Authentication method and device using a single-use password including biometric image information

An authentication device using a single-use password, comprising:

• a camera attached to the device to photograph and acquire iris image information for authentication,
• a terminal that stores the iris image information for authentication in memory, generates a plurality of single-use passwords, captures a second iris image information through the camera and transmits a single-use password comprising an i-th hash data in a hash data chain to the server, wherein the single-use password comprises at least data generated by a hash function and optionally one of the combinations of the second iris image information and terminal identification (ID), and wherein a portion of the iris image information relevant to a biometric characteristic of a user is used to seed the hash function when generating the plurality of single-use passwords;
• a server that stores the iris image information for authentication in memory and has an embedded algorithm for comparing and determining whether the single-use password transmitted from the terminal matches the single-use password stored in the server, wherein in the hash data chain generated with the hash function, a n-th hash data H_n is stored in the memory of the server and another n−1 hash data from the hash data chain are stored in the memory of the terminal,
• wherein after generating the hash data chain, the hash function deletes the iris image information used as a variable to seed the hash function from the memories of the terminal and the server;
• wherein after authentication is performed, hash data following the i-th hash data in the hash data chain is deleted from the memory of the terminal to prevent the deleted hash data from being used as a single-use password in a future authentication with the server, and wherein hash data that precedes the i-th hash data in the hash data chain is maintained within the memory of the terminal for subsequent use as another single-use password.

An authentication device using a single-use password, comprising:

• a smart card which stores single-use passwords generated from iris image information, wherein the single-use password comprises at least a hash data chain generated by a hash function and optionally one of the combinations of iris image information and support identification (ID), wherein a portion of the iris image information relevant to a biometric characteristic of a user is used to seed the hash function when generating the plurality of single-use passwords;
• a support provided with a camera for photographing second iris image information for authentication and with a smart card reader;
• and
• a server that stores the iris image information for authentication in memory and has an embedded algorithm for determining whether a single-use password comprising an i-th hash data in the hash data chain transmitted from the support matches the single-use password stored in the server, and wherein in the hash data chain of the hash function, a n-th hash data H_n is stored in the memory of the server and another n−1 hash data are stored in the memory of the smart card,
• wherein, after generating the hash data chain, the hash function deletes the iris image information used as a variable to seed the hash function from the memory of smart card;
• wherein hash data is deleted from the smart card following authentication with the i-th hash data in the hash data chain from the smart card to prevent the deleted hash data from being used as a single-use password in a future authentication, and wherein hash data that precedes the i-th hash data in the hash data chain is maintained within the smart card for subsequent use as another single-use password.