Authentication Method and Apparatus Using Biometric Information and Context Information

• US 20160065572A1
• Filed: 08/27/2015
• Published: 03/03/2016
• Est. Priority Date: 08/29/2014
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: KIM, Soenghun, PARK, Joohyun, LEE, Heejeong, LEE, Youmin
• Granted Patent: US 10,609,023 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. A terminal is provided, which includes a sensing unit configured to collect authentication information; and a control unit configured to perform the authentication based on first authentication information and second authentication information, to control the sensing unit to collect third authentication information if it is determined that the authentication based on the first authentication information has succeeded and the authentication based on the second authentication information has failed, and to perform the authentication based on the third authentication information. Since the authentication is performed through a combination of biometric information and context information that are acquired from two or more terminals, reliability and security of the authentication can be heightened.

Claims

1. A method for performing authentication by a first terminal, comprising:

collecting first authentication information and second authentication information;

performing the authentication based on the first authentication information and the second authentication information;

determining that the authentication based on the first authentication information has succeeded and the authentication based on the second authentication information has failed;

collecting third authentication information; and

performing the authentication based on the third authentication information.

2. The method of claim 1, wherein the third authentication information is reserved to provide for failure of the authentication based on the second authentication information.

3. The method of claim 1, wherein the collecting of the first authentication information and the second authentication information comprises:

sensing the first authentication information;

requesting the second authentication information from a second terminal; and

receiving the second authentication information from the second terminal.

4. The method of claim 3, wherein the second authentication information includes at least one of biometric information and context information that is sensed by the second terminal, and the third authentication information includes information that is input by a user of the first terminal.

5. The method of claim 1, further comprising:

determining that the authentication based on the third authentication information has succeeded; and

displaying that the authentication has successfully been performed.

6. The method of claim 1, further comprising:

determining that both the authentication based on the first authentication information and the authentication based on the second authentication information have succeeded; and

displaying that the authentication has successfully been performed.

7. The method of claim 1, wherein the performing of the authentication based on the first authentication information and the second authentication information comprises:

transmitting the first authentication information and the second authentication information to an authentication server; and

receiving a result of authentication based on the first authentication information and the second authentication information from the authentication server.

8. A method for performing authentication by a first terminal, comprising:

sensing first authentication information;

receiving second authentication information that is sensed by a second terminal from the second terminal;

determining whether the sensed first authentication information and the received second authentication information match each other; and

determining that the authentication has successfully been performed if it is determined that the sensed first authentication information and the received second authentication information match each other.

9. The method of claim 8, wherein the sensed first authentication information and the received second authentication information include information of the same type, and

the determining of whether the sensed first authentication information and the received second authentication information match each other comprises determining a degree of overlap of the information of the same type.

10. The method of claim 8, wherein the sensed first authentication information and the received second authentication information include information of different types, and

the determining of whether the sensed first authentication information and the received second authentication information match each other comprises determining a degree of relevance of the information of the different types.

11. The method of claim 8, wherein the determining of whether the sensed first authentication information and the received second authentication information match each other comprises:

transmitting the sensed first authentication information and the received second authentication information to an authentication server; and

receiving a matching degree of the first authentication information and the second authentication information from the authentication server.

12. A first terminal that performs authentication, comprising:

a sensing unit configured to collect authentication information; and

a control unit configured to perform the authentication based on first authentication information and second authentication information, to control the sensing unit to collect third authentication information if it is determined that the authentication based on the first authentication information has succeeded and the authentication based on the second authentication information has failed, and to perform the authentication based on the third authentication information.

13. The first terminal of claim 12, wherein the third authentication information is reserved to provide for failure of the authentication based on the second authentication information.

14. The first terminal of claim 12, further comprising a communication unit configured to transmit and receive information to and from a second terminal,

wherein the control unit performs a control operation so that the sensing unit senses the first authentication information, the communication unit requests the second authentication information from the second terminal, and the communication unit receives the second authentication information that is sensed by the second terminal from the second terminal.

15. The first terminal of claim 14, wherein the second authentication information includes biometric information or context information that is sensed by the second terminal, and the third authentication information includes information that is input by a user of the first terminal.

16. The first terminal of claim 12, further comprising a display unit configured to display information,

wherein if it is determined that the authentication based on the third authentication information has succeeded, the control unit controls the display unit to display that the authentication has successfully been performed.

17. The first terminal of claim 12, further comprising a display unit configured to display information,

wherein if it is determined that both the authentication based on the first authentication information and the authentication based on the second authentication information have succeeded, the control unit controls the display unit to display that the authentication has successfully been performed.

18. The first terminal of claim 12, further comprising a communication unit configured to transmit and receive information to and from an authentication server,

wherein the control unit performs a control operation so that the communication unit transmits the first authentication information and the second authentication information to the authentication server, and receives the result of the authentication based on the first authentication information and the second authentication information from the authentication server.

19. A first terminal that performs authentication, comprising:

a sensing unit configured to collect authentication information;

a communication unit configured to transmit and receive information to and from a second terminal; and

a control unit configured to control the sensing unit to sense first authentication information, to control the communication unit to receive second authentication information that is sensed by the second terminal from the second terminal, and to determine that the authentication has successfully been performed if it is determined that the sensed first authentication information and the received second authentication information match each other.

20. The first terminal of claim 19, wherein the sensed first authentication information and the received second authentication information include information of the same type, and

the control unit determines a degree of overlap of the information of the same type.

21. The first terminal of claim 19, wherein the sensed first authentication information and the received second authentication information include information of different types, and

the control unit determines a degree of relevance of the information of the different types.

22. The first terminal of claim 19, wherein the communication unit transmits and receives information to and from an authentication server, and

the control unit controls the communication unit to transmit the sensed first authentication information and the received second authentication information to the authentication server and to receive a matching degree of the first authentication information and the second authentication information from the authentication server.