KR102422719B1 - Method of user authentication uisng usim information and device for user authentication performing the same - Google Patents

Abstract

A user authentication method using SIM information according to the present invention comprises the steps of: receiving, by a user authentication device included in a user terminal, a user authentication using SIM information, a membership registration or login request from an application installed in the user terminal; obtaining SIM information from a SIM card installed in the user terminal, requesting user authentication of the user terminal by encrypting the SIM information to an external server, and receiving a user authentication result from the external server; and performing a membership registration or login procedure based on the user authentication result.

Description

User authentication method using SIM information and user authentication device performing the same

The present invention relates to a user authentication method using SIM information and a user authentication apparatus for performing the same.

In general, personal information is requested in the membership registration process that requires identification, and the identification process is carried out based on that information.

Recently, as the number of cases of personal information leakage has increased and government regulations have been strengthened, the input of personal information through the Internet is limited. And, as the use of user terminals such as smart devices increases, security enhancement for handling personal information through the wireless Internet is required.

However, in the conventional general membership registration process as described above, it is inconvenient for a user to individually input personal information through a user terminal, and personal information is easily leaked. In addition, since personal information is not received from the user terminal, it is inconvenient that a provider providing an application or service cannot obtain personal information required for self-authentication.

An object of the present invention is to propose a user authentication method using SIM information capable of performing authentication using SIM information of a USIM device mounted on a user terminal, and a user authentication apparatus for performing the same.

The user authentication method using the SIM information of the present invention is a method in which a user authentication device included in a user terminal performs user authentication using the SIM information, the method comprising: receiving a membership registration or login request from an application installed in the user terminal; Obtaining SIM information from a SIM card installed in a user terminal, requesting user authentication of the user terminal by encrypting the SIM information to an external server, and receiving a user authentication result from the external server, the user and performing a membership registration or login procedure based on the authentication result.

Prior to the step of receiving the membership registration or login request, a VoLTE (Voice over LTE) APN (access point name) or IMS (IP Multimedia Subsystem) APN is acquired, and a wireless It may include the step of connecting with the data network.

The step of receiving the member registration or log-in request may include attempting terminal authentication of the user terminal, checking whether the user terminal is in a temporary stop or loss stop state, and if the temporary stop or loss stop state, It may include guiding the unavailability of the user terminal, and guiding a method of recovering a stop state or reporting it.

In the step of performing the membership registration or login procedure, along with the authentication key received as a result of the user authentication, the agreement agreement value, ID, and password are transmitted to the member company server of the application, and the membership registration result is received from the member company server may include the step of

The step of performing the member registration or login procedure may further include the step of requesting the use of an application of the member company server for which a member is registered using a login token (Token) received from the external server.

The step of performing the member registration or log-in procedure is a step of receiving, as a SMS (Short Message Service) notification text, of the authentication performance to the phone number used for user authentication, when authentication is performed through the subscriber customer DB or authentication server may include.

When the user authentication device of the present invention receives a membership registration or login request from an application installed in the user terminal, it acquires SIM information from a SIM card included in the user terminal or transmits a signal requesting user authentication of the user terminal to an external server a transceiver unit, an input unit for receiving an ID and a password from a user of the user terminal, and an authentication unit for performing authentication of the user terminal using at least one of the SIM information, the ID, or the password in conjunction with the external server include

It may further include an application driving unit for driving the application based on the authentication, member registration and log-in procedures of the user terminal.

The authentication unit may include a user authentication unit that performs user authentication for the member registration or login of the user using the user terminal, and a terminal authentication unit for confirming whether the user terminal is in a paused or lost stop state. can

The user authentication unit transmits at least one of an authentication key, agreement value, ID or password to an external server to perform user authentication or membership registration, and a member registration and authentication performing unit, and a login token (Token) The registered member server may include a log-in performing unit for requesting log-in and use of the application.

The terminal authentication unit, when the user terminal is temporarily suspended or lost stop state, may guide the unavailability guide, and guide the stop state recovery or reporting method, and the like.

The transceiver may obtain a usage right of a Voice over LTE (VoLTE) APN (access point name) or an IMS (IP Multimedia Subsystem) APN, and connect to a wireless data network through the VoLTE APN or the IMS APN.

According to the present invention, by controlling to perform user authentication using the SIM information of the SIM device installed in the user terminal, the member registration and log-in procedures are simplified, and an environment in which security can be improved is provided.

1 is a diagram schematically illustrating a member registration and login system using SIM information according to an embodiment of the present invention.
2 is a diagram schematically illustrating a user authentication apparatus using SIM information included in a user terminal according to an embodiment of the present invention.
3 is a flowchart illustrating a process in which a user terminal performs member registration and log-in procedures using SIM information according to an embodiment of the present invention.
4 is a flowchart illustrating a process in which a user authentication device performs member registration and login procedures in conjunction with a mobile communication system and a member company server according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those of ordinary skill in the art to which the present invention pertains can easily implement them. However, the present invention may be embodied in several different forms and is not limited to the embodiments described herein. And in order to clearly explain the present invention in the drawings, parts irrelevant to the description are omitted, and similar reference numerals are attached to similar parts throughout the specification.

Throughout the specification, when a part "includes" a certain component, it means that other components may be further included, rather than excluding other components, unless otherwise stated.

In addition, the terms "... unit" and "... module" described in the specification mean a unit that processes at least one function or operation, which may be implemented as hardware or software or a combination of hardware and software.

Now, a user authentication method using SIM information and a user authentication apparatus performing the same according to an embodiment of the present invention will be described in detail with reference to FIGS. 1 to 4 .

1 is a diagram schematically illustrating a member registration and login system using SIM information according to an embodiment of the present invention. In this case, the membership registration and login system using the SIM information only shows a schematic configuration necessary for explanation according to an embodiment of the present invention, but is not limited to this configuration.

Referring to FIG. 1 , in the member registration and login system using SIM information according to an embodiment of the present invention, the user authentication device 100 included in the user terminal 200 performs authentication using the SIM information, and the application (50), a USIM (10) and the communication company server 20 of the mobile communication system is interlocked.

In addition, the membership registration and login system using the SIM information is centered on the communication company server 20 of the mobile communication system, the subscriber customer DB 60, the authentication server 70 of the authentication system, and OTP of the OTP (One Time Password) system The server 80 and the service server 30 are interlocked.

Here, the user authentication device 100 requests the SIM information from the SIM 10 and obtains a Mobile Directory Number (MDN) and a UICCID (Serial Number) of the SIM from the SIM 10 . The user authentication device 100 may request an OTP from the OTP applet of the SIM 10 and receive an OTP value from the SIM 10 .

Then, the user authentication device 100 transmits a user name, MDN, UICCID, OTP, etc. to the communication company server 20, and receives a membership registration result and authentication result. Also, the user authentication device 100 may transmit a login token to the communication company server 20 and receive a login result.

The service server 30 manages member companies that provide applications, and performs system interworking and separate billing. In addition, the service server 30 receives a request for subscriber information or an authentication result from the member company server 40 , and provides subscriber information and an authentication result value to the member company server 40 . Here, the member company server 40 includes a server that provides an application and provides various services related to the corresponding application.

The user authentication device 100 receives a membership registration and authentication request from the application 50, and completes authentication and subscription procedures for service use using an ID and password.

In the member registration and login system using SIM information according to an embodiment of the present invention, the items input by the user are name, ID, and password, and the user authentication and personal information required for membership registration are obtained from the mobile communication system. do. Accordingly, one embodiment of the present invention provides user convenience by minimizing the user's input, and easily provides the personal information required to the member company server.

In addition, the membership registration and login system using SIM information according to an embodiment of the present invention can provide high security by interworking between servers, and can provide higher security by using the OTP system.

2 is a diagram schematically illustrating a user authentication apparatus using SIM information included in a user terminal according to an embodiment of the present invention. In this case, the user authentication device using the SIM information only shows a schematic configuration necessary for description according to an embodiment of the present invention, but is not limited to this configuration.

Referring to FIG. 2 , the user authentication apparatus 100 according to an embodiment of the present invention includes an input unit 110 , an authentication unit 120 , a transceiver 130 , and a driving unit 140 .

The input unit 110 receives an ID and a password from a user who uses the user terminal 200 .

The authentication unit 120 works with an external server to authenticate the user terminal using the SIM information of the SIM 10 and the ID and password input to the input unit 110 .

The authentication unit 120 includes a user authentication unit 122 and a terminal authentication unit 128 according to an embodiment of the present invention.

The user authentication unit 122 performs user authentication for membership registration or login of a user using the user terminal 200 .

The user authentication unit 122 includes a member registration and authentication performing unit 124 and a login performing unit 126 according to an embodiment of the present invention.

The membership registration and authentication performing unit 124 transmits at least one of an authentication key, a contract agreement value, an ID, or a password to an external server to perform user authentication or membership registration.

The login performing unit 126 requests a login to an application of a member company server registered as a member using a login token, and requests the use of the application.

The terminal authentication unit 128 checks whether the user terminal 200 is in a paused or lost stop state, and when the user terminal 200 is in a paused or lost stop state, guides the unavailable information, and restores the stopped state Or, how to report it.

When receiving a member registration or login request from the application 50 installed in the user terminal 200 , the transceiver 130 obtains SIM information from the SIM 10 included in the user terminal 200 or the user terminal 200 . transmits a signal requesting user authentication of

Here, the transceiver 130 obtains the right to use a Voice over LTE (VoLTE) APN (access point name) or an IMS (IP Multimedia Subsystem) APN, and can connect to a wireless data network through the VoLTE APN or the IMS APN. have.

In addition, the driving unit 140 includes an application driving unit 142 that operates to drive the application 50 by performing an authentication procedure and a login procedure.

The user authentication apparatus 100 is mounted on the user terminal 200 and acquires MDN and UICCID information stored in the SIM 10 . In addition, the user authentication apparatus 100 processes member registration, simple login, terminal authentication, user authentication, and the like in conjunction with the mobile communication system.

In addition, the user authentication device 100 operates at the point in time when the user requests membership registration and simple login. It is possible.

Accordingly, a subscriber using the user terminal 200 can sign up for membership only by inputting an ID and password for using the service and inputting a name for user authentication. In addition, the user terminal 200 performs a self-authentication procedure using the SIM information of the SIM 10 and information stored in the subscriber customer DB 60, receives personal information according to the agreement to the terms and conditions, and completes the membership registration It provides an environment that can handle post-login processing at the same time.

In addition, the user authentication device 100 separates data into VoLTE APN or IMS APN, unlike existing data connections (Wi-Fi, LTE/3G data, etc.), so that subscribers and service providers It provides convenient usability by removing restrictions on location and price.

In addition, through interlocking between the user authentication device 100 and the mobile communication system, subscriptions are restricted from temporarily suspended and lost smart terminals, and when authentication is used, a usage history SMS is sent to the stored phone number of the subscriber customer DB 60. Provides enhanced security features.

As described above, the membership registration and login system using SIM information according to an embodiment of the present invention allows the subscriber to complete the membership registration and simple login process with minimal input through a safe and convenient authentication/security path, and provides a service provider It provides an environment in which necessary personal information can be obtained.

3 is a flowchart illustrating a process in which a user terminal performs member registration and log-in procedures using SIM information according to an embodiment of the present invention. The following flowchart will be described using the same reference numerals in connection with the configurations of FIGS. 1 and 2 .

First, when the user terminal 200 is powered on (Power ON), the user authentication device 100 acquires the right to use VoLTE APN from the OS of the mobile communication system and the user terminal 200 to separate the data connection. Prepare to be ready, and run SetupWizard.

Referring to FIG. 3 , when the user authentication device 100 receives a membership registration and log-in request, the agreement agreement, ID, password, and name are input (S102, S104).

Then, the user authentication device 100 obtains the MDN, UICCID, etc. from the SIM 10, and requests membership registration from the external communication company server 20 or member company server 40 (S106, S108). Here, the user authentication apparatus 100 provides information such as ID, password, name, MDN, UICCID, etc. to the communication company server 20 or the member company server 40 .

In this case, when the security purpose is low and only membership registration and identification are required, the user authentication apparatus 100 may perform a membership registration or identification procedure without receiving an ID and password from the user.

In addition, the user authentication device 100 can perform membership registration or self-authentication without input of an ID and password when only reference information of a registered member is required, and the member company server 40 automatically generates a virtual ID (VID). You can create and register as a member.

The communication company server 20 or the member company server 40 requests the authentication shown, and processes the registration for simple login by processing the membership registration (S114, S116, S118).

The authentication server 70 receives the MDN and UICCID of the SIM 10 from the telecommunication company server 20 , and confirms identity authentication and subscriber information. Then, the authentication server 70 provides subscriber information such as a name, address, phone number, and e-mail address of the corresponding subscriber to the communication company server 20 (S112).

Then, when the user authentication device 100 is successful in the membership registration and login procedure, the member registration and login procedure is terminated (S110, S112). If the membership registration and login procedure is not successful, the method of membership registration and login is guided through the communication company server 20 or the member company server 40 (S120).

4 is a flowchart illustrating a process in which a user authentication device performs member registration and log-in procedures in conjunction with a mobile communication system and a member company server according to an embodiment of the present invention. The following flowchart will be described using the same reference numerals in connection with the configurations of FIGS. 1 and 2 .

Referring to FIG. 4 , in the user authentication device 100 , the authentication unit 120 connects to the communication company server 2 through VoLTE APN ( S200 ).

When a member registration, login, authentication, etc. is requested from the application driving unit 142 to the authentication unit 120, the user authentication device 100 performs terminal authentication to determine whether the user terminal 200 is temporarily suspended or lost. to try (S202, S204).

When the user terminal 200 is temporarily suspended or lost and stopped, a security procedure is performed so that it cannot be used after illegal or arbitrary acquisition by guiding the unavailable information, suspension recovery, and reporting method (S206).

Then, the user authentication apparatus 100 performs an additional security procedure by performing a PIN verification process when the user sets the USIM PIN as security enhancement (S208).

Then, the user authentication device 100 obtains SIM information (MDN, UICCID, etc.) from the SIM 10 mounted on the user terminal 200 when the pre-security procedure for membership registration, login, authentication, etc. is completed. and transmits encrypted information such as name, MDN, UICCID to the communication company server 20 to request identity authentication (S210, S212).

The telecommunication company server 20 of the mobile communication system for which the user authentication has been requested interlocks the received information such as name, MDN, UICCID, etc. with the authentication server 70 and the subscriber customer DB 60 to process the identity authentication, and to perform encrypted authentication The key is transmitted along with a return code to the user authentication device 100, and the user authentication device 100 checks the user authentication result (S214).

And, when the requested item is membership registration, the user authentication device 100 transmits the agreement value, ID, password, and authentication key to the member company server 40 and receives the membership registration result (S216).

In this process, the member company server 40 may acquire subscriber information such as a phone number, address, and e-mail that the user does not directly input in the membership registration process from the communication company server 20 by using the received authentication key (S218, S220).

And, if authentication is used through the subscriber customer DB 60 and the authentication server 70 in this process, the phone number used for authentication by the communication company server 20 provides an SMS notification text of the authentication usage history and uses customer information to enhance security (S224).

In addition, the user authentication device 100 confirms the membership registration result, requests a simple login to the communication company server 20 so that the login processing is performed on the application provided by the member company server 40, receives a login token, and logs in The token is processed so that the service can be used between the corresponding application and the member server 40 (S226 to S234).

In this case, when the login token is in the valid period, when the user terminal 200 wants to use another application of the corresponding member company, it may be used without input of a separate ID and password by going through a use confirmation process with an existing login ID.

In this way, when the requested item is membership registration, the user authentication device 100 may transmit the agreement agreement value, ID, password, authentication key, etc. to the member company server 40 and receive the membership registration result.

And, when the requested item is identity authentication, the user authentication device 100 transmits only the authentication key to the member company server 40 . In this process, if the supplementary purpose is very high, OTP may be additionally acquired through the OPT applet mounted on the SIM card, and OTP authentication may be performed in conjunction with the mobile communication system.

When the requested item is login, the user authentication device 100 checks a valid login token. Here, if a login token is available, simple login is attempted without a separate ID and password input through the use confirmation process with an existing login ID, and if there is no valid login token, a simple login is attempted by inputting an ID and password. Therefore, , a user authentication method using SIM information according to an embodiment of the present invention, and a user authentication device performing the same, control to perform user authentication using the SIM information of a SIM device mounted in a user terminal, thereby performing member registration and login procedures It provides an environment that simplifies and enhances security.

The embodiment of the present invention described above is not implemented only through the apparatus and method, and may be implemented through a program for realizing a function corresponding to the configuration of the embodiment of the present invention or a recording medium in which the program is recorded. Such a recording medium may be executed not only in the server but also in the user terminal.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto. is within the scope of the right.

Claims (12)

In a method in which a user authentication device included in a user terminal performs user authentication using SIM information,
Receiving a membership registration or login request from an application installed in the user terminal;
obtaining SIM information including a SIM serial number from a SIM card installed in the user terminal;
requesting user authentication of the user terminal by encrypting and transmitting the SIM information to a subscribed telecommunication company server, and
receiving a user authentication result from the communication company server, and performing a membership registration or login procedure for the application based on the user authentication result
User authentication method using SIM information, including: In claim 1,
Before the step of receiving the membership registration or login request,
Obtaining a use right of a Voice over LTE (VoLTE) APN (access point name) or IMS (IP Multimedia Subsystem) APN, and connecting to a wireless data network through the VoLTE APN or the IMS APN
User authentication method using SIM information, including: In claim 1,
Receiving the member registration or login request includes:
Attempting terminal authentication of the user terminal, and confirming whether the user terminal is in a paused or lost stop state, and
In the case of the temporary suspension or loss-and-stop state, the step of guiding the unavailability of the user terminal and guiding a method of recovering or reporting the suspended state
User authentication method using SIM information, including: In claim 1,
The step of performing the membership registration or login procedure is,
Transmitting the agreement agreement value, ID, and password together with the authentication key received as a result of the user authentication to the member company server of the application, and receiving the membership registration result from the member company server
User authentication method using SIM information, including: In claim 4,
The step of performing the membership registration or login procedure is,
Requesting the use of the application of the member company server, the member registered as a member using the login token (Token) received from the communication company server
User authentication method using SIM information further comprising a. In claim 1,
The step of performing the membership registration or login procedure is,
When authentication is performed through the subscriber customer DB or authentication server, receiving the authentication details as SMS (Short Message Service) notification text to the phone number used for user authentication
User authentication method using SIM information, including: Upon receiving a membership registration request or login request from an application installed in the user terminal, the SIM information including the SIM serial number obtained from the SIM card included in the user terminal is encrypted and transmitted to the subscribed telecommunication company server to authenticate the user of the user terminal. requesting transceiver;
an input unit for receiving an ID and password from a user of the user terminal; and
Upon receiving the member registration request, if an authentication key corresponding to the SIM information is obtained from the communication company server, the member joins the member company server using the authentication key, and upon receiving the login request, the communication company server and An authentication unit that receives a login token corresponding to the ID and password in conjunction with each other, and transmits a service use request to the member company server using the login token
A user authentication device comprising a. In claim 7,
An application driving unit that drives the application based on the authentication, member registration and login procedures of the user terminal
User authentication device further comprising a. In claim 7,
The authentication unit,
A user authentication unit for performing user authentication for the member registration or login of a user using the user terminal, and
A terminal authentication unit for confirming whether the user terminal is temporarily stopped or lost stop state
A user authentication device comprising a. delete In claim 9,
The terminal authentication unit,
When the user terminal is temporarily suspended or lost and stopped, a user authentication device for guiding unavailability and guiding a method of recovering or reporting a suspended state. In claim 7,
The transceiver unit,
A user authentication device for acquiring a usage right of a Voice over LTE (VoLTE) APN (access point name) or IMS (IP Multimedia Subsystem) APN, and connecting to a wireless data network through the VoLTE APN or the IMS APN.

Images