KR102781865B1 - Context Authentication System and Method of Logical Domain - Google Patents

Abstract

According to one embodiment of the present invention, a logical domain context authentication system comprises: an answer sheet collection unit which receives genetic information from a genetic information generation unit and derives an answer sheet using the received genetic information; a user genetic information generation unit which generates logical domain context genetic information using environmental information that may occur in real time when a user who wishes to perform authentication uses a PC/mobile device for a predetermined period of time through an input means; and a user authentication unit which compares genetic information of logical domain context data generated when a user who wishes to perform authentication uses a PC/mobile with genetic information contained in answer sheet data derived from the answer sheet collection unit to determine whether the user is a legitimate or illegitimate user.

Description

{Context Authentication System and Method of Logical Domain}

The present invention relates to a logical domain context authentication system and method thereof, and more particularly, to a logical domain context authentication system and method thereof using a genetic algorithm.

In order for a user to receive various services from a service provider non-face-to-face or online, user authentication is essential. In conventional user authentication technology, the user's identity is generally authenticated by verifying the password (e.g., a six-digit number string) entered by the user, and the user can execute service provision after this identity authentication. However, in this case, since the user must remember the password from the beginning, the convenience of use by the user is greatly reduced. In addition, since this password is essentially a fixed password, if the password is stolen, the user's assets may be seriously threatened after the theft.

Due to the insecurity of user authentication using conventional passwords, various methods of user authentication procedures are being implemented. For example, user authentication procedures are being conducted using pre-issued OTP numbers, user personal information (biometric information, etc.), etc. However, even this information is easily exposed, and there is a problem that there is no correction to ensure that the information provided by users for authentication is provided by trustworthy users being authenticated.

Accordingly, a more secure user authentication procedure is required to provide services that require high security.

Japanese Patent Publication No. 2018-532301 (November 1, 2018)

Accordingly, the present invention has been made to solve the problems of the prior art as described above, and the purpose of the present invention is to provide a logical domain context authentication system and method thereof.

However, the purpose of the present invention is not limited to the purpose mentioned above, and other purposes not mentioned will be clearly understood by those skilled in the art from the description below.

In order to solve the above-described problem, a logical domain context authentication system according to an embodiment of the present invention comprises: an authentication genetic information generation unit which generates logical domain context genetic information by utilizing environmental information that may occur in real time when a previously authenticated legitimate user uses a PC/mobile device for a predetermined period of time through an input means; an answer sheet collection unit which receives genetic information from the genetic information generation unit and derives an answer sheet by utilizing the received genetic information; a user genetic information generation unit which generates logical domain context genetic information by utilizing environmental information that may occur in real time when a user who wishes to proceed with authentication uses a PC/mobile device for a predetermined period of time through an input means; and a user authentication unit which compares genetic information of logical domain context data generated when the user who wishes to proceed with the authentication uses a PC/mobile with genetic information contained in the answer sheet data derived from the answer sheet collection unit to determine whether the user is a legitimate or illegitimate user.

Preferably, the user authentication unit includes a certain margin in each of the genetic information included in the answer sheet for sensitivity adjustment, and the genetic information including the margin has a certain range, and the user authentication unit determines that the genetic information matches each other when the genetic value of the genetic information to which the margin is assigned in the answer sheet includes the genetic value of the genetic information of the logical domain context data generated when the user who wants to proceed with authentication uses a PC/mobile.

Preferably, the user authentication unit calculates a score using the following formula using the number of genetic information falling within a certain range and the total number of genetic items, and Score = (number of genes falling within the range / total number of genetic items) * 100. If the calculated score is greater than the threshold value, the user is authenticated as a legitimate user.

Preferably, the environmental information is characterized in that it includes at least two of the following: CPU occupancy rate, memory usage, transmission/reception traffic volume, TCP transmission/reception traffic volume on an open port, and UDP transmission/reception traffic volume on an open port, by distinguishing between active processes and general processes running on the system.

Preferably, the user authentication unit extracts an average value for each gene and compares it with the answer sheet when K or more genes corresponding to the same ID (PN+AP) as the answer sheet are gathered, and processes the unique PN value corresponding to the process and the AP value indicating whether it is active as one ID.

Preferably, when a certain number of IDs are collected for each ID, a comparison with the correct answer is performed, a gene ID processed below a first specific score is discarded and the discarded count is recorded, a gene above a second specific score is processed as a successful superior gene, and the discarded genes of the first generation genes and the number of surviving superior genes are recorded.

Preferably, genes are extracted and combined to generate second-generation genes, and genes of M items of the first generation are combined to set them into N groups, and the N genes are combined to generate second-generation genes, and the second-generation genes are compared with the answer sheet to calculate a score, and except for the superior genes that appear higher than the third specific score, the remaining genes are discarded, and the discarded genes of the second-generation genes and the number of surviving superior genes are recorded, and if the superior genes among the genes selected for the second generation remain at least L%, it is determined as a success and the user is judged to be a legitimate user, and if it is less than L%, it is determined that the user is not a legitimate user, and the second-generation superior genes that are determined to be a legitimate user are additionally applied as the answer sheet so that the context authentication accuracy for the user can be processed more accurately and sensitively.

Preferably, the margin is characterized in that it can be adjusted by an administrator of the context authentication system.

According to another embodiment of the present invention, a method for operating a logical domain context authentication system comprises: an authenticated user environmental information collection step for collecting environmental information that may occur in real time when a previously authenticated legitimate user uses a PC/mobile device for a predetermined period of time through an input means; an authenticated user genetic information generation step for generating logical domain context genetic information using the environmental information collected in the authenticated user environmental information collection step; an answer key collection step for receiving genetic information from an authenticated genetic information generation unit and deriving an answer key using the received genetic information; a user environmental information collection step for collecting environmental information that may occur in real time when a user who wishes to proceed with authentication uses a PC/mobile device for a predetermined period of time through an input means; a user genetic information generation step for generating logical domain context genetic information using the environmental information collected in the user environmental information collection step; and a user authentication step for comparing genetic information of logical domain context data generated when the user who wishes to proceed with authentication uses a PC/mobile with genetic information contained in the answer key data derived in the answer key collection step to determine whether the user is a legitimate or illegitimate user.

Preferably, the user authentication step is a process for including a certain margin in each of the genetic information included in the answer sheet for sensitivity adjustment, and for allowing the genetic information including the margin to have a certain range; the user authentication step is characterized by including a process for determining that the genetic information matches each other when the genetic value of the genetic information to which the margin is assigned in the answer sheet includes the genetic value of the genetic information of the logical domain context data generated when the user who wants to proceed with authentication uses a PC/mobile.

Preferably, the user authentication step is characterized by further including a process of calculating a score using the following formula using the number of genetic information falling within a certain range and the total number of genetic items, where Score = (number of genes falling within the range / total number of genetic items) * 100, and authenticating the user as a legitimate user if the calculated score is greater than the threshold value.

Preferably, the environmental information is characterized in that it includes at least two of the following: CPU occupancy rate, memory usage, transmission/reception traffic volume, TCP transmission/reception traffic volume on an open port, and UDP transmission/reception traffic volume on an open port, by distinguishing between active processes and general processes running on the system.

Preferably, the user authentication step is characterized by including a process of extracting an average value for each gene and comparing it with the answer sheet when K or more genes corresponding to the same ID (PN+AP) as the answer sheet are gathered, and a process of combining a unique PN value corresponding to the process and an AP value indicating whether or not it is active into one and processing it as an ID.

Preferably, the user authentication step is characterized by further including: a process of performing a comparison with the correct answer sheet when a certain number or more of IDs are collected for each gene ID (PN+AP); a process of discarding gene IDs processed below a first specific score as a result of calculating a score using the above formula 1 and recording the discarded count; a process of processing genes that are higher than a second specific score as a superior gene and success; and a process of recording the number of discarded genes and surviving superior genes of the first generation genes.

Preferably, the user authentication step is characterized by further including a process of extracting genes, combining genes of M items of the first generation to create second-generation genes through combination, setting them into N groups, and combining the N genes to create second-generation genes; a process of calculating a score by comparing the second-generation genes with an answer sheet; a process of discarding the remaining genes except for superior genes that have a third specific score or higher, and recording the number of discarded genes and surviving superior genes of the second-generation genes; a process of determining that the user is a legitimate user if L% or more of the superior genes selected for the second generation remain, and determining that the user is not a legitimate user if less than L%; a process of additionally applying the second-generation superior genes determined to be a legitimate user to the answer sheet so that the context authentication accuracy for the user can be processed more accurately and sensitively.

Preferably, the margin is further characterized by including a process in which it is adjusted by an administrator of the context authentication system.

According to another embodiment of the present invention, a computer-readable recording medium is characterized by having recorded thereon a program for executing an operating method of a logical domain context authentication system.

In a logical domain context authentication system and method according to one embodiment of the present invention, resource elements that may appear differently in user-specific process usage are set as a logical-based context, each item is extracted, and context authentication can be performed at a faster speed by utilizing a genetic algorithm, and as data that can determine the user is accumulated over generations, there is an effect in which accuracy gradually increases.

FIG. 1 illustrates a logical domain context authentication system according to one embodiment of the present invention.
FIG. 2 illustrates an operation method of a logical domain context authentication system according to another embodiment of the present invention.

The present invention can be modified in various ways and has various embodiments, and specific embodiments are illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to specific embodiments, and it should be understood that it includes all modifications, equivalents, or substitutes included in the spirit and technical scope of the present invention. In describing the present invention, if it is determined that a specific description of a related known technology may obscure the gist of the present invention, the detailed description thereof will be omitted.

The terminology used in this application is only used to describe specific embodiments and is not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly indicates otherwise. In this application, it should be understood that the terms "comprises" or "consisting of" and the like are intended to specify the presence of a feature, number, step, operation, component, part or combination thereof described in the specification, but do not exclude in advance the possibility of the presence or addition of one or more other features, numbers, steps, operations, components, parts or combinations thereof.

The present invention relates to a logical domain context authentication system and method for judging whether a user is a legitimate user by utilizing a genetic algorithm for logical domain context authentication. While the physical domain context refers to a value generated when an action is performed through a physical input device such as a keyboard and a mouse, the logical domain context refers to context information that may be generated environmentally when a user uses a device such as a PC/mobile. This corresponds to information such as which WiFi in a wireless environment is caught, which device Bluetooth is connected to, what the currently active process is, how much CPU and memory are used, and where the user is accessing.

The logical domain context authentication system and method of the present invention relate to logical domain context authentication using a genetic algorithm, wherein when a previously authenticated legitimate user uses a PC/mobile device, logical domain context information that may occur environmentally is extracted, and then genetic information is derived from the context and defined as data (authentication data) of a legitimate user, and the data is set as an answer sheet. Thereafter, the genetic information of logical domain context data generated when a user seeking user authentication uses a PC/mobile is compared with the genetic information in the answer sheet data, which is the previously derived data (authentication data) of a legitimate user, to determine whether the user is a legitimate or illegitimate user, and a genetic algorithm is utilized in the process of comparison and analysis.

Genetic algorithms are optimization algorithms that mimic the genetic/evolutionary process of living organisms. For example, when first-generation parents with different DNA give birth to a child, the child inherits half of the parents' DNA. When the first-generation parents mate and produce a child, a second-generation child is born that inherits half of the parents' DNA. Some of the second-generation individuals that cannot adapt to the environment are eliminated and disappear, and only some of the second-generation individuals that have adapted to the environment survive. The third generation, which is born when the second-generation individuals that survived in this way mate, can have a higher survival rate than the previous generation.

Genetic algorithms derive genetic traits that will be passed on to the next generation through several major operations, such as selection, crossover, mutation, and substitution. Selection is choosing candidates to pair up, and crossover means creating the next generation through crossover. Mutation is a process of creating the next generation by crossing random values, since there is a probability that it will survive by crossing over with a random value directly. Substitution is an operation that selects and excludes inferior individuals from the individuals of the new generation created through the crossover/mutation process. In order to apply a genetic algorithm to a problem, the solution must be expressed in the form of genes, and the fitness of this solution must be calculated through a fitness function.

Below, considering the characteristics of the above genetic algorithm, a logical domain context authentication system and method according to one embodiment of the present invention are described.

FIG. 1 illustrates a logical domain context authentication system according to one embodiment of the present invention.

As shown in Fig. 1, the logical domain context authentication system according to one embodiment of the present invention is configured to include an authentication genetic information generation unit (100), an answer sheet collection unit (200), a user genetic information generation unit (300), and a user authentication unit (400). Each component of the authentication system may be individually or integrated into at least one processor including a computer to perform operations.

The above-mentioned authentication genetic information generation unit (100) generates logical domain context genetic information by utilizing environmental information that may occur in real time when a previously authenticated legitimate user uses a PC/mobile device for a predetermined period of time (e.g., tens to hundreds of seconds) via an input means (keyboard, mouse, etc.). That is, when a previously authenticated legitimate user uses a PC/mobile device, logical domain context information that may occur environmentally is extracted and genetic information is derived from the context.

The above answer sheet collection unit (200) receives genetic information from the above authentication genetic information generation unit (100) and determines an answer sheet based on this. In other words, the received genetic information is used to define data (authentication data) of a legitimate user and the corresponding data is derived as an answer sheet.

The above user genetic information generation unit (300) proceeds with a similar procedure to the authentication genetic information generation unit (100), and generates logical domain context genetic information by utilizing environmental information that may occur in real time when a user who wishes to proceed with authentication uses a PC/mobile device for a predetermined period of time (e.g., tens to hundreds of seconds) through an input means (keyboard, mouse, etc.). In other words, when a user who wishes to proceed with authentication uses a PC/mobile device, logical domain context information that may occur environmentally is extracted, and then genetic information is derived from the context.

The user authentication unit (400) determines whether the user who wants to proceed with authentication is a legitimate user. That is, the user genetic information generated by the user genetic information generation unit (300) in the logical domain context data generated when the user who wants to proceed with authentication uses a PC/mobile is compared with the genetic information contained in the answer sheet data derived from the answer sheet collection unit (200) to determine whether the user is a legitimate or illegitimate user.

In order to adjust sensitivity, each genetic information included in the above answer sheet includes a certain margin. Therefore, the genetic information including the margin has a certain range. That is, in order to consider the margin during comparison, a certain range of margin is given to each genetic information contained in the answer sheet data derived from the answer sheet collection unit (200), and if the genetic information to which the margin is given includes genetic information of the logical domain context data generated when the user who wants to proceed with authentication uses a PC/mobile, the genetic information is determined to match.

A certain range of margin is given to each genetic information contained in the answer sheet data derived from the answer sheet collection unit (200). If the genetic information to which the margin of the answer sheet is given includes genetic information of the logical domain context data generated when the user who wants to proceed with authentication uses a PC/mobile, the corresponding genetic information is considered to match, and if the number of matching genetic information is a certain or greater, the user is authenticated as a legitimate user.

The specific procedure for performing logic-based context authentication using a genetic algorithm in the logical domain context authentication system of the present invention is as follows.

First, the procedure for generating logic-based context genetic information performed by the authentication genetic information generation unit (100) and the user genetic information generation unit (300) is described.

When a user uses a PC/mobile device, etc., the logical domain context information that occurs is defined as genetic information, and then the flow proceeds by utilizing the information to determine that the user is a normal user. The logical domain context utilizes environmental information that can occur in real time when using a PC/mobile device. Here, among the processes running on the system, the activated processes and general processes are distinguished, and the CPU occupancy rate, memory usage, transmission/reception traffic volume, TCP transmission/reception traffic volume on open ports, and UDP transmission/reception traffic volume on open ports are measured for each process. Accordingly, the logical domain context items and their output value formats are defined as items as shown in Table 1 below. Table 1 only shows information on one process.

Logical domain context items Output value format (example) explanation Process X Name chrome.exe Process name Is Active Process TRUE/FALSE Whether the process is active Process X Run frequency 3 Operating frequency for each process Process X Running time 23,543 seconds Running time for each process Process X CPU Usage 55% CPU usage by each process Process X Memory Usage 12.3GB Memory usage by each process Process X Traffic TX Usage 3Mbps Transmission traffic volume for each process Process X Traffic RX Usage 23Mbps Amount of received traffic per process Process X Open port count 1 Number of open ports per process Process X Open port TX Usage(TCP) 1.2Mbps TCP outgoing traffic to open ports Process X Open port RX Usage(TCP) 13Mbps TCP incoming traffic to open ports Process X Open port TX Usage(UDP) 0.6Mbps UDP outgoing traffic to open ports Process X Open port RX Usage(UDP) 0.7Mbps UDP incoming traffic to open ports

The values of logical domains that occur while using PC/mobile devices are converted into numbers through a preprocessing process, and then converted into numbers in the range of 0 to 1 through a scaling process. The values in character form are indexed, converted into numbers, and then converted into numbers in the range of 0 to 1 through a scaling process. The abbreviations for each logical domain context item, their output value formats, and preprocessing results are indicated as shown in Table 2 below.

Abbreviations by item Logical domain context items Output value format (example) Preprocessing results (example) PN Process X Name chrome.exe 0.01 AP Is Active Process TRUE 1.0 RF Process X Run frequency 3 0.03 RT Process X Running time 23,543 seconds 0.23543 CU Process X CPU Usage 55% 0.55 MU Process X Memory Usage 12.3GB 0.34 TX Process X Traffic TX Usage 3Mbps 0.03 RX Process X RX Usage 23Mbps 0.23 OC Process X Open port count 1 0.01 OTT Process X Open port TX Usage(TCP) 1.2Mbps 0.012 ORT Process X Open port RX Usage(TCP) 13Mbps 0.13 OTU Process X Open port TX Usage(UDP) 0.6Mbps 0.006 ORU Process X Open port RX Usage(UDP) 0.7Mbps 0.007

The abbreviation PN+AP is set as a unique ID, and based on this, 11 values including RF, RT, CU, MU, TX, RX, OC, OTT, ORT, OTU, and ORU are defined as genes.

Next, the procedure for collecting answer sheets performed in the answer sheet collection unit (200) is described.

Genetic information is collected for each process at intervals of T seconds, for example, at intervals of 1 second. The collection process is described below based on five processes, as shown in Table 3.

Process X Name(PN) Preprocessing value (PN) chrome.exe 0.01 powerpnt.exe 0.02 devenv.exe 0.03 hwp.exe 0.04 kakao.exe 0.05

If the running process is collected at 1-second intervals, data can be collected as follows. Assuming that chrome.exe (PN: 0.01) is an active process (AP: 1.0). In a situation where a general user is using a PC, information is collected for S seconds, for example, 90 seconds, and the collected data is used as an answer sheet (example of genetic value for each genetic information) as shown in Table 4 below.

ID Each genetic value PN AP RF RT CU MU TX RX OC OTT ORT OTU ORU 0.01 1.0 0.03 0.23 0.13 0.02 0.0 0.2 0.0 0.0 0.0 0.0 0.0 0.02 0.0 0.01 0.01 0.02 0.1 0.32 0.12 0.1 0.22 0.1 0.01 0.1 0.03 0.0 0.02 0.32 0.03 0.32 0.01 0.0 0.1 0.0 0.0 0.01 0.0 0.01 1.0 0.03 0.23 0.25 0.02 0.0 0.12 0.0 0.0 0.0 0.0 0.0 0.02 0.0 0.01 0.01 0.01 0.1 0.12 0.23 0.1 0.02 0.20 0.1 0.01 0.03 0.0 0.02 0.32 0.33 0.32 0.02 0.1 0.1 0.02 0.05 0.0 0.01 0.04 0.0 0.01 0.01 0.21 0.15 0.03 0.0 0.3 0.0 0.0 0.0 0.0 0.01 1.0 0.03 0.23 0.00 0.02 0.1 0.0 0.0 0.0 0.0 0.0 0.0 0.02 0.0 0.02 0.01 0.02 0.1 0.23 0.01 0.1 0.18 0.003 0.03 0.0 ..

Next, the procedure for authenticating a user performed in the user authentication unit (400) is described.

In order to verify whether the user is a legitimate user in a situation where there is an answer sheet, we continue to collect the genes while the legitimate user is using them. The genes collected in this way are designated as first-generation genes.

When collecting, if there are K or more genes corresponding to the same ID (PN+AP) as the correct answer, the average value for each gene is extracted and compared with the correct answer. Since genetic values may be derived differently in the active process currently being used by the user, the unique PN value corresponding to the process and the AP value indicating whether it is active are combined and processed as an ID.

Before comparing, specify the sensitivity to measure accuracy. Sensitivity is a value applied to the values of 11 genetic items: RF, RT, CU, MU, TX, RX, OC, OTT, ORT, OTU, and ORU, and specifies a +/- N value. That is, when the RF value is 0.03, the sensitivity is 0.1, and the range is ??0.07 to 0.13. Specify a sensitivity of 0.1 for the same gene as the correct answer and check whether each genetic value is within the range.

If all 11 genes (RF, RT, CU, MU, TX, RX, OC, OTT, ORT, OTU, ORU) except AP are within the range, the score is processed as 100 points, 90 points if 10 are within the range, 81 points if 9 are within the range, and so on. Mathematical Formula 1 shows the score calculation formula.

Gene IDs that are processed below 30 points are discarded and the discarded count is recorded. When a certain number of IDs, for example 10 or more, are collected for each gene ID, a comparison with the correct answer is performed. Genes with a certain score, for example 60 or more, are processed as successful as superior genes. The number of discarded genes and surviving superior genes of the first generation genes is recorded.

Genes of 11 items are set into 3 groups to extract genes and create second-generation genes through combination.

- Group 1: RF, RT, CU, MU, OC

- Group 2: TX, OTT, OTU

- Group 3: RX, ORT, ORU

If there are three or more genes with scores of 50 or more, a random gene group element is extracted from the genes with scores of 50 or more. (Example: Group 1: RF, RT, CU, MU, OC)

Extract genes from groups with different genetic elements from other genes with scores of 50 or more (e.g. Group 2: TX, OTT, OTU)

Extract genes from groups with different genetic elements from other genes with scores of 50 or more (e.g. Group 3: RX, ORT, ORU)

The second generation genes are created by combining three genes (RF, RT, CU, MU, OC + TX, OTT, OTU + RX, ORT, ORU).

The second generation genes are compared with the correct answer sheet to calculate the score. Except for the superior genes that have a certain score, such as 75 points or more, the remaining genes are discarded. The number of discarded genes and the number of surviving superior genes of the second generation genes are recorded.

If more than 70% (% can be adjusted) of the superior genes selected as the second generation remain, it is considered a success and the user is judged as a legitimate user. If it is less than 70%, the user is judged as not a legitimate user. The second-generation superior genes judged as legitimate users are additionally applied as correct answers and utilized to process the context authentication accuracy for users more accurately and sensitively.

If the experimental results show poor performance, the sensitivity range is expanded to obtain a larger number of superior genes. If the performance is excellent, the sensitivity range is repeatedly performed to find the optimal sensitivity.

FIG. 2 illustrates an operation method of a logical domain context authentication system according to another embodiment of the present invention.

As shown in FIG. 2, the operation method of the logical domain context authentication system according to one embodiment of the present invention is configured to include an authenticated user environment information collection step (S100), an authenticated user genetic information generation step (S200), an answer sheet collection step (S300), a user environment information collection step (S400), a user genetic information generation step (S500), and a user authentication step (S600).

To be more specific,

In the above-mentioned authentication user environment information collection step (S100), the authentication genetic information generation unit (100) collects environment information that may occur in real time when a previously authenticated legitimate user uses a PC/mobile device for a predetermined period of time through an input means. The environment information may be configured to include two or more of the following: CPU occupancy rate, memory usage, transmission/reception traffic volume, TCP transmission/reception traffic volume on an open port, and UDP transmission/reception traffic volume on an open port, by distinguishing between activated processes and general processes running on the system.

In the above-mentioned authenticated user genetic information generation step (S200), the authenticated user genetic information generation unit (100) generates logical domain context genetic information using the environmental information collected in the authenticated user environmental information collection step (S100).

In the above answer sheet collection step (S300), the answer sheet collection unit (200) receives genetic information from the authentication genetic information generation unit (100) and derives an answer sheet using the received genetic information.

In the above user environment information collection step (S400), the user genetic information generation unit (300) collects environment information that may occur in real time when a user who wishes to proceed with authentication uses a PC/mobile device for a predetermined period of time through an input means.

In the above user genetic information generation step (S500), the user genetic information generation unit (300) generates logical domain context genetic information using the environmental information collected in the user environmental information collection step (S400).

In the above user authentication step (S600), the user authentication unit (400) compares the genetic information of the logical domain context data generated when the user who wants to perform the above authentication uses a PC/mobile with the genetic information contained in the answer sheet data derived in the answer sheet collection step (S300) to determine whether the user is a legitimate or illegitimate user.

More specifically, the user authentication step (S600) includes a process of including a certain margin in each of the genetic information included in the answer sheet for sensitivity adjustment, and of allowing the genetic information including the margin to have a certain range; the user authentication step further includes a process of determining that the genetic information matches each other when the genetic value of the genetic information to which the margin is assigned in the answer sheet includes the genetic value of the genetic information of the logical domain context data generated when the user who wants to proceed with authentication uses a PC/mobile, and a process of adjusting the margin by an administrator of the context authentication system.

The above user authentication step (S600) calculates a score using the above mathematical formula 1 using the number of genetic information within a certain range and the total number of genetic items, and further includes a process of authenticating the user as a legitimate user if the calculated score is greater than the threshold value.

The above user authentication step (S600) includes a process of extracting an average value for each gene and comparing it with the correct answer sheet when K or more genes corresponding to the same ID (PN+AP) as the correct answer sheet are gathered, and a process of combining a unique PN value corresponding to the process and an AP value indicating activity into one and processing it as an ID. The above user authentication step (S600) further includes a process of comparing it with the correct answer sheet when a certain number or more IDs are gathered for each gene ID (PN+AP); a process of discarding gene IDs processed below a first specific score as a result of calculating scores using the above formula 1 and recording the discarded count; a process of processing genes above a second specific score as successful as superior genes; and a process of recording the discarded genes of the first generation genes and the number of surviving superior genes.

In addition, the user authentication step further includes a process of extracting genes, combining genes of M items of the first generation to create second-generation genes through combination, setting them into N groups, and combining the N genes to create second-generation genes; a process of calculating a score by comparing the second-generation genes with an answer sheet; a process of discarding the remaining genes except for superior genes that have a third specific score or higher, and recording the number of discarded genes and surviving superior genes of the second-generation genes; a process of determining that the user is a legitimate user if L% or more of the superior genes selected for the second generation remain, and determining that the user is not a legitimate user if less than L%; a process of additionally applying the second-generation superior genes determined to be legitimate users to the answer sheet so that the context authentication accuracy for the user can be processed more accurately and sensitively.

As described above, although the present invention has been described by means of limited embodiments and drawings, the present invention is not limited to the above embodiments, and various modifications and variations are possible from this description by those with ordinary skill in the art to which the present invention pertains. Accordingly, the spirit of the present invention should be understood only by the scope of the patent claims described below, and all modifications equivalent thereto are considered to fall within the scope of the spirit of the present invention.

In addition, the operation method of the logical domain context authentication system according to the present invention can be implemented as a computer-readable code on a computer-readable recording medium. The computer-readable recording medium includes all kinds of recording devices that store data that can be read by a computer system. Examples of the recording medium include ROM, RAM, CD ROM, magnetic tape, floppy disk, optical data storage device, hard disk, flash drive, etc., and also includes those implemented in the form of a carrier wave (e.g., transmission via the Internet). In addition, the computer-readable recording medium can be distributed to computer systems connected to a network, so that the computer-readable code can be stored and executed in a distributed manner.

Claims (16)

In a logical domain context authentication system utilizing a genetic algorithm,
An authenticated genetic information generation unit that generates logical domain context genetic information by utilizing environmental information that may occur in real time when a previously authenticated legitimate user uses a PC/mobile device for a specified period of time through an input means;
A genetic information collection unit that receives genetic information from a genetic information generation unit and derives an answer sheet using the received genetic information;
A user genetic information generation unit that generates logical domain context genetic information by utilizing environmental information that may occur in real time when a user who wishes to proceed with authentication uses a PC/mobile device for a predetermined period of time through an input means; and
It is composed of a user authentication unit that compares genetic information of logical domain context data generated when a user who wants to proceed with the above authentication uses a PC/mobile with genetic information contained in the answer sheet data derived from the answer sheet collection unit, and determines whether the user is a legitimate or illegitimate user by utilizing a genetic algorithm;
The above user authentication part
In order to adjust the sensitivity, each genetic information included in the above answer sheet is to include a certain margin, and the genetic information including the margin is to have a certain range.
If the genetic value of the genetic information to which the margin is given in the answer sheet includes the genetic value of the genetic information of the logical domain context data that occurs when the user who wants to proceed with authentication uses a PC/mobile, the genetic information is judged to match each other.
A logical domain context authentication system characterized in that it calculates a score using the following formula using the number of genetic information that falls within a certain range by a margin provided in the answer sheet and the total number of genetic items, and authenticates a user as a legitimate user if the calculated score is greater than a threshold value.
Score = (Number of genes within a certain range / Total number of gene items) * 100
delete delete In the first paragraph, the environmental information
A logical domain context authentication system characterized in that it comprises two or more of the following: CPU usage, memory usage, transmission/reception traffic volume, TCP transmission/reception traffic volume on an open port, and UDP transmission/reception traffic volume on an open port, by distinguishing between active processes and general processes running on the system.
In the first paragraph, the user authentication unit
If there are K or more genes with the same ID (PN+AP) as the correct answer, extract the average value for each gene and compare it with the correct answer.
A logical domain context authentication system characterized by processing a unique PN value corresponding to a process and an AP value indicating whether it is active as an ID.
In the first paragraph, the user authentication unit
When a certain number of IDs are collected for each gene ID (PN+AP), a comparison with the correct answer is performed.
A logical domain context authentication system characterized in that, as a result of calculating a score using the above mathematical formula, a gene ID processed below a first specific score is discarded and a discarded count is recorded, a gene ID above a second specific score is processed as a successful superior gene, and the number of discarded genes and surviving superior genes of the first generation genes is recorded.
In the 6th paragraph, the user authentication unit
Genes are extracted and combined to create second-generation genes, and genes of the first-generation M items are combined into N groups, and the N genes are combined to create second-generation genes.
The second generation genes are compared with the correct answer to calculate the score.
Except for the superior genes that appear above the third specific score, the remaining genes are discarded, and the number of discarded genes and surviving superior genes of the second generation genes is recorded.
If more than L% of superior genes remain among the genes selected for the second generation, it is considered a success and the user is considered a legitimate user. If it is less than L%, the user is considered not a legitimate user.
A logical domain context authentication system characterized by utilizing the second-generation superior genes judged to be legitimate users to additionally apply them as correct answers, thereby enabling more accurate and sensitive processing of context authentication accuracy for users.
In paragraph 1,
A logical domain context authentication system, characterized in that the above margin can be adjusted by an administrator of the context authentication system.
In the operation method of a context authentication system utilizing a genetic algorithm,
An authenticated user environment information collection step that collects environmental information that may occur in real time when a previously authenticated legitimate user uses a PC/mobile device for a specified period of time through an input method;
An authenticated user genetic information generation step for generating logical domain context genetic information using the environmental information collected in the above authenticated user environmental information collection step;
A correct answer collection step for receiving genetic information from the above-mentioned authenticated user genetic information generation step and deriving an correct answer sheet using the received genetic information;
A user environment information collection step that collects real-time environment information that may occur when a user who wishes to proceed with authentication uses a PC/mobile device for a specified period of time through an input method;
A user genetic information generation step for generating logical domain context genetic information using the environmental information collected in the above user environmental information collection step; and
A user authentication step that uses a genetic algorithm to determine whether a user is a legitimate or illegitimate user by comparing the genetic information of the logical domain context data generated when a user who wishes to proceed with the above authentication uses a PC/mobile with the genetic information contained in the answer sheet derived from the answer sheet collection step;
It consists of, including:
The above user authentication step is
A process of including a certain margin in each genetic information included in the above answer sheet for sensitivity control, and ensuring that the genetic information including the margin has a certain range; and
A process of determining that the genetic information matches each other when the genetic value of the genetic information to which the margin is given in the answer sheet includes the genetic value of the genetic information of the logical domain context data that occurs when the user who wants to proceed with authentication uses a PC/mobile; and
The process of calculating scores using the following mathematical formula using the number of genetic information that falls within a certain range by the margin provided in the answer sheet and the total number of genetic items, and authenticating the user as a legitimate user if the calculated score is greater than the threshold value;
A method of operating a logical domain context authentication system, characterized in that it further includes:
Score = (Number of genes within a certain range / Total number of gene items) * 100
delete delete delete In the 9th paragraph, the user authentication step
When there are K or more genes with the same ID (PN+AP) as the correct answer, the process of extracting the average value for each gene and comparing it with the correct answer is performed.
An operation method of a logical domain context authentication system characterized by including a process of processing a unique PN value corresponding to a process and an AP value indicating whether the process is active into an ID.
In the 9th paragraph, the user authentication step
The process of comparing with the correct answer when a certain number of IDs (PN+AP) are collected;
The process of calculating the score using the above mathematical formula, discarding the gene IDs processed below the first specific score, and recording the discarded counts;
A method of operating a logical domain context authentication system, characterized by further comprising a process of processing a gene having a second specific score or higher as a superior gene and a process of recording the number of discarded genes and surviving superior genes of the first generation genes.
In the 14th paragraph, the user authentication step
A process of extracting genes and combining them to create second-generation genes, setting genes of M items of the first generation into N groups, and combining the N genes to create second-generation genes;
The process of calculating scores by comparing the second generation genes with the correct answer;
The process of discarding all genes except for the superior genes that have a score higher than the third specific point, and recording the number of discarded genes and surviving superior genes of the second generation genes;
The process of determining that a user is successful and considered a legitimate user if more than L% of superior genes remain among the genes selected for the second generation, and determining that the user is not a legitimate user if less than L%;
A method of operating a logical domain context authentication system, characterized in that it further includes a process of utilizing a second-generation superior gene determined to be a legitimate user by additionally applying it as a correct answer so that the context authentication accuracy for the user can be processed more accurately and sensitively.
In Article 9,
A method of operating a logical domain context authentication system, characterized in that the above margin further includes a process in which it is adjusted by an administrator of the context authentication system.