Security medium user authentication system and security medium user authentication method

Abstract

The present invention relates to a security medium user authentication system and a security medium user authentication method and, more specifically, to a security medium user authentication system and a security medium user authentication method for performing initial registration and authentication preparation of a security medium for security medium user authentication. The security medium user authentication system comprises: a security medium (10) in which a unique identification number is embedded; a management server (20) for registering and managing the security medium (10) by means of the identification number; a device (30) recognizing the security medium (10) and including an input unit (31) for identifying user authentication information; and an authentication information registration unit (40) initially registering the authentication information inputted through the input unit (31) in the security medium (10) so as to enable user authentication via the security medium (10).

Description

Security media user authentication system and security media user authentication method

[0001] The present invention relates to a security medium user authentication system and a security medium user authentication method, and more particularly, to a security medium user authentication system and a security medium user authentication method that perform initial registration and authentication preparation of a security medium for security medium user authentication.

[0002] Recently, with the increasing influence of various online media, authentication of users attempting to access and use the service is becoming more stringent. In particular, authentication utilizing various biometric information is being used to improve the security vulnerability of the existing method of authenticating users using passwords.

[0003] Additionally, there is a trend toward user authentication using a separate security medium, two-step authentication using multiple authentication information, and multi-factor authentication that goes beyond this.

[0004] For example, FIDO (Fast Identity Online), which applies biometric authentication technology online, provides a standard for user authentication that separates authentication protocols and authentication techniques to solve the problem of passwords.

[0005] In this way, user authentication and security are strengthened, and user authentication is being strengthened through the use of various physical security media, including security keys. However, there is a problem that such security media are limited to a specific user group or a limited use through specific firmware.

[0006] In particular, there is a problem that users who first purchase a security key cannot effectively utilize it because the preliminary procedure for performing user authentication using the security key is very complicated and difficult.

[0007] The purpose of the present invention is to provide a security medium user authentication system and a security medium user authentication method capable of initial registration and authentication of a security medium user in order to solve the above problems.

[0008] The present invention has been created to achieve the above-described object of the present invention, and the present invention discloses a security medium user authentication system for authenticating a user through a security medium (10) connected to a user device (30), comprising: a security medium (10) having a unique identification number built in; a management server (20) that registers and manages the security medium (10) through the identification number; and an authentication information registration unit (40) that initially registers the authentication information input through the device (30) in the security medium (10) so as to enable user authentication through the security medium (10).

[0009] The above device (30) includes a camera that captures and inputs the user's facial information, and the authentication information registration unit (40) can register the facial information input through the camera as the authentication information.

[0010] The above authentication information registration unit (40) can additionally register at least one of iris information, fingerprint information, and PIN number as the authentication information.

[0011] The user's personal information entered in correspondence with the above identification number can be stored and registered on the above management server (20).

[0012] The above authentication information registration unit (40) can register the authentication information corresponding to the identification number on the management server (20).

[0013] It may include a user authentication unit (50) that authenticates a user by comparing the authentication information stored through the authentication information registration unit (40) with the input information entered through the device (30).

[0014] The above user authentication unit (50) can perform authentication for each of multiple authentication pieces of information.

[0015] In addition, the present invention discloses a method for authenticating a user of a security medium through a security medium user authentication system including a security medium (10) having a unique identification number built in and connected to a user device (30); a management server (20) that registers and manages the security medium (10) through the identification number; and an authentication information registration unit (40) that initially registers the authentication information input through the device (30) into the security medium (10) so as to enable user authentication through the security medium (10), the method including an authentication information registration step (S10) that performs the initial registration of authentication information for the security medium (10); and a user authentication step (S20) that authenticates a user through the authentication information registered through the authentication information registration step (S10) and the input information input through the device (30).

[0016] The above authentication information registration step (S10) may include an installation step (S11) of installing a facial recognition program through connection of the device (30) of the security medium (10), and a facial information storage step (S12) of storing facial information acquired through the device (30) in the security medium (10).

[0017] The above authentication information registration step (S10) may additionally include an authentication information storage step (S13) for storing a PIN number and personal information for the security medium (10).

[0018] The above user authentication step (S20) may include an input step (S21) of receiving the input information through the device (30), and an authentication step (S22) of authenticating the user by comparing the input information entered through the input step (S21) with the previously stored authentication information.

[0019] The security medium user authentication system and security medium user authentication method according to the present invention have the advantage that a user who has purchased a security medium such as a security key can easily register authentication information and perform user authentication.

[0020] In particular, the secure medium user authentication system and secure medium user authentication method according to the present invention have the advantage of being able to quickly and easily provide a user environment for user authentication by storing and registering authentication information through device connection of the secure medium.

[0021] In addition, the security medium user authentication system and security medium user authentication method according to the present invention have the advantage of enabling effective management and use of a plurality of security media through systematic management of the security media.

[0022] Figure 1 is a drawing showing the configuration of a security medium user authentication system according to the present invention.

[0023] Figure 2 is a flowchart showing a method for authenticating a user of a security medium according to the present invention.

[0024] The security medium user authentication system and security medium user authentication method according to the present invention are described in detail with reference to the attached drawings as follows.

[0025] A security medium user authentication system according to the present invention comprises: a security medium (10) having a unique identification number built in; a management server (20) that registers and manages the security medium (10) through the identification number; a device (30) that recognizes the security medium (10) and includes an input unit (31) for confirming user authentication information; and an authentication information registration unit (40) that initially registers the authentication information input through the input unit (31) in the security medium (10) so as to enable user authentication through the security medium (10).

[0026] In addition, the security medium user authentication system according to the present invention may include a user authentication unit (50) that authenticates a user by comparing the authentication information stored through the authentication information registration unit (40) with the input information input through the device (30).

[0027] The security medium user authentication system according to the present invention may include not only an authentication procedure for authenticating a user through a security medium, but also a procedure for completing preparation for user authentication by performing registration for the security medium during the process of initially purchasing and using the security medium.

[0028] In particular, the security medium user authentication system according to the present invention may include a configuration for performing various preparatory procedures for authentication by connecting the security medium (10) to the device (30) and performing authentication through the security medium (10).

[0029] The above security medium (10) is configured to have a unique identification number built in, and can have various configurations.

[0030] In particular, the security medium (10) may be configured to be connected wirelessly or wired to the device (30) described below, and may be, for example, a connection device and storage medium in the form of a security key.

[0031] For example, the security medium (10) may be a USB-type storage medium that stores various authentication information and may be configured to store firmware or software for user authentication.

[0032] In addition, the security medium (10) may include various sensors capable of sensing authentication information including the user's biometric information, and for example, may include a fingerprint recognition sensor capable of sensing the user's fingerprint information, an iris information recognition sensor capable of sensing the user's iris information, and a facial information recognition sensor capable of sensing the user's facial information.

[0033] Meanwhile, it is also obvious that the above security medium (10) may be configured to be connected wirelessly or wired to the device (30) as a storage medium without a configuration capable of separate authentication information sensing.

[0034] The above security medium (10) may include a unique identification number and may be managed by the management server (20) described below through the identification number.

[0035] That is, the security medium (10) can be registered by being identified with an identification number in the management server (20), and the authentication information described below can be registered in the management server (20) through the identification number.

[0036] In this way, the security medium (10) can register user information, such as personal information of a specific user, by distinguishing it with an identification number through the management server (20).

[0037] Meanwhile, after purchasing the initial security medium (10), the user needs to go through a preliminary procedure to use it as a user authentication tool.

[0038] To this end, the security medium (10) may include various installation files for implementing at least one of the user authentication unit (50) and authentication information registration unit (40) described below through the device (30).

[0039] For example, the security medium (10) may provide an installation file for installing facial recognition software for reading and responding to facial information among authentication information, and in particular, convenience may be promoted according to user selection through provision of multiple facial recognition software.

[0040] Meanwhile, it is also obvious that the installation program can be provided through the management server (20) described below without storing a separate installation program in the security medium (10).

[0041] The above management server (20) is configured to register and manage a security medium (10) using an identification number, and various configurations are possible.

[0042] For example, the management server (20) can store and manage user information including personal information of the user corresponding to the unique identification number of each of a plurality of security media (10) and authentication information as needed.

[0043] At this time, the management server (20) is equipped to enable management by user as well as management through the unique identification number of each security medium (10), so that registration and management of multiple security mediums (10) for individual users can be performed.

[0044] Accordingly, the management server (20) can be used as an authentication means for performing authentication through another security medium (10) in the event of loss of a specific security medium (10) by registering multiple security media (10) to specific user information and for changing information on a lost security medium (10).

[0045] That is, the management server (20) can group and manage multiple security media (10) within specific user information based on user information registered in the security media (10) registered and managed through a unique identification number.

[0046] Furthermore, the management server (20) can, when a loss or similar situation of a specific security medium (10) occurs, change the status of a specific security medium (10) through authentication of another security medium (10) of a specific user, for example, revoke authority as an authentication means such as loss report or deletion.

[0047] In addition, the management server (20) can, of course, register in a grouped state according to the additional purchase of a security medium (10) by a specific user.

[0048] Meanwhile, the management server (20) may provide an installation program for installing a user authentication unit (50) program for user authentication as needed, as described above, or may provide an installation program for installing an authentication information registration unit (40) program for registering various authentication information when purchasing a security medium (10) for the first time.

[0049] For example, when facial information is used as authentication information, the management server (20) may provide multiple facial recognition programs for user selection, and induce the user to download the program to the device (30) to register initial authentication information or install a user authentication program for comparison with previously registered authentication information.

[0050] The above device (30) is configured to recognize a security medium (10) and verify user authentication information, and can be configured in various ways.

[0051] In particular, the device (30) includes an input unit (31) to enable user authentication information verification and input. At this time, the input unit (31) may refer to a sensor and input device such as a camera for facial information recognition, a fingerprint recognition sensor, an iris information recognition sensor, and a keyboard.

[0052] That is, the device (30) may include various sensors and cameras for receiving biometric information such as facial information, iris information, and fingerprint information as a configuration for receiving input information for user authentication, and may include an input device for receiving authentication information such as a PIN number, and may further be used to initially register authentication information used for user authentication.

[0053] Accordingly, the device (30) can store various authentication information obtained through the input unit (31) in a security medium (10) or on a management server (20) for initial registration, and can also store it in the device (30) itself as needed.

[0054] In addition, the device (30) can store and register the user's personal information entered in correspondence with the identification number on the management server (20), and a user authentication unit (50) for performing user authentication described below can be installed to perform user authentication.

[0055] The above authentication information registration unit (40) may be configured to initially register authentication information entered through the input unit (31) into the security medium (10) so as to enable user authentication through the security medium (10).

[0056] That is, the above authentication information registration unit (40) may be configured to register various authentication information in the security medium (10) as a preliminary step for performing authentication through the security medium (10) when the security medium (10) is first purchased.

[0057] To this end, the authentication information registration unit (40) may be a program installed on the device (30) through an installation file stored in the security medium (10), and as another example, may be downloaded through the management server (20) and installed on the device (30).

[0058] Meanwhile, the above authentication information registration unit (40) may be managed by assigning a unique number to a security medium (10) managed through an identification number on the management server (20).

[0059] The above authentication information registration unit (40) can be installed in the device (30) when the security medium (10) is first connected to enable user authentication through the security medium (10) and can register authentication information in the security medium (10).

[0060] The authentication information used at this time is authentication information input through the input unit (31) of the device (30) described above, and for example, facial information input through a camera can be stored and registered.

[0061] In addition, as another example, the authentication information may additionally include at least one of iris information, fingerprint information, and a PIN number, and the authentication information may be stored on the security medium (10) together with facial information.

[0062] Meanwhile, the authentication information registration unit (40) can store and register various authentication information on the security medium (10), and as another example, can store and register authentication information for the security medium (10) distinguished by an identification number in the management server (20).

[0063] Furthermore, the authentication information registration unit (40) may be configured to register authentication information in FIDO (Fas Identity Online), which applies biometric authentication technology online, so that it can be used for various programs and online authentication.

[0064] Accordingly, the authentication information registration unit (40) can be installed on the device (30) according to the user's environment settings when the first connection is made between the first purchased security medium (10) and the device (30), and in the installed state, various authentication information, such as facial information, can be acquired, stored, and registered through the input unit (31) of the device (30).

[0065] Meanwhile, in this case, the authentication information registration unit (40) may be, for example, a facial recognition program, and may be configured to be installed according to the user's selection among multiple facial recognition programs.

[0066] The above user authentication unit (50) is configured to authenticate a user by comparing the authentication information stored through the authentication information registration unit (40) with the input information entered through the device (30), and various configurations are possible.

[0067] For example, the user authentication unit (50) may be a software downloaded through an installation file stored in a security medium (10) or a management server (20), and may be configured to compare facial information with a facial recognition program as described above.

[0068] Meanwhile, the user authentication unit (50) may be configured to perform authentication by simply comparing facial information, or as another example, may be configured to perform authentication for each of a plurality of pieces of authentication information.

[0069] That is, the user authentication unit (50) can perform authentication by comparing a plurality of authentication information pieces that are preset or randomly selected among a plurality of authentication information pieces registered through the authentication information registration unit (40).

[0070] Meanwhile, in this case, the user authentication unit (50) may sequentially or randomly select and request input from the user through the input unit (31) via the device (30) as needed.

[0071] Accordingly, the user authentication unit (50) can perform authentication on a user by comparing the authentication information registered through the authentication information registration unit (40) with the input information entered through the input unit (31). At this time, the authentication information may refer to authentication information stored in the security medium (10) while the security medium (10) is connected to the device (30).

[0072] Meanwhile, the user authentication unit (50) may perform authentication by comparing the authentication information stored in a separate management server (20) with the input information entered through the input unit (31), but in this process, the connection status of the security medium (10) with the device (30) may be verified first and then authentication may be performed.

[0073] Hereinafter, a method for authenticating a user of a security medium according to the present invention will be described in detail with reference to the attached drawings.

[0074] The method for authenticating a user of a security medium according to the present invention includes, as illustrated in FIG. 2, an authentication information registration step (S10) for performing authentication information registration for the security medium (10); and a user authentication step (S20) for authenticating a user using the authentication information registered through the authentication information registration step (S10) and the input information input through the device (30).

[0075] The above authentication information registration step (S10) may be a step for performing authentication information registration for a security medium (10).

[0076] That is, the above authentication information registration step (S10) may be a step of storing and registering various authentication information so that user authentication through the security medium (10) is possible when the security medium (10) is first used.

[0077] At this time, the authentication information registration step (S10) can store and register the authentication information entered through the device (30) through the aforementioned authentication information registration unit (40) in at least one of the security medium (10) or the management server (20).

[0078] That is, the above authentication information registration step (S10) can be performed as a preliminary step to enable user authentication through the user authentication step (S20) described later.

[0079] For example, the authentication information registration step (S10) may include an installation step (S11) of installing a facial recognition program through a connection of a device (30) to a security medium (10), and a facial information storage step (S12) of storing facial information acquired through the device (30) in the security medium (10).

[0080] The above installation step (S11) may be, for example, a step of installing a facial recognition program through connection of a device (30) of a security medium (10), and at this time, the authentication information may mean facial information.

[0081] Meanwhile, the above installation step (S11) is not limited to a facial recognition program, and may include installation of a program for securing various authentication information, such as the authentication information registration unit (40) described above, and may include, for example, an iris information recognition program, a fingerprint information recognition program, and drivers for various input devices including a keyboard.

[0082] The above facial information storage step (S12) may be a step of storing facial information obtained through the device (30) in the security medium (10).

[0083] At this time, the facial information storage step (S12) can encode facial information captured by the camera, which is the input unit (31), through a facial recognition program and store it in the security medium (10).

[0084] Meanwhile, unlike the above, it is also obvious that the facial information storage step (S12) can store facial information in the management server (20) rather than the security medium (10).

[0085] The above authentication information registration step (S10) may additionally include an authentication information storage step (S13) for storing a PIN number and personal information for the security medium (10).

[0086] That is, the above authentication information storage step (S13) can additionally store at least one of the aforementioned multiple authentication information in the security medium (10) or the management server (20), and it is also obvious that the aforementioned facial information, including the PIN number added to the security medium (10), can be separately stored in the management server (20).

[0087] That is, one of the multiple authentication information can be stored in a security medium (10) and the rest can be stored separately in a management server (20).

[0088] In addition, the above authentication information storage step (13) can store the user's personal information in the management server (20), and based on the personal information stored at this time, management of the security medium (10) through an identification number can be performed on the management server (20).

[0089] The above user authentication step (S20) may be a step for authenticating a user through authentication information registered through the authentication information registration step (S10) and input information entered through the device (30).

[0090] At this time, the user authentication step (S20) may be a step of performing user authentication by comparing the authentication information stored in at least one of the security medium (10) or management server (20) and the input information input through the device (30) through the user authentication unit (50) described above.

[0091] For example, the user authentication step (S20) may include an input step (S21) of receiving input information through a device (30), and an authentication step (S22) of authenticating the user by comparing the input information entered through the input step (S21) with previously stored authentication information.

[0092] In addition, the user authentication step (S20) may additionally include a connection status confirmation step for confirming the connection status of the security medium (10) before the input step (S21), and when the security medium (10) is normally connected, the authentication information stored in the security medium (10) or management server (20) may be compared with the input information entered through the input step (S21).

[0093] At this time, the authentication step (22) can perform authentication by comparing multiple authentication information with input information, and more specifically, authentication can be performed by requesting input of at least one authentication information randomly selected from multiple previously stored authentication information through the input step (S21).

[0094] In addition, the above authentication step (S22) can perform authentication by combining authentication information stored on the security medium (10) with other authentication information stored in the management server (20). To this end, authentication can be performed by first sequentially comparing the authentication information stored in the security medium (10) and then comparing the authentication information stored in the management server (20) with the input information.

[0095]

[0096] The above is only a description of some of the preferred embodiments that can be implemented by the present invention, and as is well known, the scope of the present invention should not be construed as being limited to the above embodiments, and the technical ideas of the present invention described above and the technical ideas underlying them are all included in the scope of the present invention.

Claims

1. A security medium user authentication system for authenticating a user through a security medium (10) connected to a user device (30). A security medium (10) having a unique identification number built in; A management server (20) that registers and manages the above security medium (10) using the above identification number; A security medium user authentication system characterized by including an authentication information registration unit (40) that initially registers the authentication information input through the device (30) in the security medium (10) to enable user authentication through the security medium (10).

2. In claim 1, The above device (30) is, Includes a camera that captures and inputs the user's facial information, The above authentication information registration section (40) is A security medium user authentication system characterized in that the facial information input through the camera is registered as the authentication information.

3. In claim 2, The above authentication information registration section (40) is A security medium user authentication system characterized in that at least one of iris information, fingerprint information, and PIN number is additionally registered as the above authentication information.

4. In claim 2, A security medium user authentication system characterized in that it stores and registers the user's personal information entered in correspondence with the identification number on the management server (20).

5. In claim 1, The above authentication information registration section (40) is A security medium user authentication system characterized in that the above authentication information is registered on the management server (20) in correspondence with the identification number.

6. In claim 1, A security medium user authentication system characterized by including a user authentication unit (50) that authenticates a user by comparing the authentication information stored through the authentication information registration unit (40) with the input information entered through the device (30).

7. In claim 6, The above user authentication unit (50) is A security medium user authentication system characterized in that authentication is performed for each of multiple authentication information.

8. A method for authenticating a user of a security medium through a security medium user authentication system, comprising: a security medium (10) having a unique identification number built in and connected to a user device (30); a management server (20) that registers and manages the security medium (10) through the identification number; and an authentication information registration unit (40) that initially registers the authentication information entered through the device (30) in the security medium (10) so that user authentication through the security medium (10) is possible. An authentication information registration step (S10) for performing the initial registration of authentication information for the above security medium (10); A security medium user authentication method characterized by including a user authentication step (S20) for authenticating a user through the authentication information registered through the authentication information registration step (S10) and the input information input through the device (30).

9. In claim 8, The above authentication information registration step (S10) is A method for authenticating a user of a security medium, characterized in that it includes an installation step (S11) of installing a facial recognition program through connection of the device (30) of the security medium (10), and a facial information storage step (S12) of storing facial information obtained through the device (30) in the security medium (10).

10. In claim 9, The above authentication information registration step (S10) is A method for authenticating a user of a security medium, characterized in that it additionally includes an authentication information storage step (S13) for storing a PIN number and personal information for the security medium (10).

11. In claim 8, The above user authentication step (S20) is A method for authenticating a user of a security medium, characterized in that it includes an input step (S21) for receiving the input information through the device (30), and an authentication step (S22) for authenticating a user by comparing the input information entered through the input step (S21) with the previously stored authentication information.

Images