WO2010085021A1 - Method and apparatus for personal identification using a symbol array - Google Patents

Abstract

The present invention relates to a method and to an apparatus for personal identification using a personal identification number (PIN), and more particularly to a method and to an apparatus for personal identification which enable a user to indirectly input the personal identification number thereof using a session key determined by the two-dimensional array of the personal identification number. The apparatus for personal identification according to the present invention comprises an input unit, a storage unit, a calculation unit, and a display unit, and is characterized in that the personal identification number is indirectly inputted using a one-time session key determined by the combination of a portion of the personal identification number instead of being directly inputted. Further, the method for personal identification according to the characteristics of the present invention comprises the steps of: (1) receiving a user ID inputted via the input unit; (2) searching the storage unit for the received user ID, and searching for the personal identification symbol corresponding to the relevant user ID; (3) displaying a session key set screen on which symbols to be used as a session key, from among symbols of the personal identification symbol, are arbitrarily arranged to enable the user to recognize the session key determined by the personal identification number; (4) displaying a personal identification number input screen on which symbols to be used as a session key, from among symbols of the personal identification symbol, are arbitrarily arranged to enable the user to input a personal identification number using the session key recognized in the previous step; (5) recognizing the location of the symbol corresponding to the session key whenever a user input is performed via the input button to take the personal identification symbol as an input, in accordance with the user input performed via a symbol-moving button and the input button; and (6) authenticating the user ID if the inputted personal identification symbol matches the stored personal identification symbol corresponding to the user ID. The method and apparatus for personal identification according to the present invention enable a user to indirectly input a personal identification number using the session key determined by the personal identification number whenever personal identification is required, thereby enabling the user to input the personal identification number thereof through a variety of input modes, and improving the security of personal identification.

Description

[Revision 24.11.2009 by Rule 26] Personal identification method and apparatus using symbol array

The present invention relates to a method and apparatus for personal identification using a personal identification number (PIN, password), and indirectly to a personal identification number using a session key determined using a two-dimensional array of personal identification numbers. A personal identification method and apparatus for inputting.

In using a computer, a KIOSK terminal, a bank terminal (ATM), a mobile terminal, and the like, there is a personal identification method (PIN) among the conventional methods used to prove a user's identity. It is a method to identify the correct user by storing the personal identification number specified by the user on the computer and checking whether the stored personal identification number matches the value of the personal identification number entered by the user.

Generally, a personal identification number consists of four digits and there are 10000 cases in the range of 0000 to 9999. Depending on the device, the number of cases may be less than 10,000 since consecutive numbers such as 1111 or numbers associated with personal information may be restricted when used as personal identification numbers. In the case of identifying an individual using the personal identification number, if the personal identification number is known, authentication is performed, otherwise authentication is not performed, so there is no uncertainty about authentication. In addition, no additional cost is required because authentication is attempted through the terminal depending on memory without the need for additional devices. This means that if you choose a personal identification number method to prove your identity, you do not need to consider additional administrative or maintenance costs.

However, this method has a problem in that the instant the user enters the personal identification number, the attacker can easily find the personal identification number simply by glance over the shoulder.

The present invention has been proposed to solve the above problems of the existing method, and in order to identify an individual using a personal identification number (PIN), a session key determined by the personal identification number is not directly inputted. It is an object of the present invention to provide a personal identification method and apparatus with improved safety by allowing a personal identification number to be indirectly entered. In addition, it is another object of the present invention to provide a more secure personal identification method by allowing a session key to be arbitrarily determined by the personal identification number so that various inputs can occur for the same personal identification number.

Personal identification device according to a feature of the present invention for achieving the above object, comprising an input unit, a storage unit, a calculation unit and a display unit,

Instead of directly entering a Personal Identification Number (PIN), it is indirect to enter the Personal Identification Number using a one-time session key determined using a combination of some of the Personal Identification Numbers. It features.

Preferably, the display unit displays a screen for setting a session key and a screen for inputting a personal identification number.

The screen for setting a session key comprises: a first personal identification number arrangement in which numbers from 0 to 9, which may constitute a personal identification number, are arranged in order to be used as a row number for session key selection; A second personal identification number arrangement in which numbers from 0 to 9, which may constitute a personal identification number, are arranged in order to be used as a column number for session key selection; And an array of arbitrary two-dimensional symbols to be used as session keys,

The screen for inputting a personal identification number includes: a personal identification number arrangement in which numbers from 0 to 9 which can constitute a personal identification number are arranged in order; And any symbol arrangement including a symbol determined by the personal identification number to be used as the session key.

More preferably, the input unit comprises: a first symbol moving button for moving a symbol array to the left in the screen for inputting a personal identification number; A second symbol shift button for moving the symbol array to the right; And an input button for completing the input.

Personal identification method according to another aspect of the present invention for achieving the above object,

(1) receiving an ID of a user through an input unit;

(2) searching whether the received user ID is stored in a storage unit, and searching for a personal identification symbol corresponding to the ID;

(3) displaying a session key setting screen arbitrarily arranging symbols to be used as the session key with respect to symbols constituting the personal identification symbol so that a user can grasp the session key determined by the personal identification number;

(4) displaying a personal identification number input screen arbitrarily arranging the symbols to be used as the session key with respect to the symbols constituting the personal identification symbol so that the user can input the personal identification number using the identified session key;

(5) receiving a personal identification symbol by identifying a position of a symbol corresponding to a session key whenever a user input button is input, according to a user input by a symbol moving button and an input button; And

(6) When the input personal identification symbol and the stored personal identification symbol corresponding to the corresponding ID are matched, authentication is included.

Preferably, the step (3) may configure the session key setting screen by arranging the symbols to be used as the session keys with respect to the two-dimensional arrangement of the symbols constituting the personal identification symbol.

According to the present invention, by indirectly inputting a personal identification number using a session key arbitrarily determined by the personal identification number, various inputs can be made even for the same personal identification number, thereby preventing an attack by a peek. . That is, according to the method proposed by the present invention, it can be applied to most environments that used the existing personal identification number, but it is not easy to grasp the personal identification number even when recording and analyzing the process of inputting the personal identification number. It is possible to provide a more secure personal identification method and apparatus.

1 is a view showing the appearance of a personal identification device according to an embodiment of the present invention.

2 is a block diagram showing a display unit for personal identification according to an embodiment of the present invention.

3 is a block diagram showing an input unit for personal identification according to an embodiment of the present invention.

Figure 4 is a flow chart illustrating a personal identification method by a personal identification number in accordance with the present invention.

5 is a diagram illustrating an authentication process when the personal identification number is 1234 according to one embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

100: personal identification device

110: input unit

120: storage unit

130: calculation unit

140: display unit

210: screen for setting a session key

220: Number array for first number of personal identification numbers

230: Arbitrarily arranged two-dimensional symbol array

240: array of numbers for second number

260: screen for entering a personal identification number

270: array of personal identification numbers

280: symbol array

310: First Sign Shift Button (Left)

320: second symbol movement button (right)

330: enter button

590: User input to enter personal identification number 1234

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings and the contents described in the accompanying drawings, but the present invention is not limited or limited to the embodiments.

1 is a view showing an overview of a personal identification device according to an embodiment of the present invention. In the personal identification device illustrated in FIG. 1, the configuration may be divided into an input unit 110, a storage unit 120, an operation unit 130, and a display unit 140.

The input unit 110 is a device for inputting a user's ID through a keyboard, a mouse, a touch screen, a keypad, an RFID, a smart card, a biometric (fingerprint, an iris, a voice, a face), and other methods. The user inputs his or her unique ID through the input unit 110, and the input unit 110 transmits the received ID to the operation unit 130. If the user ID is valid, the user's access is received by receiving a personal identification number (PIN) through a personal identification method according to the access authority. The storage unit 120 stores a user ID and a personal identification number corresponding to the user ID. The calculation unit 130 searches for the ID received from the input unit 110 in the ID list in the storage unit 120 and determines whether it is a valid user ID. If it is a valid ID, a personal identification number corresponding to the ID is taken, and the personal identification number input through the input unit 110 is compared with the personal identification number in the storage unit 120, and the access is accepted if it matches. If the ID is invalid, the display unit 140 informs the user that the ID is invalid. In addition, it arranges the symbols according to the input value received from the input unit 110 and transmits the symbols to the display unit 140. The display unit 140 displays the number array required for the input of the personal identification number and the symbols to be used as the session key on the screen in a two-dimensional array and provides a user with a guide message such as a usage message or an error message. The input unit 110 and the display unit 140 may be a single integrated device.

2 is a view showing an overview of the display unit 140 for personal identification according to an embodiment of the present invention. Looking at the configuration of the display unit 140 shown in Figure 2 is largely composed of a screen 210 for setting the session key and a screen 260 for inputting a personal identification number. Looking at each screen configuration, the screen for setting the session key 210 is the number array 220 and the second number of the personal identification number arranged in order of the number of 0 to 9 which can constitute the first number of the personal identification number It consists of a numeric array 240 in which numbers from 0 to 9, which may constitute a number, are arranged in order, and a symbol array 230 in which a symbol to be used as a session key is arbitrarily arranged. Numeric array 220 may be used as the row number and numeric array 240 may be used as the column number. The next button 250 is a button for the user to check the session key according to the personal identification number in the two-dimensional array output to the display unit 140, and then move to a screen for inputting the personal identification number, the input unit 110 Components are included for convenience of explanation. However, since the input unit 110 and the display unit 140 may be implemented as one integrated device, the next button 250 may be included in the display unit 140. After confirming the determined session key, the user presses the next button 250 to move to the personal identification number input screen 260. The personal identification number input screen 260 is a personal identification number array 270 in which numbers from 0 to 9 which can constitute a personal identification number are arranged in order, and an arbitrary symbol array 280 that can constitute a session key. Consists of.

3 is a view showing an overview of the input unit 110 for personal identification according to an embodiment of the present invention. Referring to the configuration of the input unit 110 shown in FIG. 3, the first symbol shift button for moving the symbol array 280 to the left by one space on the screen 260 for inputting the personal identification number of the display unit 140 ( 310 and a second symbol movement button 320 to move one space to the right, and an input button 330 for completing the input when the symbol corresponding to the session key is in a desired position. The input unit 110 may use a general keyboard, mouse, touch screen, keypad, RFID, smart card, biometric (fingerprint, iris, voice, face) and other means in addition to the form shown in FIG.

4 is a flowchart schematically illustrating a method of authenticating whether a user is a correct user using a personal identification number. Referring to the authentication method according to the flowchart shown in FIG. 4, first, when a user inputs an ID through the input unit 110 of the personal identification device 100, the operation unit 130 of the personal identification device 100 stores the storage unit 120. It is determined whether the ID entered through the authentication list is in the access authority (S410). If the entered ID is not in the authentication list, the authentication fails and ends. If the entered ID exists in the authentication list, the process proceeds to the next step. In this case, the ID may be actively input by the user and may be automatically input by using an RFID or a smart card. If the ID is authenticated, the operation unit 130 brings a personal identification number corresponding to the ID through the storage unit 120 (S420). The calculator 130 arranges the symbols to be displayed on the screen in an arbitrary order (S430), and displays the symbols arranged in the random order on the screen in the form of a two-dimensional array (S440). The user looks at the screen 210 for setting the session key of the display unit 140, for example, the first number of his or her personal identification number as the row number, and the second number of the personal identification number as the column number. Is found in a two-dimensional symbol array arranged in an arbitrary order and used as a session key (S450). When the user presses the next button 250 of the input unit 110, the operation unit 130 of the personal identification device 100 arranges the symbols in an arbitrary order and transmits the symbols to the display unit 140. The display 140 displays the symbols arranged in any order on the symbol arrangement 280 of the screen 260 for inputting the personal identification number (S460).

The user checks the position of the session key figure determined by the personal identification number in the symbol array 280 arranged in any order, and then moves the symbol 310 of the input unit 110 to be located below the first number of the personal identification number. Move symbol array 280 through 320. When the first personal identification number is input through the session key, the symbol array 280 is rearranged by the operation unit 130, and the user moves the session key symbol to be located immediately below the second number of the personal identification number to identify the personal. Enter a number. Similarly, when the personal identification number is input, the symbol array 280 is rearranged by the operation unit 130, and the user inputs the personal identification number by moving the session key symbol to be located immediately below the third number of the personal identification number. When the personal identification number is input, the symbol array 280 is rearranged by the operation unit 130, and finally, the user inputs through the input unit 110 such that the session key symbol is located immediately below the fourth digit of the personal identification number. (S470).

This process is applied in the same way even if the personal identification number is not four digits, and can be applied in the same way even if the personal identification number is composed of letters, figures, images and colors other than numbers.

The operation unit 130 of the personal identification device 100 compares the personal identification number input through the input unit 110 with the personal identification number obtained from the storage unit 120 and authenticates the user as a valid user if they match. Recognizes as an invalid user and disallows authentication (S480).

5 is a diagram illustrating an authentication process when the personal identification number is 1234 and the screen for setting the session key is equal to 510. In the randomly arranged two-dimensional symbol array 512, the user finds the symbol ♥ having the first number of the personal identification number as the row number and the second number 2 as the column number, and uses it as the session key. After confirming the session key symbol according to the personal identification number, the screen 520 for inputting the personal identification number is moved through the next button 514. First, the user presses the symbol array shift button 320 twice to move the cursor two spaces to the right to place ♥ under the first digit 1 of the personal identification number to obtain a screen such as 530. When the user presses the input button 330, the operation unit 130 rearranges the symbols arbitrarily and transmits them to the display unit 140, and the display unit 140 shows the newly arranged screen 540. In the newly arranged screen 540, the user checks the location of ♥ and moves one space to the left to place ♥ below the second number 2 of the personal identification number (550). Then, the input button 330 is pressed to input the second personal identification number 2. By entering the second personal identification number, the user can see the display screen 560 randomly arranged again. The user moves ♥ to the left three spaces to enter the third personal identification number 3 (570). The third personal identification number 3 is input by pressing the input button 330. Then, the user can see the same randomly arranged display screen 580, and if the symbol array having ♥ positioned below the fourth personal identification number 4 is generated, the user presses the input button 330 without moving the symbol array. Enter the fourth personal identification number 4. If the screen for setting the session key given to the user is 510 and the screen for each digit of the personal identification number is equal to 520, 540, 560, and 580, the user enters the personal identification number. The input used to input is equal to 590.

The symbol array 230 may be changed by any means easy for the user to distinguish, such as numbers, letters, shapes, images, and colors, and the personal identification number may be easily identified by the user such as letters, shapes, images, and colors. It can be changed by means. The configuration of the personal identification number can be changed to any number other than four digits.

In addition, according to an embodiment of the present invention, the session key setting by the two-dimensional arrangement may be additionally performed during the input of the personal identification number of the user. For example, in FIG. 5, after the second personal identification number input 550 is completed, the user may be presented with a newly arranged session key setting screen different from the initial session key setting screen 510 to change the session key. The fourth personal identification number can be entered according to the newly set session key.

In the conventional personal identification number input method, the attacker can easily find the personal identification information by peeping over the shoulder once, but the method proposed by the present invention does not directly input the personal identification number, so the attacker who does not know the session key has a shoulder It's safe because you can't easily identify any personally identifiable information just by peeping over it. It can also be applied to most environments that used the existing personal identification number.

As described above, although the present invention has been described with reference to limited embodiments and drawings, the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

Claims (5)

In the personal identification device comprising an input unit, a storage unit, a calculation unit and a display unit, Rather than directly entering a personal identification number (PIN, password), the personal identification number is indirectly entered using a one-time session key determined using a combination of some of the personal identification numbers. Personal identification device. The method of claim 1, The display unit displays a screen for setting a session key and a screen for inputting a personal identification number. The screen for setting a session key comprises: a first personal identification number arrangement in which numbers from 0 to 9, which may constitute a personal identification number, are arranged in order to be used as a row number for session key selection; A second personal identification number arrangement in which numbers from 0 to 9, which may constitute a personal identification number, are arranged in order to be used as a column number for session key selection; And an array of arbitrary two-dimensional symbols to be used as session keys, The screen for inputting a personal identification number includes: a personal identification number arrangement in which numbers from 0 to 9 which can constitute a personal identification number are arranged in order; And any symbol arrangement comprising a symbol determined by the personal identification number to be used as the session key. The method of claim 2, The input unit may include: a first symbol moving button for moving a symbol array to the left in the screen for inputting a personal identification number; A second symbol shift button for moving the symbol array to the right; And an input button for completing the input. (1) receiving an ID of a user through an input unit; (2) searching whether the received user ID is stored in a storage unit, and searching for a personal identification symbol corresponding to the ID; (3) displaying a session key setting screen arbitrarily arranging symbols to be used as the session key with respect to symbols constituting the personal identification symbol so that a user can grasp the session key determined by the personal identification number; (4) displaying a personal identification number input screen arbitrarily arranging the symbols to be used as the session key with respect to the symbols constituting the personal identification symbol so that the user can input the personal identification number using the identified session key; (5) receiving a personal identification symbol by identifying a position of a symbol corresponding to a session key whenever a user input button is input, according to a user input by a symbol moving button and an input button; And (6) if the entered personal identification symbol and the stored personal identification symbol corresponding to the ID match, authenticating Personal identification method comprising a. The method of claim 8, wherein step (3) comprises A personal identification method comprising: a two-dimensional array of symbols constituting a personal identification symbol, randomly arranging symbols to be used as a session key to configure a session key setting screen.

Images