KR20060024938A - Method and apparatus for personal authentication using radio frequency identification - Google Patents

Abstract

Provided are a user authentication method and apparatus using RFID.

A user authentication method using RFID includes generating an RFID detection signal, receiving RFID response data transmitted by the RFID in response to the RFID detection signal, and permitting the use of the mobile device when the RFID is registered RFID. It includes the step of setting.

Wireless Tag, RFID, User Authentication, Unique Information

Description

Method and apparatus for user authentication using RFCID {Method and apparatus for personal authentication using radio frequency identification}

1 is a view for explaining the concept of the RFID system.

2 is a block diagram illustrating a configuration of a mobile device including an RFID reader according to an embodiment of the present invention.

3 is a flowchart illustrating an operation of a mobile device including an RFID reader according to an embodiment of the present invention.

4 is a block diagram showing a configuration of an unmanned store including an RFID reader according to another embodiment of the present invention.

5 is a flowchart illustrating an operation of an unmanned store including an RFID reader according to an embodiment of the present invention.

6 is a flowchart illustrating an operation of an unmanned store including an RFID reader according to another embodiment of the present invention.

The present invention relates to user authentication, and more particularly, to a user authentication method and apparatus using RFID.

Advances in digital technology have resulted in a variety of devices and e-commerce methods that are useful to people. For example, using mobile phones, notebook computers, or PDAs, people can enjoy the convenience of life that has not existed before. Also, with the development of electronic commerce, people can conveniently do business activities. With the expansion of unmanned stores, people can make banking and commodity transactions regardless of time and day.

The user authentication method is essential to the development of such digital devices and electronic commerce methods. There are a variety of user authentication methods known to date. Traditionally, there is a user authentication method using an identification card such as a driver's license or a resident registration card, and a user authentication method using a secret password. In addition, there are various authentication methods, and these authentication methods are appropriately modified and applied to digital devices and electronic commerce.

In the case of a user authentication method using a password, there is a fear of the theft of the password. For example, if a person is stolen with a credit card with a password, a deposit may be withdrawn from that person's account. Korean Patent Publication No. 2002-11301 (Authentication method using a unique serial code of a portable storage medium) discloses an electronic commerce method using a storage medium storing personal information. However, these methods may be lost in that they require explicit operation (enter password or insert a storage medium) and carry a storage medium in the form of a card. For example, a person may insert a storage medium into a reading device for electronic commerce, and move to another place while leaving the inserted storage medium after the electronic commerce is over.

Recently, researches on radio frequency identification (hereinafter referred to as RFID) of a non-contact type have been actively conducted. RFID has a variety of advantages. RFID is non-contact and can be recognized at distances of several centimeters to tens of meters, and the recognized distance can be adjusted according to design. In addition, the recognition speed is very fast, about 0.01 ~ 0.1 seconds, and has a relatively long lifespan with relatively little influence from the surrounding magnetic material or water. In addition, the information capacity is large enough to hold hundreds of kilobytes, so it can contain a variety of information.

1 is a view for explaining the concept of the RFID system.

Important components of the RFID system are the RFID reader 110 and the RFID 120.

RFID 120, also called a wireless tag, is composed of an IC (Integrated Circuit) chip and antenna for storing information. The main function of the IC chip is to store data. The memory capacity of the IC chip, which is currently commercially available, varies from 25 bits to more than 512 kilobytes, and the memory types can be read-only, read-write type, or write-once type.

The RFID reader 110 provides energy for the operation of the RFID, and sends a command requesting a specific operation to the RFID. In addition, the RFID reader 110 may receive data from the RFID 120 in response to a command or give data necessary for the RFID 120.

The RFID system including the RFID reader 110 and the RFID 120 may be divided into an inductively coupled method and an electromagnetic wave method according to a wireless access method. The mutual induction method is mainly used in the short distance (within 1m) and the electromagnetic wave method is used for the medium to long distance. Mutual induction uses a coil antenna and is operated almost manually. In other words, the energy required to operate the IC chip of the RFID is supplied by the reader. Although electromagnetic waves have a passive type, there are also cases where a battery is included in the RFID itself for long distance recognition. This RFID technology will enable user authentication without explicit user action.

The present invention has been made in accordance with the above-described needs, an object of the present invention is to provide a user authentication method and apparatus using RFID.

The object of the present invention is not limited to the above-mentioned objects, and other objects not mentioned will be clearly understood by those skilled in the art from the following description.

In order to achieve the above object, a user authentication method using RFID according to an embodiment of the present invention comprises the steps of generating an RFID detection signal, receiving the RFID response data transmitted by the RFID in response to the RFID detection signal; And setting a license of the mobile device when the RFID is a registered RFID.

In accordance with another aspect of the present invention, there is provided a method for authenticating a user using RFID, including generating an RFID detection signal, receiving RFID response data transmitted by the RFID in response to the RFID detection signal, and registering the RFID with the RFID. In the case of the step of setting a license for the unmanned store.

According to an embodiment of the present invention, a mobile device includes an authentication DB in which RFIDs are registered, an RFID reader for generating an RFID detection signal by transferring energy to the RFID so that RFID within a predetermined distance may respond, and the RFID detection signal. And an authentication module configured to determine whether the RFID responding to the RFID is registered in the authentication DB and to set a use permission of the mobile device when the RFID is registered, and to set a usage restriction of the mobile device when the RFID is not registered.

An unmanned store using RFID according to an embodiment of the present invention includes an authentication DB in which RFIDs are registered, an RFID reader for generating an RFID detection signal by transferring energy to the RFID so that the RFID can be responsive within a predetermined distance; An authentication module for determining whether to use an unmanned store, a card reading module for reading a card input by a user who inputs a transaction, and a communication module for communicating with an affiliated financial institution that pays the transaction; The authentication module receives the RFID response data sent in response to the RFID detection signal, checks whether the RFID is registered in the authentication DB, and sets the permission of the unmanned store when the RFID is registered.

Advantages and features of the present invention and methods for achieving them will be apparent with reference to the embodiments described below in detail with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but can be implemented in various different forms, and only the embodiments make the disclosure of the present invention complete, and the general knowledge in the art to which the present invention belongs. It is provided to fully inform the person having the scope of the invention, the invention is defined only by the scope of the claims.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First, user authentication for a mobile device using RFID will be described, and user authentication for electronic commerce using RFID will be described.

2 is a block diagram illustrating a configuration of a mobile device including an RFID reader according to an embodiment of the present invention.

In the present embodiment, the mobile device refers to a digital communication device that a person can carry and use, such as a mobile phone, a PDA, or a wireless communication device.

The mobile device 200 includes a baseband processor 210, an intermediate frequency (IF) module 212, an RF module 214, and a voice processing module 216 for voice communication. 230, an RFID reader 232, and an authentication DB 234, a control module 220 for controlling each module of the mobile device, a keypad 240 for receiving a command or a phone number from a user, and a mobile device. LCD module 250 for displaying the operating status of device 200.

In the forward communication channel, the baseband processor 210 receives the analog voice signal from the voice processing module 216, converts the analog voice signal into a digital voice signal, channel codes the digital voice signal, and modulates the channel coded voice signal. The baseband processor 210 sends the modulated voice signal to the upconversion and downconversion module 212. The up-conversion and down-conversion module 212 up-converts the modulated voice signal into an RF signal. The RF module 214 bandpass filters the RF signal, amplifies the signal to an appropriate power level, and outputs the wireless channel.

In the reverse call channel, the RF module 214 receives and bandpass filters an RF signal through a wireless channel. The upconversion and downconversion module 212 downconverts the RF signal to obtain a baseband modulated speech signal. The baseband processor 210 demodulates the modulated voice signal, decodes the channel to obtain a digital voice signal, and converts the digital voice signal into an analog voice signal. The voice processing module 216 converts an electrical analog voice signal into a sound and outputs the sound.

Data communication using a mobile device is aimed at communicating data, not voice. In the forward direction, the data may be a wireless Internet address or text input by a user through the keypad 240 or text or an image stored in a nonvolatile memory. The baseband processor 210 performs channel coding and modulation on data. The modulated data is output to the wireless channel via the IF module 212 and the RF module 214. RF signals received from the radio channel in the reverse direction are obtained via the RF module 214, the IF module 212, and the baseband processor 210. Using data communication of the mobile device 100, a user may transmit or receive a short message (SMS), download music or an image, or perform electronic commerce.

While the mobile device 100 is portable, there is a risk of loss or theft. Thus, there is a need to restrict unauthorized third parties from using the mobile device 100, where the authentication module plays this role. In older mobile devices, especially mobile phones, the authentication module mainly employs a password scheme to authenticate the user. For example, after a user locks a mobile device, the user must enter a password to use the mobile device. However, this conventional method has the inconvenience of requiring the user to memorize the password and enter it when attempting to use the mobile device. In fact, since the password is a four-digit number, an unauthorized third party can find the password if it is stolen. There is a problem.

In this embodiment, the authentication module 230 restricts the use of the mobile device 100 by unauthorized third parties using RFID. To this end, the mobile device 100 includes an RFID reader 232 capable of sensing RFID and an authentication DB 234 for registering RFID.

The user uses the mobile device 100 with the RFID in his body. As illustrated in FIG. 1, the RFID includes an IC chip and an antenna and has an easy form to attach to a user's body. For example, RFID can be manufactured in a form that can be attached to and worn on the body, such as necklaces, rings, glasses, belts, accessories, and watches. In this case, the user can always carry the RFID.

When the user who attaches the RFID to the body tries to use the mobile device 100, the mobile device 100 reads the RFID through the RFID reader 232 and checks whether the RFID is registered in the authentication DB 234 through the authentication module. Judge. To this end, the RFID reader 232 generates an RFID detection signal for searching for RFID. The generated RFID detection signal is transmitted to the RFID within a predetermined distance through the wireless medium to deliver energy to the RFID. When the RFID receives the RFID detection signal, the RFID transmits an RFID response signal including the unique information of the RFID to the RFID reader 232. The authentication module 230 may limit the use of the mobile device when a user who does not have an authenticated RFID attempts to use the mobile device 230.

The control module 220 cuts off the power of the mobile device 100 or prevents some modules from operating when the use is limited.

The term "module" as used herein refers to a hardware component such as a software component or a field-programmable gate array (FPGA) or an application-specific integrated circuit (ASIC). The module plays some roles. However, modules are not meant to be limited to software or hardware. The module may be configured to be in an addressable storage medium and may be configured to execute one or more processors. Thus, as an example, a module may include components such as software components, object-oriented software components, class components, and task components, processes, functions, and the like. functions, properties, procedures, sub-routines, segments of program code, drivers, firmwares, microcomputers Includes micro-codes, circuits, data, databases, data structures, tables, arrays, and variables do. The functionality provided within the components and modules may be combined into a smaller number of components and modules or further separated into additional components and modules. In addition, the components and modules may be implemented to execute one or more computers in a communication system.

An operation of the mobile device including the RFID will be described with reference to FIG. 3.

First, RFID is registered in the mobile device for user authentication using RFID (S310). RFID may be registered by the manufacturer of the mobile device and may sell RFID and the mobile device, or the user may register the RFID directly with the mobile device. In the latter case, when the user selects the RFID registration menu on the mobile device, the RFID reader of the mobile device reads and stores the unique information of the RFID. The unique information of the RFID is preferably data which guarantees uniqueness. In one embodiment, the MAC (Medium Access Control) address of the RFID is used as the unique information. In another embodiment, UUID (Universally Unique Identifier) is used as unique information. In another embodiment, information input by a user is used as the unique information. In this case, an RFID with a write function should be used. As such, since the RFID has unique information distinguished from other RFIDs, the RFID can be used for user authentication.

In order to recognize the registered RFID, the mobile device generates an RFID detection signal (S320). In one embodiment, the mobile device generates RFID detection signal generation at regular time intervals (eg, at one second intervals). In another embodiment, the mobile device generates an RFID detection signal generation when the user attempts to use the mobile device. For example, a user of a mobile device, especially a cell phone, may generate an RFID detection signal when opening a flip or folder. In the latter case, it is possible to save battery power of the mobile device than the former.

After generating the generation of the RFID detection signal, the mobile device determines whether the response data is received from the RFID (S330). If response data is not received from the RFID, the mobile device sets a usage limit (S370).

When response data is received from the RFID, the mobile device analyzes the response data of the RFID (S340). The response data includes the unique information of the RFID. Then, it is determined whether the RFID sending the response data is the RFID registered in the mobile device (S350). If it is not registered, the mobile device sets a usage limit of the mobile device (S370), and if it is registered information, the mobile device sets a permission of the mobile device (S360).

User authentication using RFID can be applied to various fields, Figure 4 shows the case of an unmanned store. In this embodiment, the unmanned store may be a CD / ATM (Cash Draw / Automatic Teller Machine), or may be a credit card payment terminal that sells a tax payment or utility bill payment device or a product or service.

Referring to FIG. 4, the unmanned store 400 includes a card reading module 410, a receipt issuing module 412, a control module 420, an authentication module 430, an RFID reader 432, and an authentication DB 434. The keypad 440 includes a display module 450 and a communication module 460.

The RFID reader 432 periodically outputs RFID detection signal generation. When the person carrying the RFID approaches the unmanned store 400, the RFID reader 432 receives the unique information of the RFID from the RFID. The authentication module 430 determines whether the RFID is registered in the authentication DB 434 and authenticates the user. The control module 420 restricts unauthorized users from using the unattended store 400.

In the case of an authenticated user, the unmanned store 400 may be used. The user may check a transaction state through the display module 450 and select a desired transaction through the keypad 440.

The card reading module 410 reads a debit or credit card that an authenticated user enters for a transaction. The receipt issue module 412 outputs the transaction result.

The communication module 460 notifies the affiliated financial institution 470 of the transaction information of the user. The affiliated financial institution 470 pays the transaction. On the other hand, the authentication module 430 may check whether the user authentication data is registered through the external affiliated financial institution 470, in which case the user authentication data is transmitted to the affiliated financial institution 470 through the communication module 460. do.

The affiliated financial institution 470 receives information about the transaction from the communication module 460 and transmits the information to the settlement bank 480.

Hereinafter, the operation of the unmanned store will be described.

5 is a flowchart illustrating an operation of an unmanned store including an RFID reader according to an embodiment of the present invention.

The RFID is registered at an unmanned store or an affiliated financial institution for user authentication using RFID (S510). The place where RFID is registered may be a third party institution which is not an unmanned store or an affiliated financial institution. The unique information of the registered RFID is preferably the MAC address or universally unique identifier (UUID) of the RFID which ensures uniqueness.

The unmanned store generates an RFID detection signal generation in order to detect the approach of the person carrying the RFID (S520). After generating the generation of the RFID detection signal, the unmanned store determines whether response data is received from the RFID (S530). If response data is not received from the RFID store, the unmanned store sets a limit of use of the unmanned store (S580).

When the response data is received from the RFID, the unattended store analyzes the response data of the RFID (S540). Then, it is determined whether the registered RFID is data transmitted (S550). If the RFID is registered, the unmanned store sets the license of the unmanned store (S560), and if the RFID is not registered, the unmanned store is a server of an affiliated financial institution or a third party (hereinafter, "registration server") that has registration information of RFIDs. In step S570, the response data of the received RFID is transmitted. When the registration server receives the response data of the RFID, the registration server determines whether the response data is transmitted by the RFID registered to the registration server, and transmits the authentication information to the unmanned store in the case of the registered RFID.

The unattended store determines whether the authentication information is received from the registration server (S572), and if the authentication information is not received, sets the usage limit of the unmanned store (S580). If authentication information is received from the registration server, the unmanned store registers the RFID in the authentication DB (S574). Then, the unmanned store sets a license (S560).

6 is a flowchart illustrating an operation of an unmanned store including an RFID reader according to another embodiment of the present invention.

The RFID is registered at an unmanned store or an affiliated financial institution for user authentication using the RFID (S610). Similar to the embodiment of FIG. 5, the RFID registration place may be a third party that is not an unmanned store or an affiliated financial institution.

The unmanned store generates an RFID detection signal in order to detect the approach of the person carrying the RFID (S620). After generating the generation of the RFID detection signal, the unmanned store determines whether response data is received from the RFID (S630). When response data is not received from the RFID, the unmanned store sets a limit of use of the unmanned store (S680).

When the response data is received from the RFID, the unattended store analyzes the response data of the RFID (S640). Then, it is determined whether the registered RFID is data transmitted (S650). If it is a registered RFID, the unmanned store sets a license (S660). If the RFID is not registered, the unmanned store transmits response data of the received RFID to the registration server (S670). Then, the unmanned store determines whether authentication information is received from the registration server (S672), and if the authentication information is not received, sets the usage limit of the unmanned store (S680). If authentication information is received from the registration server, the unmanned store registers the RFID (S674). Then, the unmanned store sets a license (S660).

Unlike the embodiment of FIG. 5, the present embodiment doubles user authentication. Therefore, even a person possessing a registered RFID cannot make a complete transaction. In other words, even if the license for unmanned store is set, the user cannot complete the transaction and requires additional user authentication process. That is, when the permission to use the unattended store is set, the unmanned store reads the card input by the user (S662), and determines whether or not the card matches the card held by the owner of the RFID (S664). If the card information matches, the user setstles the transaction selected (S666). If the card information does not match, the user limits the use of the unattended store (S680).

In a modified embodiment of the present invention, the unmanned store can check the registration of the RFID from an external registration server without registering the registration information of the RFID. In this case, S550 (or S650) is omitted and the RFID data is immediately registered. S570 (or S670) for transmitting to the server is performed. In this case, S574 (or S674), which is an RFID registration process in the unmanned store, may be omitted.

The embodiments described above are not intended to limit the present invention, but should be considered as exemplary. Therefore, the present invention is not limited by the embodiments and drawings disclosed herein, and various modifications may be made by those skilled in the art within the technical scope of the present invention.

According to an embodiment of the present invention, user authentication can be conveniently performed without using an explicit operation of a user using RFID. In the case of an unmanned store according to an embodiment of the present invention, a more secure electronic commerce is possible through a double user authentication process.

Claims (13)

Generating an RFID detection signal; Receiving RFID response data transmitted by RFID in response to the RFID detection signal; And setting a license of a mobile device when the RFID is a registered RFID. The method of claim 1, The RFID response data includes the unique information of the RFID. The method according to claim 1 or 2, The RFID is a user authentication method manufactured in a form easy to attach to the user's body. Generating an RFID detection signal; Receiving RFID response data transmitted by RFID in response to the RFID detection signal; If the RFID is a registered RFID, the user authentication method using RFID comprising the step of setting a license for the unmanned store. The method of claim 4, wherein When the RFID is an unregistered RFID, the RFID response data is transmitted to a registration server that registers RFIDs, and when the registration server receives authentication information that the registration server is registering the RFID, the unmanned store is used. User authentication method using RFID further comprising the step of setting the permission. The method according to claim 4 or 5, And reading the card input by the user after the license of the unmanned store is set, and paying the transaction selected by the user when the card owned by the owner of the RFID matches the card input by the user. User authentication method using. Registering authentication DB of RFIDs; An RFID reader for generating an RFID detection signal by transferring energy to the RFID so that the RFID within a distance can respond; And an authentication module configured to determine whether the RFID corresponding to the RFID detection signal is an RFID registered in the authentication DB and to set a permission of the mobile device when the RFID is registered, and to set a usage restriction of the mobile device when the RFID is not registered. , Mobile device. The method of claim 7, wherein And the RFID responds with an RFID response signal that includes the unique information of the RFID. The method according to claim 7 or 8, And the RFID reader generates an RFID detection signal when a user tries to use the mobile device. Registering authentication DB of RFIDs; An RFID reader for generating an RFID detection signal by transferring energy to the RFID so that the RFID within a distance can respond; An authentication module for determining whether to use the unmanned store; A card reading module for reading a card input by a user inputting for a transaction; And A communication module for communicating with an affiliated financial institution that pays the transaction, And the authentication module receives RFID response data sent in response to the RFID detection signal to check whether the RFID is registered in the authentication DB, and sets a license for the unmanned store when the RFID is registered. The method of claim 10, The authentication module transmits the RFID response data to a registration server that registers RFIDs through the communication module when the RFID is not registered in the authentication DB, and authentication information that the RFID is registered from the registration server. If you receive the unmanned store to set the license of the unmanned store. The method of claim 11, And receiving the authentication information from the registration server, registering the RFID in the authentication DB. The method according to any one of claims 10 to 12, The authentication module reads the card input by the user to the card reading module after setting the permission of the unmanned store and determines whether the card matches the card held by the owner of the RFID. Unmanned store to settle a deal.

Images