KR20120137065A - Method and system for authentication - Google Patents

Abstract

PURPOSE: An authentication method and system using an audio data electronic signature are provided to easily restore an original copy of transaction information by separately backup-saving detail transaction content information. CONSTITUTION: A telephone authentication server(130) provides detailed content information for verifying the use of a service of a first user terminal(110) to a second user terminal(150). The telephone authentication server obtains a user acknowledge from the second user terminal. The telephone certificate server generates verification results for the first user terminal using the user acknowledge. The telephone authentication server stores the detailed content information and the user acknowledge. A service providing server(120) determines whether or not to provide a service from a service providing request of the first user terminal according to the verification results. [Reference numerals] (110) First user terminal; (120) Service providing server; (130) Telephone authentication server; (140) Notary authority server; (150) Second user terminal; (AA) Internet communication network; (BB) Telephone communication network

Description

Authentication method and system using voice data digital signature {Method and system for authentication}

The present invention relates to a method and system for authenticating voice data through digital signature, and more specifically, to provide a user with a voice guidance according to the use of a specific service online, and confirm and store detailed information to realize bidirectional authentication. The present invention relates to a method and system for authenticating voice data through digital signature.

The identification of the identity on the Internet was generally used for the real name authentication using the resident registration number. However, real name authentication using the resident registration number has a risk of leaking the resident registration number. Recently, a personal identification number (I-PIN) is used to replace the resident registration number.

In the field of electronic transactions such as financial transactions on the Internet, various passwords, such as transfer passwords and account passwords, are widely used to improve security as well as to verify the identity of the transaction party. In addition, the use of an accredited certificate has become common as an authentication means having legal effect under the Digital Signature Act. Recently, the use of OTP (One-Time-Password), which is a one-time password whose password is changed every electronic transaction, is increasing.

Looking at the conventional authentication method with reference to Figure 1, the user terminal requests an electronic transaction to the service providing server via the Internet communication network, and further information corresponding to the official certificate or OTP information stored in the authorized authentication server By providing a way for identity verification to take place.

However, due to the advancement of hacking techniques such as memory hacking from a technical point of view, security vulnerabilities for public certificates and OTP are becoming social problems, and since authentication is one-way, denial that electronic transactions are not performed by the user (본인) There is a problem that the possibility of) exists.

The present invention provides the service usage information for a specific service used by the user terminal including the electronic transaction through the Internet by storing the detailed information after being confirmed by the user, thereby realizing two-way authentication and denying the use of the specific service. It is to provide an authentication method and system through the voice data digital signature that can prevent).

In addition, the present invention is to provide a method and system for authentication through voice data digital signature that can be restored in spite of the loss of transaction information by separately storing the detailed transaction content information.

In addition, the present invention is to provide an authentication method and system through the voice data electronic signature that can provide the service usage information for the user's service use to the terminal registered in advance, if necessary, can be reported immediately according to the voice guidance.

According to an aspect of the present invention, there is provided an authentication system that receives the confirmation of the use of a particular service through the Internet of the user and performs the authorization authentication according to the use of the service to store detailed information.

According to an embodiment of the present invention, providing detailed content information for confirming service usage for a first user terminal to a second user terminal, obtaining a user confirmation response from the second user terminal, and receiving the user confirmation response. An authentication server configured to perform approval authentication on the first user terminal to generate an approval result and to store a user confirmation response together with the detailed information; And a service providing server that determines whether to provide a service according to the service providing request of the first user terminal according to the approval result.

The authentication server may provide the detailed transaction details to the second user terminal by voice, and the user acknowledgment may be obtained by DTMF (Dual Tone Multi Frequency).

The second user terminal is a terminal registered in advance for confirmation by the user of the first user terminal according to service use.

The user confirmation response may be any one of approval, cancellation and report.

The authentication server may further obtain an approval password and location information from the second user terminal, and further use the approval password and location information for approval authentication for the first user terminal.

The authentication server may transmit a user confirmation response together with the stored detailed content information to a separate notary agency server.

According to another aspect of the present invention, there is provided a method for performing authentication on a user terminal in response to a service provision request of the user terminal.

According to an embodiment of the present invention, in the method for performing authentication on the user terminal according to a service providing request of a user terminal, (a) receiving a service providing request from a first user terminal—the service providing request Contains detailed content information; (b) acquiring a user confirmation response by providing the detailed content information to a second user terminal according to the service provision request; (c) generating an approval result by performing approval authentication on the first user terminal using the user confirmation response, and determining whether to provide a service to the first user terminal according to the approval result; And (d) storing the obtained user confirmation response together with the detailed content information provided to the second user terminal.

In the step (b), it is possible to provide a voice guidance for the detailed transaction details to the second user terminal, and obtain the user identification information by DTMF (Dual Tone Multi Frequency) from the second user terminal.

After the step (b), further obtain the approval password and location information from the second user terminal, and in the step (c), the approval authentication may further use the approval password and location information.

After the step (d), the stored detailed content information and the user confirmation response may be transmitted and stored in a separate notary institution server.

By providing an authentication method and system through voice data digital signature according to an embodiment of the present invention, by providing a service usage information for a specific service used by the user terminal, including electronic transactions over the Internet by voice, it is confirmed by the user, In addition to storing the detailed content information and the information confirmed by the user, it is possible to realize two-way authentication and prevent the user from denying the use of a specific service.

In addition, the present invention can be restored even when the original transaction information is lost by hacking and the like by separately storing the detailed transaction contents information.

In addition, the present invention can provide the service usage information for the service use of the user to the terminal registered in advance, if necessary can be immediately reported by the voice guidance.

1 is a block diagram schematically showing a configuration of an authentication system for authenticating a user according to a conventional Internet use.
Figure 2 is a block diagram schematically showing the configuration of an authentication system for authenticating a user according to the use of the Internet according to an embodiment of the present invention.
3 is a flowchart illustrating a method of authenticating a corresponding user terminal according to a service providing request of the user terminal in the authentication system according to an embodiment of the present invention.
4 is a flowchart illustrating a method of authenticating a corresponding user terminal according to a service providing request of the user terminal in an authentication system according to another exemplary embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention is capable of various modifications and various embodiments, and specific embodiments are illustrated in the drawings and described in detail in the detailed description. It is to be understood, however, that the invention is not to be limited to the specific embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

[Description of Fig. 2]

2 is a block diagram schematically illustrating a configuration of an authentication system for authenticating a user according to the use of the Internet according to an embodiment of the present invention.

In this specification, the use of the Internet should be understood to refer to all uses involving a user's financial transactions, such as general e-commerce, financial transactions, and item transactions on certain sites (eg, item transactions on online games, etc.). will be. In addition, it should be understood that the financial transaction of the user includes all of cash, transactions using electronic money, credit transactions or transactions using specific items online.

In this specification, in order to facilitate the understanding and explanation, the description will focus on specific financial transactions such as Internet banking.

2, an authentication system according to an embodiment of the present invention includes a user terminal, a service providing server 120, and a telephone authentication server 130.

The user terminal is connected to the service providing server 120 through a communication network to receive various financial services provided by the corresponding service providing server 120.

As shown in FIG. 2, the user terminal may be a plurality of 110 and 150.

When there are a plurality of user terminals, the first user terminal 110 may be an apparatus for receiving a service provided by the corresponding service providing server 120 by being connected to the service providing server 120 through an internet communication network. In addition, the second user terminal 150 is an apparatus for performing approval confirmation for the service requested by the first user terminal.

That is, the second user terminal 150 receives the detailed content information requested by the first user terminal 110 from the telephone authentication server 130 connected to the telephone communication network to the service providing server 120 in an audio form, and the user of the second user terminal 150 receives the detailed information. It is a device for transmitting the confirmation information to the telephone authentication server 130. Of course, the second user terminal may be a device that is pre-registered for approval for the use of various services provided by the service providing server 120 by the user of the first user terminal.

In this specification, for convenience of understanding and explanation, it is assumed that the first user terminal and the second user terminal are different devices, but according to an implementation method, the first user terminal and the second user terminal are functionally within a single device. Naturally, it can be distinguished.

Types of the first user terminal and the second user terminal may be, for example, a computer, a notebook computer, a mobile communication terminal, a smartphone, a tablet PC, a PDA, and the like.

The service providing server 120 is an apparatus for providing various services to the corresponding first user terminal 110 at the request of the first user terminal 110.

As described above, the service providing server 120 may be at least one of a financial institution server (not shown) or a credit card company server when providing a financial service to the corresponding first user terminal 110. In addition, when the service providing server 120 is an apparatus for providing electronic commerce to the first user terminal 110 online, the service providing server 120 may be an online relay server. For another example, the service providing server 120 may be a game server that provides a game service to the corresponding first user terminal 110.

In addition, the service providing server 120 according to the request for service provision of the first user terminal 110 includes a phone call verification server including an authorization confirmation request including detailed information on the service requested by the first user terminal 110. 130, and obtains an approval result for the second user terminal 150 from the phone authentication server 130. Here, the approval result may be approval success or approval failure.

Here, the detailed content information may be at least one of user identification information, service usage information, and time information.

If the service requested by the first user terminal 110 to the service providing server 120 is a financial transaction (for example, Internet banking), the service usage information included in the detailed content information may include user information and a remitter's name ( Or identification information), a remitter account number, a recipient name, a recipient account number, a transaction amount, and a balance of the remitter account after the transaction.

Of course, according to the implementation method, the service providing server 120 may perform primary authentication for the first user terminal 110 in the service providing server 120, and confirms a call according to an arbitrary service providing request. It may be performed in conjunction with the server 130.

The phone authentication server 130 is interlocked with the service providing server 120, and is registered with the second user terminal 150 corresponding to the first user terminal 110 in response to an approval confirmation request of the corresponding service providing server 120. It is a means for providing detailed content information and obtaining and storing user identification information thereof. Here, the detailed content information provided to the registered second user terminal 150 may be in a voice form. Here, the user confirmation information may be at least one of approval, cancellation, and report. In addition, the user confirmation information may further include at least one of an approval password preset by the user and location information according to the confirmation confirmation of the user terminal.

That is, the phone authentication server 130 is a special resource for performing functions such as voice guidance, voice recognition, dual tone multi frequency (DTMF) collection, text-to-speech (TTS), etc. to confirm the user's service use. Can be. For example, the phone authentication server 130 may be an IP (Intellectual peripheral) or the like of the intelligent network system.

 Meanwhile, the authentication system according to an embodiment of the present invention may be additionally linked to the notary institution server 140.

Notary agency server 140 is connected to the phone authentication server 130 to provide the detailed information and the information obtained by the phone authentication server 130 to the second user terminal 150 and the user identification information accordingly stored therein. Receive and store.

Therefore, when the user requests the service providing server 120 to receive the service, the user can confirm that the details stored in the phone authentication server 130 are true and not forged. To be able.

Of course, there may be a plurality of notary institution servers.

[Description of Fig. 3]

3 is a flowchart illustrating a method of authenticating a corresponding user terminal according to a service providing request of the user terminal in the authentication system according to an embodiment of the present invention.

In operation 210, the service providing server 120 receives a service providing request from the first user terminal 110. Here, the service providing request may include detailed content information according to the use of the service.

In operation 215, the service providing server 120 requests the telephone authentication server 130 for approval authentication based on service use of the user terminal 110 including detailed content information.

In the present specification, the approval authentication is approved by the user terminal 110 to confirm the use of a specific service provided by the corresponding service providing server 120, apart from the first authentication for accessing the corresponding service providing server 120. It means authentication.

In operation 220, the phone authentication server 130 extracts information about the second user terminal 150 registered corresponding to the user terminal 110 from the database according to the request for authorization authentication of the service providing server 120. To this end, the detailed information included in the approval authentication request or the approval authentication request may further include identification information of the corresponding user terminal 110.

In step 225, the phone authentication server 130 establishes a communication connection (for example, a phone connection) to the registered second user terminal 150 using the registered terminal information, and then establishes a voice interface provided when the communication is connected. Provides voice guidance for detailed content information.

For example, assume that the service providing server 120 is a financial institution server, and the first user terminal 110 requests internet banking (eg, a bank transfer). The detailed content information may be at least one of user information, a sender's name (or identification information), a sender's account number, a receiver's name, a receiver's account number, a transaction amount, and a balance of the sender's account after the transaction.

In such a case, the phone authentication server 130 may be, for example, "OOOO Won is transferred from the Daehan Bank Hong Gil-Dong customer OO account to the ODA per customer bank account. The balance after the transfer is OOOOO won. Press 2 times to cancel, 3 times to hear it again, or 4 if you're not or if your transaction information doesn't match. "

The voice guidance for the detailed content information as described above may be transmitted to the registered second user terminal 150.

In operation 230, the phone authentication server 130 obtains user identification information corresponding to the voice guidance of the detailed content information from the registered terminal. Here, the user confirmation information may be DTMF.

In operation 235, the phone authentication server 130 generates an approval result by performing authorization authentication based on the use of the service of the user terminal 110 using the obtained user identification information, and generates the approval result to the service providing server 120. send.

Here, the approval result may be approval success or approval failure.

For example, when the user authentication information is "1", the phone authentication server 130 may recognize that the approval authentication is successful and transmit the approval result according to the approval success to the service providing server 120. On the other hand, if the user confirmation information is DTMF other than 1, the phone authentication server 130 may recognize that the authorization authentication failed, and may transmit the approval result according to the approval failure to the service providing server 120.

In this case, the phone authentication server 130 may obtain more by requesting the registered terminal to input the approval password registered in advance by the user so that the user can not deny the use of the service more reliably.

In addition, the phone authentication server 130 may obtain location information on the registered second user terminal 150 and further use it for approval authentication. That is, the phone authentication server 130 may further confirm whether the approval password and location information are the same as previously stored approval password or location information to generate an approval result according to the approval authentication.

The phone authentication server 130 may obtain and obtain location information from the registered terminal, or may obtain location information of the registered terminal in association with the location information providing system of the communication network.

In operation 240, the service providing server 120 determines whether to provide a service requested by the user terminal 110 according to the approval result.

For example, if the approval is successful, the service providing server 120 may provide a service to the corresponding user terminal 110. On the other hand, if the approval result is the approval failure, the service providing server 120 may not provide the service requested by the user terminal 110 to the user terminal 110. In such a case, the service providing server 120 may provide the user terminal 110 with a guide message according to the approval failure.

Therefore, the user has made a call to his or her second user terminal, and the user can confirm that the Internet banking is true by confirming the transaction details requested by the user with voice data. By saving that you have listened and approved, you have the same effect as a user 'signed' to your voice, and you can confirm that Internet banking is true, resulting in two-way authentication.

In operation 245, the phone authentication server 130 stores the user identification information obtained from the user together with the service detail information voiced to the user.

The information to be stored may be analog information recorded with guidance voice and DTMF tones provided to the user, or information digitized or both may be stored, which is a record information for backing up the user's transaction with the function of preventing the user's denial. Can be utilized.

In other words, even if the transaction ledger and transaction ledger backup information, which are owned by the service providing server 120 and related institutions, are lost due to hacking or the like, the transaction contents stored in the phone authentication server 130 can be restored. In particular, it can be used as a basic data to check the authenticity against the conventional transactions that can be forged and digitally recorded.

In step 250, the phone authentication server transmits the user identification information together with the service detail information to at least one notary public institution server to store it.

Notary agency server stores the relevant transaction separately from the telephone authentication server is used as a criterion for determining the authenticity of the information stored in the service providing server to ensure the integrity of the information.

[Description of Fig. 4]

4 is a flowchart illustrating a method of authenticating a corresponding user terminal according to a service providing request of the user terminal in an authentication system according to another exemplary embodiment of the present invention.

Steps 310 to 335 are the same as steps 210 to 235 of FIG. 3. Finally, in step 335, the phone authentication server 130 performs authorization authentication based on service use of the user terminal 110 by using the obtained user identification information. Generate approval results.

However, in step 340, in transmitting the corresponding approval result to the service providing server 120, the voice guide service detailed information is transmitted to the user.

In operation 345, the service providing server 120 matches the detailed information provided to the first user terminal 110 with the user voice guided service detail information received from the telephone authentication server 130 when the user applies for service provision. Verify that the integrity of the service delivery process is verified only if the two information match.

In operation 350, the service providing server 120 determines whether to provide a service requested by the user terminal 110 according to the integrity of the service providing process.

In operation 355, the service providing server 120 transmits the user identification information together with the service detail information to the at least one notary public institution server 140 to store it.

On the other hand, the method of performing the approval authentication according to the use of the service by receiving confirmation of the user's use of a particular service through the Internet according to an embodiment of the present invention is a program command form that can be performed through a variety of electronically processing means May be implemented and recorded in a storage medium. The storage medium may include program instructions, data files, data structures, etc. alone or in combination.

Program instructions to be recorded on the storage medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of software. Examples of storage media include magnetic media such as hard disks, floppy disks and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic-optical media such as floppy disks. hardware devices specifically configured to store and execute program instructions such as magneto-optical media and ROM, RAM, flash memory, and the like. In addition, the above-described medium may be a transmission medium such as an optical or metal wire, a waveguide, or the like including a carrier wave for transmitting a signal specifying a program command, a data structure, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as devices for processing information electronically using an interpreter or the like, for example, a high-level language code that can be executed by a computer.

The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention as defined in the appended claims. It will be understood that the invention may be varied and varied without departing from the scope of the invention.

110: first user terminal
120: service providing server
130: phone authentication server
140: notary public server
150: second user terminal

Claims (11)

Providing detailed content information for confirming service usage for a first user terminal to a second user terminal, obtaining a user confirmation response from the second user terminal, and using the user confirmation response for the first user terminal. A phone authentication server configured to perform approval authentication to generate an approval result and to store a user confirmation response together with the detailed content information; And
And a service providing server for determining whether to provide a service according to the service providing request of the first user terminal according to the approval result.
The method according to claim 1,
The telephone authentication server provides the detailed transaction contents to the second user terminal by voice, and the user acknowledgment is obtained by dual tone multi frequency (DTMF).
The method according to claim 1,
The second user terminal is an authentication system through voice data digital signature, characterized in that the terminal is registered in advance for confirmation according to the use of the service by the user of the first user terminal.
The method according to claim 1,
And the user confirmation response is any one of approval, cancellation, and report.
The method according to claim 1,
The telephone authentication server further obtains an approval password and location information from the second user terminal, and further uses the approval password and location information for approval authentication on the first user terminal. Through authentication system.
The method according to claim 1,
And the telephone authentication server transmits a user confirmation response together with the stored detailed content information to a separate notary institution server.
In the method for performing authentication on the user terminal in response to a service provision request of the user terminal,
(a) receiving a service provision request from a first user terminal, wherein the service provision request includes detailed content information;
(b) acquiring a user confirmation response by providing the detailed content information to a second user terminal according to the service provision request;
(c) generating an approval result by performing approval authentication on the first user terminal using the user confirmation response, and determining whether to provide a service to the first user terminal according to the approval result; And
and (d) storing the obtained user acknowledgment response together with the detailed content information provided to the second user terminal.
The method of claim 7, wherein
In the step (b)
Voice data according to the use of the service, characterized in that the voice guidance for the detailed transaction content is provided to the second user terminal, and the user identification information is obtained from the second user terminal through dual tone multi frequency (DTMF). Signing authentication method.
The method of claim 7, wherein
The user confirmation response is any one of the approval, cancellation and report authentication method through the voice data electronic signature according to the use of the service.
The method of claim 7, wherein
After step (b),
Further obtaining an approval password and location information from the second user terminal;
In the step (c), the authorization authentication is performed, the authentication method through the voice data electronic signature according to the use of the service, characterized in that further using the approval password and location information.
The method of claim 7, wherein
After the step (d)
The authentication method through the voice data electronic signature according to the use of the service, characterized in that for transmitting the stored detailed information and the user confirmation response to a separate notary institution server.

Images