KR20080028223A - Authentication device that prevents exposure of password by recognizing duplicate password input - Google Patents

Abstract

The present invention relates to an authentication device for recognizing a password redundancy input and preventing exposure of a password.

The present invention provides an authentication device comprising: a key button input unit configured to receive a password and generate and transmit input authentication information; An authentication information storage unit storing storage authentication information; An authentication control unit which receives the input authentication information and the stored authentication information, recognizes each digit and the number array, performs digit authentication and the number array authentication, and generates and transmits an authentication success signal when authentication is successful; And an apparatus controller for controlling the overall operation according to the authentication success by receiving the authentication success signal from the authentication controller, wherein the digit authentication includes the number of input digits N1 of the input authentication information and the number of storage digits of the stored authentication information ( Comparing N2), if the N1 and the N2 are not the same, confirms whether the N1 and the N2 maintain a constant constant multiple (k), and as a result of verification, if the constant constant multiple (k) is maintained The present invention provides an authentication device for recognizing a duplicate password input, which is regarded as being recognized, to prevent exposure of a password.

According to the present invention, since it is easy and convenient to use everyday, even if the other person observes the password input process can not easily grasp the password has the effect of preventing the exposure of the password and increase the security.

Description

Verification Apparatus for Preventing Exposure of Password by Recognizing Double Password Input}

1 is a block diagram schematically showing an internal configuration of an authentication apparatus according to an embodiment of the present invention;

2 is a flowchart illustrating an authentication method for recognizing a duplicate password input according to a preferred embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

100: authentication device 102: digital-door lock

104: cash machine 110: button key input unit

120: authentication control unit 130: authentication information storage unit

140: device control unit 150: power unit

160: drive unit 170: IC card recognition unit

The present invention relates to an authentication device for recognizing a password redundancy input and preventing exposure of a password. More specifically, after receiving the password, the user recognizes the number of digits and the array of numbers corresponding to the password, compares the number of digits and the array of numbers and the number of digits and numbers of the stored authentication information, and performs digit authentication and number array authentication. The present invention relates to an authentication device for recognizing duplicated inputs and preventing exposure of a password to perform authentication.

Representative authentication devices of the commonly used key input method include a digital door lock and an ATM.

First of all, the conventional digital-door lock is described. In general, homes, shops, government agencies, businesses, etc., widely use an access control system for restricting access of unauthorized outsiders. Access control systems are used in many forms, ranging from simple, low-cost locks to expensive mechanical devices with complex mechanical mechanisms, and electronic devices that combine mechanical technology with electronic technology. On the other hand, in recent years, in order to improve the shortcomings of the locking device of the door that operates only by mechanical mechanisms (Mechanism), the digital-door lock using the electromagnetic (Electromagnetic) technology is widely used. The digital-door lock has a variety of input methods such as an authentication means input method through a key input unit, a magnetic card method coated with a magnetic stripe, a radio frequency (RF) card method, an integrated circuit (IC) card method, fingerprint recognition, iris recognition, and the like. Authentication technology is used to authenticate a person and prevent illegal intrusion.

Currently, the most commonly used digital door lock is a digital door lock with a password input and a key input method. Since most users feel troublesome and inconvenient to carry a key, the digital-door lock is often released only by a password input method.

In the password input method, a digital door is unlocked by entering a number from 4 to 12 digits, and most users use 4 digits corresponding to a car number, a group number, a phone number, and a birthday that are easy to remember. However, such a password input method has a disadvantage that a password is more likely to be exposed to another person if the other person (theft user) watches the back when the user enters the password. In order to prevent this, the operator may manually enter the password and enter the password, or set the password to 12 digits so that the password cannot be easily memorized, or change the password frequently. However, these methods are cumbersome and inconvenient for the user. There is a disadvantage that the user himself can forget the password.

Conventional techniques for overcoming these shortcomings, as disclosed in Korean Patent Application Publication No. 10-2005-0010999 and Korean Utility Model Publication No. 20-0282656, when a password is sequentially entered even if an accessor enters an imaginary key before or after the password. There is a technique for performing authentication by recognizing a password.

However, the conventional technique using the imaginary imaginary key has some effects in terms of preventing password theft. However, when the imaginary input is entered before or after the password, the user's input pattern is intermittently used, which is faster or slower depending on the personal tendency. Such an unnatural behavior makes it possible to grasp that the hijacker (other) is an imaginary number and has a disadvantage in that the effectiveness is inferior. In addition, the hijacker memorizes all the passwords including the imaginary number entered by the accessor, and has a disadvantage in that the passwords are easily exposed by overlapping numbers when matching the input passwords one by one.

On the other hand, to describe the conventional ATM (Automated Teller Machine), the initial financial transaction was a financial transaction offline when the customer visits the financial institution. However, with the development of technology, financial institutions have installed automated equipment such as CD (Cash Dispenser) or ATM (Automated Teller Machine) connected to servers of their financial institutions in various places to enable financial transactions at remote locations. Since then, financial institutions have built a financial common network that integrates their own financial networks for better customer service, enabling financial transactions using CD or ATM regardless of trading financial institutions.

However, the conventional cash dispenser also uses a four-digit password, there is a disadvantage that the password is more likely to be exposed to the other person if the other person observes it from behind (side) when entering the password.

Therefore, even if a simple four-digit password is used, if a user repeatedly enters a password that is accustomed to the user habitually (two or more times) when there is a risk of exposure to others, a device for recognizing it and performing authentication is still required. Not provided.

In order to solve the above problems, the present invention, after receiving a password, recognizes the number of digits and the array of numbers corresponding to the password, the number of digits after comparing the number of digits and number array and the number of digits and number array of the stored authentication information An object of the present invention is to provide an authentication device that performs authentication and numeric array authentication to recognize duplicate input of a password and prevent exposure of a password for performing authentication.

In order to achieve the above object, the present invention provides an authentication device, comprising: a key button input unit configured to receive a password and generate and transmit input authentication information; An authentication information storage unit storing storage authentication information; An authentication control unit which receives the input authentication information and the stored authentication information, recognizes each digit and the number array, performs digit authentication and the number array authentication, and generates and transmits an authentication success signal when authentication is successful; And an apparatus controller for controlling the overall operation according to the authentication success by receiving the authentication success signal from the authentication controller, wherein the digit authentication includes the number of input digits N1 of the input authentication information and the number of storage digits of the stored authentication information ( Comparing N2), if the N1 and the N2 are not the same, confirms whether the N1 and the N2 maintain a constant constant multiple (k), and as a result of verification, if the constant constant multiple (k) is maintained The present invention provides an authentication device for recognizing a duplicate password input, which is regarded as being recognized, to prevent exposure of a password.

In addition, according to another object of the present invention, in the digital door lock (Authorized Door Lock) for authenticating the entrance and exit of the user, a key button input unit for receiving the password to generate and transmit the input authentication information; An authentication information storage unit storing storage authentication information; An authentication control unit which receives the input authentication information and the stored authentication information, recognizes each digit and the number array, performs digit authentication and the number array authentication, and generates and transmits an authentication success signal when the authentication is successful; An apparatus controller configured to receive the authentication success signal from the authentication controller and generate a unlock signal; And a driving unit configured to receive the unlock signal from the device controller to unlock the door lock, wherein the digit authentication is performed by comparing the input digits N1 of the input authentication information with the storage digits N2 of the stored authentication information and N1. And when N2 is not equal to each other, confirms whether N1 and N2 maintain a constant constant multiple (k), and as a result of the check, it is considered to be authenticated when maintaining a constant constant multiple (k). It provides a digital-door lock to prevent password exposure by recognizing duplicate password input.

In addition, according to another object of the present invention, an ATM (Automated Teller Machine), the key button input unit for receiving and inputting the password to generate the input authentication information; An authentication information storage unit storing storage authentication information; An authentication control unit which receives the input authentication information and the stored authentication information, recognizes each digit and the number array, performs digit authentication and the number array authentication, and generates and transmits an authentication success signal when authentication is successful; IC card recognition unit for receiving and transmitting the information of the IC card after recognizing the IC card; And a device controller for receiving the information of the IC card from the IC card recognition unit and receiving the authentication success signal from the authentication controller to control the overall operation according to the authentication success, wherein the digit authentication is performed by the input authentication information. By comparing the number of input digits (N1) and the number of storage digits (N2) of the stored authentication information, if the N1 and the N2 is not the same, it is determined whether the N1 and the N2 maintain a constant constant (k) In case of maintaining a constant constant (k) as a result of the check, it provides a cash dispenser that prevents the exposure of the password by recognizing the password input.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

1A is a block diagram schematically illustrating an internal configuration of an authentication apparatus according to a preferred embodiment of the present invention.

The authentication apparatus 100 according to an exemplary embodiment of the present invention includes a button key input unit 110, an authentication control unit 120, an authentication information storage unit 130, a device control unit 140, and a power supply unit 150. The authentication apparatus 100 of the present invention means all authentication apparatuses of a key input method, and among them, a digital-door lock 102 and an ATM 104 are disclosed in FIGS. 1B and 1C, respectively. I'll explain below.

The button key input unit 110 is a device for receiving a password from a user in order to perform an authentication procedure at an outdoor side. The button key input unit 110 receives a password, generates input authentication information including the password, and transmits the generated authentication information to the authentication controller 120. The button key input unit includes a '#' key, a '*' key, and the like as well as numeric keys 0 to 9.

The authentication controller 120 includes an MPU (Micro Processor Unit) that includes an authentication algorithm, and is connected to the button key input unit 110, the authentication information storage unit 130, and the device controller 140. The authentication control unit 120 compares the input authentication information received from the button key input unit 110 with the stored authentication information stored in the authentication information storage unit 130 to perform an authentication procedure and outputs an authentication success signal or an authentication failure signal. It generates as and transmits to the device control unit 140.

The authentication control unit 120 according to a preferred embodiment of the present invention receives the input authentication information from the button key input unit 110 and recognizes the digit N1 and the numeric arrangement included in the input authentication information. In addition, the authentication control unit 120 receives the stored authentication information from the authentication information storage unit 130, recognizes the number of digits (N2) and the numeric arrangement of the stored authentication information, compares N1 and N2, N1 and N2 is not the same If not, performs digit authentication to check whether N1 and N2 satisfy the following Equation 1.

,

,

When N1 and N2 satisfy Equation 1, the authentication control unit 120 compares the numeric array of the input authentication information with the numeric array of repeated storage information and compares them with the numerical array repeatedly arranged to check whether the numeric array authentication is consistent. Perform. This number array authentication process will be described in more detail below with reference to FIG. 2. As a result of the verification, when the numeric array authentication succeeds, the authentication controller 120 generates a signal for authentication success and transmits the signal to the device controller 140.

The authentication information storage unit 130 is a storage medium for storing data necessary for an authentication operation, and includes a nonvolatile memory for storing data. The nonvolatile memory may be an EEPROM (Electrically Erasable and Programmable Read Only Memory) that can modify the contents in bytes, or a Flash memory that can modify the contents in blocks. . In addition, the authentication information storage unit 130 stores stored authentication information including a password of the authentication device 100. The pre-stored authentication information includes a password set by the user, the number of digits of the password, and an array of numbers.

The device control unit 140 includes a microprocessor as a kind of central processing unit having a serial, a parallel port, and a clock circuit, and a memory in which an operating system program for controlling the overall device is stored. The authentication control unit 120 and the power supply unit are provided. Connected to 150. The device controller 140 controls the overall operation of the authentication device 100 based on the authentication success signal or the authentication failure signal received from the authentication control unit 120. When the device controller 140 receives an authentication success signal from the authentication controller 120, the device controller 140 controls the overall operation of the authentication device 110 according to the authentication success.

The power supply unit 150 supplies power to all the above-mentioned components of the authentication device 100 through the device control unit 140, and is composed of an internal power source using a battery and / or an external power source using a commercial power source.

1B is a block diagram schematically showing the internal configuration of a digital-door lock according to a preferred embodiment of the present invention.

The digital-door lock 102 according to the preferred embodiment of the present invention is a button key input unit 110, an authentication control unit 120, an authentication information storage unit 130, and a device control unit as one embodiment of the authentication device 100. 140, a power supply unit 150, and a driving unit 160.

The button key input unit 110, the authentication control unit 120, the authentication information storage unit 130, the device control unit 140, and the power supply unit 150 perform the same functions as described with reference to FIG. 1A, and the driving unit 160 may include at least one. A relay driving device, a solenoid driving device, a servo motor, a Mortis, and the like are configured to receive the unlock signal from the device controller 140, and performs a function of unlocking the door lock.

Figure 1c is a block diagram schematically showing the internal configuration of the ATM according to a preferred embodiment of the present invention.

Cash dispenser 104 according to a preferred embodiment of the present invention is a button key input unit 110, authentication control unit 120, authentication information storage unit 130, the device control unit 140 as one embodiment of the authentication device 100 ), A power supply unit 150 and an IC card recognition unit 170.

The button key input unit 110, the authentication control unit 120, the authentication information storage unit 130, the device control unit 140, and the power supply unit 150 perform the same functions as described with reference to FIG. 1A, and the IC card recognition unit 170. When the IC card is inserted, the IC card recognizes the IC card and receives information of the IC card and transmits the information to the device controller 140.

2 is a flowchart illustrating an authentication method for recognizing a duplicate password input according to a preferred embodiment of the present invention.

When the user inputs a password using the key button input unit 110 of the authentication apparatus 100 (digital door lock 102 or the cash dispenser 104) for authentication, the key button input unit 110 displays the number of digits N1 of the password. ) And the input authentication information including the numeric array is transmitted to the authentication control unit 120. That is, when the user inputs the password 12341234, the number of digits N1 of the input authentication information is eight digits and the numeric array is 12341234.

The authentication controller 120 receives input authentication information from the key button input unit 110 (S210).

The authentication controller 120 recognizes the number of digits (N1 = 8 digits) and the numeric array 12341234 of the password input by the user from the received authentication information (S220).

The authentication controller 120 receives the stored authentication information from the authentication information storage unit 130 and recognizes the digit N2 and the numeric array (S230). The password of the input authentication information may be any number or letters including numbers or letters of `*` and `#` by the user's selection. However, in the present invention, the password of the stored authentication information is assumed to be 1234 for convenience of description. To explain. That is, the number of digits (N2) of the stored authentication information is four digits, the number array is 1234.

The authentication controller 120 compares the number of digits N1 of the input authentication information with the number of digits N2 of the stored authentication information and performs digit authentication for checking whether the number of digits N1 = N2 is the same (S240). For example, assuming that the number of digits N1 of the input authentication information is 8 and the number of digits N2 of the stored authentication information is assumed to be 4, it can be seen that they are not the same.

As a result of performing the digit authentication of step S240, when the number of digits N1 of the input authentication information and the number of digits N2 of the stored authentication information are not the same number of digits (N1 = N2), the number of digits N1 of the input authentication information and the stored authentication information It is checked whether or not the digit N2 satisfies Equation 1 (S250). K is an integer of 1 or more.

That is, for convenience of explanation of the present invention, assuming that N1 is 8 and N2 is 4, Equation 1 is established since N1 (8) = N2 × 2 (4 × 2). Therefore, the authentication control unit 120 determines that the user repeatedly inputs the password. For example, if an accessor enters a password three times, N1 (12) = N2 × 3 (4 × 3), Equation 1 is established, and if the user enters it four times, N1 (16) = N2 × 4 (4 Equation 1 of 4) is established. If the user incorrectly inputs the password as 123412, since Equation 1 of N1 = N2 × k is not established, the authentication controller 120 determines that the password is incorrectly input and generates an authentication failure signal.

As a result of the check in step S250, when the number of digits N1 of the input authentication information and the number of digits N2 of the stored authentication information maintain a relationship of a constant constant k, the authentication control unit 120 and the numeric array of the input authentication information and Comparing the numeric array of the stored authentication information and performs a numeric array authentication to check whether or not the numerical array of the input authentication information is consistent with the number array of duplicated numbers of the stored authentication information (S260).

In more detail, the numerical array authentication step (S260) is described. The number array of input authentication information is (X ₁ , X ₂ , X ₃ , ..., X _N1 ), and the number array of stored authentication information is (Y ₁ , Y ₂ , Y ₃ , ..., Y _N2 ) is regarded as a numeric array authentication only if the following relationship holds.

Based on the above example, if the input authentication information number array is 12341234 (N1 = 8) and the stored authentication information number array is 1234 (N2 = 4), the fifth digit of the input authentication information number array ( That is, in the above formula, 1, which is the value of X ₅ , which is k = 1, i = 1), and Y ₁ , which is the number of the first digit of the stored array of authentication information (i.e., i = 1). Compares equality = 1 Repeatedly enter the 6, 7, 8th digits of the numeric array of authentication credentials (ie k = 1, i = 2,3,4 in the formula above), 2, 3, 4, which are the values of X ₆ , X ₇ , and X ₈ Check sequentially to see whether the numbers of Y2, Y3, and Y4, numbers 2, 3, and 4, respectively, of the corresponding stored authentication information numeric arrays. Of course, the above authentication process is performed even when k = 0, which means that the number in the front of the numeric array matches the stored authentication information.

Therefore, the numeric array is regarded as authenticated only when all k values and all i values satisfy Equation 2 above.

If the numeric array of the input authentication information is 12341233, k = 0 to 1, i = 1 to 3 satisfy the above Equation 2, but if k = 1, i = 4, X ₈ is 3, Since the Y ₄ does not match ₄ , the authentication controller 120 generates an authentication failure signal.

As a result of checking in step S260, if the numeric array authentication succeeds, the authentication control unit 120 generates an authentication success signal and transmits it to the device control unit 140 (S260).

The device controller 140 receives an authentication success signal from the authentication controller 120 and then controls the overall operation of the authentication device 100 according to the authentication success (S270). That is, the device control unit 140 of the digital-door lock 102 receives the authentication success signal from the authentication control unit 120 and then transmits a deactivation signal for controlling the door lock to be released to the driving unit 160, and the cash dispenser 104. After receiving the authentication success signal from the authentication control unit 120, the device control unit 140 performs the next step for cash withdrawal.

The above description is merely illustrative of the technical idea of the present invention, and those skilled in the art to which the present invention pertains may make various modifications and changes without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, according to the present invention, when a user repeatedly inputs a password, by recognizing the number of digits and the numeric array of the password and determining that the password has been repeatedly inputted, authentication is performed in a simple and convenient manner. Even if you watch the password input process, the password can not be easily identified, thereby preventing the exposure of the password.

In addition, the present invention has the effect of increasing the security because it checks the exact number of digits of the password and confirms whether or not the corresponding numeric array.

Claims (6)

In the authentication device, A key button input unit which receives a password and generates and transmits input authentication information; An authentication information storage unit storing storage authentication information; An authentication control unit which receives the input authentication information and the stored authentication information, recognizes each digit and the number array, performs digit authentication and the number array authentication, and generates and transmits an authentication success signal when authentication is successful; And Device control unit for controlling the overall operation according to the authentication success by receiving the authentication success signal from the authentication control unit The number of digits authentication includes comparing the number of digits N1 of the input authentication information with the number of digits of storage N2 of the stored authentication information, and when N1 and N2 are not equal to each other, N1 and N2 are constant. An authentication apparatus for recognizing whether or not to maintain a constant multiple (k), and if the result of the check to maintain a constant constant multiple (k) to recognize the password duplicate input, characterized in that it is recognized to prevent exposure of the password. The method of claim 2, The numeric array authentication confirms whether or not the numeric array of the input authentication information corresponds to the overlapping arrangement of the numeric array of the stored authentication information. As a result of the verification, the numeric array of the input authentication information is the numeric array of the stored authentication information. The authentication apparatus for recognizing a password duplication input, which prevents the exposure of the password, when generating the authentication success signal. In the digital door lock that authenticates the entrance and exit of the person, A key button input unit which receives a password and generates and transmits input authentication information; An authentication information storage unit storing storage authentication information; An authentication control unit which receives the input authentication information and the stored authentication information, recognizes each digit and the number array, performs digit authentication and the number array authentication, and generates and transmits an authentication success signal when authentication is successful; An apparatus controller configured to receive the authentication success signal from the authentication controller and generate a unlock signal; And A driving unit for unlocking the door lock by receiving the unlock signal from the device control unit The number of digits authentication includes comparing the number of digits N1 of the input authentication information with the number of digits of storage N2 of the stored authentication information, and when N1 and N2 are not equal to each other, N1 and N2 are constant. A digital-door lock that checks whether or not to maintain a constant multiple (k), and prevents the exposure of the password by recognizing the password input duplicated, characterized in that it is regarded as authenticated if a constant constant (k) is maintained as a result of the check . The method of claim 3, wherein The numeric array authentication confirms whether or not the numeric array of the input authentication information corresponds to the overlapping arrangement of the numeric array of the stored authentication information. As a result of the verification, the numeric array of the input authentication information is the numeric array of the stored authentication information. The digital-door lock, which prevents the exposure of the password by recognizing the duplicate password input, characterized in that generating the authentication success signal when the matching with the duplicate arrangement. In ATM (Automated Teller Machine), A key button input unit which receives a password and generates and transmits input authentication information; An authentication information storage unit storing storage authentication information; An authentication control unit which receives the input authentication information and the stored authentication information, recognizes each digit and the number array, performs digit authentication and the number array authentication, and generates and transmits an authentication success signal when authentication is successful; IC card recognition unit for receiving and transmitting the information of the IC card after recognizing the IC card; And Device control unit for receiving the information of the IC card from the IC card recognition unit and the authentication success signal from the authentication control unit to control the overall operation according to the authentication success The number of digits authentication includes comparing the number of digits N1 of the input authentication information with the number of digits of storage N2 of the stored authentication information, and when N1 and N2 are not equal to each other, N1 and N2 are constant. A cash dispenser that checks whether or not to maintain a constant multiple (k), and prevents the exposure of the password by recognizing duplicate password input, characterized in that when the result of the check maintains a constant constant (k). The method of claim 5, wherein The numeric array authentication confirms whether or not the numeric array of the input authentication information corresponds to the overlapping arrangement of the numeric array of the stored authentication information. As a result of the verification, the numeric array of the input authentication information is the numeric array of the stored authentication information. If a coincidence with the overlapping arrangement, the ATM for recognizing a duplicate password input, characterized in that for generating the authentication success signal to prevent exposure of the password.

Images