KR20210039752A - Document management server giving the authority for secure document through user authentication based on face recognition and operating method thereof - Google Patents

Abstract

Disclosed are a document management server that grants authority to a secure document through user authentication based on face recognition, and a method of operating the same. In the present invention, when a request for granting permission to view a document file for a secure document is received from a user terminal, a request for transmission of a user's face image to the user terminal is requested, and then the user's face image is received from the user terminal. Then, after identifying the user through feature point comparison between the face images of a plurality of users stored in advance in the document management server and the face images of the user, when authentication for the user is completed, the document for the secure document By transmitting the file browsing authority information to the user terminal, it is possible to support the user to more conveniently and safely read the security document.

Description

A document management server granting authority to secure documents through user authentication based on face recognition and its operation method {DOCUMENT MANAGEMENT SERVER GIVING THE AUTHORITY FOR SECURE DOCUMENT THROUGH USER AUTHENTICATION BASED ON FACE RECOGNITION AND OPERATING METHOD THEREOF}

The present invention relates to a document management server that grants authority to a secure document through user authentication based on face recognition, and an operating method thereof.

Recently, as there have been a number of cases of leakage of core technologies of enterprises, the importance of internal security of enterprises has emerged.

Among these, security for servers and networks in the enterprise is considered important, but there are many cases where security systems are not properly established for the information itself to be actually protected.

Accordingly, there is a need for a document security solution that encrypts a document created by the owner of the document and sets user rights to the document to prevent document leakage.

However, even though the document was encrypted, there was a problem that the document was decrypted by a hacker.

Here, in addition to the existing method of encrypting documents, a method to prepare additionally is needed. This new method is to incorporate biometrics technology.

In general, biometric recognition technology uses biometric features such as fingerprint, iris, retina, and face, and among them, the method of using face is the user's face through a pre-installed camera rather than a separate sensor such as fingerprint and iris. After recognizing the feature, it is possible to identify the user by comparing it with the face feature value of the user registered in advance in the server, which has the advantage of being relatively convenient and safe.

Therefore, in order to prepare for the problem of decryption of documents by hackers, the user is identified by comparing the feature points between the face image of the user recognized through the camera installed in the user terminal and the face image of the users registered in advance in the server. And by completing the user authentication based on this, there is a need for a study on a document security technique based on face recognition that allows only the authenticated user to read and edit the document.

In the document management server and its operation method according to the present invention, when a request for granting access to a document file for a secure document is received from a user terminal, a request for transmission of a user's face image to the user terminal is requested, and then the user When the user's face image is received from the terminal, after identifying the user through feature point comparison between the face images of a plurality of users stored in advance in the document management server and the face image of the user, authentication for the user is performed. Upon completion, it is intended to support the user to access the security document more conveniently and safely by transmitting the permission information for reading the document file for the security document to the user terminal.

According to an embodiment of the present invention, a document management server that grants authority to a secure document through user authentication based on face recognition includes a face image for each of a plurality of users and user authentication for each of the plurality of users. A composite information storage unit in which information about different correlation coefficients previously designated for use in the application is stored in correspondence with each other, and the first among a plurality of security documents stored in the first user terminal from the first user terminal. 1 When a request for granting permission to view a document file for a secure document is received, a face image is transmitted to the first user terminal to request transmission of a face image of a first user that can be photographed through a camera mounted on the first user terminal. When the face image of the first user is received from the requesting unit and the first user terminal, the face image of the plurality of users stored in the complex information storage unit and the face image of the first user are compared with each other through feature point comparison. After identifying the first user among a plurality of users, a correlation coefficient extraction unit for extracting a first correlation coefficient previously designated for the first user from the composite information storage unit, and when the first correlation coefficient is extracted, n (n is a natural number of 2 or more) randomly generated random values and, while transmitting the n random values to the first user terminal, n feedback values corresponding to the n random values to the first user terminal Request unit for requesting transmission of, n first feedback values with n feedback values corresponding to the n random values from the first user terminal-the n first feedback values are correlated with the n random values The coefficients are values generated to be calculated with the first correlation coefficient previously stored in the first user terminal-When is received, a second correlation coefficient between the n first feedback values and the n random values is calculated, and , By checking whether the second correlation coefficient coincides with the first correlation coefficient, An authentication verification unit that completes the authentication for the first user terminal and, when the authentication for the first user terminal is completed, transmits, to the first user terminal, access rights information for the document file for the first security document. A rights information transmission unit, wherein the first user terminal executes a document file for the first security document based on the browsing rights information when the access rights information of the document file for the first security document is received, and the first user terminal executes the document file for the first security document The first security document is displayed on the screen.

In addition, a method of operating a document management server that grants permission to a secure document through user authentication based on face recognition according to an embodiment of the present invention includes a face image for each of a plurality of users and the plurality of users. Maintaining a composite information storage unit in which information about different correlation coefficients previously designated for use in user authentication for each is corresponded to each other and stored, a plurality of security stored in the first user terminal from the first user terminal When a request to grant access to a document file for a first secure document among documents is received, a request for transmission of a face image of a first user that can be photographed through a camera mounted on the first user terminal is requested to the first user terminal In the step of, when the face image of the first user is received from the first user terminal, the face image of the plurality of users stored in the composite information storage unit is compared with the face image of the first user through feature point comparison. After identifying the first user among a plurality of users, extracting a first correlation coefficient previously designated for the first user from the composite information storage unit. When the first correlation coefficient is extracted, n(n Is a natural number of 2 or more) randomly generating random values, transmitting the n random values to the first user terminal, and transmitting n feedback values corresponding to the n random values to the first user terminal. The requesting step, n first feedback values as n feedback values corresponding to the n random values from the first user terminal-The n first feedback values have a correlation coefficient between the n random values being the first 1 These values are generated to be calculated using the first correlation coefficient previously stored in the user terminal-When is received, a second correlation coefficient between the n first feedback values and the n random values is calculated, and the second By checking whether the correlation coefficient matches the first correlation coefficient, authentication for the first user terminal is completed. And, when authentication for the first user terminal is completed, transmitting access rights information of the document file for the first security document to the first user terminal, wherein the first user terminal 1 When access rights information of a document file for a security document is received, the document file for the first security document is executed based on the access rights information, and the first security document is displayed on the screen.

In the document management server and its operation method according to the present invention, when a request for granting access to a document file for a secure document is received from a user terminal, a request for transmission of a user's face image to the user terminal is requested, and then the user When the user's face image is received from the terminal, after identifying the user through feature point comparison between the face images of a plurality of users stored in advance in the document management server and the face image of the user, authentication for the user is performed. Upon completion, the user terminal can transmit information on the authority to read the document file for the security document, thereby enabling the user to access the security document more conveniently and safely.

1 is a diagram showing the structure of a document management server that grants authority to a secure document through user authentication based on face recognition according to an embodiment of the present invention.
FIG. 2 is a flowchart illustrating a method of operating a document management server that grants authority to a secure document through user authentication based on face recognition according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. This description is not intended to limit the present invention to a specific embodiment, it is to be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the present invention. While describing each drawing, similar reference numerals have been used for similar elements, and unless otherwise defined, all terms used in the present specification including technical or scientific terms refer to common knowledge in the technical field to which the present invention pertains. It has the same meaning as commonly understood by someone who has it.

In this document, when a part "includes" a certain component, it means that other components may be further included rather than excluding other components unless otherwise stated. In addition, in various embodiments of the present invention, each component, function blocks, or means may be composed of one or more sub-components, and the electrical, electronic, and mechanical functions performed by each component are electronic. A circuit, an integrated circuit, or an application specific integrated circuit (ASIC) may be implemented with various known devices or mechanical elements, and may be implemented separately or two or more may be integrated into one.

On the other hand, the blocks of the attached block diagram and the steps in the flowchart are computer program instructions that are mounted on a processor or memory of equipment capable of processing data such as a general-purpose computer, a special-purpose computer, a portable notebook computer, and a network computer to perform specified functions. It can be interpreted as meaning. Since these computer program instructions can be stored in a memory provided in a computer device or in a memory readable by a computer, the functions described in the blocks in the block diagram or in the steps in the flowchart are produced as a product containing the instruction means for performing this. It could be. In addition, each block or each step may represent a module, segment, or part of code containing one or more executable instructions for executing the specified logical function(s). In addition, it should be noted that in some alternative embodiments, functions mentioned in blocks or steps may be executed in a different order. For example, two blocks or steps shown in succession may be performed substantially simultaneously or may be performed in reverse order, and in some cases, some blocks or steps may be omitted.

1 is a diagram showing the structure of a document management server that grants authority to a secure document through user authentication based on face recognition according to an embodiment of the present invention.

Referring to FIG. 1, a document management server 110 that grants authority to a secure document through user authentication based on face recognition according to the present invention includes a composite information storage unit 111 and a face image transmission request unit 112. ), a correlation coefficient extraction unit 113, a request unit 114, an authentication verification unit 115, and a viewing authority information transmission unit 116.

The complex information storage unit 111 stores a face image for each of a plurality of users and information about a predetermined different correlation coefficient for use in user authentication for each of the plurality of users in correspondence with each other. Has been.

Here, the correlation coefficient means a measure of the association between two continuous variables, and may be calculated according to Equation 1 below.

는 x₁, ..., x_n의 평균,

는 y₁, ..., y_n의 평균을 의미한다. 보통, |R|이 1에 가까울수록 두 변수의 값들은 직선 가까이에 위치하여 두 변수 간의 선형적인 연관성은 커진다고 볼 수 있고, R=0일 때 두 변수 간의 선형적인 연관성은 없다고 볼 수 있다.Where R is the correlation coefficient at _n data of variable x and variable y (x ₁ , y ₁ ), ..., (x _n , y n ),

Is the mean of x ₁ , ..., x _n,

Means the average of y ₁ , ..., y _n. Usually, as |R| is closer to 1, the values of the two variables are located closer to the straight line, so that the linear relationship between the two variables increases, and when R=0, there is no linear relationship between the two variables.

In relation to this, information may be recorded in the composite information storage unit 111 as shown in Table 1 below.

Face images of multiple users Correlation coefficient Face image 1 R ₁ Face image 2 R ₂ ... ...

The face image transmission request unit 112 receives a request to grant access to a document file for a first security document among a plurality of security documents stored in the first user terminal 130 from the first user terminal 130. , A request is made to transmit a face image of the first user 140 that can be photographed through the camera 131 mounted on the first user terminal 130 to the first user terminal 130.

For example, assume that the first security document is'security document 1'. The document management server 110 receives a request from the first user terminal 130 to grant access to a document file for'security document 1', which is a first security document among a plurality of security documents stored in the first user terminal 130. ), the face image transmission request unit 112 transmits the face image of the first user 140 to the first user terminal 130 that can be photographed through the camera 131 mounted on the first user terminal 130 You can request the transfer of.

At this time, the first user 140 may take a face image of the first user 140 through the camera 131 mounted on the first user terminal 130, and the first user terminal 130 The face image of the first user 140 photographed through the camera 131 mounted on the user terminal 130 may be transmitted to the document management server 110.

When the face image of the first user 140 is received from the first user terminal 130, the correlation coefficient extracting unit 113 determines the face images of the plurality of users stored in the composite information storage unit 111 and the first After identifying the first user 140 among the plurality of users through comparison of feature points between the face images of the user 140, the first user 140 previously designated for the first user 140 from the composite information storage unit 111 Extract the correlation coefficient.

For example, assume that the face image of the first user 140 is referred to as'face image 1', and the face images of the plurality of users are referred to as'face image 1, face image 2, ...'. When'face image 1', which is the face image of the first user 140 from the first user terminal 130, is received by the document management server 110, the correlation coefficient extraction unit 113 is stored in the complex information storage unit 111. The plurality of users by comparing feature points between'face image 1, face image 2, ...' which are the face images of the plurality of users stored and'face image 1'which is the face image of the first user 140 After identifying the first user 140 from among them, the first correlation coefficient'R ₁ 'previously specified for the first user 140 can be extracted from the complex information storage unit 111 as shown in Table 1 above. have.

When the first correlation coefficient is extracted, the request unit 114 randomly generates n (n is a natural number of 2 or more) random values, and transmits the n random values to the first user terminal 130, 1 Requests transmission of n feedback values corresponding to the n random values to the user terminal 130.

For example, as in the example described above, _{assume that the first correlation coefficient is'R 1} 'and'n=6'. When the first correlation coefficient'R ₁ 'is extracted, the request unit 114 randomly generates six random values '2, 3, 2, 4, 5, 2', and the six random values '2,' While transmitting 3, 2, 4, 5, 2'to the first user terminal 130, corresponding to the six random values '2, 3, 2, 4, 5, 2'to the first user terminal 130 It is possible to request the transmission of six feedback values.

In this case, according to an embodiment of the present invention, the first user terminal 130 stores the first correlation coefficient in a memory, and when the n random values are received from the document management server 110, the n The n first feedback values calculated with the first correlation coefficient stored in the memory may be randomly generated and transmitted to the document management server 110.

For example, the first correlation coefficient stored in the memory is _{referred to as'R 1} ', and the six random values '2, 3, 2, 4, 5, 2'from the document management server 110 are first When it is said that the user terminal 130 has received the first user terminal 130, the first user terminal 130 stores the correlation coefficient between the six random values '2, 3, 2, 4, 5, 2'in the memory. The six first feedback values calculated with one correlation coefficient “R ₁ ”may be randomly generated and transmitted to the document management server 110.

When the n first feedback values are received from the first user terminal 130 as n feedback values corresponding to the n random values, the authentication verification unit 115 Authentication for the first user terminal 130 is completed by calculating a second correlation coefficient between random values and checking whether the second correlation coefficient matches the first correlation coefficient.

For example, as in the example described above, it is assumed that'n=6', the six random values are called '2, 3, 2, 4, 5, 2', and the first correlation coefficient is'R _1'. lets do it. The six first feedback values are received by the document management server 110 as six feedback values corresponding to the six random values '2, 3, 2, 4, 5, 2'from the first user terminal 130 Then, the authentication verification unit 115 calculates a second correlation coefficient between the six first feedback values and the six random values '2, 3, 2, 4, 5, 2', and the second correlation coefficient is By checking whether it matches the first correlation coefficient'R ₁ ', the authentication for the first user terminal 130 may be completed.

When the authentication for the first user terminal 130 is completed, the reading permission information transmission unit 116 transmits the reading permission information of the document file for the first secure document to the first user terminal 130.

In this case, when the first user terminal 130 receives the information on the permission to read the document file for the first secured document, the first user terminal 130 executes the document file for the first secured document based on the information on the permission to secure the first security. Documents can be displayed on the screen.

For example, as in the example described above, assume that the first security document is'security document 1'. When the authentication for the first user terminal 130 is completed, the access rights information transmission unit 116 transmits the access rights information of the document file for the first security document'secure document 1'to the first user terminal 130 Can be transmitted.

Then, when the first user terminal 130 receives the access rights information of the document file for the first security document'secure document 1'from the document management server 110, the first user terminal 130 A document file for'security document 1', which is the first security document, may be executed based on the access rights information, and the'security document 1', which is the first security document, may be displayed on the screen.

That is, the document management server 110 includes a face image for each of a plurality of users in the composite information storage unit 111 and information on different pre-designated correlation coefficients for use in user authentication for each of the plurality of users. Is stored, when a request to grant access to a document file for a first security document among a plurality of security documents is received from the first user terminal 130, the first user terminal 130 is sent to the first user terminal ( After requesting transmission of the face image of the first user 140 that can be photographed through the camera 131 mounted on 130), when the face image of the first user 140 is received from the first user terminal 130, After identifying the first user 140 among the plurality of users by comparing feature points between the face images of the plurality of users stored in the composite information storage unit 111 and the face images of the first user 140, A first correlation coefficient previously specified for the first user 140 is extracted from the composite information storage unit 111, and when the first correlation coefficient is extracted, n random values are randomly generated, and the n number of While transmitting random values to the first user terminal 130, after requesting transmission of n feedback values corresponding to the n random values to the first user terminal 130, the n number of feedback values are requested from the first user terminal 130. When n first feedback values are received as n feedback values corresponding to random values, a second correlation coefficient between the n first feedback values and the n random values is calculated, and the second correlation coefficient is the second correlation coefficient. 1 Only when authentication for the first user terminal 130 is completed by checking whether it matches the correlation coefficient, the first user terminal 130 transmits the access rights information of the document file for the first secure document, and 1 The user terminal 130 executes the document file for the first security document based on the browsing permission information only when the reading permission information of the document file for the first secure document is received. By displaying the first security document on the screen, it is possible to prevent unauthorized users from randomly reading the security document.

On the other hand, according to an embodiment of the present invention, when the authentication for the first user terminal 130 is not completed, the viewing authority information transmission unit 116 transmits the first security document to the first user terminal 130. Instead of the reading permission information of the document file, a transmission failure message of the reading permission information may be transmitted.

For example, as in the example described above, assume that the first security document is'security document 1'. If the authentication for the first user terminal 130 is not completed, the viewing authority information transmission unit 116 is the first user terminal 130 to access the document file for the first security document'secure document 1'. Instead of the information, a transmission failure message of the browsing authority information may be transmitted.

According to an embodiment of the present invention, the document management server 110 includes an OTP storage unit 117 and a bit string generation unit 118 so that only a user who has obtained separate editing rights can edit a secure document. ), a verification request transmission unit 119 and an editing authority information transmission unit 120 may be further included.

The OTP storage unit 117 stores a predetermined OTP (One Time Password) generation function capable of generating a one-time authentication number based on a current time value.

Here, the OTP refers to a one-time authentication number that is randomly generated instead of a fixed password, and the OTP generation function is a function that can be set in advance by a developer, and may be set to generate a one-time authentication number based on a current time value. have.

The bit string generator 118 executes the document file for the first security document in the first user terminal 130 and displays the first security document on the screen. When a request for granting permission to edit a document file for the first secure document displayed above is received, a first one-time authentication number is generated based on the OTP generation function, and a first one-time authentication number is generated from the first one-time authentication number. After checking a number corresponding to a predetermined number of digits, a random bit sequence having a preset length is randomly generated while having a Hamming weight corresponding to the size of the number.

Here, the hamming weight refers to the number of '1' in the data composed of codes of '0' and '1', and the number of digits can be set in advance by the developer, a number indicating the number of digits from the left Can be set to

The verification request transmission unit 119 transmits the random bit sequence to the first user terminal 130 and transmits a verification request for the random bit sequence to the first user terminal 130.

For example, as in the example described above, assume that the first security document is'security document 1'. After the first user terminal 130 executes a document file for the first security document'security document 1'and the first security document'security document 1'is displayed on the screen, the first user terminal 130 ) From the document management server 110, when a request for granting permission to edit a document file for'secure document 1', which is the first secure document displayed on the screen, is received, the bit string generator 118 performs the OTP generation function. The first one-time authentication number according to the current time value may be generated, and if the first one-time authentication number is generated as '123456' and the preset number of digits is 2, the bit string generator 118 May identify '2', which is the second digit of '123456', which is the first disposable authentication number. Thereafter, the bit string generator 118 may randomly generate a random bit string having the preset length while having a hamming weight corresponding to the size of the number '2'. In relation to this, when the preset length is set to '6', the bit stream generator 118 may randomly generate a 6-bit random bit stream having a length of 6 while the number of '1's is two.

For example, when it is said that the random bit string is generated as '000101', the verification request transmission unit 119 transmits the random bit string '000101' to the first user terminal 130, while the first user terminal 130 ), a verification request for the random bit string '000101' may be transmitted.

In this case, according to an embodiment of the present invention, the first user terminal 130 may store the same OTP generation function for verification as the OTP generation function in a memory.

If, while the random bit string is received from the document management server 110 to the first user terminal 130 and a verification request for the random bit string is received, the first user terminal 130 is stored in the memory. Hamming of the random bit sequence by generating a verification disposable authentication number according to the current time value based on the verification OTP generation function, and then checking the verification number corresponding to the preset number of digits in the verification disposable authentication number. It can be checked whether the weight matches the Hamming weight corresponding to the size of the verification number.

In this case, when it is determined that the hamming weight of the random bit string matches the hamming weight corresponding to the size of the verification number, the first user terminal 130 processes the verification of the random bit string to be completed, and the document management server A verification confirmation message for the random bit stream may be transmitted to (110).

In connection with, as in the above-described embodiment, when the first user terminal 130 receives the random bit string '000101' from the document management server 110 and the verification request for the random bit string is received , The first user terminal 130 generates '123456', which is a one-time authentication number for verification according to a current time value, based on the verification OTP generation function stored in the memory, and then, the one-time authentication number for verification. At, the verification number '2' corresponding to the preset number of digits '2' can be checked.

Thereafter, the first user terminal 130 may check whether the hamming weight of the random bit sequence matches the hamming weight corresponding to the size of '2', which is the verification number.

In the present embodiment, the hamming weight of the random bit string is '2', which corresponds to the verification number, and the hamming weight of the random bit string '2' and the verification number '2' coincide with each other. It can be seen that it is correct that the column is generated based on the one-time authentication number derived based on the same OTP generation function shared in advance between the document management server 110 and the first user terminal 130.

Accordingly, when it is determined that the hamming weight of the random bit string matches the hamming weight corresponding to the size of the verification number, the first user terminal 130 may complete verification of the random bit string.

In this way, when the verification of the random bit stream is completed, the first user terminal 130 may transmit a verification confirmation message for the random bit stream to the document management server 110.

When the verification confirmation message for the random bit string is received from the first user terminal 130, the editing permission information transmission unit 120 transmits the editing permission information of the document file for the first secure document to the first user terminal 130. To transmit.

At this time, according to an embodiment of the present invention, when the first user terminal 130 receives the editing permission information of the document file for the first secure document from the document management server 110, the first user terminal 130 is based on the editing permission information. The first security document displayed on the screen may be converted into an editable state.

For example, as in the example described above, assume that the first security document is'security document 1'. When a verification confirmation message for the random bit string is received from the first user terminal 130 to the document management server 110, the editing authority information transmission unit 120 transmits the first security document to the first user terminal 130. You can send the information on the editing authority of the document file for'Security Document 1'.

Then, when the first user terminal 130 receives editing authority information of the document file for the first security document'secure document 1'from the document management server 110, the first user terminal 130 The first security document'secure document 1'displayed on the screen may be converted into an editable state based on editing authority information.

That is, the first user terminal 130 sends the random bit to the document management server 110 only when the hamming weight of the random bit string matches the hamming weight corresponding to the size of the number for verification based on the pre-issued OTP generation function. Transmits a verification confirmation message for the row, and the document management server 110 sends the first security document to the first user terminal 130 only when the verification confirmation message for the random bit sequence is received from the first user terminal 130. The first user terminal 130 transmits the editing permission information of the document file for, and the first user terminal 130 only when the document file editing permission information for the first secure document is received from the document management server 110, the displayed on the screen. By switching the first security document to an editable state, it is possible to prevent unauthorized users from arbitrarily editing the security document.

FIG. 2 is a flowchart illustrating a method of operating a document management server that grants authority to a secure document through user authentication based on face recognition according to an embodiment of the present invention.

In step S210, a composite information storage unit in which a face image for each of a plurality of users and information about different correlation coefficients previously designated for use in user authentication for each of the plurality of users are stored in correspondence with each other is maintained. do.

In step S220, when a request for granting access to a document file for a first security document among a plurality of security documents stored in the first user terminal is received from the first user terminal, the first user terminal 1 Requests transmission of a face image of a first user that can be photographed through a camera installed in the user terminal.

In step S230, when the face image of the first user is received from the first user terminal, a feature point comparison between the face images of the plurality of users stored in the complex information storage unit and the face image of the first user is performed. After identifying the first user among the plurality of users through the method, a first correlation coefficient previously designated for the first user is extracted from the complex information storage unit.

In step S240, when the first correlation coefficient is extracted, n (n is a natural number of 2 or more) random values are randomly generated, and the n random values are transmitted to the first user terminal, while the first user Requests transmission of n feedback values corresponding to the n random values to the terminal.

In step S250, n first feedback values from the first user terminal to n feedback values corresponding to the n random values (the n first feedback values have a correlation coefficient with the n random values). When the values generated to be calculated using the first correlation coefficient previously stored in the first user terminal) are received, a second correlation coefficient between the n first feedback values and the n random values is calculated, and the second correlation coefficient is calculated. 2 By checking whether the correlation coefficient matches the first correlation coefficient, authentication for the first user terminal is completed.

In step S260, upon completion of the authentication for the first user terminal, the first user terminal transmits access rights information of the document file for the first security document.

In this case, when the first user terminal receives the reading permission information of the document file for the first security document, the first user terminal executes the document file for the first security document based on the reading permission information to open the first security document. Can be displayed on the screen.

In this case, according to an embodiment of the present invention, the first user terminal stores the first correlation coefficient in a memory, and when the n random values are received from the document management server, the n random values and The n first feedback values calculated from the first correlation coefficient stored in the memory may be randomly generated and transmitted to the document management server.

In addition, according to an embodiment of the present invention, in step S260, if the authentication for the first user terminal is not completed, the first user terminal is used to access the document file for the first security document instead of the permission information. You can send a message that fails to transmit the browsing authority information.

In addition, according to an embodiment of the present invention, the method of operating the document management server includes the steps of maintaining an OTP storage unit in which a predetermined OTP generation function capable of generating a one-time authentication number based on a current time value is stored, the After the document file for the first security document is executed in the first user terminal and the first security document is displayed on the screen, the document file for the first security document displayed on the screen is displayed from the first user terminal. When a request for granting editing authority is received, a first one-time authentication number is generated based on the OTP generation function, and a number corresponding to a preset number of digits in the first one-time authentication number is checked, and then the number of Randomly generating a random bit sequence having a preset length while having a Hamming weight corresponding to the size, transmitting the random bit sequence to the first user terminal, and transmitting the random bit sequence to the first user terminal. Transmitting a verification request and, when a verification confirmation message for the random bit string is received from the first user terminal, transmitting editing authority information of the document file for the first secure document to the first user terminal. Can include.

At this time, according to an embodiment of the present invention, the first user terminal stores the same verification OTP generation function as the OTP generation function in a memory, and when the random bit sequence is received from the document management server, the When a verification request for a random bit string is received, a one-time verification number for verification is generated based on the current time value based on the verification OTP generation function stored in the memory, and then the device is selected from the verification one-time verification number. The verification number corresponding to the set number of digits is checked to determine whether the hamming weight of the random bit sequence matches the hamming weight corresponding to the size of the verification number, and the hamming weight of the random bit sequence is the size of the verification number. When it is determined that it matches the Hamming weight corresponding to, the verification of the random bit sequence is completed, and a verification confirmation message for the random bit sequence may be transmitted to the document management server.

In addition, according to an embodiment of the present invention, when the first user terminal receives editing authority information of a document file for the first secure document from the document management server, the first user terminal displays on the screen based on the editing authority information. The displayed first security document may be converted into an editable state.

In the above, a method of operating a document management server that grants authority to a secure document through user authentication based on face recognition according to an embodiment of the present invention has been described with reference to FIG. 2. Here, the method of operating a document management server that grants authority to a secure document through user authentication based on face recognition according to an embodiment of the present invention performs user authentication based on face recognition described with reference to FIG. 1. Through this, since it may correspond to the configuration of the operation of the document management server 110 that grants authority to the security document, a more detailed description thereof will be omitted.

The method of operating a document management server that grants authority to a secure document through user authentication based on face recognition according to an embodiment of the present invention is implemented as a computer program stored in a storage medium for execution through combination with a computer. Can be.

In addition, the method of operating a document management server that grants authority to secure documents through user authentication based on face recognition according to an embodiment of the present invention is implemented in the form of program commands that can be executed through various computer means. It can be recorded on a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the present invention, or may be known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -A hardware device specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

As described above, in the present invention, specific matters such as specific components, etc., and limited embodiments and drawings have been described, but this is provided only to help a more general understanding of the present invention, and the present invention is not limited to the above embodiments. , If a person of ordinary skill in the field to which the present invention belongs, various modifications and variations are possible from these descriptions.

Therefore, the spirit of the present invention is limited to the described embodiments and should not be defined, and all things that are equivalent or equivalent to the claims as well as the claims to be described later fall within the scope of the spirit of the present invention. .

110: document management server that grants authority to secure documents through user authentication based on face recognition
111: complex information storage unit 112: face image transmission request unit
113: correlation coefficient extraction unit 114: request unit
115: authentication verification unit 116: viewing authority information transmission unit
117: OTP storage unit 118: bit string generation unit
119: verification request transmission unit 120: editing authority information transmission unit

Claims (14)

A complex information storage unit in which face images for each of a plurality of users and information about different correlation coefficients previously designated for use in user authentication for each of the plurality of users are stored in correspondence with each other;
When a request to grant access to a document file for a first security document among a plurality of security documents stored in the first user terminal is received from the first user terminal, the first user terminal mounts it to the first user terminal. A face image transmission request unit for requesting transmission of a face image of a first user that can be photographed through an existing camera;
When the face image of the first user is received from the first user terminal, the plurality of users is performed by comparing feature points between the face images of the plurality of users stored in the composite information storage unit and the face image of the first user. A correlation coefficient extracting unit configured to extract a first correlation coefficient previously designated for the first user from the composite information storage unit after identifying the first user among the first users;
When the first correlation coefficient is extracted, n (n is a natural number of 2 or more) random values are randomly generated, and the n random values are transmitted to the first user terminal. A request unit for requesting transmission of n feedback values corresponding to random values;
N first feedback values from the first user terminal to n feedback values corresponding to the n random values-the n first feedback values have a correlation coefficient with the n random values to the first user terminal Values generated to be calculated using the previously stored first correlation coefficient-When is received, a second correlation coefficient between the n first feedback values and the n random values is calculated, and the second correlation coefficient is the An authentication verification unit for completing authentication for the first user terminal by checking whether it matches a first correlation coefficient; And
When authentication for the first user terminal is completed, a viewing rights information transmission unit for transmitting access rights information of a document file for the first security document to the first user terminal
Including,
The first user terminal
When the reading permission information of the document file for the first secured document is received, face recognition for displaying the first secured document on the screen by executing the document file for the first secured document based on the reading permission information is performed. A document management server that authorizes secure documents through user authentication based. The method of claim 1,
The first user terminal
Storing the first correlation coefficient in a memory,
When the n random values are received from the document management server, a correlation coefficient between the n random values and the n first feedback values calculated by the first correlation coefficient stored in the memory is randomly generated. A document management server that grants authority to a secure document through user authentication based on face recognition transmitted to the document management server. The method of claim 1,
The viewing authority information transmission unit
If the authentication for the first user terminal is not completed, the first user terminal is based on face recognition for transmitting a transmission failure message of the reading permission information instead of the reading permission information of the document file for the first security document. A document management server that authorizes secure documents through user authentication. The method of claim 1,
An OTP storage unit storing a predetermined OTP (One Time Password) generation function capable of generating a one-time authentication number based on a current time value;
A document file for the first security document displayed on the screen from the first user terminal after the first security document is displayed on the screen by executing the document file for the first security document in the first user terminal When a request for granting editing authority of is received, a first one-time authentication number according to the current time value is generated based on the OTP generation function, and a number corresponding to a preset number of digits in the first one-time authentication number is checked. A bit string generator for randomly generating a random bit string having a preset length while having a Hamming weight corresponding to the size of the number;
A verification request transmission unit for transmitting the random bit stream to the first user terminal and transmitting a verification request for the random bit stream to the first user terminal; And
When a verification confirmation message for the random bit string is received from the first user terminal, an editing permission information transmission unit for transmitting editing permission information of a document file for the first secure document to the first user terminal
Document management server for granting authority to a secure document through user authentication based on face recognition further comprising. The method of claim 4,
The first user terminal
The OTP generation function for verification that is the same as the OTP generation function is stored in the memory,
When a verification request for the random bit sequence is received while the random bit sequence is received from the document management server, a one-time verification number for verification according to a current time value based on the verification OTP generation function stored in the memory After generating, by checking the verification number corresponding to the preset number of digits in the verification disposable authentication number, it is checked whether the hamming weight of the random bit string matches the Hamming weight corresponding to the size of the verification number, and ,
When it is confirmed that the hamming weight of the random bit string matches the hamming weight corresponding to the size of the verification number, verification of the random bit string is completed, and a verification confirmation message for the random bit string to the document management server A document management server that grants permission to secure documents through user authentication based on face recognition that transmits the data. The method of claim 4,
The first user terminal
Based on face recognition for converting the first security document displayed on the screen into an editable state based on the editing authority information when editing authority information of a document file for the first security document is received from the document management server A document management server that authorizes secure documents through user authentication. Maintaining a composite information storage unit in which face images for each of a plurality of users and information about different correlation coefficients previously designated for use in user authentication for each of the plurality of users are stored in correspondence with each other. step;
When a request to grant access to a document file for a first security document among a plurality of security documents stored in the first user terminal is received from the first user terminal, the first user terminal mounts it to the first user terminal. Requesting transmission of a face image of a first user that can be photographed through a set camera;
When the face image of the first user is received from the first user terminal, the plurality of users is performed by comparing feature points between the face images of the plurality of users stored in the composite information storage unit and the face image of the first user. Extracting a first correlation coefficient previously designated for the first user from the composite information storage unit after identifying the first user among them;
When the first correlation coefficient is extracted, n (n is a natural number of 2 or more) random values are randomly generated, and the n random values are transmitted to the first user terminal. Requesting transmission of n feedback values corresponding to random values;
N first feedback values from the first user terminal to n feedback values corresponding to the n random values-the n first feedback values have a correlation coefficient with the n random values to the first user terminal Values generated to be calculated using the previously stored first correlation coefficient-When is received, a second correlation coefficient between the n first feedback values and the n random values is calculated, and the second correlation coefficient is the Completing authentication for the first user terminal by checking whether it matches a first correlation coefficient; And
When the authentication for the first user terminal is completed, transmitting information on permission to read the document file for the first security document to the first user terminal
Including,
The first user terminal
When the reading permission information of the document file for the first secured document is received, face recognition for displaying the first secured document on the screen by executing the document file for the first secured document based on the reading permission information is performed. A method of operation of a document management server that authorizes secure documents through user authentication based on user authentication. The method of claim 7,
The first user terminal
Storing the first correlation coefficient in a memory,
When the n random values are received from the document management server, a correlation coefficient between the n random values and the n first feedback values calculated by the first correlation coefficient stored in the memory is randomly generated. A method of operating a document management server to grant authority to a secure document through user authentication based on face recognition transmitted to the document management server. The method of claim 7,
Transmitting the reading permission information of the document file
If the authentication for the first user terminal is not completed, the first user terminal is based on face recognition for transmitting a transmission failure message of the reading permission information instead of the reading permission information of the document file for the first security document. How the document management server works to grant rights to secure documents through user authentication. The method of claim 7,
Maintaining an OTP storage unit in which a predetermined OTP (One Time Password) generation function capable of generating a one-time authentication number based on a current time value is stored;
A document file for the first security document displayed on the screen from the first user terminal after the first security document is displayed on the screen by executing the document file for the first security document in the first user terminal When a request for granting editing authority of is received, a first one-time authentication number according to the current time value is generated based on the OTP generation function, and a number corresponding to a preset number of digits in the first one-time authentication number is checked. , Randomly generating a random bit sequence having a preset length while having a Hamming weight corresponding to the size of the number;
Transmitting a verification request for the random bit stream to the first user terminal while transmitting the random bit stream to the first user terminal; And
When a verification confirmation message for the random bit string is received from the first user terminal, transmitting editing authority information of a document file for the first secure document to the first user terminal
A method of operating a document management server for granting authority to a secure document through user authentication based on face recognition further comprising a. The method of claim 10,
The first user terminal
The OTP generation function for verification that is the same as the OTP generation function is stored in the memory,
When a verification request for the random bit sequence is received while the random bit sequence is received from the document management server, a one-time verification number for verification according to a current time value based on the verification OTP generation function stored in the memory After generating, by checking the verification number corresponding to the preset number of digits in the verification disposable authentication number, it is checked whether the hamming weight of the random bit string matches the Hamming weight corresponding to the size of the verification number, and ,
When it is confirmed that the hamming weight of the random bit string matches the hamming weight corresponding to the size of the verification number, verification of the random bit string is completed, and a verification confirmation message for the random bit string to the document management server A method of operating a document management server that grants authority to a secure document through user authentication based on face recognition that transmits. The method of claim 10,
The first user terminal
Based on face recognition for converting the first security document displayed on the screen into an editable state based on the editing authority information when editing authority information of a document file for the first security document is received from the document management server How to operate a document management server that grants permission to secure documents through one user authentication. A computer-readable recording medium recording a computer program for executing the method of any one of claims 7 to 12 through combination with a computer. A computer program stored in a storage medium for executing the method of any one of claims 7 to 12 through combination with a computer.

Images