WO2011149214A3 - 오티피를 생성하기 위해 홍채정보를 이용한 쓰리-팩터 사용자 인증방식과 무선통신단말기의 오티피 인증모듈을 이용한 안전한 상호인증시스템 - Google Patents
오티피를 생성하기 위해 홍채정보를 이용한 쓰리-팩터 사용자 인증방식과 무선통신단말기의 오티피 인증모듈을 이용한 안전한 상호인증시스템 Download PDFInfo
- Publication number
- WO2011149214A3 WO2011149214A3 PCT/KR2011/003668 KR2011003668W WO2011149214A3 WO 2011149214 A3 WO2011149214 A3 WO 2011149214A3 KR 2011003668 W KR2011003668 W KR 2011003668W WO 2011149214 A3 WO2011149214 A3 WO 2011149214A3
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- authentication
- otp
- iris information
- communication terminal
- wireless communication
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
- G06Q20/4014—Identity check for transactions
- G06Q20/40145—Biometric identity checks
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
- H04L63/0838—Network architectures or network communication protocols for network security for authentication of entities using passwords using one-time-passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0869—Network architectures or network communication protocols for network security for authentication of entities for achieving mutual authentication
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Computer Security & Cryptography (AREA)
- Accounting & Taxation (AREA)
- Computer Hardware Design (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Physics & Mathematics (AREA)
- Computing Systems (AREA)
- General Physics & Mathematics (AREA)
- Signal Processing (AREA)
- Finance (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- Biomedical Technology (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Software Systems (AREA)
- Mobile Radio Communication Systems (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
본 발명은 OTP를 생성하기 위해 홍채정보를 이용하여 사용자를 인증하며 HMAC 기반으로 한 3-factor 인증방식으로 OTP를 생성하고 암호화를 수행하고, 운영 프로그램이 저장된 프로그램 메모리 및 암호화된 키 값들의 저장 관리를 실시간으로 홍채를 직접 입력하여 관리하는 방식, 무선통신 단말기의 인증을 서비스 제공 서버를 통한 OTP통합인증서버의 인증과 선인증서버를 통한 공인인증기관의 인증이라는 두 방향의 인증방식을 상호 인증 시키는 방식, 통신상에서 DoS 공격을 방지하기 위하여 사용자와 서버간의 통신상의 패킷을 홍채 인증을 통해서만 서비스 이용이 가능 하도록 하는 방식, 어플리케이션 및 드라이브의 원본 및 패치파일을 홍채정보를 통해 보호하고 수시로 감시하여 시스템을 보호하는 방식을 포함하는 것을 방식들을 통해 상기 사용자 소유의 무선 통신 단말기의 보안 및 통제를 구현함으로써 안전한 전자상거래 서비스가 가능하게 하는 보안시스템이다.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US13/700,494 US20130268444A1 (en) | 2010-05-28 | 2011-05-18 | Three-factor user authentication method for generating otp using iris information and secure mutual authentication system using otp authentication module of wireless communication terminal |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
KR1020100050254A KR101198120B1 (ko) | 2010-05-28 | 2010-05-28 | 홍채정보를 이용한 양방향 상호 인증 전자금융거래시스템과 이에 따른 운영방법 |
KR10-2010-0050254 | 2010-05-28 |
Publications (2)
Publication Number | Publication Date |
---|---|
WO2011149214A2 WO2011149214A2 (ko) | 2011-12-01 |
WO2011149214A3 true WO2011149214A3 (ko) | 2012-01-12 |
Family
ID=45004521
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/KR2011/003668 WO2011149214A2 (ko) | 2010-05-28 | 2011-05-18 | 오티피를 생성하기 위해 홍채정보를 이용한 쓰리-팩터 사용자 인증방식과 무선통신단말기의 오티피 인증모듈을 이용한 안전한 상호인증시스템 |
Country Status (3)
Country | Link |
---|---|
US (1) | US20130268444A1 (ko) |
KR (1) | KR101198120B1 (ko) |
WO (1) | WO2011149214A2 (ko) |
Families Citing this family (59)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7162035B1 (en) | 2000-05-24 | 2007-01-09 | Tracer Detection Technology Corp. | Authentication method and system |
US8171567B1 (en) | 2002-09-04 | 2012-05-01 | Tracer Detection Technology Corp. | Authentication method and system |
US9258124B2 (en) * | 2006-04-21 | 2016-02-09 | Symantec Corporation | Time and event based one time password |
US7995196B1 (en) | 2008-04-23 | 2011-08-09 | Tracer Detection Technology Corp. | Authentication method and system |
US8281372B1 (en) * | 2009-12-18 | 2012-10-02 | Joel Vidal | Device, system, and method of accessing electronic mail |
US8850535B2 (en) * | 2011-08-05 | 2014-09-30 | Safefaces LLC | Methods and systems for identity verification in a social network using ratings |
US8819769B1 (en) * | 2012-03-30 | 2014-08-26 | Emc Corporation | Managing user access with mobile device posture |
CN102882847B (zh) * | 2012-08-24 | 2015-05-13 | 山东省计算中心 | 基于sd密码卡的物联网健康医疗服务***的安全通信方法 |
KR101296402B1 (ko) | 2012-11-19 | 2013-08-14 | 주식회사 엔에스에이치씨 | 암호화된 시드를 이용한 모바일 오티피 장치의 등록 방법 |
WO2015130844A2 (en) * | 2014-02-25 | 2015-09-03 | Liesenfelt Brian T | Method for separating private data from public data in a database |
US10515129B2 (en) | 2014-06-13 | 2019-12-24 | Upbreeze Incorporated Limited | Facilitating inter-entity communications |
US10013495B2 (en) * | 2014-06-13 | 2018-07-03 | Upbreeze Incorporated Limited | Intra-affiliation and inter-affiliation postings management |
US10430599B1 (en) * | 2014-06-30 | 2019-10-01 | EMC IP Holding Company LLC | Filekey access to data |
CN104185176B (zh) * | 2014-08-28 | 2017-10-20 | 中国联合网络通信集团有限公司 | 一种物联网虚拟用户识别模块卡远程初始化方法及*** |
CN105450611B (zh) * | 2014-08-29 | 2018-08-14 | 阿里巴巴集团控股有限公司 | 终端之间的通信方法及其装置 |
FR3030817B1 (fr) * | 2014-12-22 | 2017-01-13 | Oberthur Technologies | Procede d'authentification d'un utilisateur, module securise, appareil electronique et systeme associes |
JP2018507646A (ja) | 2015-02-27 | 2018-03-15 | テレフオンアクチーボラゲット エルエム エリクソン(パブル) | 通信デバイスとネットワークデバイスとの間の通信におけるセキュリティ構成 |
KR101787389B1 (ko) * | 2015-06-08 | 2017-10-20 | 주식회사 아이리시스 | Otp기능을 이용한 홍채인식 usb장치 및 그 제어방법 |
CN106341372A (zh) * | 2015-07-08 | 2017-01-18 | 阿里巴巴集团控股有限公司 | 终端的认证处理、认证方法及装置、*** |
JP6516009B2 (ja) * | 2015-07-10 | 2019-05-22 | 富士通株式会社 | 機器認証システム、管理装置及び機器認証方法 |
KR102441758B1 (ko) * | 2015-07-14 | 2022-09-13 | 삼성전자주식회사 | 전자 장치, 인증 대행 서버 및 결제 시스템 |
US10277595B2 (en) * | 2015-12-11 | 2019-04-30 | International Business Machines Corporation | Identity recognition with living signatures from multiple devices |
US11521192B2 (en) * | 2015-12-22 | 2022-12-06 | Nti, Inc. | Settlement system, user terminal and method executed thereby, settlement device and method executed thereby, and program |
KR20170115235A (ko) * | 2016-04-07 | 2017-10-17 | 삼성전자주식회사 | 생체 정보 인증 방법 |
KR101746102B1 (ko) * | 2016-04-28 | 2017-06-13 | 주식회사 센스톤 | 무결성 및 보안성이 강화된 사용자 인증방법 |
CN105871901B (zh) * | 2016-05-25 | 2019-09-20 | 深圳时瑞鸿科技有限公司 | 动态物联网安全加密的方法 |
KR102510868B1 (ko) * | 2016-07-07 | 2023-03-16 | 삼성에스디에스 주식회사 | 클라이언트 시스템 인증 방법, 클라이언트 장치 및 인증 서버 |
FR3054056B1 (fr) * | 2016-07-13 | 2018-06-29 | Safran Identity & Security | Procede de mise en relation securisee d'un premier dispositif avec un deuxieme dispositif |
KR20180009275A (ko) * | 2016-07-18 | 2018-01-26 | 삼성전자주식회사 | 사용자 인증 방법 및 이를 지원하는 전자 장치 |
CN109496403B (zh) * | 2016-07-25 | 2023-06-23 | 罗伯特·博世有限公司 | 用于具有前向隐私与委托可验证性的动态可搜索对称加密的方法和*** |
US10764734B2 (en) * | 2016-09-28 | 2020-09-01 | Intel Corporation | Service operation management using near-field communications |
KR20180066522A (ko) * | 2016-12-09 | 2018-06-19 | 엘지전자 주식회사 | 이동 단말기 및 그 제어 방법 |
KR101960797B1 (ko) * | 2016-12-15 | 2019-07-17 | 주식회사 아이리시스 | 생체 정보를 이용한 otp 인증 방법 및 이를 실행하는 시스템 |
TWI637620B (zh) * | 2016-12-26 | 2018-10-01 | 中華電信股份有限公司 | Dynamic attribute authentication agent signature system and method thereof |
KR102079626B1 (ko) * | 2017-01-06 | 2020-04-07 | 경일대학교산학협력단 | 모바일 환경에서 생체 인증 기반 경량 상호 인증 프로토콜을 이용한 정보 은닉 시스템, 이를 위한 방법 및 이 방법을 수행하기 위한 프로그램이 기록된 컴퓨터 판독 가능한 기록매체 |
US10609044B2 (en) | 2017-06-12 | 2020-03-31 | International Business Machines Corporation | Enforcing access control in trigger-action programming using taint analysis |
JP7123540B2 (ja) | 2017-09-25 | 2022-08-23 | キヤノン株式会社 | 音声情報による入力を受け付ける情報処理端末、方法、その情報処理端末を含むシステム |
JP7013193B2 (ja) | 2017-10-10 | 2022-01-31 | キヤノン株式会社 | システム、システムの制御方法、音声操作装置、音声操作装置の制御方法、およびプログラム |
CN107798533A (zh) * | 2017-11-22 | 2018-03-13 | 深圳市美舜科技有限公司 | 一种基于可见光通讯的支付信息分发*** |
TWI649997B (zh) * | 2017-12-20 | 2019-02-01 | 中華電信股份有限公司 | 物聯網系統及其資訊安全通訊方法 |
JP7163656B2 (ja) * | 2018-07-30 | 2022-11-01 | 株式会社リコー | 配信システム、受信クライアント端末、配信方法 |
MX2021003138A (es) | 2018-10-02 | 2021-05-14 | Capital One Services Llc | Sistemas y metodos para autentificacion criptografica de tarjetas sin contacto. |
US10951609B2 (en) | 2018-11-05 | 2021-03-16 | International Business Machines Corporation | System to effectively validate the authentication of OTP usage |
CN110544098B (zh) * | 2019-08-01 | 2023-04-07 | 张桓 | 一种应用静脉识别的新型支付方法和装置 |
US11200548B2 (en) | 2019-12-09 | 2021-12-14 | Evan Chase Rose | Graphical user interface and operator console management system for distributed terminal network |
US11113665B1 (en) | 2020-03-12 | 2021-09-07 | Evan Chase Rose | Distributed terminals network management, systems, interfaces and workflows |
US10902705B1 (en) | 2019-12-09 | 2021-01-26 | Evan Chase Rose | Biometric authentication, decentralized learning framework, and adaptive security protocols in distributed terminal network |
US10873578B1 (en) | 2019-12-09 | 2020-12-22 | Evan Chase Rose | Biometric authentication, decentralized learning framework, and adaptive security protocols in distributed terminal network |
US11394766B2 (en) * | 2020-04-15 | 2022-07-19 | Wells Fargo Bank, N.A. | Systems and methods for establishing, using, and recovering universal digital identifiers |
CN111954211B (zh) * | 2020-09-07 | 2023-05-02 | 北京计算机技术及应用研究所 | 一种移动终端新型认证密钥协商*** |
CN112261444B (zh) * | 2020-10-16 | 2022-11-25 | 成都华栖云科技有限公司 | 一种基于虚拟网关的媒体流加密方法 |
CN112583584B (zh) * | 2020-11-30 | 2022-03-25 | 郑州信大捷安信息技术股份有限公司 | 一种基于随机数的服务监控***及方法 |
KR102271128B1 (ko) | 2021-01-08 | 2021-06-30 | (주) 해피이엔지 | 무전원 스마트 자동 판매기 시스템 |
CN112968864A (zh) * | 2021-01-26 | 2021-06-15 | 太原理工大学 | 一种可信的IPv6网络服务过程机制 |
US20220360444A1 (en) * | 2021-05-10 | 2022-11-10 | Michael James Reiman | Device and location authentication for secure patient monitoring |
CN113472793B (zh) * | 2021-07-01 | 2023-04-28 | 中易通科技股份有限公司 | 一种基于硬件密码设备的个人数据保护*** |
CN113259134B (zh) * | 2021-07-06 | 2021-10-15 | 浙江宇视科技有限公司 | 基于人脸识别的服务器防护方法、装置、设备及介质 |
US11386194B1 (en) * | 2021-07-09 | 2022-07-12 | Oversec, Uab | Generating and validating activation codes without data persistence |
CN117579254B (zh) * | 2024-01-16 | 2024-03-12 | 金财数科(北京)信息技术有限公司 | 一种数据传输的加密方法及***、装置 |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030152254A1 (en) * | 2000-11-01 | 2003-08-14 | Tai-Dong Ha | User authenticating system and method using one-time fingerprint template |
KR20060119796A (ko) * | 2005-05-17 | 2006-11-24 | 이바도 | 출력제어기능을 갖는 무선통신단말기 |
KR20080075956A (ko) * | 2007-02-14 | 2008-08-20 | 에스케이씨앤씨 주식회사 | 생체정보를 이용하는 사용자 인증방법 |
KR20100033904A (ko) * | 2008-09-22 | 2010-03-31 | 이호일 | 신개념 전자화폐 시스템 및 그 운영 방법 |
Family Cites Families (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
AU2002332414A1 (en) * | 2001-07-12 | 2003-01-29 | Atrua Technologies, Inc. | Method and system for determining confidence in a digital transaction |
US6853739B2 (en) * | 2002-05-15 | 2005-02-08 | Bio Com, Llc | Identity verification system |
US8473754B2 (en) * | 2006-02-22 | 2013-06-25 | Virginia Tech Intellectual Properties, Inc. | Hardware-facilitated secure software execution environment |
-
2010
- 2010-05-28 KR KR1020100050254A patent/KR101198120B1/ko not_active IP Right Cessation
-
2011
- 2011-05-18 WO PCT/KR2011/003668 patent/WO2011149214A2/ko active Application Filing
- 2011-05-18 US US13/700,494 patent/US20130268444A1/en not_active Abandoned
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030152254A1 (en) * | 2000-11-01 | 2003-08-14 | Tai-Dong Ha | User authenticating system and method using one-time fingerprint template |
KR20060119796A (ko) * | 2005-05-17 | 2006-11-24 | 이바도 | 출력제어기능을 갖는 무선통신단말기 |
KR20080075956A (ko) * | 2007-02-14 | 2008-08-20 | 에스케이씨앤씨 주식회사 | 생체정보를 이용하는 사용자 인증방법 |
KR20100033904A (ko) * | 2008-09-22 | 2010-03-31 | 이호일 | 신개념 전자화폐 시스템 및 그 운영 방법 |
Also Published As
Publication number | Publication date |
---|---|
US20130268444A1 (en) | 2013-10-10 |
KR20110130770A (ko) | 2011-12-06 |
WO2011149214A2 (ko) | 2011-12-01 |
KR101198120B1 (ko) | 2012-11-12 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2011149214A3 (ko) | 오티피를 생성하기 위해 홍채정보를 이용한 쓰리-팩터 사용자 인증방식과 무선통신단말기의 오티피 인증모듈을 이용한 안전한 상호인증시스템 | |
CN108270571B (zh) | 基于区块链的物联网身份认证***及其方法 | |
CN102448061B (zh) | 一种基于移动终端防钓鱼攻击的方法和*** | |
TWI487359B (zh) | 用於安全金鑰產生的設備、利用終端用戶設備來進行安全金鑰產生的方法及在裝置製造者伺服器中進行安全金鑰產生的方法 | |
US9253162B2 (en) | Intelligent card secure communication method | |
KR20170067527A (ko) | 두 개의 api 토큰을 이용한 api 인증 장치 및 방법 | |
KR101239297B1 (ko) | 정보 보호 시스템 및 방법 | |
CN105050081A (zh) | 网络接入设备接入无线网络接入点的方法、装置和*** | |
CN103503366A (zh) | 管理针对认证设备的数据 | |
JP2012530311A5 (ko) | ||
EP3000216B1 (en) | Secured data channel authentication implying a shared secret | |
CN105704709B (zh) | 用于安全的听力设备通信的装置和相关方法 | |
CN105072125A (zh) | 一种http通信***及方法 | |
CN101686127A (zh) | 一种新型的USBKey安全调用方法和USBKey装置 | |
CN105528695A (zh) | 一种基于标记的移动支付方法及移动支付*** | |
CN108683674A (zh) | 门锁通信的验证方法、装置、终端及计算机可读存储介质 | |
CN111435390B (zh) | 一种配电终端运维工具安全防护方法 | |
CN104717063A (zh) | 移动终端的软件安全防护方法 | |
CN102594568A (zh) | 基于多级数字证书的保障移动设备软件镜像安全的方法 | |
CN114257376B (zh) | 数字证书更新方法、装置、计算机设备和存储介质 | |
CN103916363A (zh) | 加密机的通讯安全管理方法和*** | |
CN104486322B (zh) | 终端接入认证授权方法及终端接入认证授权*** | |
CN105119716A (zh) | 一种基于sd卡的密钥协商方法 | |
CN107155184B (zh) | 一种带有安全加密芯片的wifi模块及其通信方法 | |
WO2012122782A1 (zh) | 一种获取解锁码的方法及移动终端 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 11786847 Country of ref document: EP Kind code of ref document: A2 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 13700494 Country of ref document: US |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 11786847 Country of ref document: EP Kind code of ref document: A2 |