KR102602214B1 - User authentication server that performs two-channel authentication for users with credit cards based on the two-dimensional code and operating method thereof - Google Patents

Abstract

A user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code and a method of operating the same are disclosed. In the present invention, when a user authentication request is received from the user's electronic terminal, predetermined authentication information extracted from the two-dimensional code printed on the credit card held by the user is sent from the user's mobile terminal, which is separate from the electronic terminal. By presenting a user authentication server that receives data and performs authentication for the user and its operation method, it is possible to support more strengthened user authentication.

Description

User authentication server that performs two-channel authentication for users holding credit cards based on two-dimensional codes and its operating method {USER AUTHENTICATION SERVER THAT PERFORMS TWO-CHANNEL AUTHENTICATION FOR USERS WITH CREDIT CARDS BASED ON THE TWO-DIMENSIONAL CODE AND OPERATING METHOD THEREOF}

The present invention relates to a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code and a method of operating the same.

Recently, as various online-based services are released, the importance of user authentication online is also increasing.

Relatedly, in the past, many techniques were used to perform user authentication simply using the user password, but this user authentication technique had a security vulnerability in that the password could be easily exposed.

In order to increase security in the user authentication process, a two-channel authentication technique that performs user authentication using two or more separate channels has been widely introduced recently. For example, when a user attempts to perform authentication by accessing a service providing server through his or her electronic terminal, the service providing server transmits a predetermined authentication number to the user's mobile terminal, which is separate from the electronic terminal. At this time, there is a service that allows the user to complete user authentication by transmitting the authentication number received on the mobile terminal to the service providing server through the electronic terminal.

In relation to this, given that the spread of credit cards is increasing recently, the introduction of a two-channel authentication technique using credit cards can be considered.

In addition, as the use of two-dimensional codes is increasing recently, a two-dimensional code with predetermined authentication information inserted is printed on a credit card, and when user authentication is required, the two-dimensional code printed on the credit card is printed. By performing a process to check the inserted authentication information, the introduction of an authentication technique that enables two-channel-based user authentication can be considered.

In the present invention, when a user authentication request is received from the user's electronic terminal, predetermined authentication information extracted from the two-dimensional code printed on the credit card held by the user is sent from the user's mobile terminal, which is separate from the electronic terminal. By presenting a user authentication server that receives data and performs authentication for the user and its operation method, we aim to support more strengthened user authentication.

A user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code according to an embodiment of the present invention includes member identification information of a plurality of members and each of the plurality of members. Credit card - On the credit card held by each of the plurality of members, a two-dimensional code is printed containing the member identification information of the plurality of members and the card number of the credit card held by each of the plurality of members. Yes - a card information database in which card numbers are stored in correspondence with each other, member identification information of the plurality of members and an authentication token for each of the plurality of members - the authentication token is issued in advance to each of the plurality of members The authentication code and the card number of the credit card held by each of the plurality of members are applied as input to a preset authentication token generation function and the output value is calculated - an authentication token database stored in correspondence with each other, the When first member identification information is received from the electronic terminal of a first member, which is one of a plurality of members, and a user authentication request is received, authentication that requests transmission of an authentication code corresponding to the first member to the electronic terminal. When a first authentication code is received from the code request unit and the electronic terminal in response to a request to transmit the authentication code, extract the first authentication token stored in correspondence with the first member identification information from the authentication token database; , a card number calculation unit that calculates a first card number for the first credit card held by the first member from the first authentication token based on the first authentication code, when the first card number is calculated, Compare whether the first card number matches the card number stored corresponding to the first member identification information in the card information database, and if both card numbers are confirmed to match, the first card number is sent to the electronic terminal. A transmission request unit that requests transmission of member identification information and card number inserted into the two-dimensional code printed on the surface of the credit card, and the two-dimensional code printed on the surface of the first credit card are held by the first member. When the first member identification information and the first card number inserted into the two-dimensional code are received from the mobile terminal by being scanned and recognized by the mobile terminal, the first card number is stored in the card information database. and an authentication completion processing unit that compares whether the first member identification information matches the card number stored in correspondence with the first member identification information, and completes user authentication when both card numbers are confirmed to match.

In addition, a method of operating a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code according to an embodiment of the present invention includes member identification information of a plurality of members and the plurality of members. Credit card held by each of the plurality of members - The credit card held by each of the plurality of members includes the member identification information of the plurality of members and the card number of the credit card held by each of the plurality of members. A dimension code is printed - maintaining a card information database in which card numbers are stored in correspondence with each other, member identification information of the plurality of members and an authentication token for each of the plurality of members - the authentication token is This refers to the output value calculated by applying the pre-issued authentication code for each of the plurality of members and the card number of the credit card held by each of the plurality of members as input to the preset authentication token generation function - these correspond to each other. Maintaining an authentication token database stored in a database, receiving first member identification information from an electronic terminal of a first member among the plurality of members, and receiving a user authentication request, sending the first member to the electronic terminal. 1. Requesting transmission of an authentication code corresponding to a member, when a first authentication code is received from the electronic terminal in response to a request for transmission of the authentication code, corresponding to the first member identification information from the authentication token database Extracting a stored first authentication token and calculating a first card number for a first credit card held by the first member from the first authentication token based on the first authentication code, 1 When the card number is calculated, the first card number is compared with the card number stored corresponding to the first member identification information in the card information database, and if it is confirmed that both card numbers match each other, Requesting transmission of member identification information and card number inserted in the two-dimensional code printed on the surface of the first credit card to the electronic terminal, and the two-dimensional code printed on the surface of the first credit card When the first member identification information and the first card number inserted into the two-dimensional code are received from the mobile terminal by being scanned and recognized by the mobile terminal owned by the first member, the first card number is Comparing whether the card number matches the card number stored corresponding to the first member identification information in the card information database, and completing user authentication when both card numbers are confirmed to match.

In the present invention, when a user authentication request is received from the user's electronic terminal, predetermined authentication information extracted from the two-dimensional code printed on the credit card held by the user is sent from the user's mobile terminal, which is separate from the electronic terminal. By presenting a user authentication server that receives data and performs authentication for the user and its operation method, it is possible to support more strengthened user authentication.

Figure 1 is a diagram illustrating the structure of a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code according to an embodiment of the present invention.
Figure 2 is a diagram illustrating a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code according to an embodiment of the present invention.
Figure 3 is a flowchart showing an operation method of a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code according to an embodiment of the present invention.

Hereinafter, embodiments according to the present invention will be described in detail with reference to the attached drawings. This description is not intended to limit the present invention to specific embodiments, but should be understood to include all changes, equivalents, and substitutes included in the spirit and technical scope of the present invention. In describing each drawing, similar reference numerals are used for similar components, and unless otherwise defined, all terms used in this specification, including technical or scientific terms, are within the scope of common knowledge in the technical field to which the present invention pertains. It has the same meaning as generally understood by those who have it.

In this document, when a part "includes" a certain component, this means that it may further include other components rather than excluding other components, unless specifically stated to the contrary. Additionally, in various embodiments of the present invention, each component, functional block, or means may be composed of one or more subcomponents, and the electrical, electronic, and mechanical functions performed by each component may be electronic. It may be implemented with various known elements or mechanical elements such as circuits, integrated circuits, and ASICs (Application Specific Integrated Circuits), and may be implemented separately or by integrating two or more into one.

Meanwhile, the blocks in the attached block diagram or the steps in the flow chart are computer program instructions that are mounted on the processor or memory of equipment capable of data processing, such as general-purpose computers, special-purpose computers, portable laptop computers, and network computers, and perform designated functions. It can be interpreted to mean. Because these computer program instructions can be stored in a memory provided in a computer device or in a computer-readable memory, the functions described in the blocks of a block diagram or the steps of a flow diagram can be produced as a manufactured product containing instruction means to perform them. It could be. In addition, each block or each step may represent a module, segment, or portion of code that includes one or more executable instructions for executing specified logical function(s). Additionally, it should be noted that in some alternative embodiments, it is possible for functions mentioned in blocks or steps to be executed in a different order. For example, two blocks or steps shown in succession may be performed substantially simultaneously or in reverse order, and in some cases, some blocks or steps may be omitted.

Figure 1 is a diagram illustrating the structure of a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code according to an embodiment of the present invention.

Referring to FIG. 1, the user authentication server 110 according to an embodiment of the present invention includes a card information database 111, an authentication token database 112, an authentication code request unit 113, and a card number calculation unit 114. , includes a transmission request unit 115 and an authentication completion processing unit 116.

First, a two-dimensional code containing the member identification information of each of the plurality of members and the card number of the credit card held by each of the plurality of members is printed on the credit card held by each of the plurality of members in the present invention. It is done.

Here, the member identification information refers to information such as name, contact information, ID, etc. of each member.

In this regard, as shown in FIG. 2, the credit card 210 held by each of the plurality of members includes member identification information of the plurality of members and credit held by each of the plurality of members. A two-dimensional code 212 into which the card number 211 of the card 210 is inserted may be printed.

Here, the two-dimensional code 212 refers to a code that can insert information such as various characters into a two-dimensional image pattern. QR code (Quick Response Code), veri code, dot code, etc. are used, or Korean registration code is used. A digital code that can express certain data on a two-dimensional image through a pixel space composed of a plurality of points disclosed in Patent No. 10-1897960 can be used. In this regard, the example of FIG. 2 shows an example in which a digital code capable of expressing predetermined data on a two-dimensional image is inserted into the credit card 210 as a two-dimensional code 212 through a pixel space composed of a plurality of dots. It is shown. This digital code is composed of yellow dots, as shown in Figure 2, and when compared to the white background, the color contrast is not clear, so it is difficult to clearly observe with the naked eye, but it is difficult to observe clearly with the naked eye. The camera has the characteristic of being able to identify yellow dots differently from human vision, allowing the pattern of yellow dots to be clearly identified through an electronic terminal.

In this situation, the card information database 111 of the user authentication server 110 stores the member identification information of the plurality of members and the card number of the credit card held by each of the plurality of members in correspondence with each other.

In relation to this, information may be stored in the card information database 111 as shown in Table 1 below.

Member identification information for multiple members Card number from credit card Member identification information for member 1 1111-2222-3333-4444 Member 2's member identification information 2222-3333-4444-5555 Member Identification Information for Member 3 3333-4444-5555-6666 ... ...

The authentication token database 112 stores member identification information of the plurality of members and authentication tokens for each of the plurality of members in correspondence with each other.

In relation to this, information may be stored in the authentication token database 112 as shown in Table 2 below.

Member identification information for multiple members authentication token Member identification information for member 1 authentication token 1 Member 2's member identification information authentication token 2 Member Identification Information for Member 3 Authentication Token 3 ... ...

Here, the authentication token is an output value calculated by applying the pre-issued authentication code for each of the plurality of members and the card number of the credit card held by each of the plurality of members as input to a preset authentication token generation function. means.

At this time, according to one embodiment of the present invention, when the authentication code and card number corresponding to one of the plurality of members is input, the authentication token generation function generates the authentication code and card number approved as input. By performing homomorphic encryption using preset encryption keys, a first homomorphic ciphertext is generated for the authentication code approved as input, and a second homomorphic ciphertext is generated for the card number approved as input. , By performing a homomorphic operation between the first homomorphic ciphertext and the second homomorphic ciphertext according to a preset first homomorphic operation equation, it may be a function that calculates the operation result of the homomorphic operation as an authentication token corresponding to one of the members. .

Homomorphic encryption refers to an encryption technology that supports operations on data in an encrypted state without decrypting the encrypted data. In other words, homomorphic encryption refers to an encryption technology that allows you to obtain the same value as the result of calculating data in plaintext when the result of calculation in the encrypted state is decrypted.

For example, let us assume that there are plaintext data called A and B, that the encrypted data created by homomorphically encrypting A is E(A), and that the encrypted data created by homomorphically encrypting B is E(B). At this time, if a predetermined operation is performed on E(A) and E(B) to calculate an operation value called E(S), when E(S) is decoded, the decoded value is the sum of A and B. The basic concept of homomorphic encryption is to make it the same as the or multiplied value. In other words, when a predetermined operation is performed on two encrypted data in the encryption domain and the calculated value is decrypted, encryption that ensures that the decrypted value matches the value obtained by calculating the two plaintext data in the plaintext domain is called homomorphic encryption.

In this regard, the process of calculating 'authentication token 1' corresponding to 'member 1' in the authentication token database 112 as shown in Table 2 above will be described as an example as follows.

First, when the authentication code and card number corresponding to 'Member 1' are input to the authentication token generation function, the authentication token generation function uses the authentication code and card number approved as input respectively using a preset encryption key. By performing homomorphic encryption, a first homomorphic ciphertext for the authentication code approved as input and a second homomorphic ciphertext for the card number approved as input can be generated.

Then, the authentication token generation function performs a homomorphic operation between the first homomorphic ciphertext and the second homomorphic ciphertext according to a preset first homomorphic operation formula, and converts the operation result of the homomorphic operation into the homomorphic operation corresponding to 'member 1'. It can be calculated as ‘Authentication Token 1’.

Here, the first homomorphic operation equation is an equation for performing an operation between two data on which homomorphic encryption has been performed, and may be preset by the developer. This first homomorphic arithmetic expression refers to an arithmetic expression designated to generate a result in the encryption domain corresponding to a predetermined arithmetic expression performed between two plaintext data in the plaintext domain. For example, when there is an operation called multiplication that multiplies plain text data, there may be a homomorphic multiplication corresponding to the multiplication. In relation to this, it is said that plaintext data A and B exist, A and B are homomorphically encrypted, respectively, and encrypted data called E(A) and E(B) are generated, and the first homomorphic operation formula is used in the plaintext domain. In the case of homomorphic multiplication corresponding to multiplication, if E(A) and E(B) are homomorphically multiplied in the encryption domain, ' 'The result of the operation can be generated, and when A and B are multiplied in the plaintext domain, ' 'The operation result may be generated. At this time, ' The result of decoding ' is ' ' becomes the same. When this relationship is established, it can be said that the first homomorphic operation expression, homomorphic multiplication, has a relationship corresponding to multiplication in the plain text domain. Here, homomorphic multiplication is not an operation that simply multiplies two encrypted data, like multiplication in the plaintext domain. Since homomorphic multiplication is a homomorphic operation to produce a result corresponding to multiplication in the plaintext domain, the operation process is not simply performed by multiplying two encrypted data, but is performed through multiplication, addition, and modulo operations depending on the characteristics of homomorphic encryption. etc. can be defined as a predetermined operation algorithm that is performed in complex.

When first member identification information is received from the electronic terminal 150 of a first member, which is one of the plurality of members, and a user authentication request is received, the authentication code request unit 113 sends the electronic terminal 150 to the electronic terminal 150. Request transmission of an authentication code corresponding to the first member.

When the card number calculation unit 114 receives the first authentication code from the electronic terminal 150 in response to a request for transmission of the authentication code, it is stored in correspondence with the first member identification information from the authentication token database 112. The first authentication token is extracted, and a first card number for the first credit card held by the first member is calculated from the first authentication token based on the first authentication code.

When the first card number is calculated, the transmission request unit 115 compares whether the first card number matches the card number stored corresponding to the first member identification information in the card information database 111, and determines whether the first card number matches the card number stored in correspondence with the first member identification information. If the card numbers are confirmed to match each other, transmission of the member identification information and card number inserted into the two-dimensional code printed on the surface of the first credit card is requested to the electronic terminal 150.

The authentication completion processing unit 116 receives the information from the mobile terminal 160 because the two-dimensional code printed on the surface of the first credit card is scanned and recognized by the mobile terminal 160 owned by the first member. When the first member identification information and the first card number inserted into the two-dimensional code are received, the first card number is stored in correspondence with the first member identification information in the card information database 111, and When it is confirmed that both card numbers match each other, user authentication is completed.

Hereinafter, the operations of the authentication code request unit 113, the card number calculation unit 114, the transmission request unit 115, and the authentication completion processing unit 116 will be described in detail using examples.

First, the first member is referred to as 'member 1' in the authentication token database 112 as shown in Table 2, and 'member identification information of member 1' is received from the electronic terminal 150 of 'member 1', Assume that a user authentication request is received by the user authentication server 110.

Then, the authentication code request unit 113 may request transmission of the authentication code corresponding to 'member 1' to the electronic terminal 150.

At this time, when transmission of the authentication code corresponding to 'Member 1' is requested from the user authentication server 110 to the electronic terminal 150 of 'Member 1', 'Member 1' sends the authentication code corresponding to 'Member 1'. It can be entered into the electronic terminal 150. If the first authentication code is input as the authentication code corresponding to 'Member 1', the electronic terminal 150 may transmit the first authentication code to the user authentication server 110.

In this way, as the first authentication code, which is a pre-issued authentication code for 'Member 1', is input in the electronic terminal 150, the first authentication code is received from the electronic terminal 150 to the user authentication server 110. Then, the card number calculation unit 114 extracts 'authentication token 1' stored in correspondence with 'member identification information of member 1' from the authentication token database 112 as shown in Table 2 above, and enters the first authentication code Based on this, the first card number for the first credit card held by 'member 1' can be calculated from 'authentication token 1'.

At this time, according to one embodiment of the present invention, when the first authentication code is received from the electronic terminal 150, the card number calculation unit 114 corresponds to the first member identification information from the authentication token database 112. After extracting the stored first authentication token and decrypting the first authentication token using the encryption key to generate a decryption value, a first operation is performed in the plaintext domain corresponding to the first homomorphic operation equation. A solution such that the operation result calculated when an operation is performed with the first authentication code according to the equation is the same as the decryption value can be calculated using the first card number.

For example, the first isomorphic operation equation is It is said to be a homomorphic multiplication expressed as, the first operation expression in the plain text domain corresponding to the first homomorphism operation expression is called a multiplication, and the first authentication code corresponding to 'member 1' is 'A', 'member 1'. Assume that the first card number corresponding to ' is 'B', the first homomorphic ciphertext is 'E(A)', and the second homomorphic ciphertext is 'E(B)'.

At this time, when the first authentication code is received from the electronic terminal 150, the card number calculation unit 114 is stored in correspondence with the 'member identification information of member 1' from the authentication token database 112 as shown in Table 2 above. You can extract 'Authentication Token 1'. Here, the extracted 'authentication token 1' is generated by performing homomorphic multiplication of the first homomorphic ciphertext 'E(A)' and the second homomorphic ciphertext 'E(B)', which is the first homomorphic operation equation. Because the value is ' ', and at this time, the card number calculation unit 114 is ' ', decryption can be performed using the encryption key.

At this time, ' ' is the result of homomorphic multiplication of 'E(A)' and 'E(B)' on which homomorphic encryption was performed, ' The decrypted value for ' is ' which is the result of multiplication in the plaintext domain. 'It can be.

Here, since 'A' refers to the first authentication code and 'B' refers to the first card number, the card number calculation unit 114 is ' ' is the decrypted value from ' ' is generated, based on the first authentication code 'A', ' 'B', the first card number, can be found from '.

Specifically, when the card number calculation unit 114 performs an operation with 'A', which is the first authentication code, according to the multiplication, which is the first operation equation, the operation result calculated is the decrypted value, ' 'B', the first card number, can be restored by calculating a solution that is equal to '. That is, since the first operation formula of the card number calculation unit 114 is multiplication, the result calculated when 'A', which is the first authentication code, is multiplied by a certain value is ' 'B', the first card number, can be restored by calculating the solution to be '.

In this way, when the first card number is calculated by the card number calculation unit 114, the transmission request unit 115 records the first card number as 'Member 1' in the card information database 111 as shown in Table 1 above. You can compare whether it matches the card number '1111-2222-3333-4444' stored in correspondence with the 'member identification information'.

In relation to this, when the first card number is '1111-2222-3333-4444', the transmission request unit 115 confirms that both card numbers match each other, and thus sends the first card number to the electronic terminal 150. You can request transmission of member identification information and card number embedded in the two-dimensional code printed on the surface of the credit card.

At this time, according to one embodiment of the present invention, the electronic terminal 150 transmits the member identification information and card number inserted into the two-dimensional code printed on the surface of the first credit card from the user authentication server 110. When a request is received, a guidance message instructing to recognize the two-dimensional code printed on the surface of the first credit card can be generated and displayed on the screen.

At this time, according to an embodiment of the present invention, when the recognition application for recognition of the two-dimensional code pre-installed on the mobile terminal 160 is executed by the first member, the mobile terminal 160 ( 160), the two-dimensional code printed on the surface of the first credit card is scanned and recognized through a camera pre-installed in the first credit card, thereby extracting the first member identification information and the first card number from the two-dimensional code. Afterwards, the first member identification information and the first card number can be transmitted to the user authentication server 110.

In this way, the two-dimensional code printed on the surface of the first credit card is scanned and recognized by the mobile terminal 160 owned by the first member, so that it is inserted into the two-dimensional code from the mobile terminal 160. When the first member identification information and the first card number are received, the authentication completion processing unit 116 records the first card number as 'member identification information of member 1' in the card information database 111 as shown in Table 1 above. You can compare to see if it matches the stored card number '1111-2222-3333-4444'.

In relation to this, when the first card number received from the mobile terminal 160 is '1111-2222-3333-4444', the authentication completion processing unit 116 confirms that both card numbers match each other, so that the user Authentication can be completed and processed.

According to one embodiment of the present invention, the user authentication server 110 may further include an authentication history information generation unit 117, a transaction generation unit 118, and a registration request unit 119.

When the user authentication is completed, the authentication history information generator 117 generates time information about when the user authentication is completed, and then uses the time information, the first authentication code, and the first card number. Create configured authentication history information.

For example, assume that the user authentication has been completed through the authentication completion processing unit 116. Then, the authentication history information generator 117 generates time information about the time when the user authentication is completed and then generates authentication history information consisting of the time information, the first authentication code, and the first card number. can do.

In relation to this, when the time information is referred to as 'time information 1', the authentication history information generator 117 may generate authentication history information as shown in Table 3 below.

time information verification code card number Time information 1 1st authentication code 1st card number

When the authentication history information is generated, the transaction generator 118 generates a transaction including the authentication history information.

When the transaction is generated, the registration request unit 119 randomly selects a first node device, which is one of a plurality of node devices 11, 12, 13, and 14 constituting the blockchain network, and then 1 While transmitting the transaction to the node device, a request for registration of the transaction to the blockchain network is transmitted.

At this time, when the first node device receives the registration request together with the transaction from the user authentication server 110, the first node device includes the transaction based on the previous block linked to the chain in the blockchain data stored in the memory. By creating 1 block and connecting the first block to the blockchain data as a chain, after completing storage of the first block, the first block is stored through a plurality of node devices (11) through the blockchain network. , 12, 13, and 14), it can be propagated to the remaining node devices except the first node device.

Specifically, when the first node device receives the registration request together with the transaction from the user authentication server 110, the first node device includes the transaction by referring to the block header of the previous block linked to the blockchain data in a chain. The first block, which is a new block, can be created. Then, the first node device connects the first block to the blockchain data in a chain, and after completing storage of the first block, transfers the first block to a plurality of node devices through the blockchain network. Among the nodes 11, 12, 13, and 14, it can be propagated to the remaining node devices except the first node device.

In this way, when the user authentication is completed, the user authentication server 110 according to the present invention generates authentication history information and registers it in the blockchain network, thereby determining when the user performed user authentication and user authentication. By allowing you to check how much progress has been made, it is possible to check information on whether the credit card held by the user has been stolen and authenticated by a third party.

Figure 3 is a flowchart showing an operation method of a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code according to an embodiment of the present invention.

In step S310, the member identification information of a plurality of members and the credit card held by each of the plurality of members (the credit card held by each of the plurality of members includes the member identification information of the plurality of members and the credit card held by each of the plurality of members) A card information database is maintained in which the card numbers of each member (in which a two-dimensional code containing the card number of the credit card held by each member is printed) are stored in correspondence with each other.

In step S320, member identification information of the plurality of members and an authentication token for each of the plurality of members (the authentication token includes a pre-issued authentication code for each of the plurality of members and each of the plurality of members) It maintains an authentication token database in which the card number of the credit card you own is applied as input to the preset authentication token creation function and the output value calculated) is stored in correspondence with each other.

In step S330, when first member identification information is received from the electronic terminal of a first member, which is one of the plurality of members, and a user authentication request is received, an authentication code corresponding to the first member is sent to the electronic terminal. Request transmission of .

In step S340, when a first authentication code is received from the electronic terminal in response to a request to transmit the authentication code, a first authentication token stored in correspondence with the first member identification information is extracted from the authentication token database. And, based on the first authentication code, the first card number for the first credit card held by the first member is calculated from the first authentication token.

In step S350, when the first card number is calculated, it is compared to see whether the first card number matches the card number stored corresponding to the first member identification information in the card information database, and both card numbers are different from each other. If a match is confirmed, transmission of the member identification information and card number inserted into the two-dimensional code printed on the surface of the first credit card is requested to the electronic terminal.

In step S360, the two-dimensional code printed on the surface of the first credit card is scanned and recognized by the mobile terminal owned by the first member, so that the two-dimensional code inserted into the two-dimensional code from the mobile terminal is recognized. When first member identification information and the first card number are received, the first card number is compared to see if it matches the card number stored corresponding to the first member identification information in the card information database, and both card numbers are If it is confirmed that they match, user authentication is completed.

At this time, according to one embodiment of the present invention, when the authentication code and card number corresponding to one of the plurality of members is input, the authentication token generation function generates the authentication code and card number approved as input. By performing homomorphic encryption using a preset encryption key, a first homomorphic ciphertext is generated for the authentication code authorized as an input, and a second homomorphic ciphertext is generated for the card number authorized as an input. 1 It may be a function that performs a homomorphic operation between the first homomorphic ciphertext and the second homomorphic ciphertext according to a homomorphic operation equation, and calculates the result of the homomorphic operation as an authentication token corresponding to one of the members.

At this time, according to one embodiment of the present invention, when the first authentication code is received from the electronic terminal in step S340, the first authentication code stored in correspondence with the first member identification information from the authentication token database After generating a decryption value by extracting a token and decrypting the first authentication token using the encryption key, the first authentication is performed according to a first arithmetic expression in the plaintext domain corresponding to the first homomorphic arithmetic expression. When an operation is performed with the code, a solution such that the result of the operation is the same as the decrypted value can be calculated using the first card number.

In addition, according to one embodiment of the present invention, when the electronic terminal receives a request for transmission of member identification information and card number inserted into the two-dimensional code printed on the surface of the first credit card from the user authentication server, , a guidance message instructing to recognize the two-dimensional code printed on the surface of the first credit card can be generated and displayed on the screen.

At this time, when the mobile terminal executes the recognition application for recognition of the two-dimensional code pre-installed on the mobile terminal by the first member, the first credit is recognized through the camera pre-installed on the mobile terminal. By scanning and recognizing the two-dimensional code printed on the surface of the card, the first member identification information and the first card number are extracted from the two-dimensional code, and then the first member identification information and the first card number are sent to the user authentication server. The first card number can be transmitted.

In addition, according to an embodiment of the present invention, the operating method of the user authentication server is to generate time information about the time when the user authentication is completed when the user authentication is completed, and then generate the time information and the first time information. 1 generating authentication history information consisting of an authentication code and the first card number; once the authentication history information is generated, generating a transaction including the authentication history information; and once the transaction is generated, establishing a blockchain network. After randomly selecting a first node device, which is one of a plurality of node devices, transmitting the transaction to the first node device and transmitting a request for registration of the transaction to the blockchain network. More may be included.

At this time, when the registration request together with the transaction is received from the user authentication server, the first node device generates a first block containing the transaction based on the previous block linked to the chain in the blockchain data stored in the memory. By creating and connecting the first block to the blockchain data as a chain, after completing storage of the first block, the first block is transferred to the first block among the plurality of node devices through the blockchain network. It can be propagated to all node devices except 1 node device.

Above, the operation method of the user authentication server according to an embodiment of the present invention has been described with reference to FIG. 3. Here, the operation method of the user authentication server according to an embodiment of the present invention may correspond to the configuration of the operation of the user authentication server 110 described using FIGS. 1 and 2, so a detailed description thereof is omitted. I decided to do it.

A method of operating a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code according to an embodiment of the present invention includes a computer stored in a storage medium for execution through combination with a computer. It can be implemented as a program.

In addition, a method of operating a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code according to an embodiment of the present invention includes computer program instructions for execution through combination with a computer. It may be implemented in a form and recorded on a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc., singly or in combination. Program instructions recorded on the medium may be specially designed and constructed for the present invention or may be known and usable by those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -Includes optical media (magneto-optical media) and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, etc. Examples of program instructions include machine language code, such as that produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter, etc.

As described above, the present invention has been described with specific details such as specific components and limited embodiments and drawings, but this is only provided to facilitate a more general understanding of the present invention, and the present invention is not limited to the above embodiments. , those skilled in the art can make various modifications and variations from this description.

Accordingly, the spirit of the present invention should not be limited to the described embodiments, and the scope of the patent claims described below as well as all modifications that are equivalent or equivalent to the scope of this patent claim shall fall within the scope of the spirit of the present invention. .

110: User authentication server
111: Card information database 112: Authentication token database
113: Authentication code request unit 114: Card number calculation unit
115: Transmission request unit 116: Authentication completion processing unit
117: Authentication history information generation unit 118: Transaction generation unit
119: Registration request section
150: electronic terminal
160: mobile terminal
11, 12, 13, 14: Multiple node devices

Claims (12)

In the user authentication server that performs two-channel authentication for users holding credit cards based on two-dimensional codes,
Member identification information of a plurality of members and credit cards held by each of the plurality of members - The credit card held by each of the plurality of members includes member identification information of the plurality of members and each of the plurality of members. A two-dimensional code containing the card number of the credit card you hold is printed - a card information database in which the card numbers are stored in correspondence with each other;
Member identification information of the plurality of members and an authentication token for each of the plurality of members - the authentication token includes a pre-issued authentication code for each of the plurality of members and a credit card held by each of the plurality of members refers to the output value calculated by applying the card number as input to the preset authentication token creation function - an authentication token database stored in correspondence with each other;
When first member identification information is received from the electronic terminal of a first member, which is one of the plurality of members, and a user authentication request is received, requesting transmission of an authentication code corresponding to the first member to the electronic terminal. Authentication code request unit;
When a first authentication code is received from the electronic terminal in response to a request to transmit the authentication code, a first authentication token stored in correspondence with the first member identification information is extracted from the authentication token database, and the first authentication token is stored in response to the first member identification information. a card number calculation unit that calculates a first card number for a first credit card held by the first member from the first authentication token based on an authentication code;
When the first card number is calculated, the first card number is compared with the card number stored corresponding to the first member identification information in the card information database, and it is confirmed that both card numbers match each other. In this case, a transmission request unit that requests transmission of member identification information and card number inserted in the two-dimensional code printed on the surface of the first credit card to the electronic terminal; and
Since the two-dimensional code printed on the surface of the first credit card is scanned and recognized by the mobile terminal owned by the first member, the first member identification information inserted into the two-dimensional code from the mobile terminal When the first card number is received, the first card number is compared with the card number stored corresponding to the first member identification information in the card information database, and it is confirmed that both card numbers match each other. If so, an authentication completion processing unit that completes user authentication.
Including,
The electronic terminal is
When a request for transmission of member identification information and card number inserted in the two-dimensional code printed on the surface of the first credit card is received from the user authentication server, the two-dimensional code printed on the surface of the first credit card Create a guidance message instructing to recognize and display it on the screen,
The mobile terminal is
When the recognition application for recognition of the two-dimensional code pre-installed on the mobile terminal is executed by the first member, it is printed on the surface of the first credit card through the camera pre-installed on the mobile terminal. By scanning and recognizing the two-dimensional code, the first member identification information and the first card number are extracted from the two-dimensional code, and then the first member identification information and the first card number are transmitted to the user authentication server. A user authentication server characterized in that. According to paragraph 1,
The authentication token creation function is
When the authentication code and card number corresponding to one of the plurality of members is input, homomorphic encryption is performed on the authentication code and card number approved as input, respectively, using a preset encryption key. After generating a first homomorphic ciphertext for the authentication code approved as an input, and generating a second homomorphic ciphertext for the card number approved as an input, the first homomorphic ciphertext and the A user authentication server characterized in that it is a function that performs a homomorphic operation between second homomorphic ciphertexts, and calculates the result of the homomorphic operation as an authentication token corresponding to one of the members. According to paragraph 2,
The card number calculation unit
When the first authentication code is received from the electronic terminal, the first authentication token stored corresponding to the first member identification information is extracted from the authentication token database, and the first authentication token is generated using the encryption key. By decoding, after generating the decryption value, the operation result calculated when the operation is performed with the first authentication code according to the first operation equation in the plaintext domain corresponding to the first homomorphism operation equation is, A user authentication server characterized in that it calculates a solution that is equal to the decryption value using the first card number. delete According to paragraph 1,
When the user authentication is completed, time information is generated regarding the time when the user authentication is completed, and then authentication history information consisting of the time information, the first authentication code, and the first card number is generated. information generation unit;
a transaction generator that generates a transaction including the authentication history information when the authentication history information is generated; and
When the transaction is created, a first node device, which is one of a plurality of node devices constituting a blockchain network, is randomly selected, and the transaction is transmitted to the first node device, thereby creating the blockchain for the transaction. Registration request unit that transmits registration requests to the network
It further includes,
The first node device is
When the registration request together with the transaction is received from the user authentication server, a first block containing the transaction is generated based on a previous block chained to blockchain data stored in memory, and the first block is generated. By chaining to the blockchain data, after completing the storage of the first block, the first block is transferred to the remaining node devices except the first node device among the plurality of node devices through the blockchain network. A user authentication server characterized by disseminating information to users. In a method of operating a user authentication server that performs two-channel authentication for a user holding a credit card based on a two-dimensional code,
Member identification information of a plurality of members and credit cards held by each of the plurality of members - The credit card held by each of the plurality of members includes member identification information of the plurality of members and each of the plurality of members. A two-dimensional code in which the card number of the credit card held is printed - maintaining a card information database in which the card numbers are stored in correspondence with each other;
Member identification information of the plurality of members and an authentication token for each of the plurality of members - the authentication token includes a pre-issued authentication code for each of the plurality of members and a credit card held by each of the plurality of members means an output value calculated by applying the card number as an input to a preset authentication token generation function - maintaining an authentication token database stored in correspondence with each other;
When first member identification information is received from the electronic terminal of a first member, which is one of the plurality of members, and a user authentication request is received, requesting transmission of an authentication code corresponding to the first member to the electronic terminal. step;
When a first authentication code is received from the electronic terminal in response to a request to transmit the authentication code, a first authentication token stored in correspondence with the first member identification information is extracted from the authentication token database, and the first authentication token is stored in response to the first member identification information. calculating a first card number for a first credit card held by the first member from the first authentication token based on an authentication code;
When the first card number is calculated, the first card number is compared with the card number stored corresponding to the first member identification information in the card information database, and it is confirmed that both card numbers match each other. In this case, requesting transmission of member identification information and card number inserted in the two-dimensional code printed on the surface of the first credit card to the electronic terminal; and
Since the two-dimensional code printed on the surface of the first credit card is scanned and recognized by the mobile terminal owned by the first member, the first member identification information inserted into the two-dimensional code from the mobile terminal When the first card number is received, the first card number is compared with the card number stored corresponding to the first member identification information in the card information database, and it is confirmed that both card numbers match each other. If so, steps to complete user authentication
Including,
The electronic terminal is
When a request for transmission of member identification information and card number inserted in the two-dimensional code printed on the surface of the first credit card is received from the user authentication server, the two-dimensional code printed on the surface of the first credit card Create a guidance message instructing to recognize and display it on the screen,
The mobile terminal is
When the recognition application for recognition of the two-dimensional code pre-installed on the mobile terminal is executed by the first member, it is printed on the surface of the first credit card through the camera pre-installed on the mobile terminal. By scanning and recognizing the two-dimensional code, the first member identification information and the first card number are extracted from the two-dimensional code, and then the first member identification information and the first card number are transmitted to the user authentication server. A method of operating a user authentication server, characterized in that: According to clause 6,
The authentication token creation function is
When the authentication code and card number corresponding to one of the plurality of members is input, homomorphic encryption is performed on the authentication code and card number approved as input, respectively, using a preset encryption key. After generating a first homomorphic ciphertext for the authentication code approved as an input, and generating a second homomorphic ciphertext for the card number approved as an input, the first homomorphic ciphertext and the A method of operating a user authentication server, characterized in that the function calculates the result of the homomorphic operation as an authentication token corresponding to one of the members by performing a homomorphic operation between the second homomorphic ciphertexts. In clause 7,
The step of calculating the first card number is
When the first authentication code is received from the electronic terminal, the first authentication token stored corresponding to the first member identification information is extracted from the authentication token database, and the first authentication token is generated using the encryption key. By decoding, after generating the decryption value, the operation result calculated when the operation is performed with the first authentication code according to the first operation equation in the plaintext domain corresponding to the first homomorphism operation equation is, A method of operating a user authentication server, characterized in that a solution that is equal to the decryption value is calculated using the first card number. delete According to clause 6,
When the user authentication is completed, generating time information about when the user authentication was completed, and then generating authentication history information consisting of the time information, the first authentication code, and the first card number;
When the authentication history information is generated, generating a transaction including the authentication history information; and
When the transaction is created, a first node device, which is one of a plurality of node devices constituting a blockchain network, is randomly selected, and the transaction is transmitted to the first node device, thereby creating the blockchain for the transaction. Sending a registration request to the network
It further includes,
The first node device is
When the registration request together with the transaction is received from the user authentication server, a first block containing the transaction is generated based on a previous block chained to blockchain data stored in memory, and the first block is generated. By chaining to the blockchain data, after completing the storage of the first block, the first block is transferred to the remaining node devices except the first node device among the plurality of node devices through the blockchain network. A method of operating a user authentication server, characterized in that it propagates to the network. A computer-readable recording medium recording a computer program for executing the method of any one of claims 6, 7, 8, or 10 through combination with a computer. A computer program stored in a storage medium for executing the method of any one of claims 6, 7, 8, or 10 through combination with a computer.

Images