TWI383324B - Identification method - Google Patents

Description

Identity authentication method

The present invention relates to an authentication method, and more particularly to a method of authenticating using biometrics.

With the rapid development of the IT industry, the warmth of information exchange, the confidentiality of information has become very important, especially the confidentiality of personal data is important. Among them, secret products developed according to biometric features, such as fingerprint recognizer, palmprint recognizer, vein recognizer, iris recognizer, etc., because of the unique identity recognition password, there is no doubt that the password is stolen. This provides a safer, more convenient and faster inspection.

When the biometric data is used for personal identification, it is necessary to install a biometric identifier on the machine, and then install the required driver, application software and comparison database in the memory device inside the machine. At the time of identification, by scanning the user's biometrics and comparing with the database, when the user-specific biometrics are confirmed, the entire identity authentication process is completed.

However, the above-mentioned authentication method must install a biometric identifier on each machine, which will result in an increase in product cost, and for some products with low security requirements at a low price, it is inevitable that the cost considerations will not be used. Biometric certification. Therefore, how to reduce the cost of biometric authentication and become the main goal.

Accordingly, it is a primary object of the present invention to provide a method for reducing the cost of biometric authentication.

According to the above object, the identity authentication method of the present invention is used to determine whether a user of a machine is a legitimate user, and the method includes coupling at least a portable electronic device to the machine, wherein the portable electronic device The device has at least one biometric identifier; then the portable electronic device is simulated as a biometric identifier of the machine; when the simulation is completed, the portable electronic device can scan the biometric characteristics of the user to obtain a living creature Feature graphics; finally comparing the biometric graphics and determining whether the user is a legitimate user based on the comparison results.

According to another preferred embodiment of the present invention, the biometric identifier is a fingerprint recognizer, a palmprint recognizer, a vein recognizer or an iris recognizer. The biometric graphic used for identification may be a fingerprint graphic, a palm print pattern, a vein distribution map or an iris pattern.

According to another preferred embodiment of the present invention, the portable electronic device is coupled to the machine using a wireless or wired connection.

According to another preferred embodiment of the present invention, comparing the biometric graphics further comprises: comparing the biometric graphic with at least one biometric graphic stored in a memory, wherein the at least one biometric graphic is One of the legal users' biometric graphics. The memory can be located in the portable electronic device or the machine, and the comparison biometric graphic can be performed by the portable electronic device or the machine.

According to another preferred embodiment of the present invention, the password further corresponding to the at least one legal user biometric graphic is stored in the memory, and when the user is determined to be a legitimate user, the password is entered into a password login. In the district.

In summary, since the method of the present invention integrates the biometric identifiers on the portable electronic device, the additional biometric identifiers need not be constructed on each machine, thereby reducing the production cost of the machine. Moreover, as long as the machine has a need for confidentiality, the biometric identification can be kept secret by the method of the present invention, without considering whether a biometric identifier is installed on the machine.

Hereinafter, an embodiment will be described, wherein the biometric identifier used is a fingerprint identifier, but other kinds of biometric identifiers, such as a palmprint recognizer, a vein recognizer, and an iris recognizer, may also be applied. In the present invention. In addition, in the following embodiments, only the login password is used as the explanation. However, the embodiment can also be used to log in the user code, password or other identity certificate, or a combination thereof.

1 is a schematic illustration of a portable electronic device in accordance with a preferred embodiment of the present invention. According to the embodiment, the portable electronic device 100 includes a display screen 101 and a keyboard area 102. The portable electronic device 100 further includes a fingerprint identifier (not shown), and the fingerprint identification is performed. The fingerprint scanning area 103 corresponding to the device is exposed to the portable electronic device 100. It should be noted that the position of the scanning area 103 is not limited to that shown in FIG. 1 and its position can be changed according to design. In an embodiment, the memory of the portable electronic device 100 (not shown) stores at least a database of legally authorized users for use in fingerprint identification. In the example, the fingerprint comparison is performed by the portable electronic device 100. In addition, the memory of the portable electronic device 100 can also store various frequently-registered website addresses and corresponding password data. On the other hand, in other embodiments, the fingerprint database of the legally authorized user, the frequently-registered website address, and the corresponding password data may also be stored in the corresponding connection machine. In this embodiment, the fingerprint is The comparison is performed by a machine connected to the portable electronic device 100. The portable electronic device 100 can be, for example, a mobile phone or a personal digital assistant (PDA).

Referring to Figures 2 and 3, when a password is required, for example, a user connects to the login password area 302 of a website through the network device 300 to confirm the identity. At this time, the user can transmit by wire as shown in FIG. 2, or as shown in FIG. 3, if the network device 300 has a wireless connection function, it can be built by wireless transmission. The portable electronic device 100 of the fingerprint identifier is connected to the network device 300, and the network device 300 is, for example, a computer. It should be noted that the present invention can also be applied to other situations where a password is required.

Referring to FIG. 4, the connection process of the portable electronic device 100 and the network device 300 of the present invention is shown. In step 401, the portable electronic device 100 is first turned on, and then the determining steps 403 and 405 are performed to determine whether the portable electronic device 100 is connected to the network device 300. According to the embodiment, in step 403, it is first determined whether the portable electronic device 100 is connected to the network device 300 by means of a wired connection. If yes, step 407 is performed; otherwise, step 405 is performed. In step 405, it is determined whether the portable electronic device 100 is connected to the network device 300 by way of wireless connection. If yes, step 407 is performed; otherwise, the portable electronic device 100 and the network device 300 are determined. The connection is not completed, so steps 403 and 405 will be executed again. After the connection between the portable electronic device 100 and the network device 300, whether the connection is completed by wired connection or wireless connection, in step 407, the portable electronic device 100 executes a simulation program to simulate becoming a fingerprint. Recognizer. The network device 300, in step 409, executes a driver to drive the simulated fingerprint reader. After the above procedure is completed, the fingerprint identifier on the portable electronic device 100 is in a standby state for performing fingerprint recognition.

After the portable electronic device 100 and the network device 300 are connected, the fingerprint identification comparison can be performed, thereby inputting the corresponding password. Referring to Figure 5, there is shown a flow of fingerprint comparison in accordance with an embodiment of the present invention. Please also refer to Figures 1 and 5. First, in step 501, after the portable electronic device 100 and the network device 300 are connected, the fingerprint identifier on the portable electronic device 100 is activated and in a standby state. Next, in step 503, a determining step is performed to determine whether the webpage requesting to enter the password has been entered. If the webpage that requires the password is not entered, step 503 is performed again, that is, the judging step is repeated. Execute until you go to the web page where you want to enter your password. On the other hand, if the webpage that has entered the connection website to input the password has been entered, and the fingerprint comparison is performed by the network device 300, steps 505 to 509 are performed to perform fingerprint identification. On the other hand, if the fingerprint comparison is performed by the portable electronic device 100, steps 605 to 609 are performed to perform fingerprint recognition.

In the embodiment in which the network device 300 performs the fingerprint comparison, first in step 505, when fingerprinting is performed, the user first places the finger in the scanning area 103, and the identifier in the fingerprint identifier collects the finger. Sharp fingerprint pattern. In step 507, the collected fingerprint image is transmitted to the network device 300 by wireless or wired transmission. At this time, the network device 300 uses the software to analyze fingerprint feature points, such as ridges and grooves unique to each finger. Then, in step 509, the fingerprint database stored in the memory of the network device 300 is compared.

On the other hand, in the embodiment in which the portable electronic device 100 performs fingerprint comparison, the execution steps are as shown in FIG. 6. First, in step 605, when fingerprinting is performed, the user first places a finger in the scanning area 103, and the identifier in the fingerprint reader collects the fingerprint image of the fingertip. Next, in step 607, the portable electronic device 100 uses the software to analyze the geometric pattern of the fingerprint feature points, such as the ridges and grooves unique to each finger. Then, in step 609, the fingerprint database stored in the memory of the portable electronic device 100 is compared.

Then, in step 511, the comparison result is determined. If the collected fingerprint pattern conforms to the fingerprint data stored in the memory of the network device 300 or the portable electronic device 100, step 513 is executed, and the password corresponding to the fingerprint data is used. Automatically brought into the password page. In an embodiment, the website URL, the fingerprint data of each legal user, and the corresponding password may be stored in the memory. When the fingerprint pattern input by the user conforms to the stored fingerprint data, the website may be logged in according to the website. The URL will automatically fill in the password on the password page. Then in step 515, when the website receives the password, the subsequent verification process of the website itself is performed. Finally at step 517, the login process is completed. On the other hand, if it is determined in step 511 that the collected fingerprint pattern does not meet the fingerprint data stored in the memory of the network device 300 or the portable electronic device 100, the process rejects the user login and returns to the step. 505, waiting to scan the fingerprint of the next user.

In summary, the present invention is to add a biometric identifier to the conventional portable electronic device instead of the biometric identifiers respectively disposed on the individual machines. When biometric identification is required, the portable electronic device is first simulated as a biometric identifier, and the portable electronic device is used for biometric identification, and the identification result is uploaded to the machine by wired or wireless transmission. On the stage, for subsequent processing. Since the method of the present invention integrates the biometric identifiers on the portable electronic device, the additional biometric identifiers need not be constructed on each machine, thereby reducing the production cost of the machine. Moreover, according to the present invention, as long as the machine has the requirement of confidentiality, the biometric identification can be kept confidential by the method of the present invention, regardless of whether or not the biometric identifier is installed on the machine.

Although the present invention has been described above in terms of a preferred embodiment, it is not intended to limit the invention, and it is obvious to those skilled in the art that various changes and modifications can be made without departing from the spirit and scope of the invention. The scope of the invention is defined by the scope of the appended claims.

100. . . Portable electronic device

101. . . Display screen

102. . . Keyboard area

103. . . Fingerprint scanning area

300. . . Network device

302. . . Login password area

401~411, 501~517 and 605~609. . . step

The above and other objects, features, advantages and embodiments of the present invention will become more apparent and understood. A schematic illustration.

FIG. 2 is a schematic diagram showing the wired connection between the portable electronic device and the corresponding device of the present invention.

FIG. 3 is a schematic diagram showing the wireless connection between the portable electronic device and the corresponding device of the present invention.

FIG. 4 is a flow chart showing the connection between the portable electronic device and the corresponding device of the present invention.

Figure 5 is a flow chart showing the fingerprint comparison according to an embodiment of the present invention.

Figure 6 is a flow chart showing the fingerprint comparison according to another embodiment of the present invention.

501~517. . . step

Claims (18)

An authentication method for determining whether a user of a machine is a legitimate user of a website, the method comprising: coupling a portable electronic device to the machine, wherein the portable electronic device is at least Having a biometric identifier; the machine simulates the portable electronic device as a biometric identifier of the machine; and when the website performs the step of inputting a password, the biometric identifier of the portable electronic device is activated Scanning a biometric of the user to obtain a biometric data; and determining whether the user is a legitimate user based on the biometric data and based on the comparison result. The identity authentication method of claim 1, wherein the portable electronic device is a mobile phone. The identity authentication method according to claim 1, wherein the portable electronic device is a number of assistants. For example, the identity authentication method described in claim 1 is wherein the machine is a computer. The identity authentication method of claim 1, wherein the biometric identifier is a fingerprint identifier or a palmprint identifier. The identity authentication method of claim 5, wherein the biometric feature is a fingerprint graphic or a palmprint graphic. The identity authentication method of claim 1, wherein the biometric identifier is a vein identifier. The identity authentication method according to claim 7, wherein the biometric feature is a finger vein distribution map or a palm vein distribution map. The identity authentication method of claim 1, wherein the biometric identifier is an iris recognizer. The identity authentication method of claim 9, wherein the biometric feature is an iris pattern. The identity authentication method of claim 1, wherein the portable electronic device is coupled to the mobile station by using a wireless connection. The identity authentication method of claim 1, wherein the portable electronic device is coupled to the machine by using a wired connection. The method for authenticating an identity according to claim 1, wherein the biometric feature is further included in the biometric data Aligning the stored at least one biometric data, wherein the at least one biometric data is a biological feature of a legitimate user. The identity authentication method of claim 13, wherein the memory is located in the portable electronic device, and the biometric data is executed by the portable electronic device. The identity authentication method according to claim 13, wherein the memory is located in the machine, and the biometric data is executed by the machine. The method for authentication according to claim 15, wherein after obtaining the biometric data step, the biometric data is further transmitted to the machine. The method for authenticating an identity according to claim 13 further includes storing a password corresponding to the biometric data of the legitimate user in the memory. The method for authenticating the identity as described in claim 17 further includes: when determining that the user is a legitimate user, filling the password into a password login area.