KR20110042920A - Certification service system using mobile communication terminal and method therefor - Google Patents

Abstract

PURPOSE: An authentication service system and method thereof which uses a mobile communications terminal are provided to perform authentication about a user by using a mobile communication terminal when performing electronic commerce. CONSTITUTION: A mobile communication terminal(180) mounts a USIM(Universal Subscriber Identity Module) card or a SIM card mount. A client terminal(110) selects the mobile communication terminal as an authentication unit. An access control server(170) checks whether the selected mobile communication terminal subscribes to a mobile card. The access control server transmits a text message to the mobile communication terminal. The text message includes a WAP(Wireless Application Protocol) page and a call back URL(Uniform Resource Location).

Description

Certification service system using mobile communication terminal and method therefor}

An embodiment of the present invention relates to an authentication service system and a method using a mobile communication terminal. More specifically, when the user makes an e-commerce online, by authenticating the user using the user's mobile communication terminal, it is possible to overcome the limitation of the place where the e-commerce is available online. The present invention relates to an authentication service system and a method using a mobile communication terminal that can increase the reliability of authentication by using a USIM card mounted in the mobile communication terminal as an authentication means.

As the spread of the Internet spreads, the scale of online e-commerce is exploding. In the case of e-commerce, unlike actual transactions in the offline market, it is common to purchase goods or use services online, and pay or pay for them online. It is important.

To this end, in the related art, the purchaser subscribes to a web site of a seller where a product transaction is made, registers an ID and a password, and confirms the identity of the user by checking a registered ID and password when purchasing a product by the buyer.

However, since user authentication by ID and password is easy to hack online, there is a security problem to use as a means for authenticating a customer's transaction.

A solution to this problem is to verify the identity of the user through a certificate, that is, a digital signature. A certificate, also known as a digital ID, is installed on the user's terminal and submitted to the certification authority if necessary. How to check your identity. The certificate is issued by an accredited certification body such as Korea Information Security, KFTC, and Korea Computer Securities, and consists of a pair of electronic keys that can be used to digitally encrypt and sign personal information. Sign the key and submit it to the Certificate Authority, which verifies it, ensuring the authenticity of the user.

However, the method using such a certificate has a problem that the user can authenticate himself only at the terminal where the certificate is installed, so that there is a place restriction in which the user can perform electronic commerce online.

In order to solve the above-described problems, an embodiment of the present invention, when the user is doing e-commerce on-line, by using the user's mobile communication terminal to authenticate the user, it is possible to use the e-commerce on-line It is an object of the present invention to provide an authentication service system and method using a mobile communication terminal that can overcome the limited location.

An authentication service system using a mobile communication terminal according to an embodiment of the present invention for achieving the above object, a mobile communication terminal equipped with a Universal Subscriber Identity Module (USIM) card or SIM card; A client terminal for selecting a mobile communication terminal as an authentication means when requesting payment for a product purchase; It checks whether the selected mobile terminal is a mobile card subscription, and when the mobile terminal is subscribed to a mobile card, a callback for connecting a WAP (Wireless Application Protocol) page for payment authentication and the mobile terminal. An access control server for transmitting a text message including a Uniform Resource Location (URL) to the mobile communication terminal; And when the mobile terminal is connected to the swap page, characterized in that it comprises a swap server for verifying whether the party owner based on the USIM card or SIM card.

Here, it is preferable that the swap server reads and displays the information stored in the USIM card or the SIM card when the mobile communication terminal connects through the swap page.

In addition, the mobile communication terminal stores the account information or credit card information for the user, it is preferable to display the stored account information or credit card information through the bounce page.

In addition, it is preferable that the swap server verifies whether the party is the party owner in the access control server based on the account information or the credit card information displayed on the swap page and the password input from the mobile communication terminal.

Authentication service system using a mobile communication terminal according to another embodiment of the present invention for achieving the above object, a mobile communication terminal equipped with a USIM card or SIM card; When requesting a payment for a product purchase using a mobile terminal, the mobile terminal checks whether the mobile card is subscribed to the mobile terminal, and when the mobile terminal is subscribed to the mobile card, it connects the swap page for payment authentication and the mobile terminal. An access control server for transmitting a text message including a callback URL to a mobile communication terminal; And when the mobile terminal is connected to the swap page, characterized in that it comprises a swap server for verifying whether the party owner based on the USIM card or SIM card.

One embodiment of the authentication service method using a mobile communication terminal according to the present invention for achieving the above object is to authenticate a mobile communication terminal equipped with a USIM card or a SIM card when purchasing goods online using a client terminal. Receiving input by means; Checking whether a mobile card is input to the mobile card; When the mobile communication terminal is subscribed to the mobile card, transmitting a text message including a swap page for payment authentication and a callback URL for connecting the mobile communication terminal to the mobile communication terminal; And verifying whether or not the party owner is based on the USIM card or the SIM card when the mobile terminal is connected to the swap page.

Preferably, the authentication service method using a mobile communication terminal, reading and displaying the information stored in the USIM card when the mobile communication terminal is connected through a swap page

It may further include.

The authentication service method using the mobile communication terminal may further include storing, by the mobile communication terminal, account information or credit card information for the user. In this case, it is preferable to display the account information or credit card information stored in the mobile communication terminal through the swap page.

In addition, in the authentication service method using the mobile communication terminal, it is preferable to verify whether the party owner is based on the account information or credit card information displayed on the swap page, and the password input from the mobile communication terminal.

Another embodiment of the authentication service method using a mobile communication terminal according to the present invention for achieving the above object is a mobile communication when a payment request for a product purchase using a mobile communication terminal equipped with a USIM card or a SIM card, Checking whether the terminal subscribes to the mobile card; When the mobile communication terminal is subscribed to the mobile card, transmitting a text message including a swap page for payment authentication and a callback URL for connecting the mobile communication terminal to the mobile communication terminal; And verifying whether or not the party owner is based on the USIM card or the SIM card when the mobile terminal is connected to the swap page.

As described above, according to an embodiment of the present invention, when a user makes an e-commerce online, a place where the user can use the e-commerce online by authenticating the user using the user's mobile communication terminal To overcome the limitations, it is possible to increase the reliability of the user authentication by using the USIM card mounted in the mobile communication terminal as an authentication means.

Hereinafter, some embodiments of the present invention will be described in detail through exemplary drawings. In adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are assigned to the same components as much as possible even though they are shown in different drawings. In describing the embodiments of the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

In addition, in describing the components of the embodiment of the present invention, terms such as first, second, A, B, (a), and (b) may be used. These terms are only for distinguishing the components from other components, and the nature, order or order of the components are not limited by the terms. If a component is described as being "connected", "coupled" or "connected" to another component, that component may be directly connected or connected to that other component, but between components It will be understood that may be "connected", "coupled" or "connected".

1 is a diagram schematically illustrating an authentication service system using a mobile communication terminal according to an embodiment of the present invention. Referring to the drawings, the authentication service system using a mobile communication terminal according to an embodiment of the present invention, a client terminal 110, a wired and wireless network 120, a mall server 130, a payment server (PG: Payment Gateway) (140), Merchant Plug-In (MPI) 150, Directory Server 160, Access Control Server (ACS) 170, Mobile Terminal 180 and WAP (Wireless Application Protocol) Server 190. Here, the mall server 130, the payment server 140, the MPI 150, and the directory server 160 are servers provided in the shopping mall site or linked to the shopping mall site, and are integrated with these servers to be the shopping mall server 135. Name it.

The client terminal 110 may access a shopping mall site through the wired / wireless network 120, request a payment according to a product purchase from the connected shopping mall site, and select the mobile communication terminal 180 as an authentication means. Alternatively, if the price of the product purchase is more than a predetermined amount, the client terminal 110 may select the mobile communication terminal 180 as an authentication and payment means. In this case, the client terminal 110 receives the type of the product and the user information to be purchased from the user, encrypts it, and transmits the encrypted information to the mall server 130. The user information may include credit card information to pay for the product. Here, the client terminal 110 is not only a personal computer (PC) but also a laptop, a portable multimedia player (PMP), a personal digital assistant (PDA), a mobile phone, and the like, which can be accessed through a wired / wireless network 120. It includes a portable electronic device equipped with a communication function.

Wired and wireless network 120 refers to the integrated wired and wireless networks that can be connected to each other around the Internet to transmit and receive data. Here, the wireless network may be a short-range wireless network using Bluetooth, an Infrared Data Association (IrDA), a mobile communication network using code division multiple access (CDMA), wideband CDMA (WCDMA), or a wireless Internet such as WiBro (Wireless Broadband). It includes a net.

The mall server 130 is a server operated by a shopping mall site. The mall server 130 receives encrypted information from the client terminal 110, transfers the received information to the payment server 140, and transmits the information from the payment server 140. Receives the financial information approval result corresponding to the delivered to the client terminal (110).

The payment server 140 transmits the received user information to a corresponding card company server (not shown). In this case, the MPI 150 receives user information from the payment server 140 and transmits the user information to the directory server 160 to determine whether the user information received by the payment server 140 is valid, and the directory server 160. Received whether or not to register the user information from the transmission to the payment server 140.

The directory server 160 interworks with the MPI 150 and the access control server 170. That is, when the validity of the user information is requested from the mall server 130, the directory server 160 checks whether the user is registered from the access control server 170 (that is, whether or not the token is present) and the mall server And transmits the result to 130, and also stores information about the request and response of authentication to the user information.

The access control server 170 receives the user information from the directory server 160, checks whether the user information is registered, and generates a predetermined token (CAVV: Cardholder Authentication Verification Value) as a result of the registration. Transmit to 160.

Meanwhile, as illustrated in FIG. 2, the access control server 170 may include a subscription checker 172, a callback message transmitter 174, an authentication processor 176, and a payment amount determiner 178.

When the subscription checker 172 receives a payment request signal for selecting the mobile communication terminal 180 as an authentication means from the client terminal 110, the subscription checking unit 172 checks whether the selected mobile communication terminal 180 subscribes to the mobile card. Here, the mobile card subscription refers to a service that enables the mobile communication terminal according to the embodiment of the present invention to be selected as the authentication means.

When the mobile communication terminal 180 is subscribed to the mobile card, the callback message transmission unit 174 has a callback URL (Uniform Resource Location) for connecting the mobile communication terminal 180 to the payment authentication swap page. The included text message is transmitted to the mobile communication terminal 180. In this case, the text message transmitted by the callback message transmitting unit 174 to the mobile communication terminal 180 may include information on shopping mall information, the type of the product to be paid, the amount of the product price, and the like. In addition, the swap page for payment authentication may be set differently according to, for example, the card company according to the credit card information included in the user information. Here, whether to subscribe to the mobile card, whether the mobile terminal 180 is equipped with a normal USIM card or SIM card, whether the account information or credit card information is stored in the USIM card or SIM card, USIM card Alternatively, the operation may be performed at least one of whether a mobile payment service is subscribed to a bank or a card company corresponding to account information or credit card information stored in the SIM card.

The authentication processing unit 176 processes authentication for the mobile communication terminal 180 in association with a swap page for payment authentication. That is, when the mobile communication terminal 180 accesses the swap page for payment authentication through the text message transmitted by the callback message transmission unit 174, the authentication processing unit 174 works in conjunction with the corresponding swap page (the mobile communication terminal (174). 180 is processed for authentication of payment account information or credit card information, payment account password or credit card password.

The payment amount determining unit 178 determines whether the payment amount corresponding to the payment request signal received from the client terminal 110 is equal to or less than the predetermined amount. In this case, the authentication processing unit 176 may perform the authentication process differently according to the determination result by the payment amount determining unit 178. For example, setting the 300,000 won as the reference amount, the payment amount determination unit 178 determines whether the payment amount corresponding to the payment request signal received from the client terminal 110 is less than the reference amount, the authentication processing unit When the payment price corresponding to the payment request signal received from the client terminal 110 is 300,000 won or less, the mobile terminal 180 connects to the swap page and performs authentication processing in connection with the swap page. Can be. In addition, when the payment amount corresponding to the payment request signal received from the client terminal 110 exceeds 300,000 won, the mobile certificate previously stored in the mobile communication terminal 180 is received, and the mobile certificate is sent to the certification authority. By submitting and confirming, authentication processing based on a mobile certificate can be performed. Here, the mobile certificate is issued by an accredited certification authority such as Korea Information Authentication, KFTC and Korea Computer Securities, and consists of a pair of electronic keys so that personal information can be used for digital encryption and signing. Refers to a certificate stored in a universal subscriber identity module (USIM) card or a subscriber identity module (SIM) card of 180.

The mobile communication terminal 180 includes a USIM card or a SIM. The USIM card is a card mounted in a terminal for third generation mobile communication, for example, Wideband Code Division Multiple Access (WCDMA), and includes a subscriber identity module (SIM) card and a universal IC card (UICC) containing subscriber information. ) Is a combination of various functions such as user authentication, global roaming, and e-commerce.

USIM, also known as a universal subscriber identity module, is a card-type module that stores personal information so that SIM can provide various services such as authentication, charging, and security functions to subscribers of mobile communication terminals. It combines the functions of the SIM that authenticates subscribers in a step-by-step manner and the universal IC card (UICC) with various functions such as a transportation card and a credit card. At this time, the universal IC card ensures the integrity and security of all personal information data through the security support of various multiple applications.

The USIM consists of a small central processing unit (CPU) and memory. The CPU identifies a user with encryption and decryption functions, and the memory is used as a storage space for additional services. The memory may store information about the user's account, credit card, transportation card, or membership card. In particular, when a user signs up for a debit account or credit card at a bank window, the bank or credit card company approves the card issue, and then overwrites the user's USIM card or SIM card using OTA (Over The Air) technology. Since the information or credit card information can be stored, the card issuing procedure can be shortened by omitting the offline issuance procedure by mail or the like.

When the mobile communication terminal 180 is connected to a preset page for the payment authentication, the swap server 190 verifies whether the party is the owner of the party based on the USIM card or the SIM card of the mobile communication terminal 180. Perform authentication. To this end, the swap server 190 may include a swap page providing unit 192, an authentication information obtaining unit 194, and a user authentication performing unit 196 as shown in FIG. 3.

The swap page provider 192 provides a swap page to the mobile communication terminal 180. At this time, the swap page provider 192 may be linked with the callback message transmitter 174 of the access control server 170 to include the URL of the swap page as a callback message to be transmitted.

The authentication information obtaining unit 194 authenticates payment authentication based on a USIM card or a SIM card mounted in the mobile communication terminal 180 when the mobile communication terminal 180 connected to the mobile terminal 180 requests a payment. Obtain information. At this time, the authentication information acquisition unit 194 receives a PIN (Personal Identification Number) information, etc. from the user of the mobile communication terminal 180 through a web page, the account information from the USIM card or SIM card of the mobile communication terminal 180 Or it may be implemented to obtain credit card information and the like.

The user authentication performing unit 196 performs user authentication based on the authentication information obtained by the authentication information obtaining unit 194. In this case, the user authentication performing unit 196 receives PIN information, account information, or password for credit card information from a user of the mobile communication terminal 180 through a web page, and receives the received information from the mobile communication terminal 180. The user authentication can be performed by comparing the information received from the USIM card or the SIM card. Alternatively, the user authentication performing unit 196 may access the account information or the credit card information received from the USIM card or the SIM card together with the PIN information and password received from the mobile communication terminal 180 through the web page. You can also authenticate a user by submitting it to and verifying that the user is a legitimate user.

4 and 5 are flowcharts illustrating an authentication service method according to an embodiment of an authentication service system using the mobile communication terminal of FIG. 1. With reference to the drawings will be described in detail the function and operation of the authentication service system using a mobile communication terminal according to an embodiment of the present invention.

Referring to the drawing, the client terminal 110 may access the shopping mall server 135 through the wired / wireless network 120 to request payment for goods and to select the mobile communication terminal 180 as an authentication means. Alternatively, if the price of the product purchase is more than a predetermined amount, the client terminal 110 may select the mobile communication terminal 180 as an authentication and payment means. At this time, the client terminal 110 receives the type of the product to be purchased from the user and the user information is encrypted and transmitted to the shopping mall server 135 (step 1). The user information may include credit card information to pay for the product.

In response to the payment request signal from the client terminal 110, the shopping mall server 135 requests the access control server 170 to subscribe to a service corresponding to the authentication service according to the present invention, and receives a response signal corresponding thereto. (Step 2, step 3). In the drawings it is named as a safe click. As a result, the shopping mall server 135 may smoothly transmit information between the client terminal 110 and the access control server 170, and authenticates the mobile communication terminal 180 to the client terminal 110, or It is possible to drive an authentication window for selecting as an authentication and payment method (step 4).

The client terminal 110 may select the mobile communication terminal 180 as an authentication means, or authentication and payment through the authentication window driven by step 4. The authentication request signal using the mobile communication terminal 180 as an authentication means is transmitted to the access control server 170 (step 5). Here, since the procedure performed by the shopping mall server 135 is the same as described above, a description thereof will be omitted below.

The access control server 170 checks whether the corresponding mobile communication terminal 180 subscribes to the mobile card based on the user information received from the directory server 160 and the USIM card or the SIM card of the mobile communication terminal 180 (step 6). At this time, the access control server 170 may inquire whether the authentication service subscription to the corresponding card company server (not shown) based on the user information and the USIM card or SIM card of the mobile communication terminal 180. In addition, the access control server 170 recognizes the unique information of the mobile communication terminal 180 based on the USIM card or the SIM card, and receives PIN (Personal Identification Number) information from the user, thereby providing the mobile communication terminal 180 with the mobile communication terminal 180. You can also check whether you are a political party user.

When the mobile communication terminal 180 is subscribed to the authentication service, the access control server 170 performs a mobile communication of a text message including a callback URL for interworking the mobile communication terminal 180 with a preset swap page for payment authentication. Send to the terminal 180 (step 7). In this case, the text message transmitted by the access control server 170 to the mobile communication terminal 180 may include information on shopping mall information, the type of the product to be paid, the amount of the product price, and the like. In addition, the swap page for payment authentication may be set differently according to the credit card information included in the user information, that is, depending on the card company.

If the mobile communication terminal 180 is connected to the swap page provided by the swap server 190 (step 8), the swap server 190 is based on the USIM card or SIM card of the mobile communication terminal 180, and the access control server. User authentication is performed by inquiring 170 of the party owner of the mobile communication terminal 180 and receiving a response signal thereto (steps 9 and 10).

In addition, the swap server 190 requests USIM card or SIM card information from the mobile communication terminal 180, and displays the information on the screen of the mobile communication terminal 180 (step 11). The information displayed on the screen may include account information or credit card information that the user intends to use as a payment method. In this case, when the mobile communication terminal 180 does not store account information or credit card information for the user, the mobile communication terminal 180 inquires the client terminal 110 for account information or credit card information for the user. A response signal can be received (step 12, step 13).

On the basis of the information displayed on the screen of the mobile terminal 180 by the swap server 190, if the user of the mobile terminal 180 enters a password for the account number or credit card information (step 14), the swap server ( 190 verifies identity authentication to the access control server 170 based on the password received from the mobile communication terminal 180, and transmits the result back to the mobile communication terminal 180 (steps 15 and 16). At this time, the access control server 170 preferably transmits the result of the authentication to the shopping mall server 135 (step 17). As a result, the shopping mall server 135 may request for approval of the payment through the value added network (VAN) 200 and receive a response signal (steps 18 and 19). Here, the VAN 200 is a value-added network that connects the shopping mall server 135 and a payment server (not shown), and transmits a settlement request for a product price and a result thereof, thereby being paid by the user's credit card information. The billing may be normally settled to the shopping mall server 135. When such a process is completed, the access control server 170 transmits a result thereof to the mobile communication terminal 180 in a text message, thereby notifying the final approval result (step 20).

6 is a diagram schematically illustrating an authentication service system using a mobile communication terminal according to another embodiment of the present invention. Here, the mobile communication terminal 480 may purchase a product by accessing the shopping mall server 135 through the wired / wireless network 120, and may select itself as an authentication means therefor. That is, in this case, the mobile communication terminal 480 may simultaneously perform the function of the client terminal 110 of FIG. 1 and the function of the mobile communication terminal 180. In this case, each other component other than the mobile communication terminal 480 is the same as the function and operation of each other component of Figure 1, a detailed description thereof will be omitted.

7 and 8 are flowcharts illustrating an embodiment of an authentication service method by the authentication service system using the mobile communication terminal of FIG. 4.

Referring to the drawing, the mobile communication terminal 180 may access the shopping mall server 135 through the wired / wireless network 120 to request payment for goods and to select itself as an authentication means. In this case, the mobile communication terminal 180 receives the type of the product and the user information to be purchased from the user, encrypts it, and transmits the encrypted information to the shopping mall server 135 (step 1). The user information may include credit card information to pay for the product.

In this case, the shopping mall server 135 requests the access control server 170 to subscribe to a service corresponding to the authentication service according to the present invention in response to a payment request signal from the client terminal 110, and a response signal corresponding thereto. Can be received (step 2, step 3). As a result, the shopping mall server 135 may smoothly transmit information between the mobile communication terminal 180 and the access control server 170, and an authentication window for selecting the mobile communication terminal 180 as an authentication means. Can be driven (step 4).

The mobile communication terminal 180 can select the mobile communication terminal 180 as the authentication means through the authentication window driven by step 4. The authentication request signal using the mobile communication terminal 180 as an authentication means is transmitted to the access control server 170 (step 5).

The access control server 170 checks whether the corresponding mobile communication terminal 180 subscribes to the mobile card based on the user information received from the directory server 160 and the USIM card or the SIM card of the mobile communication terminal 180 ( Step 6). At this time, the access control server 170 may inquire whether the mobile card subscription to the corresponding card company server (not shown) based on the user information and the USIM card or SIM card of the mobile communication terminal 180. In addition, the access control server 170 recognizes the unique information of the mobile communication terminal 180 based on the USIM card or the SIM card, and receives PIN information from the user, thereby determining whether or not a party user of the mobile communication terminal 180 exists. You can also check

When the mobile communication terminal 180 is subscribed to a mobile card, the access control server 170 performs a mobile communication of a text message including a callback URL for interworking the mobile communication terminal 180 with a preset swap page for payment authentication. Send to the terminal 180 (step 7). Here, the swap page for payment authentication may be set differently according to the credit card information included in the user information, that is, depending on the card company.

If the mobile communication terminal 180 is connected to the swap page provided by the swap server 190 (step 8), the swap server 190 is based on the USIM card or SIM card of the mobile communication terminal 180, and the access control server. User authentication is performed by inquiring 170 of the party owner of the mobile communication terminal 180 and receiving a response signal thereto (step 9).

In addition, the swap server 190 requests the USIM card or the SIM card information from the mobile communication terminal 180, and displays the information on the screen of the mobile communication terminal 180 (step 10). The information displayed on the screen may include account information or credit card information that the user intends to use as a payment method.

On the basis of the information displayed on the screen of the mobile communication terminal 180 by the swap server 190, if the user of the mobile communication terminal 180 inputs a password for the account number or credit card information (step 11), the swap server ( 190 confirms the user authentication to the access control server 170 based on the password received from the mobile communication terminal 180, and transmits the result back to the mobile communication terminal 180 (step 12, step 13). At this time, the access control server 170 preferably transmits the result of the authentication to the shopping mall server 135 (step 14). As a result, the shopping mall server 135 may make a request for approval of payment through the value added network (VAN) 200 and receive a response signal (steps 15 and 16). When such a process is completed, the access control server 170 transmits the result thereof to the mobile communication terminal 180 in a text message, thereby notifying the final approval result (step 17).

On the other hand, the above-described procedure is used only when the payment price to be paid using the mobile terminal 180 is less than a predetermined amount, and when the payment amount exceeds the predetermined amount, the payment may be implemented through a mobile certificate. have. That is, when the mobile certificate is stored in a USIM card or a SIM card mounted in the mobile communication terminal 180, and the mobile communication terminal 180 is selected as an authentication and payment method according to a product purchase, the access control server 170 makes a payment. If the price is less than the predetermined amount may be implemented to perform the above-described authentication process, and if the amount exceeds the predetermined amount to verify the mobile certificate to the certification authority for authentication processing. Thus, the payment server performs the payment processing by the mobile card when the payment amount is less than the predetermined amount, and performs the payment processing by the mobile certificate when the payment amount exceeds the preset amount.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. In other words, within the scope of the present invention, all of the components may be selectively operated in combination with one or more. In addition, although all of the components may be implemented in one independent hardware, each or all of the components may be selectively combined to perform some or all functions combined in one or a plurality of hardware. It may be implemented as a computer program having a. Codes and code segments constituting the computer program may be easily inferred by those skilled in the art. Such a computer program may be stored in a computer readable storage medium and read and executed by a computer, thereby implementing embodiments of the present invention. The storage medium of the computer program may include a magnetic recording medium, an optical recording medium, a carrier wave medium, and the like.

In addition, the terms "comprise", "comprise" or "having" described above mean that the corresponding component may be inherent unless specifically stated otherwise, and thus excludes other components. It should be construed that it may further include other components instead. All terms, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. Terms used generally, such as terms defined in a dictionary, should be interpreted to coincide with the contextual meaning of the related art, and shall not be interpreted in an ideal or excessively formal sense unless explicitly defined in the present invention.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, an embodiment of the present invention is applied to a mobile communication field, a payment system field using a mobile communication terminal, and the like, and when a user performs electronic commerce online, the user is authenticated using the mobile communication terminal. By overcoming the above, it is possible to overcome the limitation of the place where the online e-commerce can be used, and by using the USIM card mounted in the mobile communication terminal as an authentication means, it is possible to increase the reliability of the user's authentication. It is a very useful invention.

1 is a diagram schematically illustrating an authentication service system using a mobile communication terminal according to an embodiment of the present invention.

FIG. 2 is a diagram schematically illustrating the access control server of FIG. 1.

FIG. 3 is a diagram schematically illustrating a swap server of FIG. 1.

4 and 5 are flowcharts illustrating an embodiment of an authentication service method by the authentication service system using the mobile communication terminal of FIG. 1.

6 is a diagram schematically illustrating an authentication service system using a mobile communication terminal according to another embodiment of the present invention.

7 and 8 are flowcharts illustrating an embodiment of an authentication service method by the authentication service system using the mobile communication terminal of FIG. 4.

<Description of Symbols for Main Parts of Drawings>

110: client terminal 120: wired and wireless network

130: mall server 140: payment server

150: MPI 160: Directory Server

170: access control server 180, 480: mobile communication terminal

190: swap server

Claims (9)

A mobile communication terminal equipped with a universal subscriber identity module (USIM) card or a SIM card; A client terminal for selecting the mobile communication terminal as an authentication means when a payment request is made for a product purchase; It checks whether the selected mobile communication terminal subscribes to a mobile card, and when a mobile communication terminal is subscribed to the mobile card, a callback for connecting a WAP page for payment authentication and the mobile communication terminal. (call-back) an access control server for transmitting a text message including a Uniform Resource Location (URL) to the mobile communication terminal; And When the mobile communication terminal is connected to the swap page, a swap server for verifying whether the party owner based on the USIM card or the SIM card Authentication service system using a mobile communication terminal comprising a. A subscription checker that checks whether a mobile card is subscribed to the mobile card when a payment request signal for selecting a mobile communication terminal as an authentication means is received from the client terminal; A callback message transmission unit for transmitting a text message including a callback URL for connecting the mobile communication terminal to a payment authentication swap page when the mobile communication terminal is subscribed to the mobile card; And Authentication processing unit for processing the authentication of the mobile communication terminal in conjunction with the payment authentication swap page Access control server comprising a. 3. The method of claim 2, Payment amount determination unit for determining whether the payment amount corresponding to the payment request signal is less than a predetermined amount More, And the payment processing unit corresponding to the payment request signal exceeds the preset amount, wherein the authentication processing unit performs an authentication process based on a mobile certificate stored in the mobile communication terminal. A swap page providing unit for providing a swap page to the mobile communication terminal; An authentication information acquiring unit for acquiring authentication information for payment authentication based on a USIM card or a SIM card mounted in the mobile communication terminal when the mobile communication terminal requests payment through the provided swap page; And User authentication performing unit for performing user authentication based on the authentication information obtained by the authentication information obtaining unit A swap server comprising a. The method of claim 4, wherein The authentication information obtaining unit receives account information or credit card information and a password corresponding thereto from the mobile communication terminal, And the user authentication performing unit performs user authentication based on the information received through the authentication information obtaining unit. Receiving a mobile communication terminal equipped with a USIM card or a SIM card as an authentication means when purchasing goods online using a client terminal; Checking whether a mobile card of the inputted mobile communication terminal is registered; When the mobile communication terminal is subscribed to the mobile card, transmitting a text message including a swap page for payment authentication and a callback URL for connecting the mobile communication terminal to the mobile communication terminal; Verifying whether or not the party is a party owner based on the USIM card or the SIM card when the mobile terminal accesses the swap page; And Processing payment for the verified party owner based on account information or credit card information received from the mobile terminal through the swap page; Authentication service method using a mobile communication terminal, characterized in that it comprises a. The method of claim 6, Authentication service method using a mobile communication terminal, characterized in that for displaying the account information or credit card information stored in the mobile terminal through the swap page. The method of claim 6, Receiving an account information or credit card information and a password through the swap page, the authentication service method using a mobile communication terminal, characterized in that the authentication process for the party user based on the information input from the mobile communication terminal . Checking the subscription of the mobile card of the mobile communication terminal when a payment request is made according to the purchase of a product using a mobile communication terminal equipped with a USIM card or a SIM card; When the mobile communication terminal is subscribed to the mobile card, transmitting a text message including a swap page for payment authentication and a callback URL for connecting the mobile communication terminal to the mobile communication terminal; Verifying whether or not the party is a party owner based on the USIM card or the SIM card when the mobile communication terminal accesses the swap page; And Processing payment for the verified party owner based on account information or credit card information received from the mobile terminal through the swap page; Authentication service method using a mobile communication terminal comprising a.

Images