KR101906141B1 - Apparatus and Method for Multi-level Iris Scan in Mobile Communication Terminal - Google Patents

Abstract

A method for recognizing a multi-level iris in a mobile communication terminal, the method comprising: acquiring iris pattern data of a user of a mobile communication terminal and registering the iris pattern data as user authentication data; determining iris recognition according to a type of a service requesting user authentication; And a step of calculating a matching score which is a degree of similarity between the iris pattern data newly obtained from the user and the previously registered iris pattern data and determining whether or not the calculated matching score is equal to or greater than the selected similarity threshold value And authenticating the user accordingly.

Description

[0001] The present invention relates to a multi-level iris recognition apparatus and a multi-level iris recognition method in a mobile communication terminal,

The present invention relates to an apparatus and method for processing a user's authentication in a mobile communication terminal, and more particularly, to an apparatus and method for authenticating a user through iris recognition of a mobile communication terminal user.

In recent years, a variety of service methods that can be used in a mobile communication terminal device including a financial settlement method have been developed, and a usage amount of a portable personal wireless communication device due to development of a wireless Internet technology has been greatly increased. Accordingly, the importance of security and control of portable personal wireless communication devices has increased much more than in the past when used for simple communication. That is, the economic loss due to the illegal use of the portable personal wireless communication device due to the loss or theft of the portable personal wireless communication device is greater than ever.

However, despite the importance of security and control of portable personal wireless communication devices as described above, existing security personal wireless communication devices have a limited number of security and control systems. For example, a security and control system using a simple text-based encryption process, which is most commonly used, can solve the above-mentioned password easily with a simple software. In the case of a security and control system through a wired / wireless Internet authentication process, And the operation can be performed in addition to the above.

Therefore, biometric authentication technology is applied to strictly secure the mobile communication terminal device. Typical examples of such biometrics are speech recognition, fingerprint recognition, and iris recognition. Among them, the iris recognition method uses a constant iris iris, which is formed before the age of 3 years after birth, and uses texture information such as the iris pattern, shape, and color, .

However, depending on various services that can be used in the mobile communication terminal apparatus, the iris recognition applying effect may be different. That is, when iris recognition is applied to financial settlement, it is effective that the security level is strict. However, when the iris recognition is applied to the mobile communication terminal device, the user may be troublesome if the security level of the iris recognition technology is too strict.

A multi-level iris recognition apparatus and method in a mobile communication terminal that applies iris recognition technology for user authentication in a mobile communication terminal apparatus and performs user authentication by adjusting a security level of iris recognition according to a service type to provide.

A method for recognizing a multi-level iris in a mobile communication terminal, the method comprising: acquiring iris pattern data of a user of a mobile communication terminal and registering the iris pattern data as user authentication data; determining iris recognition according to a type of a service requesting user authentication; And a step of calculating a matching score which is a degree of similarity between the iris pattern data newly obtained from the user and the previously registered iris pattern data and determining whether or not the calculated matching score is equal to or greater than the selected similarity threshold value And authenticating the user accordingly.

A multi-level iris recognition apparatus in a mobile communication terminal, comprising: a camera; a memory for storing the user authentication data; and a controller for acquiring iris pattern data of a user of the mobile communication terminal through the camera, A similarity threshold value for judging whether or not an iris is recognized according to a type of a service for which a user authentication is requested, a similarity threshold value determination unit for comparing the iris pattern data newly acquired through the camera with the iris pattern data previously registered in the memory, And a control unit for authenticating the user according to whether the calculated matching score is equal to or greater than the selected similarity threshold value.

According to the present invention, iris recognition technology is applied for user authentication in a mobile communication terminal device, and iris recognition application effect can be maximized by adjusting a security level of iris recognition according to a service type.

In addition, it is possible to prevent economic loss due to illegal use of the mobile communication terminal device due to loss or theft of the mobile communication terminal device.

In addition, since unlocking iris unique to the user can be set, it is possible to eliminate the inconvenience of memorizing the numeric password, and further, the risk such as hacking and theft can be prevented from being inherently prevented.

1 is a block diagram of an internal configuration of a mobile communication terminal to which the present invention is applied.
2 is an internal block diagram of a controller according to an embodiment of the present invention.
FIG. 3 is a flowchart for explaining a multi-level iris recognition method in a mobile communication terminal according to an embodiment of the present invention.
4 is a flowchart illustrating a step of registering user authentication data according to an embodiment of the present invention.
5 is a flowchart illustrating a first level user authentication step for unlocking a mobile communication terminal according to an embodiment of the present invention.
6 is a flowchart illustrating a second level user authentication step for financial settlement according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as being limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of the invention to those skilled in the art. Is provided to fully convey the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS In the following description of the present invention, detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. , Which may vary depending on the intention or custom of the user, the operator, and the like. Therefore, the definition should be based on the contents throughout this specification.

Each block of the accompanying block diagrams and combinations of steps of the flowcharts may be performed by computer program instructions (execution engines), which may be stored in a general-purpose computer, special purpose computer, or other processor of a programmable data processing apparatus The instructions that are executed through the processor of the computer or other programmable data processing equipment will generate means for performing the functions described in each block or flowchart of the block diagram.

These computer program instructions may also be stored in a computer usable or computer readable memory capable of directing a computer or other programmable data processing apparatus to implement the functionality in a particular manner so that the computer usable or computer readable memory It is also possible for the instructions stored in the block diagram to produce an article of manufacture containing instruction means for performing the functions described in each block or flowchart of the flowchart.

And computer program instructions may be loaded onto a computer or other programmable data processing equipment so that a series of operating steps may be performed on a computer or other programmable data processing equipment to create a computer- It is also possible that the instructions that perform the data processing equipment provide the steps for executing the functions described in each block of the block diagram and at each step of the flowchart.

Also, each block or step may represent a portion of a module, segment, or code that includes one or more executable instructions for executing the specified logical functions, and in some alternative embodiments, It should be noted that functions may occur out of order. For example, two successive blocks or steps may actually be performed substantially concurrently, and it is also possible that the blocks or steps are performed in the reverse order of the function as needed.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, the following embodiments of the present invention may be modified into various other forms, and the scope of the present invention is not limited to the embodiments described below. The embodiments of the present invention are provided to enable those skilled in the art to more fully understand the present invention.

The present invention is characterized in that the iris recognition security level is changed according to the user authentication using the iris recognition in the mobile communication terminal and the user authentication for the financial settlement service or the user authentication for unlocking the mobile communication terminal. In the present invention, iris recognition is explained, but iris recognition can be extended to other biometrics such as fingerprint recognition.

Here, the mobile communication terminal may be a terminal equipped with a camera capable of photographing an image, that is, an iris, such as a mobile phone, a smart phone, a laptop computer, a tablet computer , A personal digital assistant (PDA), and the like.

1 is a block diagram of an internal configuration of a mobile communication terminal to which the present invention is applied.

1, the mobile communication terminal 1 includes a communication unit 10, a memory 20, a camera 30, a key input unit 40, a voice processing unit 50, a display unit 60, and a control unit 70 . In addition, the distance measurement unit 80 and the illumination unit 90 may be further included.

The communication unit 10 is a known configuration including an antenna and an ALF circuit for processing a signal received from the outside and an internal output signal through a communication network. According to an embodiment of the present invention, the communication unit 10 is connected to a mobile communication network, and the mobile communication network is connected to a server system (not shown) through an Internet network. Here, the server system may include a server of all Internet sites that require user authentication, such as electronic commerce, financial settlement, etc., according to the result of performing the user authentication through the mobile communication terminal 10 and performing the authentication.

The memory 20 may be embodied as a flash memory or the like and includes a program storage unit for storing various application programs such as OS (operating system), iris image recognition and comparison program of the mobile communication terminal, And a data storage unit for storing the user's registered iris image or various information set or used by the user.

The camera 30 photographs an eye of a person to be recognized. The mobile communication terminal 1 is generally provided with a front camera for self-image photographing and a rear camera for general photographing. The front camera may be mainly used as the camera 30 according to the present invention, but the present invention is not limited thereto . The mobile communication terminal 1 includes a distance measuring unit 80 for measuring the distance from the camera 30 to the user's eyes using infrared rays, And an illumination unit 90 provided on the left and right sides of the eye to illuminate the iris.

The key input unit 40 includes numeric / character key buttons for performing a function specific to the mobile communication terminal and various function key buttons necessary for registration and authentication of the iris image according to the present invention.

The speaker 51 converts an analog voice signal generated in the mobile communication terminal 1 into a sound wave and the microphone 52 converts an external sound wave into a corresponding analog voice signal, 50 converts the digital voice signal into a corresponding analog voice signal and outputs it to the speaker 51 and converts the analog voice signal input from the microphone 52 into a corresponding digital voice signal. According to the present invention, an instruction for iris recognition or authentication result information and the like may be outputted through the speaker 51, and a user's request may be inputted through the microphone 52. [

The display unit 60 is located in front of the mobile communication terminal 1, and the display screen can be changed by an instruction from the control unit 70. [ For example, the display unit 60 can be controlled by the control unit 70 to display a financial settlement screen, a lock screen, an iris image capturing screen, an authentication result, and the like. Here, although the key input unit 40 and the display unit 60 are described as separate components, they may be configured as a touch screen.

The controller 70 controls the internal components of the mobile communication terminal as described above. According to an embodiment of the present invention, the controller 70 performs user authentication using iris recognition, The level of authentication can be adjusted differently depending on whether the user authentication is for unlocking.

2 is an internal block diagram of a controller according to an embodiment of the present invention.

2, the control unit 70 may include a terminal lock release processing unit 71, a financial settlement processing unit 72, and a multilevel iris recognition unit 100. Here, the components of the control unit 70 can be understood as a program read from the memory 20 for multilevel iris recognition.

The terminal unlocking processing unit 71 processes a user authentication procedure for granting a use right of the mobile communication terminal 1. When the unlock request signal from the user is input, Requests the iris recognition and receives the user authentication success result from the multi-level iris recognition unit 100, and releases the terminal lock. At this time, the unlock request signal may be a touch signal through the key input unit 40 or a voice signal input to the microphone 52.

The financial settlement processing unit 72 is connected to the server system through the communication unit 10 to process electronic commerce, financial settlement, and the like. When the user authentication is required, the financial settlement processing unit 72 requests the multilevel iris recognition unit 100 to perform iris recognition Upon receipt of the user authentication success result from the multilevel iris recognition unit 100, the result is informed to the server system via the communication unit 10 to allow the financial settlement to proceed.

The multi-level iris recognition unit 100 calculates a matching score, which is the degree of similarity between the iris pattern data newly obtained from the user and the previously registered iris pattern data, and authenticates the user according to whether the calculated matching score is equal to or greater than the similarity threshold do. In detail, the multi-level iris recognition unit 100 includes a user authentication data registration unit 110, a user authentication data acquisition unit 120, an authentication level selection unit 130, a first level iris recognition unit 140, And a level iris recognition unit 150.

The user authentication data registration unit 110 requests the user authentication data acquisition unit 120 to acquire the iris pattern data of the user of the mobile communication terminal 1 through the camera 30 and registers it as user authentication data in the memory 20 . At this time, the present invention is applicable to '1: 1 matching' in which biometric information data registered as a subject of the biometric information registered in order to authenticate the biometric information inputted by the subject is 1: 1 matched However, since it is the user authentication used in the personal mobile communication terminal used by only one person, the ID of the subject does not need to be registered separately, unlike in the other 1: 1 matching method. However, when the mobile communication terminal is an apparatus that can be used by a plurality of authorized persons, the ID of the authorized person must be registered together.

According to one embodiment, the user authentication data registration unit 110 requests the user authentication data acquisition unit 120 to acquire shape image data of the eye of the user or eye length information data in addition to the iris pattern data, You can also register as. According to another embodiment, the user authentication data registration unit 110 may request the user authentication data acquisition unit 120 to acquire the iris pattern data to be used as the user authentication data, the distance information between the camera 30 and the user iris, And guide information including position information displayed on the display unit 60 may be registered together.

The user authentication data obtaining unit 120 obtains the iris pattern data from the image captured by the camera 30 of the user's iris. However, since the iris image captured by the camera 30 is greatly affected by the surrounding environment and may not be used for iris recognition in some cases, the user authentication data acquisition unit 120 may use the input image for iris recognition Improve the quality of the iris image by using software methods as much as possible. In other words, in order to improve the quality of the iris image of the user photographed by the camera 30, zoom-out and zoom (Zoom-In) of the image of the collected iris image, level values (Levels) Image processing is performed using a contrast value, a brightness value, a hue value, and a saturation value. Then, the user authentication data obtaining unit 120 extracts the feature points of the iris, that is, the iris patterns, from the iris image of the user processed in the image processing. For example, after determining the pupil and iris boundaries, The right side radius is determined, and the iris image is separated using this information. When the boundary information of the iris is set in this way, polar coordinates are applied to extract the iris features. Then, a code for each of the extracted iris patterns is generated. For example, the iris pattern code generates an IRIS code. In addition, it may be compressed to reduce the amount of data to be processed and stored.

The user authentication data acquisition unit 120 may acquire shape image data of the eyes of the user or length information data of eyes in addition to iris pattern data from iris imaging through the camera 30. [ According to another embodiment, the user authentication data obtaining unit 120 drives the distance measuring unit 80 to calculate the distance information between the camera 30 and the user's irises at the time of acquiring the iris pattern data, Can be obtained.

The authentication level selection unit 130 selects one of the first level user authentication unit 140 and the second level user authentication unit 150 that have different similarity thresholds for determining iris recognition according to the type of the service requesting the user authentication You can choose. However, this is only an embodiment, and the present invention is not limited thereto. That is, when there are three or more service types, three or more levels of user authentication units may be configured in which the similarity threshold is set according to the security level required by each service.

There are two factors that are representative of the performance of the biometric authentication, namely False Acceptance Rate (FAR) and False Rejection Rate (FRR). The rate of others acceptance is the probability that the unregistered illegal users can be mistakenly recognized as a legitimate registered user, and the rejection rate can be denied if the registered legitimate user is recognized as an unregistered unregistered user . If the rate of acceptance of other persons is high, this authentication method is too low to be regarded as an authentication function. On the other hand, if the rejection rate is high, this authentication method is inconvenient for the user do.

When the type of service is unlocked of the mobile communication terminal, security is not strictly required compared with financial settlement. If the rejection rate is set high, it is troublesome to perform the iris recognition procedure several times for unlocking. Therefore, in this case, the authentication level selection unit 130 selects the first level user authentication unit 140 having the similarity threshold that is set so that the false rejection rate (FRR) is equal to or smaller than a predetermined value.

On the other hand, if the service type is a financial settlement service, security should be strict in order to prevent financial accidents. If the acceptance rate of others is set high, financial settlement by an unauthorized user becomes possible, leading to economic loss. Therefore, in this case, the authentication level selection unit 130 selects the second level user authentication unit 150 set to the similarity threshold that makes the False Acceptance Rate (FAR) be less than or equal to a predetermined value.

The first level user authentication unit 140 calculates a matching score which is a degree of similarity between the iris pattern data newly acquired from the user and the previously registered iris pattern data by the user authentication data obtaining unit 120 and outputs the calculated matching score The user is authenticated according to whether or not the FRR is equal to or greater than a similarity threshold value that makes the FRR less than or equal to a predetermined value.

However, since there is a trade-off between the self-rejection rate and the rate of acceptance of the other person, there is a trade-off between the self-rejection rate and the other-person acceptance rate. The possibility of being used by the user may increase. Accordingly, according to one embodiment, the first level user authentication unit 140 acquires the eye shape image data or the eye length information data from the user through the user authentication data acquisition unit 120, The operation of comparing the similarity of the already registered eye shape data or the eye length information data is additionally performed to alleviate the increase in the other member acceptance rate.

The second level user authentication unit 150 calculates a matching score, which is a degree of similarity between the iris pattern data newly obtained from the user and the previously registered iris pattern data. If the calculated matching score is a false acceptance rate (FAR) Is equal to or greater than a threshold value of degree of similarity so as to be equal to or smaller than a predetermined value.

However, as described above, there is a trade-off between the self-rejection rate and the other-person acceptance rate, so that if the acceptance rate of the other person is low, the rejection rate of the self- Even if the service is called, the user may feel annoyed by the authentication process repeated several times. Accordingly, when the second level user authentication unit 150 newly acquires the iris pattern data from the user, the second level user authentication unit 150 acquires the distance information between the camera and the user iris previously registered in the memory 20 and the position The operation of outputting the guide information including the information to the display unit 60 may be additionally performed to alleviate the increase in the rejection rate.

FIG. 3 is a flowchart for explaining a multi-level iris recognition method in a mobile communication terminal according to an embodiment of the present invention.

Referring to FIG. 3, the mobile communication terminal 1 acquires the iris pattern data of the user through the camera 30, and registers it as user authentication data in the memory 20 (S210). At this time, the present invention is applicable to '1: 1 matching' in which biometric information data registered as a subject of the biometric information registered in order to authenticate the biometric information inputted by the subject is 1: 1 matched However, since it is the user authentication used in the personal mobile communication terminal used by only one person, the ID of the subject does not need to be registered separately, unlike in the other 1: 1 matching method. However, when the mobile communication terminal is an apparatus that can be used by a plurality of authorized persons, the ID of the authorized person must be registered together. A detailed description of S210 will be given later with reference to Fig.

As the user authentication request is generated (S220), the mobile communication terminal 1 selects one of the authentication levels having different similarity thresholds for determining iris recognition according to the type of the service requesting the user authentication (S230). However, this is only an embodiment, and the present invention is not limited thereto. That is, when there are three or more service types, one of three or more levels of authentication levels may be selected according to the security level required by each service.

As a result of the determination in S230, if the type of service is the unlocking of the mobile communication terminal, the mobile communication terminal 1 selects a first level user authentication in which the similarity threshold is set such that the false rejection rate (FRR) (S240). A detailed description of S240 will be given later with reference to Fig.

On the other hand, if it is determined in step S230 that the service type is a financial settlement service, the mobile communication terminal 1 selects a second level user authentication set to a similarity threshold value such that the False Acceptance Rate (FAR) (S250). A detailed description of S250 will be given later with reference to Fig.

4 is a flowchart illustrating a step of registering user authentication data according to an embodiment of the present invention.

4, the mobile communication terminal 1 determines whether an arbitrary iris pattern registration key is input through the key input unit 40 (S211). When the iris pattern registration key is input, the iris pattern data (S212). For this purpose, it is possible to guide the user to input his or her iris image through the camera 30 in advance by a character or voice. At this time, the mobile communication terminal 1 can measure the distance between the iris and the camera through the distance measuring unit 80, and measure the distance information together. In addition, it is possible to drive the illumination through the illumination unit 90 according to the external illuminance so that the iris image of the user is obtained even in a dark place. Also, at this time, the mobile communication terminal 1 can acquire shape image data of a user's eye or eye length information data in addition to iris pattern data.

As a result of the determination in S212, when the input of the iris image data is completed, the mobile communication terminal 1 notifies the user that the collection of the iris pattern data is completed, thereby causing the user to stop the photographing operation through the camera 30 (S213). According to one embodiment, the iris pattern data may be temporarily stored to improve the quality of the iris image through image processing. That is, the input iris image is greatly affected by the surrounding environment, and the input image may not be used for iris recognition depending on the case. Accordingly, the mobile communication terminal 1 improves the quality of the iris image using a software method so that the input image can be utilized for iris recognition.

That is, the mobile communication terminal 1 enlarges (Zoom-In) and reduces (Zoom-In) the image of the collected iris image to improve the quality of the user's iris image captured and collected by the camera 30, The input iris data is subjected to image processing using level values (Levels) for each channel, contrast values for each channel, brightness, hue, and saturation (S214).

When the quality of the iris image is improved through the image processing process, the mobile communication terminal 1 extracts the feature points, i.e., iris patterns, of the iris from the iris image of the user processed in the image processing. For example, After determining the boundary, the left and right radii of the iris are determined, and the iris image is separated using this information. When the boundary information of the iris is set in this manner, polar coordinates are applied to extract the features of the iris S215).

Next, the mobile communication terminal 1 generates a code for each of the extracted iris patterns, for example, an iris code generates an IRIS code (S216), compresses it to reduce the amount of data to be processed and stored (S217), and the pattern registration for the iris password is terminated (S218).

Further, according to one embodiment, the mobile communication terminal 1 can encrypt the separated iris data by a given algorithm. Even if the iris data thus encrypted is exposed to a third party due to the loss or theft of the wireless communication device, iris data forgery can be difficult.

5 is a flowchart illustrating a first level user authentication step for unlocking a mobile communication terminal according to an embodiment of the present invention.

Referring to FIG. 5, the mobile communication terminal 1 requests the user to input eye image data (S241) in response to the lock release request, and determines whether the input of the eye image data is completed (S242) The image of the eye of the user is photographed by the camera 30 in accordance with the request at S241. Of course, in this process, the user may be informed that the collection of the eye image data is completed as in S213 of FIG.

As a result of the determination in S242, when the input of the eye data has already been completed, the mobile communication terminal 1 performs the image processing, the iris pattern extraction, and the iris pattern encoding in the same manner as in S214 to S217 in Fig. (Or length) data of the iris pattern data and the eye through the data compression (S243).

Next, the mobile communication terminal 1 calculates the matching score, which is the degree of similarity with the iris pattern data thus obtained and the previously registered iris pattern data (S244).

Then, the mobile communication terminal 1 determines whether the calculated matching score is equal to or greater than the first level similarity threshold (S245). Here, when the type of service is the unlocking of the mobile communication terminal, the security is not strict compared to the financial settlement, and if the rejection rate is set high, it is troublesome to perform the iris recognition procedure several times for unlocking Follow. Therefore, the first level similarity threshold is set so that the false rejection rate (FRR) is equal to or less than a predetermined value.

If it is determined in step S245 that the matching score is equal to or greater than the first level similarity threshold value, the mobile communication terminal 1 additionally performs an operation of comparing the similarity of the eye shape image data or the eye length information data previously registered in the memory 20 (S246). This is because there is a trade-off between the self-rejection rate and the rate of acceptance of the other person, and if the self-rejection rate is low, the acceptance rate of the other person becomes high, and if the mobile communication terminal is lost or stolen, The possibility of being used by the user may increase, so as to alleviate the increase in the rate of accepting others.

If it is determined that the comparison results in S246 (S247), the mobile communication terminal 1 releases the lock (S248). On the other hand, if it is determined in S245 or S247 that the matching score is not equal to or greater than the first threshold value, or if it is determined that the previously registered eye shape image data or eye length information data do not match, the mobile communication terminal 1 And notifies the unlocking failure via the display unit 60 or the speaker 51 (S249).

Then, the mobile communication terminal 1 determines whether to repeat the first level authentication operation (S250). That is, the mobile communication terminal 1 determines whether the first level authentication operation is repeated a predetermined number of times or more, and if it is less than the predetermined number of times, proceeds to S241 and repeats the operation. However, when the first-level authentication operation is repeated a predetermined number of times or more, the mobile communication terminal 1 determines that it is an unauthorized user's attempt and ends the first-level authentication operation.

6 is a flowchart illustrating a second level user authentication step for financial settlement according to an embodiment of the present invention.

Referring to FIG. 6, the mobile communication terminal 1 requests the user to input iris image data in response to a user authentication request for financial settlement (S251). In this case, according to one embodiment, the mobile communication terminal 1 outputs guide information including distance information between the camera and the user iris previously registered in the memory 20 and position information displayed on the display unit to the display unit 60 Operation is additionally performed (S252). This is because the trade-off between the self-rejection rate and the acceptance rate of the other person is a trade-off in which a balance must be balanced with each other. This is to alleviate the increase in the rejection rate because the authentication process, which is repeated several times, may be annoying.

Then, the mobile communication terminal 1 determines whether the input of the iris image data is completed (S253). The user takes the iris image of his or her iris by the camera 30 in accordance with the request in S241. Of course, in this process, it may be informed to the user that the collection of the iris image data is completed as in S213 of FIG.

As a result of the determination in S253, when the input of the iris image data is completed, the mobile communication terminal 1 performs the image processing, the iris pattern extraction, and the iris pattern encoding in the same manner as in S214 to S217 in Fig. And data compression to obtain compressed data (S254). Next, the mobile communication terminal 1 calculates the matching score, which is the degree of similarity with the iris pattern data thus obtained and the previously registered iris pattern data (S255).

Then, the mobile communication terminal 1 determines whether the calculated matching score is equal to or greater than the second level similarity threshold (S256). If the type of service is a financial settlement service, security should be strict in order to prevent financial accidents. If the acceptance rate of others is set to be high, financial settlement by an unauthorized user becomes possible, leading to economic loss. Thus, the second level of similarity threshold is set so that the False Acceptance Rate (FAR) is less than or equal to a predetermined value.

As a result of the determination in S256, if the matching score is equal to or greater than the second level similarity threshold, the mobile communication terminal 1 has been authenticated as a user, and thus performs financial settlement authentication (S257). On the other hand, if it is determined in step S256 that the matching score is not equal to or greater than the second level similarity threshold, the mobile communication terminal 1 notifies the failure of the user authentication through the display unit 60 or the speaker 51 (S258).

Then, the mobile communication terminal 1 determines whether to repeat the second level authentication operation (S259). That is, the mobile communication terminal 1 determines whether the second level authentication operation is repeated a predetermined number of times or more, and if it is less than the predetermined number of times, proceeds to S251 and repeats the operation. However, when the second-level authentication operation is repeated a predetermined number of times or more, the mobile communication terminal 1 determines that it is an unauthorized user's attempt and terminates the second-level authentication operation.

Claims (10)

delete Obtaining iris pattern data of a user of the mobile communication terminal and registering the iris pattern data as user authentication data;
Selecting a similarity threshold value for determining iris recognition according to a type of a service requesting user authentication;
Calculating a matching score that is a degree of similarity between the iris pattern data newly obtained from the user and the previously registered iris pattern data and authenticating the user based on whether the calculated matching score is equal to or greater than the selected similarity threshold value ,
In the selecting step
When a similarity threshold is selected such that the false rejection rate (FRR) is equal to or less than a predetermined value,
The authenticating step
Further comprising the step of comparing the similarity of eye shape image data or eye length information data with previously registered eye shape image data or eye length information data from the user. Recognition method.
3. The method of claim 2,
If the service type is the unlocking of the mobile communication terminal,
The registering step
Further comprising the steps of: acquiring shape image data or eye length information data of the user's eye and registering the data as user authentication data;
The authenticating step
Further comprising the step of comparing the similarity of eye shape image data or eye length information data with previously registered eye shape image data or eye length information data from the user. Recognition method.
Obtaining iris pattern data of a user of the mobile communication terminal and registering the iris pattern data as user authentication data;
Selecting a similarity threshold value for determining iris recognition according to a type of a service requesting user authentication;
Calculating a matching score that is a degree of similarity between the iris pattern data newly obtained from the user and the previously registered iris pattern data and authenticating the user based on whether the calculated matching score is equal to or greater than the selected similarity threshold value ,
In the selecting step
If a similarity threshold is selected such that the False Acceptance Rate (FAR) is below a predetermined value,
The authenticating step
Further comprising the step of outputting guide information including distance information between the camera and the user iris when acquiring the iris pattern data when registering the user authentication data and position information displayed on the display unit when the iris pattern data is newly obtained from the user Wherein the multi-level iris recognition method comprises:
5. The method of claim 4,
If the service type is a financial settlement service,
The registering step
Further comprising the step of registering the guide information including the distance information between the camera and the user's iris and the position information displayed on the display unit when acquiring the iris pattern data to be used as the user authentication data,
The authenticating step
Further comprising the step of outputting guide information including distance information between the camera and the user iris and position information displayed on the display unit when the iris pattern data is newly obtained from the user, Level iris recognition method.
delete A camera, a memory for storing user authentication data,
Acquiring iris pattern data of a user of the mobile communication terminal through the camera, registering the iris pattern data as user authentication data in the memory, selecting a similarity threshold for determining iris recognition according to a service type requesting user authentication, A matching score which is a degree of similarity between the iris pattern data newly acquired through the camera and the iris pattern data previously registered in the memory is calculated and the user is authenticated according to whether the calculated matching score is equal to or greater than the selected similarity threshold value And a control unit,
The control unit
When a similarity threshold is selected such that the false rejection rate (FRR) is equal to or less than a predetermined value,
Wherein the similarity degree of the eye shape image data or the eye length information data and the already registered eye shape image data or the eye length information data is additionally compared by the user.
8. The method of claim 7,
If the service type is the unlocking of the mobile communication terminal,
The control unit
Acquiring shape image data or eye length information data of the user's eye in addition to the iris pattern data and registering the shape data as user authentication data; And comparing the similarity of the data or the eye length information data.
A camera, a memory for storing user authentication data,
Acquiring iris pattern data of a user of the mobile communication terminal through the camera, registering the iris pattern data as user authentication data in the memory, selecting a similarity threshold for determining iris recognition according to a service type requesting user authentication, A matching score which is a degree of similarity between the iris pattern data newly acquired through the camera and the iris pattern data previously registered in the memory is calculated and the user is authenticated according to whether the calculated matching score is equal to or greater than the selected similarity threshold value And a control unit,
The control unit
If a similarity threshold is selected such that the False Acceptance Rate (FAR) is below a predetermined value,
When acquiring iris pattern data from the user, guide information including distance information between a camera and a user's iris when acquiring iris pattern data when registering user authentication data, and position information displayed on the display unit A multi-level iris recognition apparatus in a mobile communication terminal.
10. The method of claim 9,
If the service type is a financial settlement service,
The control unit
When acquiring iris pattern data to be used as the user authentication data, registers guide information including distance information between a camera and a user iris and position information displayed on a display unit, and when acquiring iris pattern data from the user, And outputs guide information including distance information between the camera and the user iris and position information displayed on the display unit.

Images