KR20010096428A - Data Base Management System by Non-defect Authentication - Google Patents

Abstract

PURPOSE: A method for creating, storing, and exchanging database through zero-defect authentication is provided to authenticate a person by using a fingerprint and a smart card. CONSTITUTION: A server has a database which stores information of identification number, fingerprint, and personal information of a user. A semiconductor card stores information of identification number, fingerprint, and personal information of a card holder. A first process compares the fingerprint information of the card holder with the fingerprint information of the user, and admits an authentication if the sensed fingerprint information accords with the stored fingerprint information. A second process compares the information stored in the database with the information sent by the card holder, and admits the user to access the server computer if the information sent by the card holder accords with the information stored in the database.

Description

How to create, store and exchange a database through flawless authentication {Data Base Management System by Non-defect Authentication}

The present invention is to solve the existing phenomenon that is not easy to identify and authenticate on the Internet and communication by a defect-free authentication method using a contactless (RF-Radio Frequency) smart card reader (hereinafter referred to as a card reader) and a fingerprint recognition, analysis, and reading system. It was.

Using a function of smart card reader and fingerprint sensor, it is possible to convert credit card with magnetic stripe (MS) which is widely used, and to use smart card reader and fingerprint sensor. The purpose is to enable digital authentication. Accordingly, an object of the present invention is to use a fingerprint recognition / analysis / reading function and a reader function of various RF (Radio Frequency) cards, such as the international standard ISO7812 / 7816 or an equivalent smart card 400, without defects. It is to provide an environment for authentication.

As of yet, there has not yet been a type of technology in which this type of complex application technology and the function of the composite application are integrated into one worldwide. Let's promote development.

1 is a description of the overall structure of the present invention

2 is a flow chart of the fingerprint information of the present invention.

3 is a flow chart for FIG. On-Line Authentication.

<Brief description of symbols for the main parts of the drawings>

100: server 120: terminal

140: communication 200: card

220: holder (smart card holder) 300: database

320: Personal Information 340: Identification Number

360: notary 400: card reader

420: fingerprint scanner 440: monitor

500: authentication 540: connection

Server 100; A central computer that meets the cardholder's needs through communications. Include a database. Terminal 120; A cardholder's terminal; A computer that communicates with a cardholder (Clients's Terminal). Communication 140; This includes all methods of communication between server and terminal through modem communication, communication mechanism, communication method, LAN, and WAN network.

Card 200; It refers to a smart card, and stores the cardholder's personal information and fingerprint information. Holder 220 (card holder); The bona fide owner of the card that stores the information. Database 300; a database in the server that stores information provided by the cardholder. Personal information 320; Information about you provided by the cardholder. If necessary, notarization may be provided and stored. Identification number 340; ID number; A number that can easily identify the cardholder. Notary unit 360; Information notarized by a notary public. Card reader 400; smart card reader function, read the card. Fingerprint scanner 420; Fingerprint sensor. Read your fingerprint. A monitor 440; Display apparatus. Authentication 500; If the information is the same as the registered information, the server access permission, the same person and the same identity are granted. Connection 540; referring to a connection with a server; Control, Access

I have applied for a defect-free authentication system with a fingerprint and smart card reading system in Utility Model Applications 20-2000-0006864 and 20-2000-0008052. This invention is comprised using the apparatus. First, the present invention begins by authenticating the identity of the cardholder 220 (500). It is assumed that each of the parties described above is connected on-line to communication 140.

The server 100 includes computer-based computing functions of any size and performance. The server 100 has a database 300 that stores personal information 320, personal information, fingerprint information or credit information. The functions of the server 100, at the request of the cardholder 220, compare the information provided from the cardholder 220 with the information already stored and the information stored therein at the request of the authentication 500 via the communication 140. And a function of responding to the service request of the cardholder 220, including the function of issuing an authorization or rejection of the authentication 500 (recognition, reading, identification) and the connection 540 to the server 100.

The card 200 includes personal information 320, personal information, fingerprint information, credit information, or separately provided information of the cardholder 220. Information stored in the card 200 is stored encrypted (not a specific method). The card 200 may be purely for identification purposes, and may include a card 200 that may be used as a micropayment or a credit card on the Internet as information included in the card 200.

The terminal 120 (Client's Terminal) of the cardholder 220 should have at least a condition capable of communicating 140 online with a personal computer (PC), a keyboard, a monitor 440, and the server 100. In addition, it is preferable to include a fingerprint scanner 420 and a card reader 400.

The cardholder 220 requests 540 to connect to the server 100 to start the service, and the server 100 requests to provide basic information for accessor authentication 500 of the cardholder 220 to configure the service. .

1 is a description of the overall structure of the present invention.

Preferred authentication 500 methods and data processing flows are described in detail below.

Example 1;

2, there is a description of initial user registration. After the terminal 120 of the cardholder 220 starts operation (P-1), the system is initialized in step P-2; the description is provided or displayed on the monitor 440. The monitor 440 instructs the card holder 220, the terminal 120 user to read the card 200, and instructs the reader 420 to read the fingerprint. In step P-2, according to the indication of the display monitor 440, the user causes the card 200 to be read by the card reader 460, and the fingerprint is read by the fingerprint scanner 420. In step P-3, information about the fingerprint is detected, and the stored personal information is encrypted (not a specific method) and stored in the database 300.

In the process of inputting information from step P-1 to step P-3, at the request of the cardholder 220, if necessary, the notarized part 360 of the notary public may be input. In step P-3, the detected fingerprint information and the personal information are classified arbitrarily and arbitrarily provided or classified as legally binding information stored in front of a notary public.

Preferred embodiment 2;

2; Description of the fingerprint authentication process 500,

Step P-1; Start fingerprint authentication.

Step P-2; As the system is initialized, after the cardholder terminal 220 starts to operate, the description is displayed on the monitor 440. The monitor 440 instructs the terminal 120 of the card holder 220 to contact the card 200 and instructs the fingerprint reader 420 to read the fingerprint.

Step P-3; According to the instruction of the monitor 440, the user causes the card reader 460 to read the card 200 and the fingerprint scanner 420 to read the fingerprint. Thus, information on the fingerprint is sensed, and the personal information stored in step P-5 is recognized (read / identified).

Step P-4; In case of the initial user, the fingerprint information is registered in the memory device and goes back to P-1 ;.

Step P-5; At P-3, the detected fingerprint information is compared with the stored fingerprint information to determine whether it matches. The comparison result is

Irradiated at step P-6; If there is a match, in step S-3, the fingerprint information detected by the fingerprint scanner 420 and the stored personal information read by the card reader 400 are authenticated 500 signals from the terminal 120 to the server 100. Is sent with. Thus, the detected fingerprint information is compared with the personal information 38 stored on the database 300 of the server 100. If the information transmitted by the terminal 120 of the cardholder 220 matches the information stored in the database 300,

In step P-7; the permission signal is transmitted to the card holder terminal 220 (120),

Application can be performed in step P-8. On the other hand, if there is a mismatch,

In step P-9; the reject signal is transmitted to the cardholder terminal 220 or no signal is transmitted. In step P-3, if the detected fingerprint information and the fingerprint information stored in the server 100 do not match,

In step P-10, an access denied message appears. In this case, the information is not transmitted from the terminal 120 of the cardholder 220 to the server 100.

If the cardholder 220 is authenticated 500 that the cardholder 220 is a bona fide card, the server 100 can log on the application software, encrypt the application data, decrypt the data using an encryption key, provide stored data, and Private services such as verification can be performed.

Once authorized as a user of a private service performed by the server 100 performing various other public services, the user is a cardholder 220 terminal (e.g., equipped with a personal identity authentication 500 system) according to the present invention. Any of 120 may be used to request a service from the server 100.

Preferred example 3;

3 is a description of identity authentication online,

In step S1, authentication is started. In step S2, A requests authentication 500 from the server with his card 200 and fingerprint. In step S3, the server 100 authenticates its identity (200) and authorizes the connection (540). In step S4, B requests authentication 500 from the reader with his card 200 and fingerprint. In step S5, the server authenticates itself 500 and authorizes connection 540. In step S6, A asks the leader for authentication (500) that he is B. In step S7, the server authenticates A to the identity of B (500). In step S8, B asks the leader to authenticate 500 that he is A. In step S9, the server authenticates (B) 500 to B. In step S10, it is confirmed that A and B are each other. In step S11, A identifies B and provides mutual dialogue and information and services. In step S12, B identifies A and provides mutual dialogue and information and services.

Hence, with the database 300 of personal information, the server 100 can authenticate 500 that the party currently connected 540 is itself on-line. In this case, there are three stages of certification: authenticating using the information provided by the principal, authenticating and verifying certificates issued by the government (resident registration card, driver's license, etc.), and authenticating with notarized data. .

Preferred Example 4; Proof of defects on the Internet and in communications;

The flaw of mutual authentication in the Internet and communication is one of many controversial issues. Confirming the user's uniqueness and mutual intention, authenticating it and keeping an accurate record is an essential goal to pursue.

The present invention will be described below as a way to achieve this completely. This is done under the premise that the smart card 200 is not physically replicable and that nobody is the same fingerprint and that all parties involved in the authentication are on-line.

In the logic that can guarantee the uniqueness, since it is impossible to physically copy due to the high level of internal data encryption possessed by the smart card 200, it is understood that the card 200 is the only card only through strict issue management. Upon reading it is authenticated. However, when the card 200 is read from a remote location, the first verification is performed in the field by analyzing the fingerprint data recorded in the card 200 and the fingerprint scan data of the user in order to prove that the owner is the user. When compared with the data registered in the database 300 of the server 100 is accurate verification. Therefore, the fingerprint scanner 420 and the card reader 400 in the method of the present invention can fully prove that the uniqueness, authenticity and well-being of the card holder 220. In this case, it is not possible to deny the identity of the transaction record as well as the confirmation of the identity and the contents of the conversation.

Therefore, it is possible to strictly and accurately reproduce certain persons, to verify records exchanged with each other, and to verify that they are the same person.

Through the flawless authentication 500 from the server 100, it is possible to provide a personal identity authentication method 500 and a personal identity authentication device 500 that can be connected to the server 100 (540), the server There is an effect that can exchange highly reliable information in a very secure manner between third parties that have received the mutual identity 500 on-line from (100).

Claims (6)

In the personal identification system 500, A server having a database 300 for storing information about an identification number 340 assigned to a user who is allowed to access the server 100 and information on a fingerprint, personal information, etc. of the allowed user; Including a computer; A semiconductor card 200 for storing information on the cardholder's identification number 340 and information including the fingerprint and personal information of the cardholder 220; A terminal 120 (client's terminal) of the cardholder 220 communicating with the server 100; Comparing the fingerprint information of the user with the fingerprint information of the stored card holder 220 to allow authentication 500 when the detected fingerprint information matches the stored fingerprint information; By comparing the information sent from the cardholder 220 with the information stored in the database 300, if the transmitted information matches the information stored in the database 300, the terminal 500 authenticates the terminal 500. 120) Personal identification system (500) system comprising allowing a user (540) access to a computer of server (100). In the method 500 for authenticating personal identity to a terminal 120 communicating with a server 100 having a database 300, a user of a user who is allowed to access the computer of the server 100 is allowed. Storing the identification number 340 and information about the fingerprint in the database 300; Storing information relating to each identification number and fingerprint in the card 200; Providing an instruction to a user of the terminal 120 by providing a description monitor 440 to the terminal 120 user; Detecting a fingerprint of a user of the terminal 120; Reading information stored on the card 200; Comparing the detected fingerprint information with the stored fingerprint information of the card holder 220; Comparing the transmitted information with the information stored on the database 300; And authorizing the terminal (120) user to access the computer (540) if the transmitted information matches the information stored on the database (300). Storing information about the identification number 340 and fingerprint of a user who is registering to allow access to the server 100 or who has already been granted access 540 in the database 300, the database 300 Classifying the information content of the rating according to the value of the information; Classifying the information content of the database 300 at the request of the cardholder 220; Notarizing the content of information in the database 300; Inputting notarized information into the database 300; The notarized database 300; The method of claim 3, wherein At the request of the contents of the database 300 and the cardholder 220 (information provider), the step of authenticating the homogeneity (500) compared to the new inquiry; The method according to claim 4, As shown in Figure 3, the step of authenticating the identity 500 online; Initiation of S-1 authentication; S-2 A requesting the user's authentication from the server with his card and fingerprint; Comprising the S-3 server 100 authenticates the identity to the A (500) and compares the data of the database 300 to allow the connection (540); S-4B requesting his own authentication from the server with his card and fingerprint; The S-5 server 100 authenticates the identity to the B 500 by comparing the data of the database 300 to allow the connection 540; S-6 A requesting the server 100 to authenticate B as the identity of B; The S-7 server authenticating to the A that the B is 500; S-8 B requesting the server 100 to authenticate A's identity 500; The S-9 server authenticating to the B that it is A (500); S-10 A and B identify each other as an identity; S-11, S-12 identifying each other and providing mutual dialogue and information and services; identity authentication method comprising 500 The method of claim 4, wherein Granting or delivering the database 300 of the authentication 500 to a third party at least partially or at the request of the cardholder 220;