a fingerprint sensor, a camera, a microphone, etc.) for obtaining biometric information of a user using the electronic device (600). The sensor (630) can obtain biometric information such as fingerprint information, facial information, iris information, and voice information through the biometric sensor.

[0117] The display (640) can display various information. In particular, the display (640) can display information related to the authentication process and synchronization process of the electronic device (600). For example, if user authentication is successful, the display (640) can display an indicator indicating successful user authentication, and if the synchronization process is successful, the display (640) can display an indicator indicating successful synchronization.

[0118] Meanwhile, the display (640) may be implemented as an LCD (Liquid Crystal Display Panel), an OLED (Organic Light Emitting Diodes), etc., and the display (220) may also be implemented as a flexible display, a transparent display, etc., depending on the case. However, the display (640) according to the present disclosure is not limited to a specific type.

[0119] The processor (650) can control the electronic device (600) according to at least one instruction stored in the memory (620).

[0120] In particular, the processor (650) may include one or more processors. Specifically, the one or more processors may include one or more of a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), an Accelerated Processing Unit (APU), a Many Integrated Core (MIC), a Digital Signal Processor (DSP), a Neural Processing Unit (NPU), a hardware accelerator, or a machine learning accelerator. The one or more processors may control one or any combination of other components of the electronic device and perform operations related to communication or data processing. The one or more processors may execute one or more programs or instructions stored in a memory. For example, a plurality of processors may perform a method according to an embodiment of the present disclosure by executing one or more instructions stored in a memory.

[0121] When a method according to an embodiment of the present disclosure includes a plurality of operations, the plurality of operations may be performed by one processor or by a plurality of processors. That is, when a first operation, a second operation, and a third operation are performed by a method according to an embodiment, the first operation, the second operation, and the third operation may all be performed by the first processor, or the first operation and the second operation may be performed by the first processor (e.g., a general-purpose processor) and the third operation may be performed by the second processor (e.g., an artificial intelligence-dedicated processor).

[0122] The processor (650) may be implemented as one or more multi-core processors including multiple cores (e.g., homogeneous multi-cores or heterogeneous multi-cores). When the processor (650) is implemented as a multi-core processor, each of the multiple cores included in the multi-core processor may include internal processor memory, such as cache memory or on-chip memory, and a common cache shared by the multiple cores may be included in the multi-core processor. In addition, each of the multiple cores (or some of the multiple cores) included in the multi-core processor may independently read and execute a program instruction for implementing a method according to an embodiment of the present disclosure, or all (or some) of the multiple cores may be linked to read and execute a program instruction for implementing a method according to an embodiment of the present disclosure.

[0123] When a method according to an embodiment of the present disclosure includes a plurality of operations, the plurality of operations may be performed by one core among a plurality of cores included in a multi-core processor, or may be performed by a plurality of cores. For example, when a first operation, a second operation, and a third operation are performed by a method according to an embodiment, the first operation, the second operation, and the third operation may all be performed by a first core included in the multi-core processor, or the first operation and the second operation may be performed by a first core included in the multi-core processor, and the third operation may be performed by a second core included in the multi-core processor.

[0124] In embodiments of the present disclosure, a processor may mean a system on a chip (SoC) in which one or more processors and other electronic components are integrated, a single-core processor, a multi-core processor, or a core included in a single-core processor or a multi-core processor, wherein the core may be implemented as a CPU, a GPU, an APU, a MIC, a DSP, an NPU, a hardware accelerator, or a machine learning accelerator, but embodiments of the present disclosure are not limited thereto.

[0125] Meanwhile, if the electronic device (100) of FIG. 6 is a second electronic device (300), and biometric signature information is generated based on first biometric information for authentication of the electronic device and identification information of the other electronic device by the other electronic device, the processor (650) can receive the identification information of the other electronic device from the other electronic device through the communication interface (610). The processor (650) transmits the identification information received through the communication interface (610) to the server (200). The processor (650) receives biometric signature information corresponding to the identification information from the server (200) through the communication interface (610). When second biometric information is acquired, the processor (650) generates biometric hash information for authenticating the electronic device based on the acquired second biometric information and biometric signature information. The processor (650) transmits the generated biometric hash information and identification information to the server (200) through the communication interface (610).

[0126] In particular, the processor (650) can verify the integrity of the received identification information based on information related to the second public key included in the biometric signature information received from the server (200).

[0127] Additionally, when the integrity of the received identification information is verified and the second biometric information is acquired, the processor (650) can identify whether the type of the second biometric information and the type of the first biometric information included in the biometric signature information are the same.

[0128] If the type of the second biometric information is the same as the type of the first biometric information, the processor (650) may generate biometric hash information based on an algorithm included in the second biometric information and biometric signature information. Furthermore, the processor (650) may transmit the generated biometric hash information and identification information to the server (200) via a communication interface.

[0129] Additionally, when the electronic device is authenticated by the server, the processor (650) can transmit a signal for a synchronization request to another electronic device through the communication interface (610) and perform synchronization with the other electronic device.

[0130] Meanwhile, if the electronic device (100) of FIG. 6 is the first electronic device (100), the processor (650) can obtain first biometric information through a biometric sensor. Furthermore, the processor (650) can generate identification information of the first electronic device (100) based on the information of the electronic device. The processor (650) can generate biometric hash information for authenticating the electronic device (100) based on the first biometric information and the identification information. Furthermore, the processor (650) can generate a verification code for verifying the biometric hash information. Furthermore, the processor (650) can generate a key pair (e.g., a first public key and a second public key). Furthermore, the processor (650) can generate biometric signature information based on the above-described information. Furthermore, the processor (650) can transmit the biometric signature information to the server (200) through the communication interface (610) and broadcast the identification information.

[0131]

[0132] FIG. 7 is a block diagram illustrating the configuration of a server (200) according to one embodiment of the present disclosure. As illustrated in FIG. 7, the server (200) may include a communication interface (710), memory (720), and a processor (730). However, this is merely an example, and it is understood that some components may be removed or added depending on the type of server (200).

[0133] The communication interface (710) includes at least one circuit and can communicate with various types of external electronic devices. The communication interface (610) can include at least one of a BLE (Bluetooth Low Energy) module, a Wi-Fi communication module, a cellular communication module, a 3G (third generation) mobile communication module, a 4G (fourth generation) mobile communication module, a 4th generation LTE (Long Term Evolution) communication module, and a 5G (fifth generation) mobile communication module.

[0134] The communication interface (710) can receive biometric signature information from the first electronic device (100). In addition, the communication interface (710) can receive identification information of the first electronic device (100) from the second electronic device (300). In addition, the communication interface (710) can transmit biometric signature information corresponding to the identification information of the first electronic device (100) to the server (200). In addition, the communication interface (710) can receive biometric hash information generated by the biometric signature information from the second electronic device (300) and transmit an authentication result to the second electronic device (300).

[0135] The memory (720) may store an operating system (OS) for controlling the overall operation of the components of the server (200) and instructions or data related to the components of the server (200). In particular, the memory (720) may include various modules for performing a function for authenticating the second electronic device (300).

[0136] Meanwhile, the memory (620) may be implemented as a non-volatile memory (e.g., hard disk, SSD (Solid state drive), flash memory), volatile memory (may also include memory within the processor (730)), etc.

[0137] In particular, the memory (720) can store the identification information and biometric signature information of the first electronic device (100) in a paired form. In addition, the memory (720) can store a verification code received from the first electronic device (100).

[0138] The processor (730) can control the server (700) according to at least one instruction stored in the memory (720). In particular, the processor (730) may include one or more processors. This has been described in detail in FIG. 6, so a redundant description will be omitted.

[0139] In particular, the processor (730) can receive biometric signature information from the first electronic device (100) through the communication interface (710). Then, the processor (730) can register the biometric signature information. At this time, the processor (730) can register the biometric signature information and the identification information of the first electronic device (100) in a paired form. When a signal requesting biometric signature information is received from the second electronic device (300), the processor (730) can transmit biometric signature information corresponding to the identification information of the first electronic device to the second electronic device (300) through the communication interface (710). The processor (730) can receive biometric hash information and identification information from the second electronic device (300). In addition, the processor (730) may input identification information of the first electronic device (100) into the verification code received from the first electronic device (100) to generate biometric hash information, and may authenticate the second electronic device (300) by comparing the generated biometric hash information with biometric hash information received from the second electronic device (300). In addition, the processor (730) may transmit the authentication result to the second electronic device (300) through the communication interface (710).

[0140]

[0141] Meanwhile, the methods according to various embodiments of the present disclosure may be provided as included in a computer program product. The computer program product may be traded as a product between a seller and a buyer. The computer program product may be distributed in the form of a machine-readable storage medium (e.g., compact disc read only memory (CD-ROM)), or may be distributed online (e.g., downloaded or uploaded) through an application store (e.g., Play Store™) or directly between two user devices (e.g., smartphones). In the case of online distribution, at least a portion of the computer program product (e.g., a downloadable app) may be temporarily stored or temporarily generated in a machine-readable storage medium, such as the memory of a manufacturer's server, an application store's server, or a relay server.

[0142] The methods according to various embodiments of the present disclosure may be implemented as software including commands stored in a machine-readable storage medium that can be read by a machine (e.g., a computer). The device is a device that can call commands stored in the storage medium and operate according to the called commands, and may include an electronic device (e.g., a TV) according to the disclosed embodiments.

[0143] Meanwhile, a device-readable storage medium may be provided in the form of a non-transitory storage medium. Here, the term "non-transitory storage medium" simply means a tangible device that does not contain signals (e.g., electromagnetic waves). This term does not distinguish between cases where data is permanently stored in the storage medium and cases where data is temporarily stored. For example, a "non-transitory storage medium" may include a buffer in which data is temporarily stored.

[0144] When the above instruction is executed by the processor, the processor may perform the function corresponding to the instruction directly or by using other components under the control of the processor. The instruction may include code generated or executed by a compiler or interpreter.

[0145] Although the preferred embodiments of the present disclosure have been illustrated and described above, the present disclosure is not limited to the specific embodiments described above, and various modifications may be made by a person having ordinary skill in the art to which the present disclosure pertains without departing from the gist of the present disclosure as claimed in the claims, and such modifications should not be understood individually from the technical idea or prospect of the present disclosure.

Claims

1. Input section; Department of Communications; processor; and memory; including; The above memory, the above processor, When an event requesting the setting of the first mode that can use the artificial intelligence secretary function of another electronic device occurs, the communication unit is controlled to request identification information including a call word for using the artificial intelligence secretary function from the other electronic device, In response to the above request, the identification information is received from the other electronic device through the communication unit, An electronic device, comprising instructions for controlling the communication unit to transmit a user command to the other electronic device based on the identification information when a user command is received during the first mode operation of the artificial intelligence secretary.

2. In paragraph 1, The above biometric signature information is, A control method comprising: identification information of the first electronic device; an algorithm for generating biometric hash information; information related to a first public key for authenticating biometric signature information; and information related to a second public key for synchronization between electronic devices.

3. In paragraph 2, A step in which the first electronic device generates a verification code including biometric hash information for comparison with biometric hash information generated by the second electronic device; and A control method comprising: a step of the first electronic device transmitting the generated verification code together with the biometric signature information to the server; 4. In paragraph 3, A control method comprising: a step of verifying, by the second electronic device, the integrity of the received identification information based on information related to the second public key included in the biometric signature information received from the server.

5. In paragraph 4, A control method comprising: a step of, when the integrity of the received identification information is verified and the second biometric information is acquired, the second electronic device identifying whether the type of the second biometric information is the same as the type of the first biometric information included in the biometric signature information; 6. In paragraph 5, The step of transmitting the generated biometric hash information and the identification information to the server is as follows: If the type of the second biometric information and the type of the first biometric information are the same, the second electronic device generates the biometric hash information based on the algorithm included in the second biometric information and the biometric signature information; and A control method comprising: a step of the second electronic device transmitting the generated biometric hash information and the identification information to the server.

7. In paragraph 6, The above authentication steps are: The step of the server identifying whether the acquired biometric hash information and the biometric hash information generated by the second electronic device match by running a verification code corresponding to the identification information; and A control method comprising: a step of authenticating the second electronic device based on the identification result.

8. In paragraph 1, When the second electronic device is authenticated, the second electronic device transmits a signal for a synchronization request to the first electronic device; and A control method comprising: a step of the first electronic device performing synchronization with the second electronic device in response to the signal; 9. In paragraph 1, The above server, It consists of blockchain nodes based on a distributed ledger. The above identification information and the above biometric signature information, A control method in which the distributed ledgers on the above blockchain are registered in a paired form.

10. In electronic devices, communication interface; memory; and Processor; including; The above processor, When biometric signature information is generated based on first biometric information for authentication of an electronic device by another electronic device and identification information of the other electronic device, the identification information of the other electronic device is received from the other electronic device through the communication interface, Through the above communication interface, the received identification information is transmitted to the server, Receive the biometric signature information corresponding to the identification information from the server through the communication interface, When the second biometric information is acquired, biometric hash information for authenticating the electronic device is generated based on the acquired second biometric information and the biometric signature information, An electronic device that transmits the generated biometric hash information and the identification information to the server through the communication interface.

11. In paragraph 10, The above biometric signature information is, An electronic device comprising identification information of the other electronic device, an algorithm for generating biometric hash information, information related to a first public key for authenticating biometric signature information, and information related to a second public key for synchronization between electronic devices.

12. In paragraph 11, The above electronic devices, Generate a verification code including biometric hash information for comparison with the biometric hash information generated by the electronic device; An electronic device that transmits the generated verification code together with the biometric signature information to the server.

13. In paragraph 12, The above processor, An electronic device that verifies the integrity of the received identification information based on information related to the second public key included in the biometric signature information received from the server.

14. In paragraph 13, The above processor, An electronic device that identifies whether the type of the second biometric information is the same as the type of the first biometric information included in the biometric signature information when the second biometric information is acquired after the integrity of the received identification information is verified.

15. In paragraph 14, The above processor, If the type of the second biometric information and the type of the first biometric information are the same, the biometric hash information is generated based on the algorithm included in the second biometric information and the biometric signature information, An electronic device that transmits the generated biometric hash information and the identification information to the server through the communication interface.

Images