KR101432484B1 - User outhenticaion system, apparatus and method for user outhenticaion in the system - Google Patents

Abstract

The present invention relates to a user authentication system, and an apparatus and method for user authentication in the system. In a user authentication system, a terminal device performs biometric authentication Generates registration information, generates a biometric information based on a behavior of the user and an ear shape when the user attempts to make a call, and the service device receives the biometric registration information from the terminal device, The user authentication request is received from the terminal device according to the user's communication attempt, the user authentication is performed by comparing the biometric information received at the user authentication request with the registered biometric registration information, By transmitting the authentication information to the device, It is not required and only minimal user intervention, and to maximize user convenience, there is an effect that can increase security.

Description

USER AUTHENTICATION SYSTEM, AND APPARATUS AND METHOD FOR USER AUTHENTICATION IN THE SYSTEM,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a user authentication system, and more particularly, to an apparatus and method for performing user authentication through biometrics based on a user's behavior and an ear shape in a user authentication system.

The contents described in this section merely provide background information on the present embodiment and do not constitute the prior art.

With the development of communication technology, various services can be provided using a terminal device. In order to prevent exposure of services provided to others, services can be provided through user authentication.

The conventional user authentication system for user authentication verifies whether or not a user performing communication through a communication network is a legitimate user registered in a reliable way, and the user terminal device stores its own user information, that is, And receives the authentication from the authentication server using a password or the like to receive the service.

In addition, the terminal device can be accessed only by a user with an access right to prevent unauthorized use of address security and privacy protection problems. To do this, the user registers a password or a graphic pattern with a password. At this time, the terminal device stores the registered password so that it can be used for every user authentication.

However, in the conventional user authentication system, authentication is performed through a password such as a password or a graphic pattern input by the user. Since such a password is stored in the terminal device, there is a high possibility that a password is exposed to another person. There is a problem that damage may occur due to illegal use of the terminal device.
Accordingly, there is a desperate need to develop a user authentication technology that can reduce the password exposure to others as much as possible, instead of a user authentication method using a password or a graphic pattern that is vulnerable to password exposure.

In addition, the user tends to cancel the user authentication at the terminal device and use it because of the inconvenience of performing user authentication every time the user uses the terminal. Such a user terminal device is very vulnerable to security.
Accordingly, there is a demand for development of a technology in which authentication is automatically performed without inputting authentication information from a user at the time of user authentication.

The present invention has been proposed in order to solve the inconvenience of the related art, and it is an object of the present invention to provide a user authentication system for performing user authentication through biometric information with minimum user intervention.

In addition, the present invention has been proposed in order to solve the inconvenience of the prior art. The present invention preliminarily registers biometric registration information obtained by statistically processing biometric information recognized according to user behavior information (arm bending) and ear shape information, And to provide a method and an apparatus for performing user authentication by comparing biometric identification information recognized at the time of trial with previously registered biometric registration information.

According to another aspect of the present invention, there is provided a user authentication system for generating biometric registration information to be registered in advance for user authentication through biometrics based on a behavior of a user and an ear shape, A terminal device for generating biometric information through biometrics according to a behavior of a user and a shape of an ear when the user attempts to make a call according to the induction of the necessary application and transmits the biometric information to the service device to request authentication; Receiving biometric identification information from a terminal device and registering the biometric identification information in advance for user authentication; and receiving a user authentication request from an application of the terminal device, And transmits the user authentication result to the application of the terminal device after performing the user authentication.

According to another aspect of the present invention, there is provided a terminal device for authenticating a user, comprising: a communication unit for communicating with a service device connected through a communication network for user authentication through biometrics; And biometrics registration information generated through biometrics based on the behavior of the user and the shape of the user's ear and registers the biometrics registration information generated in advance in the service device, and when the user attempts to make a call The biometric information is generated by biometrics, the generated biometric information is transmitted to the service device, and the user authentication result obtained by comparing the biometric registration information registered in advance and the biometric information from the service device is received And provides the application with the control unit.

In the terminal device for user authentication according to the preferred embodiment of the present invention, the control unit measures the bending force of the user's arm in accordance with the action taken by the user in the vicinity of the user's ear, Information is generated, behavior information is repeatedly generated and statisticalized, an average value is calculated, and the calculated average value is set as the biometric registration information.

In the terminal device for user authentication according to the preferred embodiment of the present invention, the control unit measures the arm bending strength according to the action of bringing the terminal device close to the user's ear when the user makes a call attempt, And transmits the generated behavior information as biometric identification information to the service device.

The terminal device for user authentication according to the preferred embodiment of the present invention further includes a photographing part for transmitting the photographed image of the user's ear to the control part.

In the terminal device for user authentication according to the preferred embodiment of the present invention, the controller captures an ear shape from a repeatedly photographed image of a user's ear, generates ear shape information, And sets the calculated average value as biometric registration information.

In the terminal device for user authentication according to the preferred embodiment of the present invention, when the user tries to make a call, the controller captures an ear shape on the image of the ear and generates ear shape information, And transmits the information to the service apparatus as biometric information.

According to an aspect of the present invention, there is provided a service device for user authentication, comprising: a communication unit for performing communication for user authentication with a terminal device connected through a communication network; And biometrics registration information generated through biometrics based on the behavior of the user and the shape of the ear according to the execution of the application requiring authentication from the terminal device and registers the biometrics registration information in advance, And a controller for performing user authentication by comparing the received biometric information with registered biometric registration information, and transmitting the user authentication result to the terminal device.

In the service device for user authentication according to the preferred embodiment of the present invention, when the user authentication using the biometric information fails, the controller performs user authentication using the preset user authentication information.

According to another aspect of the present invention, there is provided a method for authenticating a user, the method comprising: generating biometric registration information through biometrics based on a user's behavior and an ear shape; Registering the generated biometric registration information in advance in the service device; When a user attempts a call according to a request of an application requiring user authentication, biometric information is generated through biometrics, and the generated biometric information is transmitted to the service device. And receiving user authentication through comparison of biometric information; And providing the authentication result to the application when the user authentication is successful.

The method for authenticating a user according to a preferred embodiment of the present invention further includes performing user authentication by receiving user authentication information from a user when authentication of the user is unsuccessful.

In the method for authenticating a user according to a preferred embodiment of the present invention, the step of generating biometric registration information through biometric identification may include: bending a user's arm as the user takes an action to take the terminal device Measuring a force; Generating a measured value as behavior information; Calculating a mean value by statistically generating the behavior information by repeatedly generating the behavior information; And setting the calculated average value as the biometric registration information.

In the method for authenticating a user according to a preferred embodiment of the present invention, the step of generating biometric registration information through biometrics includes: repeatedly photographing an ear shape; Capturing an ear shape in the photographed images; Analyzing captured ear shape images to generate ear shape information; Calculating the average value by statistically generating the generated ear-shaped information, and setting the calculated average value as biometric registration information.

In the method for authenticating a user according to a preferred embodiment of the present invention, the biometric registration information and the biometric information may include behavior information generated by measuring a force of bending the user's arm, Information.

According to an aspect of the present invention, there is provided a computer-readable recording medium having recorded thereon a program for executing a method for user authentication.

The present invention performs biometric authentication based on user's behavior information, in particular an action (arm bending) performed to receive a telephone call and user's ear shape information, and performs user authentication through biometric authentication, Since there is no need to enter authentication information, minimal user intervention is required. Therefore, the present invention maximizes user's convenience and enhances security.

1 is a diagram illustrating a configuration of a user authentication system according to an embodiment of the present invention.
2 is a diagram illustrating a configuration of a terminal device for user authentication through biometrics in a user authentication system according to embodiments of the present invention.
3 is a diagram illustrating a configuration of a service apparatus for user authentication through biometrics in a user authentication system according to embodiments of the present invention.
4 is a diagram illustrating an example of biometrics in a user authentication system according to embodiments of the present invention.
5 is a diagram illustrating a method for user authentication through biometrics in a user authentication system according to a first embodiment of the present invention.
6 is a diagram illustrating an example of AF signals according to behavior information generated through biometrics according to the first embodiment of the present invention.
7 is a diagram illustrating a method for user authentication through biometrics in a user authentication system according to a second embodiment of the present invention.
8 is a diagram illustrating an example of generating ear shape information through biometrics according to a second embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description and the accompanying drawings, detailed description of well-known functions or constructions that may obscure the subject matter of the present invention will be omitted. It should be noted that the same constituent elements are denoted by the same reference numerals as possible throughout the drawings.

The terms and words used in the present specification and claims should not be construed to be limited to ordinary or dictionary meanings and the inventor is not limited to the concept of terminology for describing his or her invention in the best way. It should be interpreted as meaning and concept consistent with the technical idea of the present invention. Therefore, the embodiments described in the present specification and the configurations shown in the drawings are merely the most preferred embodiments of the present invention, and not all of the technical ideas of the present invention are described. Therefore, It is to be understood that equivalents and modifications are possible.

First, a user authentication system according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a configuration of a user authentication system according to an embodiment of the present invention.

Referring to FIG. 1, the user authentication system may include a terminal device 100 and a service device 200 connected through a communication network 10.

The terminal device 100 is a terminal capable of transmitting and receiving various data via the communication network 10 in accordance with a key operation of a user. The terminal device 100 includes a tablet PC, a laptop, a personal computer ), A smart phone, a personal digital assistant (PDA), a smart TV, and a mobile communication terminal.

The terminal device 100 is a terminal that performs voice or data communication using the communication network 10 and includes a browser for communicating with the service device 200 via the communication network 10, And a microprocessor for executing and controlling various programs. That is, if the terminal apparatus 100 can perform server-client communication with the service apparatus 200 and can execute a broadcasting service, any terminal can be used, and a communication computing apparatus such as a notebook computer, a mobile communication terminal, It is a broad concept that includes. Meanwhile, the terminal device 100 is preferably manufactured with a touch screen, but is not limited thereto. In particular, the terminal device 100 may include any application requiring user authentication, and may perform user authentication according to the present invention upon execution of the application.

Specifically, the terminal device 100 according to the embodiments of the present invention may include a biometric device, for example, a biometric device, such as a biometric device that uses biometric information, such as user behavior information (bending of the arm) Authentication can be performed. That is, the terminal device 100 recognizes and sets the biometric registration information, for example, a statistical value of the strength of the bending of the arm according to the operation of the mobile phone to the ear when performing a call or the shape of the ear of the user, The recognition registration information is transmitted together with the user information to the service device 200 and registered in advance as information for authentication. Then, the terminal device 100 carries out the biometrics recognition for the user authentication at the user's call attempt, in accordance with the induction of the application requiring the user authentication. That is, the biometric information obtained by capturing the bending force of the current user's arm or the shape of the user's ear is transmitted to the service device 200, and the biometric information transmitted from the service device 200 and the biometric identification information registered in advance And the execution of the application can be controlled according to the comparison result. At this time, the application may be an application related to a call.

The service device 200 can support user authentication through biometrics by wireless communication with the terminal device 100. [ In particular, the service device 200 receives the biometric registration information transmitted from the terminal device 100 together with the user information, registers the biometric authentication registration information in advance for authentication, and transmits the biometric information to the terminal device 100 Upon receipt of the authentication request, the biometric authentication information transmitted at this time may be compared with biometric registration information registered in advance to perform user authentication.

The terminal device 100 and the service device 200 are interworked through the communication network 10 and the communication network 10 can use the wired / wireless communication technology such as the Internet network, the intranet network, the mobile communication network, It is a network that can transmit and receive. The communication network 10 is also coupled to the service device 200 and stores computing resources such as hardware and software. The communication network 10 may be a closed network such as a LAN (Local Area Network) or a WAN (Wide Area Network), an open network such as the Internet, a CDMA (Code Division Multiple Access), a WCDMA The concept is called the next generation network and computing network that will be implemented next, such as Multiple Access, Global System for Mobile Communications (GSM), Long Term Evolution (LTE) and Evolved Packet Core (EPC)

The configuration of the terminal device 100 according to the embodiment of the present invention will be described in detail with reference to FIG. 2 attached hereto.

The terminal device 100 may include a control unit 110, an input unit 120, a communication unit 130, a storage unit 140, an output unit 150, and a photographing unit 160.

The control unit 110 performs overall control of the terminal device 100, and particularly controls related operations for biometric authentication and user authentication. The control unit 110 may include a biometrics authentication unit 111, an authentication performing unit 112, and an application processing unit 113.

The biometrics authentication unit 111 previously sets biometrics registration information to be used for authentication before performing user authentication according to a request of an application requiring user authentication, and stores the biometrics registration information set at the time of service subscribing or periodically And transmits it to the communication unit 130 and transmits it to the service device 200. [ For example, according to the first embodiment of the present invention, as shown in FIG. 4A, the biometrics unit 111 allows the user to bring the terminal device 100 close to the user's ear The behavior of the user, that is, the force of the arm bending, can be measured and set in advance as the biometric registration information. Specifically, the biometrics recognition unit 111 recognizes the force of the arm bending when the user brings the terminal apparatus 100 to the vicinity of the ear via the at least one sensor mounted on the terminal apparatus 100, And the like can be measured. Here, the behavior information can be measured using various methods. For example, it is possible to measure the pressure applied when bending the arm through the pressure-reducing sensor and the pressure applied by the hand, By transmitting the detected bio-signals to the terminal device 100 according to the bending, the terminal device 100 can obtain the bio-signals by analyzing them. At this time, the user repeatedly takes a posture for talking, the biometrics unit 111 repeatedly measures the measured value, that is, the behavior information, and obtains the average value, and sets the obtained average value as the biometrics registration information have. In addition, biometric registration information can be set by setting an error range to the average value. Here, the biometric unit 111 can use a pattern similarity search and sorting algorithm, for example, to measure behavior information.

In addition, according to the second embodiment of the present invention, the biometric unit 111 photographs the shape of the user's ear through the photographing unit 160 as shown in FIG. 4 (b) Shaped image, and the analyzed ear-shaped biometric information can be set as biometric registration information. In order to improve the accuracy of the biometric registration information, the biometric information obtained by analyzing the images taken at various angles may be statistically processed to set the biometric information of the average value as biometric registration information. In addition, biometric registration information can be set by setting an error range to the average value. For example, the biometrics unit 111 may calculate the LBP representation of the ear image taken for each pixel, and generate the histogram of the calculated cell values to set the generated histogram as the biometric information.

When the authentication unit 112 requests authentication, the biometrics unit 111 performs a process of performing an authentication process for performing authentication or a biometrics authentication process And transmits the measured biometric information to the authentication performing unit 112. [

The authentication performing unit 112 receives the currently measured biometric information from the biometric unit 111 to authenticate the user when the user attempts a call according to the inducement of the application and includes the transmitted biometric information in the authentication request message And transmits it to the service apparatus 200 through the communication unit 130. The authentication performing unit 112 receives the authentication request response message including the authentication result information obtained by performing the user authentication from the service device 200. When the authentication is successful according to the authentication result information, And transmits an authentication failure signal to the application processing unit 113 when authentication fails.

Upon receiving the authentication success signal from the authentication performing unit 112, the application processing unit 113 automatically controls the application to be executed. When receiving the authentication failure signal from the authentication performing unit 112, the application processing unit 113 controls the application not to be executed . In addition, the application processing unit 113 may control the display unit 150 to display a warning sound and a pop-up message to inform the user that the application has failed to be executed due to the authentication failure.

On the other hand, when the authentication through biometrics fails, the application processing unit 113 performs user authentication from the authentication performing unit 112 through the user authentication information registered in advance in the service device 200, in order to prevent the call from being interrupted So that the communication can be controlled to be performed without interruption by receiving the transmitted authentication success signal.

The input unit 120 may generate a user input signal corresponding to a request or information of a user according to a user's operation and may be realized by various input means that are currently commercialized or can be commercialized in the future. For example, the input unit 120 may include general input devices such as a keyboard, a mouse, a joystick, a touch screen, and a touch pad, as well as a gesture input means for sensing a user's motion and generating a specific input signal. In particular, the input unit 120 receives user's action information from various sensors installed in the terminal device 100, and transmits the inputted action information to the control unit 110. In addition, the input unit 120 may transmit various information inputted by the user to the control unit 110. [ Also, the input unit 120 may sense a human body signal transmitted from a human body of the user, and may transmit the sensed human body signal to the controller 110 so as to use the human body signal as behavior information.

The communication unit 130 communicates with the service device 200 through the communication network 10 to transmit and receive messages for user authentication through biometrics. The communication unit 130 can transmit and receive data through various communication methods as well as wire and wireless methods. In addition, the communication unit 130 may transmit and receive data using one or more communication methods. For this purpose, the communication unit 130 may include a plurality of communication modules that transmit and receive data according to different communication methods, respectively. In particular, the communication unit 130 transmits a user authentication registration request message including biometric registration information and user information, and an authentication request message for authenticating a user in real communication to the service device 200. The communication unit 130 receives the user authentication response message including the user authentication registration result information and the user authentication response message including the user authentication result information from the service device 200 and delivers the received message to the control unit 110. [

The storage unit 140 stores information necessary for the operation of the terminal device 100. In particular, in association with user authentication, the storage unit 140 temporarily stores behavior information that measures actions such as bending the user's arm, And may temporarily store the biometric registration information and the biometric information according to the behavior information and the analysis of the photographed image before transmitting the information to the service device 200. [ Here, the biometric registration information and the biometric information may be deleted after being transmitted to the service apparatus 200. [ Thereby, the terminal device 100 does not continuously memorize these pieces of information, so that security can be maintained. In addition, the storage unit 140 may store related information and programs for biometric recognition and user recognition. The storage unit 140 may be an optical storage medium such as a magnetic medium such as a hard disk, a floppy disk and a magnetic tape, a CD-ROM (Compact Disc Read Only Memory), a DVD (Digital Video Disk) A magneto-optical medium such as a floppy disk and a ROM, a random access memory (RAM), and a flash memory.

The output unit 150 is a means for providing a user with an operation result or status of the terminal device 100. The output unit 150 may include a display unit for visually outputting the result through a screen or a speaker for outputting an audible sound can do. Particularly, in the present invention, it is possible to display a screen related to user authentication and biometrics driven in the terminal device 100, display an image of a program to be executed in response to a user's request, 160, and a screen for capturing and analyzing an ear shape on the displayed image can be configured and displayed.

Next, the configuration of the service apparatus 200 according to the embodiment of the present invention will be described in detail with reference to FIG. 3 attached to the user authentication system.

The service device 200 may include a control unit 210, a communication unit 220, and a storage unit 230.

The control unit 210 may perform overall operations of the service apparatus 200 and control operations such as operations for a user authentication service. In particular, the control unit 210 displays biometrics registration information obtained by measuring the behavior of the user, such as bending of the arm, through biometrics from the user's terminal device 100, And registers the biometric registration information together with the user information in advance. The previously registered biometric registration information is mapped with the user information and is set as the authentication information for authenticating the corresponding user, and may be managed by being mapped with user authentication information such as a predetermined authentication key and a password.

When receiving a user authentication request according to the execution of an application requiring user authentication from the terminal device 100, the control unit 210 displays the biometric information according to the measured behavior information received at the time of the authentication request, And compares the biometric information with registered biometric registration information to perform user authentication. At this time, the control unit 210 determines whether the human body identification information matches the registered biometric registration information, and transmits the authentication result success / failure information to the terminal device 100 in the user authentication response message.

On the other hand, when the user authentication through the biometric information fails, the control unit 210 instructs the terminal device 100 to input user authentication information such as an authentication key or a password in order to perform user authentication in a preset manner , So that the user authentication information transmitted from the terminal device 100 can be compared with predetermined user authentication information to perform user authentication again.

The communication unit 220 transmits and receives messages for a broadcasting service to and from the terminal device 100 through the communication network 10. The communication unit 220 can transmit and receive data through various communication methods as well as wire and wireless methods. In addition, the communication unit 220 may transmit and receive data using one or more communication methods. For this purpose, the communication unit 220 may include a plurality of communication modules that transmit and receive data according to different communication methods, respectively. In particular, the communication unit 220 receives the user authentication registration request message including the biometric registration information and the user information and the authentication request message for user authentication in actual communication from the terminal device 100. Also, the communication unit 130 transmits to the terminal device 100 a user authentication response message including the user authentication response message including the user authentication registration result information and the user authentication result information.

The storage unit 230 stores information related to user authentication. Specifically, the storage unit 230 stores biometrics registration information and user information registered in advance from the terminal device 100, and stores user authentication information set at the time of subscribing to the service. Also, the storage unit 230 may temporarily store the biometric information received at the time of authentication request. The storage unit 230 may be an optical recording medium such as a magnetic medium such as a hard disk, a floppy disk and a magnetic tape, a CD-ROM (Compact Disk Read Only Memory), a DVD (Digital Video Disk) A magneto-optical medium such as a floppy disk and a ROM, a random access memory (RAM), and a flash memory.

A settlement method for providing location information in the thus configured user authentication system will now be described in detail with reference to the accompanying drawings.

First, according to embodiments of the present invention, a user authentication system performs a service subscription procedure for performing a user authentication service. That is, the terminal device 100 transmits user information and registers the user information in the service device 200, and can receive and store related applications and programs for the user authentication service from the service device 200.

After that, the terminal device 100 registers the user authentication registration information generated through the behavior information of the user and the ear shape image in advance in the service device 200 for user authentication through biometrics, Authentication is performed.

Embodiments of the present invention for performing such user authentication will be described in detail below.

5 is a diagram illustrating a method for user authentication through biometrics in a terminal device of a user authentication system according to a first embodiment of the present invention.

Referring to FIG. 5, in step 1101, as the user brings the terminal device 100 close to the ear for a call, the terminal device 100 displays the behavior of the user received through one or more sensors, that is, And then stores the analyzed behavior information. For example, the terminal device 100 can generate behavior information by measuring an arm bending force at the time of bringing it near the ear or the grip strength of the terminal device 100. Here, the generated behavior information may be an AF signal as shown in FIG. 6 attached thereto, and may be generated using various methods. For example, the pressure applied when bending the arm through the decompression sensor and the pressure pressed by the hand are measured, or the biological signals sensed by the user's bending of the user's body in the human body through the human body communication are transmitted to the terminal device 100 So that it can be obtained by analyzing the bio-signal in the terminal device 100. At this time, the user repeatedly takes a posture for a call several times, so that the terminal device 100 can repeatedly measure the force of the arm bending to generate a plurality of pieces of behavior information.

In step 1102, the terminal device 100 statistically processes the generated behavior information, calculates an average value, and generates and stores the biometric registration information using the average value calculated in step 1103. [ At this time, the biometric registration information can be set by setting an error range to the average value. Here, the terminal device 100 can use a pattern similarity search and sorting algorithm, for example, to measure behavior information.

In step 1104, the terminal device 100 transmits the generated biometric registration information together with the user information to the service device 200 in the user authentication registration request message. Accordingly, the service device 200 registers the biometric registration information for user authentication, maps the user information to the user information, and transmits the user authentication response message including the result information according to the user authentication registration to the terminal device 100 do.

Then, in step 1105, the terminal device 100 confirms whether the user tries to make a call according to an inducement for user authentication upon execution of an application requiring user authentication. As a result of checking, if there is a call attempt of the user, the terminal device 100 measures the force of the user's bending of the arm according to the call to generate the behavior information in order to authenticate the user through the biometrics in step 1106, Biometric information is generated using the generated behavior information.

Then, in step 1108, the terminal device 100 transmits a user authentication request message including the generated biometric information to the service device 200. Accordingly, the service apparatus 200 performs user authentication by comparing the received biometric information with previously registered biometric registration information.

In step 1109, the terminal device 100 receives a user authentication response message including the user authentication result information from the service device 200. In step 1110, the terminal device 100 confirms the authentication success by confirming the user authentication result information including the user authentication response message.

If it is determined in step 1111 that the authentication is successful, the terminal device 100 transmits the authentication result to the application and executes the application, and the specific function or service is executed according to the execution of the application. On the other hand, if the authentication fails, the terminal device 100 stops the execution of the application in step 1112 or executes user authentication in a predetermined manner to input user authentication information such as an authentication key or a password from the user, Information can be transmitted to the service device 200, and the application can be executed after receiving the user authentication.

7 is a diagram illustrating a method for user authentication through biometrics in a user authentication system according to a second embodiment of the present invention.

Referring to FIG. 7, in step 1201, the terminal device 100 photographs the user's own ear through the camera of the photographing unit 160. FIG. At this time, the terminal device 100 can photograph at various angles, and can photograph an ear shape in a state in which an actual user takes an action to make a call.

In step 1202, the terminal device 100 captures an ear shape from one or more captured images and analyzes the captured ear image to analyze the information (data, AF signal, etc.) In step 1203, the terminal device 100 generates biometric registration information using the generated ear shape analysis information, and stores the generated biometric registration information.

In step 1204, the terminal device 100 transmits the generated biometric registration information together with the user information to the service device 200 in the user authentication registration request message. Accordingly, the service apparatus 200 registers the biometric registration information for user authentication, maps the user information to the user information, stores the biometric registration information in the terminal device 100, and then transmits the user authentication registration response message including the result information send.

Thereafter, in step 1205, the terminal device 100 confirms whether the user presses a call button and tries to make a call, in accordance with an inducement for user authentication of the application in response to a request for execution of an application requiring user authentication. If it is determined that the user has a call attempt, the terminal device 100 captures the user's ear according to the call for user authentication through biometrics in step 1206, captures the ear shape from the captured ear image, Analyze the captured ear shape to generate ear shape information.

In step 1206, the terminal device 100 generates biometric information using the generated ear shape information.

In step 1206, the terminal device 100 transmits a user authentication request message including the generated biometric information to the service device 200. Accordingly, the service apparatus 200 performs user authentication by comparing the received biometric information with the biometric registration information according to the registered ear shape.

Then, in step 1207, the terminal device 100 receives a user authentication response message including the user authentication result information from the service device 200. In step 1208, the terminal device 100 confirms the authentication success by confirming the user authentication result information including the user authentication response message.

If the authentication is successful, the terminal device 100 executes the corresponding application in step 1209 and provides a specific service or function to the user. On the other hand, if the authentication fails, the terminal device 100 stops the execution of the application, or performs user authentication of another method previously set in step 1210, receives user authentication information such as an authentication key or a password from the user, Transmits the user authentication information to the service device 200, receives the user authentication, and executes the application upon successful authentication.

As described above, in the first and second embodiments of the present invention, the behavior information or the ear shape information is biometric, respectively. However, in the third embodiment of the present invention, security is enhanced through more accurate user authentication The biometrics registration information and the biometrics information can be generated at the same time by applying both the behavior information and the ear shape. Accordingly, the service device 200 registers biometric registration information including analyzed behavior information and ear shape information in advance, and thereafter, biometric information including behavior information and ear shape information received at the time of a user authentication request is registered in advance And performs user authentication in comparison with the biometric registration information. At this time, the service device 200 may determine that the use authentication is successful only when both pieces of information match according to the security level preset by the user, or may determine that the user authentication is successful when either one of them coincides.

Program instructions to be recorded may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. For example, the recording medium may be an optical recording medium such as a magnetic medium such as a hard disk, a floppy disk and a magnetic tape, a compact disk read only memory (CD-ROM), a digital video disk (DVD) Includes a hardware device that is specially configured to store and execute program instructions such as a magneto-optical medium such as a floppy disk and a ROM, a random access memory (RAM), a flash memory, do. Examples of program instructions may include machine language code such as those generated by a compiler, as well as high-level language code that may be executed by a computer using an interpreter or the like. Such a hardware device may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

It should be noted that the embodiments of the present invention disclosed in the present specification and drawings are only illustrative of specific examples for the purpose of understanding and are not intended to limit the scope of the present invention. It will be apparent to those skilled in the art that other modifications based on the technical idea of the present invention are possible in addition to the embodiments disclosed herein.

The present invention relates to a user authentication system and an apparatus and method for user authentication in the system, and a terminal device performs biometric authentication based on a user's behavior information (arm bending or the like) and a user's ear shape, It is not necessary to input the authentication information every time from the user, so that minimal user intervention is required. Therefore, the present invention maximizes user's convenience and enhances security.

10: communication unit 100: terminal device 110:
120: input unit 130: communication unit 140:
150: output unit 160: photographing unit 200: service apparatus
210: control unit 220: communication unit 230:

Claims (15)

Biometrics registration information to be registered in advance for user authentication is generated through biometrics according to the behavior of the user and the shape of the ear, and when a user attempts to make a call according to induction of an application requiring authentication, A terminal device for generating biometric information through biometric authentication and requesting authentication; And
Receiving the biometrics registration information from the terminal device and registering the biometrics registration information in advance for user authentication; deriving a call for acquiring biometrics information according to an authentication requirement of the application running on the terminal device; The user authentication is performed by comparing the biometrics information received at the time of the user authentication request with the previously registered biometrics registration information, and then transmitting the user authentication result to the terminal device To the application of the service;
Lt; / RTI >
The terminal apparatus comprises:
The ear shape information is generated by capturing the ear shape in the image repeatedly photographed by the user's ear, the ear shape information is statistically calculated to calculate an average value, and the calculated average value is set as the biometric registration information User authentication system. A communication unit for performing communication for user authentication through biometrics with a service device connected through a communication network; And
Biometric registration information is generated through biometrics based on the behavior of the user and the shape of the user's ear and the generated biometric registration information is registered in advance in the service device. When an application requiring user authentication induces a user call for acquiring authentication information And transmitting the biometric information generated by generating biometric information through biometric authentication to the service device, and transmitting a user authentication result obtained by comparing the biometric authentication registration information and the biometric information registered in advance from the service device A control unit receiving and providing to the application;
Lt; / RTI >
Wherein,
The ear shape information is generated by capturing the ear shape in the image repeatedly photographed by the user's ear, the ear shape information is statistically calculated to calculate an average value, and the calculated average value is set as the biometric registration information And a terminal device for user authentication. 3. The apparatus of claim 2,
The bending force of the arm is measured by the user taking the action of bringing the terminal device close to the ear, the measured value is generated as behavior information, the behavior information is repeatedly generated and statisticalized to calculate an average value And sets the calculated average value as the biometric registration information. 3. The apparatus according to claim 2,
The user attempts to make a call and measures the arm bending strength according to the behavior of taking the terminal device to the vicinity of the ear, generates the behavior information as the measured value, and transmits the generated behavior information as biometric information to the service device And transmits the user authentication information to the terminal device. 3. The method of claim 2,
A photographing unit for transmitting a photographed image of the user's ear to a control unit;
And a terminal device for authenticating the user. delete 3. The apparatus of claim 2,
When the user tries to make a call, the terminal device captures an ear shape on the image of the ear and generates ear shape information, and transmits the generated ear shape information to the service device as the biometric information And a terminal device for user authentication. delete delete Generating biometric registration information through biometrics according to a user's behavior and an ear shape;
Registering the generated biometric registration information in advance in the service device;
The biometrics information generating unit generates biometrics information through biometrics when the user attempts to make a call according to the execution of an application requiring user authentication and transmits the generated biometrics information to the service apparatus, Receiving user authentication through comparison of the biometric registration information and the biometric information; And
Providing an authentication result to the application when the user authentication is successful;
Lt; / RTI >
Wherein the step of generating biometric registration information through biometric identification comprises:
A step of repeatedly photographing the ear shape
Capturing an ear shape in the photographed images;
Analyzing captured ear shape images to generate ear shape information;
Calculating a mean value by statistically generating ear shape information; And
Setting the calculated average value as the biometric registration information;
The method of claim 1, further comprising: 11. The method of claim 10,
Performing user authentication by receiving user authentication information from a user when authentication of the user fails;
The method of claim 1, further comprising: 11. The method of claim 10, wherein generating biometric registration information through biometric identification comprises:
Measuring a bending force of the arm as the user takes an action of bringing the terminal device close to the ear;
Generating a measured value as behavior information;
Calculating a mean value by statistically generating behavior information generated by repeatedly generating the behavior information; And
Setting the calculated average value as the biometric registration information;
The method of claim 1, further comprising: delete 13. The method of claim 12,
Wherein the biometric registration information and the biometric information are generated using behavior information generated by measuring the force of the arm bending and ear shape information generated by photographing the ear of the user, Methods for authentication. A computer-readable recording medium storing a program for executing the method for user authentication according to any one of claims 10, 11, 12 and 14.

Images