A pattern authentication method for preventing a smudge and a shoulder surfing attack. The pattern authentication method includes: a pattern registration step; and a pattern authentication step, in which the pattern registration step includes: a step of receiving a pattern from a user by an input unit of a pattern authentication device; a step of matching and storing a code value corresponding to the pattern input from the user by a matching unit; and a step of generating a user KDI (Key Derivation ID) by matching the code value to a quantum random number generated by a quantum random number generator by a KDI generator.