KR20110029036A - System and method for processing scrap public certificate of attestation and recording medium - Google Patents

Abstract

PURPOSE: A system and a method for remotely process a waste of a public certificate, and a recording medium for the same are provided to prevent illegal usage of the lost public certificate by checking and discharging a public certificated loaded in a lost mobile phone if a client who received a public certificate registers a mobile phone missing with a mobile company. CONSTITUTION: A checking unit(110) checks the load of public certificate of a wireless terminal corresponding to the wireless terminal loss information if a client receives wireless terminal loss information from a telecom company server. If the client transmits discharging request information, the checking unit discharges public certificate loaded in a wireless terminal based on the received discharging request information. If a public certificate loaded to the lost wireless terminal, a discharging unit discharges the checked public certificate.

Description

System and Method for Processing Scrap Public Certificate of Attestation and Recording Medium}

1 is a diagram illustrating a certificate issuing system for providing a remote revocation service for a public certificate mounted in a wireless terminal according to an embodiment of the present invention.

2 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to one embodiment of the present invention.

3 is a diagram illustrating a functional configuration of a certificate issuing terminal 135 for issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to an embodiment of the present invention.

4A and 4B illustrate a process of issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to one embodiment of the present invention.

5A and 5B are diagrams illustrating a process of issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to another exemplary embodiment of the present invention.

6A and 6B are diagrams illustrating a process of issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to another embodiment of the present invention.

7 is a diagram illustrating an information registration system for wireless terminal loss registration according to an embodiment of the present invention.

8 is a diagram illustrating a procedure for revocation processing of an authorized certificate through wireless terminal loss registration according to an embodiment of the present invention.

<Description of main parts of drawing>

100: communication company server 105: information receiving unit

110: information confirmation unit 115: information generation unit

120: information providing unit 125: information storage unit

130: storage medium 135: certificate issuing terminal

140: customer wireless terminal 145: certificate server

200: interface unit 205: interface providing unit

210: information receiving unit 215: information generating unit

220: information transmission unit 225: certificate issuing unit

230: information storage unit 235: certificate D / B

According to the present invention, when a customer registers a situation in which an authorized certificate is issued to a mobile company, when the customer registers a mobile phone loss with the mobile phone company, the mobile phone is mounted on the mobile phone according to the lost mobile phone by confirming and discarding the official certificate mounted on the lost mobile phone. This is to prevent illegal use of authorized public certificates.

With the development of information and communication technology, financial transactions, which were only performed on the offline, have been made through a network called the Internet, thereby providing convenience to many customers.

However, Internet banking provided through a network called the Internet is always exposed to the problem of hacking due to the fact that the network is available and accessible to anyone, and thus various problems occur.

To solve this situation, it is possible to use a mobile phone as a means of storing a more secure public certificate, but in case of a mobile phone, the mobile phone is exposed to many situations that can be lost due to the situation of carrying it at all times. There is a problem that the public certificate stored in the file is placed in an illegally available situation.

An object of the present invention for solving the above problems, when the customer registers the situation in which the customer is issued a public certificate to the carrier, when the customer registered mobile phone loss with the carrier, check the official certificate mounted on the lost mobile phone, discarded It is to provide a method and system for processing and a recording medium therefor.

According to the present invention, a method for remote disposal of an authorized certificate may include: a wireless terminal corresponding to the received lost wireless terminal information if the wireless terminal lost information according to the lost wireless terminal is received by a customer who has issued an authorized certificate on the wireless terminal from the carrier server. Check whether the public certificate is mounted on the terminal, generate and send the discard request information, receive the discard request information, and based on the received discard request information, the public certificate installed in the lost wireless terminal is received. And confirming, and when the official certificate mounted on the lost wireless terminal is confirmed, discarding the verified public certificate.

In the remote certificate processing method of the authorized certificate according to the present invention, the step of confirming the authorized certificate mounted on the lost wireless terminal based on the received revocation request information, the wireless terminal information included in the received revocation request information or Checking the official certificate management information, characterized in that it comprises the step of confirming the official certificate mounted on the lost wireless terminal based on the confirmed wireless terminal information or the official certificate management information.

On the other hand, in the remote certificate processing method of the authorized certificate according to the present invention, if a customer who has received an authorized certificate on a wireless terminal receives wireless terminal lost information due to the loss of the wireless terminal, the wireless terminal corresponding to the received wireless terminal lost information A step of checking whether a public certificate is mounted on the mobile terminal and, if it is confirmed that the public certificate is loaded on the lost wireless terminal, discarding the wireless terminal information or official certificate management information for the lost wireless terminal. And generating request information, and transmitting the generated revocation request information to a certificate server to process the authorized certificate to be revoked.

On the other hand, it includes a computer-readable recording medium, characterized in that for recording the program for executing the above-mentioned authorized certificate remote revocation processing method.

On the other hand, the public certificate remote revocation processing system according to the present invention, if the customer received the wireless terminal lost information according to the wireless terminal lost the authorized certificate issued by the carrier server on the wireless terminal, corresponding to the received wireless terminal lost information Check whether the authorized certificate is mounted on the wireless terminal to generate, and if the generation request information is sent to the transmission, receiving the discard request information, based on the received discard request information authorized on the lost wireless terminal And a means for verifying a certificate, and means for discarding the verified public certificate when the public certificate is mounted on the lost wireless terminal.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to a user's or operator's intention or custom. Therefore, the definition should be made based on the contents throughout the present invention.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a certificate issuing system for providing a remote revocation service for a public certificate mounted in a wireless terminal according to an embodiment of the present invention.

In more detail, Figure 1 is a predetermined customer issued by the customer through the certificate issuing terminal 135 in order to issue a certificate issued to a mobile phone that provides a remote revocation service for a certificate issued to the wireless terminal Certificate issuing request information including customer information, wireless terminal number information (eg, mobile number information), and terminal-specific information for the certificate issuing terminal 135 is input (or selected), and the certificate issuing terminal 135 receives the information. After requesting the USIM information transmission through the customer wireless terminal 140 based on the wireless terminal number information, and receiving the identification request information transmitted from the customer wireless terminal 140, based on the received identification request information Verify the identity, and transmit the result of the identification to the certificate issuing terminal 135, the authorized authentication by the wireless terminal used for identification based on the USIM information As shown in FIG. 1, a person having ordinary knowledge in the technical field to which the present invention pertains may refer to and / or modify the present invention through identification of the USIM information provided in the wireless terminal. Various implementation methods may be inferred for the configuration of a certificate issuance system for issuing a public certificate, but the present invention includes all the implementation methods inferred from the above, and is not limited to the implementation method shown in FIG.

Hereinafter, in order to request for issuance of a certificate through a certificate issuing request interface output through a predetermined certificate issuing terminal 135 on the certificate issuing system shown in FIG. 1, customer information and wireless terminal number information (for example, a mobile phone number). Information) and certificate issuing request information including terminal specific information for the certificate issuing terminal 135 is input (or selected), and the customer issuing terminal 140 is based on the radio terminal number information in the certificate issuing terminal 135. After requesting the USIM information transmission through), the identification request information transmitted from the customer wireless terminal 140 is received, and after the identification process based on the received identification request information, issuing a certificate verification result Components corresponding to at least one or more means and / or functional configurations provided to the terminal 135 are referred to as " communication server 100 " for convenience.

Referring to FIG. 1 according to an embodiment of the present invention, a certificate issuing system for identification verification using USIM information provided in the wireless terminal is a branch (or a branch) or a public place that processes at least one authorized certificate issuance. It is characterized in that it comprises a certificate issuing terminal 135 provided in the back, the certificate issuing terminal 135 is a communication company server 100 and / or certificate server provided on the certificate issuing system through a predetermined communication network ( 145 and a communication channel are connected.

The storage medium 130 provided on the certificate issuing system according to the present invention is USIM issuance information for the USIM provided to the customer subscribed to one or more carriers, customer information for the customer who received the USIM, and the customer Identification information about and the certificate issuance information corresponding to the authorized certificate issued to the customer's wireless terminal 140 held by the customer, characterized in that the link is processed and stored.

The customer information includes personal information (for example, name, resident registration number, address, phone number, mobile phone number, e-mail address, etc.) of the customer who subscribes to the telecommunication company and receives the communication service, and member information of the customer (for example, the And at least one or more member ID information included in the customer D / B provided on the telecommunication company server 100 associated with the certificate issuing system in response to the customer by joining as a customer of the telecommunication company. It is preferable to make.

The USIM issuance information may include at least one or more information (eg, a wireless terminal number (eg, a mobile phone number, etc.) used by the customer) corresponding to one or more USIMs provided to the customer.

The identification history information includes at least one of identification request date information that has been processed for identification based on USIM issue information of the customer, identification result result information, and terminal unique information for the certificate issuing terminal 135 that has requested identification. It is preferable to comprise as mentioned above.

The certificate issuing information is processed based on the USIM issuance information of the customer, and when the customer issuing an authorized certificate on the wireless terminal equipped with the USIM information used for the identity verification, It is preferable to include at least one or more certificate identification information, the date of issuance of the public certificate, the public certificate issuer information.

The telecommunication company server 100 provided on the certificate issuing system according to the present invention is a generic term for the certificate issuing system side components connected to the certificate issuing terminal 135 through a predetermined communication network, and includes at least one server (or Device) and / or at least one program recorded on a recording medium provided in a predetermined server (or device), and the present invention is not limited thereto.

Referring to FIG. 1, the telecommunication company server 100 includes customer information, wireless terminal number information (eg, mobile number information), and terminal unique information on the certificate issuing terminal 135 in the certificate issuing terminal 135. After the certificate issuing request information is input (or selected), the certificate issuing terminal 135 requests USIM information transmission through the customer radio terminal 140 based on the radio terminal number information, and then the customer radio terminal 140. When the identification request information is transmitted from the information receiving unit 105 (or information receiving means) for receiving the identification request information, and based on the identification request information received through the information receiving unit 105 for the customer Information confirmation unit 110 (or information confirmation means) for confirming the identity, and information providing unit 120 (or information) for providing the certificate issuing terminal 135 with the result of identity verification for the customer By having a gongsudan), it characterized in that formed.

In addition, the communication company server 100 in response to the identification request information transmitted from the certificate issuing terminal 135, when the identification is completed, in response to the customer wireless terminal 140 and the certificate issuing terminal 135 The information generating unit 115 (or information generating means) for generating (or extracting) an authentication code to be transmitted to the customer wireless terminal 140 and the certificate issuing terminal 135 are generated (or extracted). It is characterized in that it further comprises an information providing unit 120 (or information providing means) for processing to be transmitted.

The certificate issuing terminal 135 receives (or selects) certificate issuing request information including customer information, wireless terminal number information (for example, mobile phone number information), and terminal-specific information about the certificate issuing terminal 135. After the certificate issuing terminal 135 requests the USIM information transmission through the customer wireless terminal 140 based on the wireless terminal number information, if the identification request information is transmitted from the customer wireless terminal 140, The information receiving unit 105 may receive the identification request information transmitted from the certificate issuing terminal 135.

When the identification request information transmitted from the certificate issuing terminal 135 is received through the information receiving unit 105, the information checking unit 110 is based on the identification request information transmitted by the certificate issuing terminal 135. To verify the identity of the customer.

According to the embodiment of the present invention, the identification of the customer, the USIM issuance information matching the USIM information included in the received identification request information via the storage medium 130, the confirmed USIM It is preferable to process identity verification for the identification request information by checking whether the stored customer information and the customer information included in the identification request information match with the issuance information.

According to another embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal 135, the storage medium 130 receives USIM issuance information matching the USIM information included in the received identification request information. By confirming through, and connected to the confirmed USIM issuing information to transmit the stored customer information to the certificate issuing terminal 135 to process the identity verification for the identity verification request information is made in the certificate issuing terminal 135 It is preferable.

In the case of directly providing an identification result (or customer information) corresponding to the received identification request information according to an embodiment of the present invention, the information verification unit 110 corresponds to the received identification request information. When the identity verification result is confirmed, the information providing unit 120 based on the terminal identification information included in the received identity verification request information on the identity verification result corresponding to the identification request information, the certificate issuing terminal 135 It characterized in that the transmission to.

Here, the identification result corresponding to the identification request information transmitted to the certificate issuing terminal 135, it is preferable to provide only the identification result corresponding to the identification request information, or provide the confirmed customer information. Do.

According to another embodiment of the present invention, if the identity corresponding to the received identification request information is confirmed, when transmitting an authentication code corresponding to the result of the identification, the information generating unit 115 is the customer wireless terminal 140 and (or extract) the authentication code to be sent to the certificate issuing terminal 135, the information providing unit 120 provides the generated (or extracted) authentication code information to the certificate issuing terminal 135 Characterized in that.

According to an embodiment of the present invention, the authentication code is preferably an authentication code for the final confirmation process for issuing a certificate by transmitting the certificate issuing terminal 135 and the customer wireless terminal 140 through identity verification, After transmitting the authentication code to the customer wireless terminal 140 and the certificate issuing terminal 135, the customer provides the authentication code transmitted to the wireless terminal to the certificate issuing terminal 135 (for example, the customer wireless terminal 140) Check the authentication code outputted on the input through the certificate issuing terminal 135, and / or provided to the certificate issuing terminal 135 using a short-range wireless communication function provided in the customer wireless terminal 140) Then, after checking this in the certificate issuing terminal 135 to check the mutual matching, it is preferable to process the issued certificate for the customer.

Referring to FIG. 1, the telecommunication company server 100 corresponds to the identification request information transmitted from the certificate issuing terminal 135, and transmits identification information corresponding to the identification request information received from the storage medium 130. And an information storage unit 125 (or information storage means) stored in the storage device.

In addition, the telecommunication company server 100 when the customer requests the issuance of the certificate through the certificate issuing terminal 135 (or through the customer wireless terminal 140), it is confirmed by the authentication certificate that the customer requests issuance It is characterized in that the wired and wireless storage medium 130 is stored further comprises an information confirmation unit 110 (or information confirmation means) for confirming whether or not the customer wireless terminal 140.

According to the exemplary embodiment of the present invention, the identification history information may include date information on which identification request information is received from the certificate issuing terminal 135 and a part (or all) of customer information included in the received identification request information. ) And at least one identification result confirmed in correspondence with the identification request information.

If the customer who has requested the identification or the customer having the wireless terminal 140 requests the storage of the authorized certificate on the wireless terminal 140, it is preferable to store the certificate issuing information by checking the certificate.

2 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to one embodiment of the present invention.

In more detail, FIG. 2 illustrates a process of issuing a wireless certificate through a telecommunication company server 100 shown in FIG. After completing the identification using the USIM information provided in the terminal 140, and receives a public key generated (or extracted) provided by the certificate issuing terminal 135, and based on the received public key public certificate information As a system configuration for generating and processing to be stored in a wired and wireless storage medium through the certificate issuing terminal 135, and those skilled in the art to which the present invention pertains, reference and / or modification of the Figure 2 We can infer various implementation methods for the certificate issuing system configuration for issuing and processing the public certificate through the identification verification using the USIM information provided in the wireless terminal. Would be, the present invention includes all embodiments in which the inference method, shall not be limited to the exemplary method shown in the figure 2.

Hereinafter, customer information and wireless terminal number information (for example, mobile phone number information) for requesting the issuance of a certificate through a certificate issuing request interface output through a predetermined certificate issuing terminal 135 on the certificate issuing system shown in FIG. And certificate issuing request information including terminal specific information for the certificate issuing terminal 135 are input (or selected), and the identity verification for the customer is processed based on the input (or selection) of the certificate issuing request information. Afterwards, the components corresponding to at least one or more means and / or functional configurations for processing the issuance of a public certificate for a customer whose identity has been identified are referred to as " certificate server 145 " for convenience.

Referring to FIG. 2 according to an embodiment of the present invention, a certificate issuance system for identity verification using USIM information provided in the wireless terminal is provided with at least one authorized certificate issuer branch (or branch) or a public place. Characterized in that it comprises a certificate issuing terminal 135, the certificate issuing terminal 135 is a communication channel is connected to the certificate server 145 provided on the certificate issuing system through a predetermined communication network.

The certificate D / B 235 provided on the certificate issuing system according to the present invention issues and processes an authorized certificate to a customer according to a request for issuing a public certificate, and links and processes customer information and public certificate information according to the public certificate issuance process. Characterized in that for storing.

The customer information requests the issuance of a public certificate through the certificate issuing system, and processes the public certificate issuance corresponding to the request for issuing the public certificate to provide public certificate information. (E.g., a customer's name, social security number, address, telephone number, mobile phone number, e-mail address, etc.) is preferably included.

The public certificate information is used as version information for distinguishing the public certificate type for the public certificate issued to the customer, and as reference information for the suspension and revocation list revocation list of the public certificate provided to the public certificate provided to the customer. Signing algorithm information having serial number information, signature algorithm value used when creating a public certificate, issuer information for the organization that issued the public certificate, validity period information for the period guaranteeing the status of the public certificate, Issuer public key identifier information for identifying the owner information that owns the certificate, the public key information held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner. Key usage information, including the purpose for which the public key of It is preferable to include at least one or more information.

The certificate server 145 provided on the certificate issuing system according to the present invention is a generic term for the certificate issuing system side component connected to the certificate issuing terminal 135 through a predetermined communication network, and includes at least one server (or Device) and / or at least one or more programs recorded on a recording medium provided in a predetermined server (or device), and the present invention is not limited thereto.

According to an embodiment of the present invention, the certificate server 145 is provided with an interface unit 200 (or interface means) for connecting and managing a predetermined communication channel with the certificate issuing terminal 135 through the communication network. It is characterized by.

According to an embodiment of the present invention, the certificate issuing terminal 135 is connected to a predetermined communication channel based on a protocol stack defined in the communication network, and is defined in a certificate issuing program provided in the certificate issuing terminal 135. It is desirable to provide a communication interface for transmitting and receiving at least one or more information (or data) using the established communication protocol.

Referring to FIG. S, the certificate server 145 is connected to the wireless terminal when a predetermined certificate issuing terminal 135 connects a predetermined communication channel with the certificate server 145 through the interface unit 200. In order to process issuance of a certificate through identification verification using the provided USIM information, the client issuing information and a wireless terminal number information (for example, mobile phone number information) and a certificate issuing terminal (for example, mobile number information) for a predetermined certificate issuing request from the certificate issuing terminal 135. Generate (or extract) at least one user interface for inputting (or selecting) certificate issuing request information including terminal unique information about the terminal 135 to the certificate server 145, and the interface unit 200. Interface providing unit 205 for providing the generated (or extracted) user interface to the certificate issuing terminal 135 in association with Means) and the certificate issuing request information is input (or selected) from the certificate issuing terminal 135 through the provided user interface, and the input (or selected) certificate issuing request information is transmitted. And the information receiving unit 210 (or information receiving means) for receiving the certificate issuing request information transmitted from the certificate issuing terminal 135 in association with;

An information generating unit 215 (or information generating means) for generating identification request information based on the received customer information and biometric information, and transmitting the generated identification request information to a certification authority server to the biometric information. And an authentication confirmation unit (or authentication confirmation means) for confirming the authentication of the certificate, and when the certificate server 145 does not receive the biometric information and / or the identification is directly based on the biometric information. If not possible, the information generation unit 215 and the authentication confirmation unit may be omitted.

The interface provider 205 connects the certificate issuing terminal 135 to the certificate server 145 and a predetermined communication channel through the interface unit 200, and then the wireless terminal to the certificate server 145. When requesting a user interface for the process of issuing an authorized certificate through identification verification using USIM information provided in the request, the certificate issuing terminal 135, the customer information and wireless terminal number information (for example, mobile phone number information) and the certificate issuing terminal ( Create (or select) at least one user interface for inputting (or selecting) certificate issuing request information including terminal specific information for the transmission to the certificate server 145 through the communication network, and / or a predetermined database. (Not shown) and extract the generated (or extracted) user interface in cooperation with the interface unit in the communication network. It is characterized in that to provide to the certificate issuing terminal 135 through.

According to the exemplary embodiment of the present invention, a predetermined user interface that can be provided by a certificate issuance related program included in the certificate issuing terminal 135 is generated (or extracted), and the generated (or extracted) through the interface unit 200. It is preferable to provide the user interface) to the certificate issuing terminal 135.

In this case, the certificate issuing terminal 135 is input (or certificate input request information) including predetermined customer information, wireless terminal number information (for example, mobile phone number information) and terminal specific information on the certificate issuing terminal 135 (or If a predetermined certificate issuance related program having at least one user interface for transmitting to the certificate server 145 through the communication network is provided, input (or select) predetermined certificate issue request information as described above. The interface providing unit 205 for generating (or extracting) a user interface for transmitting to the certificate server 145 and providing it to the certificate issuing terminal 135 may be omitted, and the present invention is not limited thereto. No.

Thereafter, the certificate issuing terminal 135 inputs (or selects) the certificate issuing request information through the user interface, and the certificate server 145 receives the input (or selected) certificate issuing request information through the communication network. In response thereto, the information receiving unit 210 receives the certificate issuing request information transmitted from the certificate issuing terminal 135 in association with the interface unit 200.

According to an exemplary embodiment of the present invention, the certificate issuing terminal 135 may include at least one encryption method (eg, a symmetric key based encryption method and / or a public key based encryption method, and / or an electronic envelope) for the certificate issuing request information. Based encryption method, and / or key exchange based encryption method, etc.), and / or attach a predetermined electronic signature to the certificate issuing request information to transmit to the certificate server 145 via the network means. To this end, the certificate issuing terminal 135 is provided with at least one encryption key corresponding to the encryption scheme, and / or has a predetermined public certificate including at least one encryption key, and / or the If the public certificate is provided on a predetermined IC chip (or IC card), the public certificate provided on the IC chip (or IC card) It is preferable that a card reader for checking is provided.

Those skilled in the art to the present invention, the technical characteristics of the various encryption schemes for encrypting the certificate issuing request information, and the technical characteristics of attaching a predetermined electronic signature to the certificate issuing request information Since it will be, a detailed description thereof will be omitted for convenience.

When the certificate issue request information is input (or selected) through the output user interface, the information generator 215 generates identification request information based on the input (or select) certificate issue request information. It is done.

Here, the identification request information, the USIM information provided in the wireless terminal corresponding to the wireless terminal number based on the wireless terminal number information included in the received certificate issuing request information is transmitted to the communication company server 100 identity It is preferably information that requests confirmation to be made.

When the identification request information is generated through the information generation unit 215, the information transmission unit 220 transmits the generated identification request information to a certification authority server to provide USIM information included in the wireless terminal held by the customer. By transmitting to the carrier server 100, characterized in that the service provider server 100 to process the identification to the customer is made.

Referring to FIG. S, the certificate server 145 generates public certificate information based on the received public key when identification of the customer is completed and a public key is received from the certificate issuing terminal 135. The information issuing unit 215 (or information generating means) and the certificate issuing unit 225 for transmitting the generated certificate information to the certificate issuing terminal 135 to be stored in a wired or wireless storage medium for the customer (Or a certificate issuance means).

When the identification of the customer is completed and the public key is received from the certificate issuing terminal 135, the information generating unit 215 generates public certificate information based on the received customer information and public key information. It is characterized by.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is preferable to comprise.

When the public certificate information is generated through the information generator 215, the certificate issuer 225 stores the generated public certificate information in the wired / wireless storage medium requested by the customer through the certificate issue terminal 135. It is characterized by processing.

Referring to FIG. 2, the certificate server 145 links and processes the certificate information provided to the certificate issuing terminal 135 and the customer information on the target customer who issued the certificate. It is characterized in that it comprises an information storage unit 230 (or information storage means) for storing in.

According to an embodiment of the present invention, the certificate D / B 235 is a database accessible from the certificate server 145, the authorized information corresponding to the customer information for one or more customers, and the certificate provided to the customer It is preferable that the information is stored.

In addition, the certificate D / B 235 is preferably a database that can not be modified / generated by accessing from an external server other than the certificate server 145.

3 is a diagram illustrating a functional configuration of a certificate issuing terminal 135 for issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to an embodiment of the present invention.

In more detail, FIG. 3 shows USIM information provided in a wireless terminal according to the present invention in an unmanned certificate issuing terminal 135 provided at a predetermined financial institution (eg, a commercial bank branch, a card company branch) and / or a public place. As showing a preferred functional configuration for processing the issuance of a public certificate through identity verification using a person having ordinary skill in the art to which the present invention pertains, referring to and / or modifying this drawing 3 according to the present invention Various implementation methods for the certificate issuing terminal 135 for processing the issuance of a certificate through the identification verification using the USIM information provided in the wireless terminal can be inferred, but the present invention includes all the implementation methods inferred, It is not limited by the implementation method shown in FIG.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawing 3, and infer an implementation method of applying to a financial institution-specific certificate issued by a financial institution in addition to the authorized certificate. There will be, and the invention is not limited thereby.

Referring to FIG. 3, the certificate issuing terminal 135 may use a wireless terminal such as a USB memory and / or a mobile phone and / or a wired / wireless storage medium such as an SD / MMC memory card and / or a CF memory card and / or an XD memory card. Storage medium control unit 300 for recognizing and storing the certificate information issued by using the USIM information, and issuing a certificate by verifying the identity using the USIM information provided in the wireless terminal provided through the certificate issuing terminal 135 A screen output unit 310 for outputting the processing screen of each step for the key, a key input unit 320 for receiving predetermined information according to each step, and a biometric recognition unit for recognizing the user's biometric information for user authentication 315, a communication unit 370 for communicating with a certificate authority server and / or a financial institution server and / or a certificate server 145 through a predetermined communication network, and the certificate issuing terminal 135 is connected to the wireless terminal. At least one certificate issuance processing information for the process of issuing an authorized certificate through identification verification using the provided USIM information, a memory unit 365 for storing predetermined certificate issuance information after the certificate issuing process, and the certificate issuing terminal ( It comprises a power supply unit 380 for supplying power to the 135 and at least one terminal function unit 375 and the control unit 325 for controlling each function component provided in the certificate issuing terminal 135.

In addition, the certificate issuing terminal 135 recognizes the MS card and / or IC card and / or bankbook that stores the customer's financial information (for example, the card information and / or account information possessed by the customer) and predetermined information It comprises a card reader unit 305 to obtain a.

The control unit 325 controls the overall operation of the certificate issuing terminal 135 in the functional configuration, manages the flow of information or data between each component, and for issuing a public certificate based on USIM information according to the present invention. Characterized in that it controls at least one or more components provided in the certificate issuing terminal 135, at least one processor and execution memory (Central Processing Unit (CPU) / Micro Processing Unit (MPU) hardware) For example, it comprises a register) and a bus (BUS) for inputting and outputting predetermined data and at least one or more electronic circuits (or integrated circuits) therefor, and also for performing software-specific functions. Loading into the execution memory from the predetermined recording medium provided in the certificate issuing terminal 135 and the pro Including a predetermined program routine (Routine) and / or the program data to be processed by the operation stand is characterized in that formed. In particular, the control unit 325 includes a predetermined operating system and / or a terminal control program routine for managing the certificate issuing terminal 135 after the certificate issuing terminal 135 is booted by software. .

3 illustrates at least one program component provided in the certificate issuing terminal 135 for issuing an authorized certificate based on USIM information in the control unit 325 for convenience.

The storage medium control unit 300 issuing and processing the certificate information based on the USIM information according to the present invention, the wired / wireless storage medium and the certificate issuing terminal for storing / reading the certificate information in the wired / wireless storage medium. And an interface between the control units 135 and an interface for reading and / or recording one or more pieces of information or data according to the type of wired / wireless storage medium (e.g., an SPI protocol in the case of a memory card). It is preferable.

The card reader unit 305 is characterized in that to provide an interface between the card and the certificate issuing terminal 135 to read at least one or more information or data provided in the card for issuing a public certificate, ISO / IEC MS Reader interface to interface MS (Magnetic Stripe) card based on the 7810 standard with the certificate issuing terminal 135, and / or contact type based on ISO / IEC 7816 standard for the processing of issuance of a public certificate based on USIM information A contact IC reader unit for interfacing an IC (Integrated Circuit) card with the certificate issuing terminal 135 and / or a contactless IC reader unit for interfacing a contactless IC card based on the ISO / IEC 14443 standard with the certificate issuing terminal 135. And the contact IC reader unit and / or the contactless IC reader unit correspond to the IC card reader provided in the certificate issuing terminal 135. desirable.

The MS reader unit is a card reader unit 305 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information or data (eg, magnetization). When the MS card on which the stored binary information or binary data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information or data is recorded), By using a predetermined electrical signal is loaded, the predetermined information or data from at least one or more tracks included in the MS of the MS card is characterized in that the interface to the certificate issuing terminal 135.

The contact IC reader unit is a card reader unit 305 based on ISO / IEC 7816 and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It supplies power to the IC chip of the IC card through the contact point, and the predetermined information or data from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) It is characterized in that the interface to the certificate issuing terminal 135.

The contactless IC reader unit is a card reader unit 305 based on ISO / IEC 14443. The contactless IC reader unit uses at least an electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, the predetermined information or data from the IC chip through the half-duplex transaction using the APDU certificate It is characterized in that the interface to the issuing terminal 135.

The screen output unit 310 is previously defined to be output from the certificate issuing terminal 135 to a predetermined screen output means including a liquid crystal display (LCD) and / or a cathode ray tube (CRT) by the controller 325. Or at least one information or data that is defined in real time or is defined in real time, and the key data input through the key input unit 320 to pre-defined information or data to be output on the screen by the certificate issuing terminal 135. , Biometric information input through the biometric recognition unit 315, information stored or generated by a component included in the certificate issuing terminal 135, information transmitted / received through the communication unit 370, the certificate issuing terminal 135 It includes the data corresponding to the predetermined operation result to perform).

According to the exemplary embodiment of the present invention, the screen output unit 310 may display a processing screen and / or an interface screen according to each certificate issue step through identification verification using USIM information provided in a wireless terminal according to the present invention. It is preferable to output to the screen output device.

The key input unit 320 includes a predetermined at least one key button including at least one numeric key and / or a character key and / or a function key. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or an operation mode of the certificate issuing terminal 135 controlled by the controller 325. When predetermined information (or signal) is inputted from the key button of, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 325. The controller 325 obtains predetermined key data corresponding to the key event in the current input mode and / or operation mode of the certificate issuing terminal 135, and / or is matched with the key event. Characterized by obtaining a command for executing a predetermined function, the key input unit 320 and the key input device having at least one or more key buttons are provided in the certificate issuing terminal 135 in cooperation with each other Functions as a key input means.

According to an embodiment of the present invention, a key input device interoperating with the key input unit 320 may include a keypad device having at least one numeric key and a function key, and / or at least one numeric key and a character key (eg, A keyboard device having English character keys and / or Korean character keys) and function keys, and / or at least one numeric key and function keys in conjunction with the screen output means, and / or at least one or more numeric keys And at least one touch screen device having character keys and function keys.

According to an embodiment of the present invention, the key input unit 320 may be configured to obtain at least one or more pieces of information according to each of the steps of issuing an authorized certificate through identity verification using USIM information provided in the wireless terminal according to the present invention. It is preferable to receive an input.

The biometric recognition unit 315 detects information input from a biometric information recognition device having a function of reading at least one or more biometric information, and specifies the certificate issuing terminal 135 controlled by the control unit 325. When predetermined biometric information is input from the biometric information reader provided in the biometric information recognizing apparatus in the input mode and / or the operation mode, the input biometric information is provided to the controller 325. In operation 325, the biometric information may be obtained in a current input mode and / or an operation mode of the certificate issuing terminal 135.

According to an embodiment of the present invention, a biometric information recognition device that works with the biometric recognition unit 315 may include a keypad device having at least one or more function keys, and / or at least one or more fingerprint recognition devices, and / or at least At least one biometric device equipped with a biometric information reader function such as at least one iris recognition device and / or a face recognition device is preferably included.

The communication unit 370 provides communication means for performing a transaction function (eg, a transaction function interoperating with one or more servers connected to the certificate issuing terminal 135 through a communication network) provided in the certificate issuing terminal 135. And a network communication unit and / or a predetermined cable communication port (eg, RS-232c) that provides transactional communication with a server on the communication network through a communication network (eg, a party network or a CD / ATM network) in hardware. Cable communication unit and / or Infrared Ray communication, RF (Radio Frequency) communication, Bluetooth (BlueTooth), Wireless LAN (Wireless LAN) to provide transactional communication with external communication devices via USB (Universal Serial Bus). Local area communication unit for providing transactional communication with the local area communication device through at least one or more short-range wireless communication, including Wi-Fi, Ultra Wide Band system (UWB) It is made, including, comprises a communication protocol and a communication application for providing a communication transaction in software.

According to an embodiment of the present invention, the communication unit 370 issuing an authorized certificate through identity verification using USIM information provided in one or more servers and wireless terminals on the communication network via a predetermined communication network through the network communication unit. It is desirable to connect the communication channel for the purpose.

The memory unit 365 is a storage medium that stores at least one or more information or data required for the control unit 325 to perform a predetermined control function. The memory unit 365 hardwareally includes EEPROM (Electrically Erasable and Programmable Read Only Memory) and FM. (Flash Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), including at least one or more storage means, including the software, the controller 325 is required to perform a predetermined control function A predetermined program routine and program data (e.g., data input or output for the program routine to perform a predetermined function).

According to an embodiment of the present invention, the memory unit 365 is at least one or more that the certificate issuing terminal 135 is used to process the financial transaction through the identification using the USIM information provided in the wireless terminal according to the present invention It is preferable to store certificate issuance processing information, and / or after issuing a public certificate issuance process through identity verification using USIM information provided in the wireless terminal, it is preferable to store certificate issuance history information corresponding to the issuance of the public certificate. Do.

The terminal function unit 375 is a component provided in the certificate issuing terminal 135 in addition to the components shown in FIG. 3 and / or a component provided in the certificate issuing terminal 135 for a predetermined purpose or role. As an element, it includes various additional function configurations according to the intention of those skilled in the art, such as a security application module (SAM), a scanner device capable of checking customer information such as a resident registration card / driver's license / passport that a user inputs.

Those skilled in the art to which the present invention pertains can easily understand each terminal function unit 375 provided according to the characteristics of the certificate issuing terminal 135, and thus a detailed description thereof will be omitted.

Referring to FIG. 3, a mode checking unit 330 confirms whether an operation mode of the certificate issuing terminal 135 is an authorized certificate issuing mode based on USIM information, and issuing an authorized certificate based on the USIM information. In response to an interface output unit 335 processing to output one or more user interfaces corresponding to a mode through the screen output unit 310 and an operation mode input (or selected) through the output one or more user interfaces. And an information generation unit 340 for generating identification request information based on the customer information and the wireless terminal number information inputted by the user requesting for issuance of the public certificate, and transmitting the generated identification request information to the customer wireless terminal. And an information transmitter 345 for requesting identification based on USIM information about the USIM provided to the customer wireless terminal. It characterized by comprising.

The certificate issuing terminal 135 includes a plurality of operation modes, such as a public certificate issuing mode for processing issuance of a public certificate through identification verification using USIM information provided in the wireless terminal according to the present invention, the mode checking unit 330 is characterized in that whether the operation mode of the certificate issuing terminal 135 is an authorized certificate issuing mode for processing the issuance of a certificate by using the identity verification using the USIM information provided in the wireless terminal according to the present invention.

According to an exemplary embodiment of the present invention, the certificate issuing terminal 135 selects an issuance of a certificate through identification verification using USIM information provided in the wireless terminal according to the present invention among a plurality of operation modes on a basic screen, It is preferable to switch to the public certificate issuing mode for processing the public certificate issuance through identity verification using the USIM information provided in the wireless terminal.

When the mode check unit 330 is set to the public certificate issuance mode through the identity verification using the USIM information provided in the wireless terminal, the interface output unit 335 and the customer information for processing the public certificate issuance, wireless And generating (or extracting) at least one user interface for inputting (or selecting) terminal number information, and processing the generated (or extracted) user interface to be output through the screen output unit 310. do.

According to an embodiment of the present invention, at least one user interface for inputting (or selecting) customer information for processing the issued certificate and wireless terminal number information may include a customer name, social security number, address, telephone number, and the like. At least one area for inputting (or selecting) customer information and at least one area for inputting wireless terminal number information is preferably included. According to the intention and purpose of a person skilled in the art, a specific action (for example, a customer information input button ( Or an icon) is outputted in a separate page, and / or outputted in a separate page when the wireless terminal number input button (or icon) is clicked).

When the customer information and the wireless terminal number information are input (or selected) through the output user interface, the information generation unit 340 requests the identification based on the input (or selected) customer information and the wireless terminal number information. It is characterized by generating information.

Here, the generated identification request information is a communication number corresponding to the communication function provided in the certificate issuing terminal 135 for receiving the identification result (eg, mobile phone number information, a landline phone function when the mobile phone function is included). If it is included, it is preferable to include a landline telephone number information).

When the identification request information is generated through the information generation unit 340, the information transmission unit 345 transmits the generated identification request information to the customer wireless terminal, for the USIM provided to the customer wireless terminal The USIM information may be transmitted to the communication company server 100 so that identification may be processed through the communication company server 100.

Referring to FIG. 3, the certificate issuing terminal 135 based on the identification result provided by the communication company server 100 in response to the identification request information, the identity through the USIM information provided in the customer wireless terminal When the verification is completed, the authentication key generation unit 350 for generating an authentication key for the public certificate issuance processing based on the USIM information and the generated authentication key is transmitted to the certificate server 145 to issue a public certificate. A certificate processing unit 355 for requesting and receiving public certificate information generated based on the transmitted authentication key from the certificate server 145, public certificate information received from the certificate server 145 and the generated authentication; And an information storage unit 360 for processing key information to be stored in a wired / wireless storage medium through the storage medium control unit 300.

Here, the identity verification result provided by the telecommunications company server 100 may be provided as an authentication code, if provided as an authentication code, after the same authentication code is transmitted to the customer wireless terminal, the customer enters or the customer It is preferable to check the identity verification result by checking the mutual matching of the authentication codes received from the wireless terminal.

That is, even if the identification is completed, if the authentication code entered by the customer or received from the customer's wireless terminal does not match with the authentication code provided by the carrier server 100, the authentication is treated as an authentication failure and is issued. It is preferable to process so that it may not be.

Based on the identification result provided by the communication company server 100 in response to the identification request information, when the identification is confirmed through the USIM information provided in the customer wireless terminal, the authentication key generation unit 350 is disclosed And a key and a private key.

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

When the public key and the private key for the public certificate issuance are generated through the authentication key generation unit 350, the certificate processing unit 355 transmits the generated public key to the certificate server 145. And 145) receiving the public certificate information generated based on the transmitted public key.

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. If the user's key is the digital signature key, the certificate contains the signature value for the certificate request information. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

When the public certificate information is received from the certificate server 145, the information storage unit 360 processes the received public certificate information to be stored in the wired / wireless storage medium based on a protocol corresponding to the type of wired / wireless storage medium. It is characterized by.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 3 to store all wired / wireless storage media (eg, smart) capable of storing authorized certificate information in addition to the USB storage media or mobile phone storage media. Card storage media, etc.), whereby the present invention is not limited thereto.

4A and 4B illustrate a process of issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to one embodiment of the present invention.

In more detail, Figures 4a and 4b is a customer issuing a certificate issuing terminal for the process of issuing an authorized certificate through the identification verification using the USIM information provided in the wireless terminal based on Figures 1, 2 and 3 Certificate issuing request information including customer information, wireless terminal number information (eg, mobile number information), and terminal unique information for a certificate issuing terminal is input (or selected), and the wireless terminal number information is received from the certificate issuing terminal. After requesting the USIM information transmission through the customer wireless terminal based on, if the identification request information transmitted from the customer wireless terminal is received, the identity is confirmed based on the received identification request information, and generated by the certificate issuing terminal ( Or extract) a public key provided and generate public certificate information based on the received public key. Process for processing to be stored in the wired and wireless storage medium through the certificate issuing terminal, if the person having ordinary knowledge in the technical field to which the present invention belongs, refer to and / or modified the present drawings 4a and 4b to the wireless terminal Various implementation methods for the process of issuing and processing a public certificate through identification verification using USIM information provided may be inferred, but the present invention includes all the implementation methods inferred, as shown in FIGS. 4A and 4B. It is not limited only to the implemented method.

For example, a person having ordinary knowledge in the technical field to which the present invention pertains, a process of issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal by referring to and / or modifying the drawings 4a and 4b. It is possible to deduce the order of and / or to infer some omitted implementation methods, thereby not limiting the present invention.

4A and 4B, the certificate issuing terminal illustrated in FIG. 9 inputs customer information and radio terminal number information for requesting issuance of a certificate through identification verification using USIM information provided in the wireless terminal (or Request a user interface output (400), process to generate (or extract) a user interface corresponding to the output request (405), and output the customer information and the wireless terminal number information through the output user interface. Enter (or select) 410.

If the customer information and the wireless terminal number information are input (or selected) through the output user interface (415), the certificate issuing terminal may be identified based on the input (or selected) customer information and wireless terminal number information. When the identification request information is generated (or extracted) (420) and the identification (or extracted) identification request information is transmitted to the client wireless terminal to request identification (425), the client wireless terminal correspondingly The USIM information provided in the customer wireless terminal is checked based on the received identification information, and the received USIM information is transmitted to the communication company server (430).

Thereafter, the communication company server receives the USIM information transmitted from the customer wireless terminal (435), and verifies the identity based on the received USIM information and USIM issue information stored in the USIM D / B (440).

According to the embodiment of the present invention, the identification of the customer, the USIM issuance information matching the USIM information included in the received identification request information through the storage medium, the confirmed USIM issuance information and It is preferable to process the identification of the identification request information by checking whether the customer information stored in the connection and the customer information included in the identification request information match.

According to another exemplary embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal, USIM issuance information matching the USIM information included in the received identification request information is confirmed through the storage medium. It is preferable to process the stored customer information in connection with the confirmed USIM issuing information to the certificate issuing terminal so that the identification of the identity verification request information is performed at the certificate issuing terminal.

Here, it is preferable that the identification result corresponding to the identification request information transmitted to the certificate issuing terminal provides only the identification result corresponding to the identification request information or the confirmed customer information.

If the USIM information received from the customer wireless terminal and the USIM issuance information stored in the USIM D / B are not matched with each other (445), the service provider server receives the USIM information and the USIM D / received from the customer wireless terminal. In operation 450, cross-matching error information of the USIM issuance information stored in B is generated (or extracted) and transmitted to the certificate issuing terminal.

On the other hand, if it is confirmed that the USIM information received from the customer wireless terminal and the USIM issuance information stored in the USIM D / B are mutually matched (445), the communication company server transmits the confirmed identity verification result to the certificate issuing terminal. In response, the certificate issuing terminal generates a public key and a private key when the received identity verification result confirms that the identity verification is successful (460), and transmits the generated public key to the certificate server. Request the public certificate information (465).

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

Thereafter, the certificate server generates public certificate information based on the received public key (470) and transmits the generated public certificate information to a certificate issuing terminal (475). The received public certificate information and the generated private key information are processed to be stored in a wired / wireless storage medium connected with a certificate issuing terminal (480).

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is preferable to comprise.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains may refer to and / or modify the drawings 4a and 4b, and in addition to the USB storage medium or the mobile phone storage medium, any wired / wireless storage medium capable of storing authorized certificate information ( For example, a smart card storage medium, etc.) may be included, and the present invention is not limited thereto.

5A and 5B illustrate a process of issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to another exemplary embodiment of the present invention.

In more detail, Figures 5a and 5b is a customer issuing a certificate issuing terminal for the process of issuing an authorized certificate through the identification verification using the USIM information provided in the wireless terminal based on Figures 1, 2 and 3 Certificate issuing request information including customer information, wireless terminal number information (eg, mobile number information), and terminal unique information for a certificate issuing terminal is input (or selected), and the wireless terminal number information is received from the certificate issuing terminal. After requesting the USIM information transmission through the customer wireless terminal based on, if the identification request information transmitted from the customer wireless terminal is received, the identity is confirmed based on the received identification request information, and generated by the certificate issuing terminal ( Or extract) a public key provided and generate public certificate information based on the received public key. Process for processing to be stored in the wired and wireless storage medium through the certificate issuing terminal, if the person skilled in the art to which the present invention pertains, the present invention 5a and 5b is provided in a wireless terminal by referring to and / or modified Various implementation methods for the process of issuing and processing a public certificate through identification verification using USIM information may be inferred, but the present invention includes all the implementation methods inferred above, as shown in FIGS. 5A and 5B. It is not limited only to the implementation method.

For example, a person having ordinary knowledge in the technical field to which the present invention pertains may process a process of issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal by referring to and / or modifying the drawings 5a and 5b. It is possible to deduce the order of and / or to infer some omitted implementation methods, thereby not limiting the present invention.

5A and 5B, the certificate issuing terminal illustrated in FIG. 9 inputs customer information and radio terminal number information for requesting issuance of a certificate through identification verification using USIM information provided in the wireless terminal (or Request a user interface output (500), generate (or extract) a user interface corresponding to the output request and process the output (505), and output the customer information and the wireless terminal number information through the output user interface. Input (or select) 510.

If the customer information and the wireless terminal number information are input (or selected) through the outputted user interface (515), the certificate issuing terminal is identified based on the input (or selected) customer information and wireless terminal number information. When the verification request information is generated (or extracted) (520), and the generated (or extracted) identification verification request information is transmitted to a communication company server to request identification (525), the corresponding communication server is the identity verification correspondingly. Request and receive USIM information to the customer wireless terminal corresponding to the wireless terminal number information included in the request information (530), and confirms the identity based on the received USIM information and USIM issuing information stored in the USIM D / B ( 535).

According to the embodiment of the present invention, the identification of the customer, the USIM issuance information matching the USIM information included in the received identification request information through the storage medium, the confirmed USIM issuance information and It is preferable to process the identification of the identification request information by checking whether the customer information stored in the connection and the customer information included in the identification request information match.

According to another exemplary embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal, USIM issuance information matching the USIM information included in the received identification request information is confirmed through the storage medium. It is preferable to process the identification information for the identification request information is performed in the certificate issuing terminal by transmitting the stored customer information in connection with the confirmed USIM issuing information to the certificate issuing terminal.

Here, it is preferable that the identification result corresponding to the identification request information transmitted to the certificate issuing terminal provides only the identification result corresponding to the identification request information or the confirmed customer information.

If it is confirmed that the USIM information received from the customer wireless terminal and USIM issuance information stored in the USIM D / B do not match each other (545), the telecommunication company server receives the USIM information and USIM D / received from the customer wireless terminal. A process of generating (or extracting) mutual matching error information regarding USIM issue information stored in B and transmitting the same to the certificate issuer is output (step 550).

On the other hand, if it is confirmed that the USIM information received from the customer wireless terminal and the USIM issuance information stored in the USIM D / B are matched with each other (545), the communication company server transmits the confirmed identity verification result to the certificate issuing terminal. In response, the certificate issuing terminal generates a public key and a private key when the received identity verification result is determined to be successful (560), and transmits the generated public key to the certificate server. Requesting the public certificate information (565).

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description thereof will be omitted for convenience.

Thereafter, the certificate server generates public certificate information based on the received public key (570), transmits the generated public certificate information to a certificate issuing terminal (575), and correspondingly, the certificate issuing terminal is The received public certificate information and the generated private key information are processed to be stored in a wired / wireless storage medium connected with a certificate issuing terminal (580).

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is preferable to comprise.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains, all wired and wireless storage media capable of storing the authorized certificate information, in addition to the USB storage medium or mobile phone storage medium by referring to and / or modified with reference to Figures 5a and 5b ( For example, a smart card storage medium, etc.) may be included, and the present invention is not limited thereto.

6A and 6B illustrate a process of issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal according to another embodiment of the present invention.

In more detail, Figures 6a and 6b is a customer issuing a certificate issuing terminal for the process of issuing an authorized certificate through the identification verification using the USIM information provided in the wireless terminal based on the figures 1 and 2 and 3 Certificate issuing request information including customer information, wireless terminal number information (eg, mobile number information), and terminal unique information for a certificate issuing terminal is input (or selected), and the wireless terminal number information is received from the certificate issuing terminal. After requesting the USIM information transmission through the customer wireless terminal based on, if the identification request information transmitted from the customer wireless terminal is received, the identity is confirmed based on the received identification request information, and generated by the certificate issuing terminal ( Or extract) a public key provided and generate public certificate information based on the received public key. Process for processing to be stored in the wired and wireless storage medium through the certificate issuing terminal, if the person skilled in the art to which the present invention belongs, reference to and / or modified with reference to Figures 6a and 6b provided in the wireless terminal Various implementation methods for the process of issuing and processing a public certificate through identification verification using USIM information may be inferred, but the present invention includes all the implementation methods inferred above, as shown in FIGS. 6A and 6B. It is not limited only to the implementation method.

For example, a person having ordinary skill in the art to which the present invention pertains may process a process of issuing and processing a public certificate through identity verification using USIM information provided in a wireless terminal by referring to and / or modifying the drawings 6a and 6b. It is possible to deduce the order of and / or to infer some omitted implementation methods, thereby not limiting the present invention.

6A and 6B, the certificate issuing terminal illustrated in FIG. 9 inputs customer information and wireless terminal number information for requesting issuance of a certificate through identification verification using USIM information provided in the wireless terminal (or Request a user interface output (600), generate (or extract) a user interface corresponding to the output request, and process it to be output (605), and output the customer information and the wireless terminal number information through the output user interface. Enter (or select) 610.

If the customer information and the wireless terminal number information are input (or selected) through the outputted user interface (615), the certificate issuing terminal is identified based on the input (or selected) customer information and wireless terminal number information. When the identification request information is generated (or extracted) (620), and the generated (or extracted) identification request information is transmitted to a communication company server to request identification (625), the corresponding communication server checks the identity. The USIM information is requested and received by the customer wireless terminal corresponding to the wireless terminal number information included in the request information (630) (635), and the identity is based on the received USIM information and USIM issuance information stored in the USIM D / B. Check (640).

According to the embodiment of the present invention, the identification of the customer, the USIM issuance information matching the USIM information included in the received identification request information through the storage medium, the confirmed USIM issuance information and It is preferable to process the identification of the identification request information by checking whether the customer information stored in the connection and the customer information included in the identification request information match.

According to another exemplary embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal, USIM issuance information matching the USIM information included in the received identification request information is confirmed through the storage medium. It is preferable to process the identification information for the identification request information is performed in the certificate issuing terminal by transmitting the stored customer information in connection with the confirmed USIM issuing information to the certificate issuing terminal.

Here, it is preferable that the identification result corresponding to the identification request information transmitted to the certificate issuing terminal provides only the identification result corresponding to the identification request information, or provide the confirmed customer information.

If the USIM information received from the customer wireless terminal and the USIM issuance information stored in the USIM D / B are not matched with each other (645), the service provider server receives the USIM information and the USIM D / received from the customer wireless terminal. A process of generating (or extracting) mutual matching error information regarding USIM issue information stored in B and transmitting the same to the certificate issuer is output (650).

On the other hand, if it is confirmed that the USIM information received from the customer wireless terminal and the USIM issuance information stored in the USIM D / B are matched with each other (645), the service provider server generates an authentication code corresponding to the confirmed identity verification result ( Or (655), and transmits the generated (or extracted) authentication code to the customer wireless terminal and the certificate issuing terminal (660).

Thereafter, the certificate issuing terminal checks whether the authentication code provided by the customer matches the authentication code received from the communication company server (665).

If the mutual matching between the authentication code provided by the customer and the authentication code received from the communication company server is not confirmed (670), the certificate issuing terminal receives the authentication code provided by the customer from the communication company server. A process of generating (or extracting) mutual matching error information for the authentication code and outputting it is performed (675).

On the other hand, when the mutual matching between the authentication code provided by the customer and the authentication code received from the carrier server is confirmed (670), the certificate issuing terminal generates a public key and private key for issuing a public certificate (680) The public key is transmitted to the certificate server and the public certificate information is requested (685).

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

Thereafter, the certificate server generates public certificate information based on the received public key (690), transmits the generated public certificate information to a certificate issuing terminal (695), and correspondingly, the certificate issuing terminal is The received public certificate information and the generated private key information are processed to be stored in a wired / wireless storage medium connected with a certificate issuing terminal (699).

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is made by also being preferred.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains can refer to and / or modify the drawings 6a and 6b, in addition to the USB storage media or mobile phone storage media, all wired / wireless storage media capable of storing authorized certificate information ( For example, a smart card storage medium, etc.) may be included, and the present invention is not limited thereto.

7 is a diagram illustrating an information registration system for wireless terminal loss registration according to an embodiment of the present invention.

In more detail, FIG. 7 illustrates a wireless terminal including at least one of client information and lost wireless terminal information by connecting a predetermined client terminal 735 to a server on an authorized certificate management system through a predetermined communication network for wireless terminal loss registration. If the lost information is provided, the server checks whether or not an authorized certificate is mounted on the lost wireless terminal based on the lost wireless terminal information provided from the client terminal 735, and if it is confirmed as a wireless terminal equipped with an authorized certificate, The present invention relates to a system configuration for discarding a public certificate stored in the lost wireless terminal by transmitting the public certificate certificate request information for preventing a financial accident caused by a wireless terminal equipped with a public certificate to the certificate server 145. Those skilled in the art may refer to and / or modify this drawing. Various implementation methods may be inferred for the configuration of the information registration system for the disposal of the authorized certificate through the wireless terminal loss registration, but the present invention includes all the implementation methods inferred, the implementation shown in FIG. It is not limited to the method alone.

Hereinafter, if the wireless terminal lost information including at least one or more customer information and lost wireless terminal information provided from the client terminal 735 on the information registration system shown in FIG. 7, the client terminal 735 in the server On the basis of the lost information of the wireless terminal provided from the check whether or not the public certificate is mounted on the wireless terminal, and if it is confirmed that the wireless terminal is equipped with a public certificate, the certificate server 145 to the wireless terminal equipped with the public certificate Sending the certificate certificate request information for prevention of financial accidents caused by the at least one means and / or functional components corresponding to the at least one means and / or functional configuration for discarding the official certificate stored in the lost wireless terminal for convenience "communication server 100 "

Referring to FIG. 7 according to an embodiment of the present invention, an information registration system for wireless terminal loss registration according to the present invention includes at least one client terminal 735 connected to a predetermined communication network, customer information and USIM issuance information. And a storage medium 730 for storing at least one identification information and certificate issuance information, and a client terminal 735 connected to a client through a predetermined communication network, and receiving wireless terminal lost information transmitted through the communication network. On the basis of the received information of the lost wireless terminal, characterized in that it comprises a carrier server 100 to determine whether or not the official certificate mounted on the lost wireless terminal to discard the official certificate mounted on the wireless terminal.

The client terminal 735 is a wired communication network based on Transmission Control Protocol / Internet Protocol (TCP / IP) or User Datagram Protocol / Internet Protocol (UDP) (eg, Asymmetric Digital Subscriber Line (ADSL) / VDSL (Very High- a data terminal comprising at least one wired terminal including a desktop computer and / or a laptop connected to the telecommunications company server 100 via a digital subscriber line and / or a cable communication network, and / or CDMA (Code) A mobile communication terminal connected to a division multiple access based mobile communication network (or a high speed downlink packet access (HSDPA) based mobile communication network), and / or a portable internet terminal connected to an IEEE 802.16x based high speed wireless internet, and / or And at least one wireless terminal including at least one wireless LAN terminal connected to an IEEE 802.11x based wireless LAN communication network. The client terminal 735 outputs at least one or more lost registration interface screens provided by the telecommunication company server 100, and inputs and / or selects at least one or more information through the lost registration interface screen. It is preferable that a function configuration (for example, a browser program and a communication function) for transmitting to the communication company server 100 is provided.

Those skilled in the art to which the present invention pertains can easily infer the characteristics of the client terminal 735 corresponding to at least one or more wired terminals and / or wireless terminals. Omit for convenience.

When the client terminal 735 is a wired terminal according to an embodiment of the present invention, the communication network includes the TCP / IP based wired communication network, and when the client terminal 735 is a wireless terminal, the communication network The CDMA based (or HSDPA based) mobile communication network, and / or IEEE 802.16x-based high-speed wireless Internet, and / or IEEE 802.11x-based wireless communication network is preferably made of at least one or more.

The storage medium 730 provided on the authorized certificate management system according to the present invention is USIM issuance information for the USIM provided to customers subscribed to one or more carriers, customer information for the customer who received the USIM, and Characterized by the identification information information for the customer, and the certificate issuing information corresponding to the certificate issued by the customer wireless terminal possessed by the customer characterized in that the link is processed and stored.

The customer information includes personal information (eg, name, resident registration number, address, phone number, mobile phone number, e-mail address, etc.) of the customer who subscribes to the telecommunication company and receives the communication service, and the member information of the customer (eg, the And at least one or more member ID information included in the customer D / B provided on the telecommunication company server 100 associated with the certificate issuing system in response to the customer by joining as a customer of the telecommunication company. It is preferable to make.

The USIM issuance information may include at least one or more information (eg, a wireless terminal number (eg, a mobile phone number, etc.) used by the customer) corresponding to one or more USIMs provided to the customer.

The identification history information includes at least one identification request date information processing the identity verification based on the USIM issue information of the customer, identification information result information and terminal unique information for the certificate issuing terminal requesting identification verification, etc. It is preferable to make.

The certificate issuing information is processed based on the USIM issuance information of the customer, and when the customer issuing an authorized certificate on the wireless terminal equipped with the USIM information used for the identity verification, It is preferable to include at least one or more certificate identification information, the date of issuance of the public certificate, the public certificate issuer information.

According to an embodiment of the present invention, the communication company server 100 connects a predetermined communication channel with the client terminal 735 through the communication network to provide a web interface corresponding to the client terminal 735 and the communication network. And an interface unit 700 (or an interface means) for managing, whereby the telecommunication company server 100 is connected to the client terminal 735 through a wired communication network and / or a wireless communication network. It has the function of a web server.

According to an embodiment of the present invention, when the client terminal 735 is a wired terminal to which a communication channel is connected through a wired communication network based on TCP / IP or UDP / IP, the interface unit 700 may include the client terminal 735. ) And a predetermined communication channel based on the HTTP (Hyper-Text Transfer Protocol) protocol, and the lost registration interface screen in the form of a document compatible with Hyper-Text Markup Language (HTML) to the client terminal 735 through the communication channel. And / or transmits and outputs an information providing screen, and includes at least one of predetermined customer information and lost wireless terminal information input (or selected) from the client terminal 735 through the lost registration interface screen. It is desirable to perform a function of receiving and processing information.

According to another exemplary embodiment of the present invention, when the client terminal 735 is a wireless terminal to which a communication channel is connected through a CDMA based wireless communication network, the interface unit 700 connects to the client terminal 735 and a WAP (Wireless). Connect a predetermined communication channel based on Application Protocol and / or Mobile Explorer (ME) protocol, and lose the form of WML (Wireless Markup Language) and / or HTML compatible document to the client terminal 735 through the communication channel. Sends and outputs a registration interface screen and / or an information providing screen, and the wireless terminal lost information including at least one of predetermined customer information and lost wireless terminal information corresponding to the lost registration interface screen from the client terminal 735. It is preferable to perform a function of receiving processing.

According to another exemplary embodiment of the present invention, when the client terminal 735 is a wireless terminal to which a communication channel is connected through an IEEE 802.16x based wireless communication network, the interface unit 700 may be connected to the client terminal 735. Connect a predetermined communication channel based on a wireless protocol corresponding to the IEEE 802.16x standard, and transmit and output a predetermined loss registration interface screen and / or an information providing screen to the client terminal 735 through the communication channel. It is preferable to perform a function of receiving and processing wireless terminal lost information including at least one of predetermined customer information and lost wireless terminal information corresponding to the lost registration interface screen from the client terminal 735, and / Or when the client terminal 735 is a wireless terminal to which a communication channel is connected through an IEEE 802.11x based wireless communication network. In this case, the interface unit 700 connects a predetermined communication channel with the client terminal 735 based on a wireless protocol corresponding to the IEEE 802.11x standard, and predetermined with the client terminal 735 through the communication channel. It is preferable to perform a function of transmitting and outputting the lost registration interface screen and / or information providing screen, and receiving and processing the predetermined wireless terminal lost information corresponding to the lost registration interface screen from the client terminal 735.

Referring to FIG. 7, when the predetermined client terminal 735 accesses the communication company server 100 through the interface unit 700, the communication company server 100 interworks with the interface unit 700. An interface for generating (or extracting) a predetermined lost registration interface screen for the terminal 735 to input (or select) and transmit lost wireless terminal information including at least one of predetermined customer information and lost wireless terminal information. Receiving wireless terminal lost information transmitted from the client terminal 735 through the loss registration interface screen by the providing unit 705 (or interface providing means) and the interface unit 700 via the lost registration interface screen. It characterized by comprising an information receiving unit 710 (or information receiving means).

The interface providing unit 705 has a functional configuration (eg, client terminal) provided in the client terminal 735 when a predetermined client terminal 735 is connected to the communication company server 100 through the interface unit 700. Corresponding to the browser program provided at 735), input (or select) wireless terminal lost information including at least one of predetermined customer information and lost wireless terminal information, and transmit the lost or lost wireless terminal information to the communication company server 100 through the communication network. A predetermined loss registration interface screen that can be generated, and / or extracted from a predetermined database (not shown), and linked to the interface unit 700 to generate the lost registration interface screen generated (or extracted) in the communication network. It is characterized in that provided to the client terminal 735 through.

Thereafter, the client terminal 735 inputs (or selects) lost wireless terminal information including at least one of predetermined customer information and lost wireless terminal information based on the lost registration interface screen, and the lost wireless terminal information is stored. If it is confirmed that the input (or selection), the client terminal 735 transmits the input (or selection) the wireless terminal lost information to the communication company server 100 through the communication network.

Those skilled in the art to which the present invention pertains, the client terminal 735 at least the customer information, the lost wireless terminal information through at least one form (Form) included in the lost registration interface screen at least Technical features for inputting (or selecting) wireless terminal lost information including one or more, and Technical information for transmitting the input (or selected) wireless terminal lost information to the telecommunication company server 100 through a communication protocol provided by the communication network. Since you will be familiar with the features, a detailed description thereof will be omitted for convenience.

The information receiver 710 inputs (or selects) wireless terminal lost information including at least one of predetermined customer information and lost wireless terminal information through the lost registration interface screen on the client terminal 735 to establish the communication network. When transmitting through, in connection with the interface unit 700, characterized in that for receiving the wireless terminal lost information.

Referring to FIG. 7, the communication company server 100 is equipped with an authorized certificate on a wireless terminal for which the customer requests a loss registration through the storage medium 730 based on the received wireless terminal lost information. If it is confirmed that an authorized certificate is mounted on the lost registration wireless terminal in response to the information confirming unit 715 (or information verifying means) for checking whether there is a check result, the authorized on the lost wireless terminal The information server 720 (or information generating means) for generating (or extracting) the public certificate revocation request information for requesting the revocation process for the certificate, and the certificate server for the generated (or extracted) public certificate revocation request information. And an information transmitting unit 725 (or information transmitting means) for transmitting to 145 to process the authorized certificate stored in the lost wireless terminal to be revoked. It characterized.

The information checking unit 715 checks whether an authorized certificate is mounted on the wireless terminal requesting the loss registration by the customer through the storage medium 730 based on the received wireless terminal lost information. It is characterized by.

According to the method of the present invention, whether the authentication certificate is mounted on the wireless terminal requesting the loss registration, USIM for the wireless terminal that the customer requests the loss registration in connection with the storage medium 730 By verifying the issuance information (substitutable with the terminal unique information according to the intention and purpose of the person in charge), and confirming the certificate issuance information stored in connection with the confirmed USIM issuance information, the authorized certificate on the wireless terminal requesting the loss registration It is desirable to check whether it is mounted.

According to another exemplary embodiment of the present invention, whether or not an authorized certificate is tapped on the wireless terminal requesting the loss registration may be performed by sending the lost wireless terminal information included in the received wireless terminal lost information to the certificate server 145. It is preferable to check whether the certificate is mounted on the wireless terminal requesting the loss registration by transmitting and confirming the information on the authorized certificate loading terminal matching the lost wireless terminal information in the certificate server 145. And, when receiving and processing the lost wireless terminal information on the certificate server 145, by transmitting the lost wireless terminal information to the certificate server 145, the revocation process for the authorized certificate stored on the lost wireless terminal is completed It is preferable.

The information generation unit 720 may generate (or extract) public certificate revocation request information for revocation of the public certificate stored on the lost wireless terminal in response to the verification result.

In this case, when all information necessary for the disposal process of the public certificate is stored on the storage medium 730 managed by the communication company server 100, it is possible to generate the public certificate certificate request information by collecting them.

Or, if the management number (or management code) given to the official certificate for the disposal of the official certificate is stored on the storage medium 730 managed by the carrier server 100, the management number (or management code) It is preferable to generate the public certificate revocation request information including a).

The information transmitting unit 725 transmits the generated (or extracted) certificate revocation request information to the certificate server 145 and processes the public certificate issued by the certificate server 145 to be revoked.

8 is a diagram illustrating a process for revocation processing of an authorized certificate through wireless terminal loss registration according to an embodiment of the present invention.

In more detail, in FIG. 8, at least one of client information and lost wireless terminal information is accessed by a client terminal 735 shown in FIG. 7 connected to a server on an authorized certificate management system through a predetermined communication network for wireless terminal loss registration. Upon providing the lost wireless terminal information, the server checks whether or not the official certificate is mounted on the lost wireless terminal based on the lost wireless terminal information provided from the client terminal 735, and the wireless terminal on which the authorized certificate is mounted. If confirmed as, to the certificate server 145 is a process for discarding the authorized certificate stored in the lost wireless terminal by transmitting the certificate information request for disposal of the official certificate to prevent financial accidents due to the wireless terminal equipped with the public certificate, Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing. In order to infer various implementation methods for the process for the disposal of the authorized certificate through the wireless terminal lost registration, the present invention includes all the implementation methods inferred, limited only to the implementation method shown in Figure 8 Not.

Referring to FIG. 8, the client terminal 735 on the information registration system shown in FIG. 7 accesses the communication company server 100 shown in FIG. 7 via the communication network and connects a communication channel for wireless terminal loss registration. (800).

According to an embodiment of the present invention, the communication channel connection process may include logging in from the client terminal 735 to the communication company server 100, and / or from the client terminal 735 to the communication company server 100. It is preferable to further include at least one or more, such as a member registration process, in which the customer information corresponding to the client terminal 735 is extracted (or obtained).

Those skilled in the art to which the present invention pertains, the client terminal 735 is connected to the communication company server 100 in accordance with a communication protocol corresponding to the communication network through a predetermined browser program corresponding to the communication network. Since it will be familiar with the technical features for connecting the communication channel for the wireless terminal loss registration, a detailed description thereof will be omitted for convenience.

When the communication channel for wireless terminal loss registration is connected between the client terminal 735 and the communication company server 100 as described above, the client terminal 735 is the wireless terminal to the communication company server 100 through the communication channel. Request for a loss registration interface screen for the loss registration (805), and correspondingly the communication company server 100 in the client terminal 735, the wireless terminal lost information including at least one or more of the customer information, lost wireless terminal information Generate (or extract) a lost registration interface screen including a customer interface for inputting (or selecting) 810, and the generated (or extracted) lost registration interface screen through the communication channel to the client terminal 735. (815).

Thereafter, the client terminal 735 uses the wireless terminal through the customer interface included in the lost registration interface screen for inputting (or selecting) wireless terminal lost information including at least one of the customer information and lost wireless terminal information. The lost information is processed to be input (or selected) (820).

If the client terminal 735 receives (or selects) wireless terminal lost information including at least one of the customer information and the lost wireless terminal information (825), the client terminal 735 is connected to the client through the communication channel. The wireless terminal lost information is transmitted to the communication company server 100 (830), and correspondingly, the communication company server 100 receives the wireless terminal lost information transmitted from the client terminal 735, the received wireless terminal On the basis of the lost information, it is checked whether the authorized certificate is mounted on the lost wireless terminal (835).

According to the method of the present invention, whether the authentication certificate is mounted on the wireless terminal requesting the loss registration, USIM for the wireless terminal that the customer requests the loss registration in connection with the storage medium 730 By verifying the issuance information (substitutable with the terminal unique information according to the intention and purpose of the person in charge), and confirming the certificate issuance information stored in connection with the confirmed USIM issuance information, the authorized certificate on the wireless terminal requesting the loss registration It is desirable to check whether it is mounted.

According to another exemplary embodiment of the present invention, whether or not an authorized certificate is tapped on the wireless terminal requesting the loss registration may be performed by sending the lost wireless terminal information included in the received wireless terminal lost information to the certificate server 145. It is preferable to check whether the certificate is mounted on the wireless terminal requesting the loss registration by transmitting and confirming the information on the authorized certificate loading terminal matching the lost wireless terminal information in the certificate server 145. And, when receiving and processing the lost wireless terminal information on the certificate server 145, by transmitting the lost wireless terminal information to the certificate server 145, the revocation process for the authorized certificate stored on the lost wireless terminal is completed It is preferable.

If it is confirmed that the authorized certificate is mounted on the lost wireless terminal based on the received wireless terminal lost information (840), the communication company server 100 is an authorized certificate for the authorized certificate mounted on the lost wireless terminal. The revocation request information is generated (or extracted) (845), and the generated (or extracted) public certificate revocation request information is transmitted to the certificate server 145 shown in FIG. Process to be discarded (850).

In this case, when all information necessary for the disposal process of the public certificate is stored on the storage medium 730 managed by the communication company server 100, it is possible to generate the public certificate certificate request information by collecting them.

Or, if the management number (or management code) given to the official certificate for the disposal of the official certificate is stored on the storage medium 730 managed by the carrier server 100, the management number (or management code) It is preferable to generate the public certificate revocation request information including a).

According to the present invention, when a customer registers a situation in which a customer is issued a public certificate in a mobile communication company, and the customer registers a mobile phone loss with the mobile phone company, the customer checks the public certificate installed in the lost mobile phone and discards the mobile phone. Even if lost, there is an advantage that can be easily prevented illegal use by discarding the certificate.

Claims (5)

When a customer who has received an authorized certificate on the wireless terminal from the telecommunication company server receives the lost wireless terminal information due to the lost wireless terminal, check whether the authorized certificate is mounted on the wireless terminal corresponding to the received lost wireless terminal information. And generating and transmitting the discard request information, receiving the discard request information and confirming an authorized certificate mounted on the lost wireless terminal based on the received discard request information; And recognizing the authorized certificate mounted on the lost wireless terminal, discarding the confirmed authorized certificate. The method of claim 1, The step of checking the official certificate mounted on the lost wireless terminal based on the received discard request information, Checking the wireless terminal information or the public certificate management information included in the received revocation request information, and confirming the public certificate installed in the lost wireless terminal based on the checked wireless terminal information or the public certificate management information; Certified certificate remote revocation processing method comprising the. When the customer who has received the authorized certificate on the wireless terminal receives the lost wireless terminal information due to the lost wireless terminal, checking whether the authorized certificate is mounted on the wireless terminal corresponding to the received lost wireless terminal information; If it is confirmed that the authorized certificate is mounted on the lost wireless terminal, generating revocation request information including wireless terminal information or official certificate management information for the lost wireless terminal; And transmitting the generated revocation request information to a certificate server to process the revocation certificate to be revoked. A computer-readable recording medium having recorded thereon a program for executing the method of claim 1. When a customer who has received an authorized certificate on the wireless terminal from the telecommunication company server receives the lost wireless terminal information due to the lost wireless terminal, check whether the authorized certificate is mounted on the wireless terminal corresponding to the received lost wireless terminal information. And generating and transmitting the discard request information, and receiving the discard request information and confirming an authorized certificate mounted on the lost wireless terminal based on the received discard request information; And a means for discarding the verified public certificate when the public certificate installed in the lost wireless terminal is confirmed.

Images