KR20130132116A - Login processing system based on inputting telephone number and control method thereof - Google Patents

Abstract

The present invention relates to a login processing system based on an inputted customer phone number and a control method thereof. The control method of the login processing system based on the inputted customer phone number according to the present invention comprises steps of: receiving a login request signal including a customer phone number and login site information; requesting an authentication terminal, matched with the customer phone number included in the login request signal, to transmit authentication information, and processing authentication based on the authentication information received from the authentication terminal; and generating authentication result information in accordance with the authentication and transmitting the authentication result information to a login site server matched with the login site information included in the login request signal. [Reference numerals] (110) Request receiver;(120) Authentication processor;(130) Storage part;(140) Result transmitter;(200) Customer side

Description

LOGIN PROCESSING SYSTEM AND CONTROL METHOD BASED ON CUSTOMER PHONE NUMBER INTERNATIONAL FIELD AND CONTROL METHOD THEREOF

The present invention relates to a login processing system and a control method thereof, and more particularly, to a login processing system based on a customer phone number input based on a customer phone number input by a customer and a control method thereof.

Along with the development of the Internet, many services such as financial transactions, commodity transactions, social networking, etc. are being provided on websites on the Internet.

Each of these web sites is generally operated as a member system, and for this purpose, customers who use the web sites are required to register their ID and password in advance by logging in.

However, if the same ID and password are registered and used in all the websites, if one of the websites is hacked and the corresponding ID and password are leaked, there is a problem that other websites become a security threat.

To this end, each individual can register a separate ID and password for each Web site, in this case, there is a problem that the amount of ID and password to be remembered increases as the number of Web sites used.

Therefore, there is a demand for a method of overcoming the disadvantages of the conventional ID and password scheme.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, and an object thereof is to provide a login processing system and a method of controlling the same, which further upgrades a security function while enabling login using the same password for each web site.

In order to achieve the above object, a login processing system based on a customer phone number input according to the present invention includes a request receiving unit for receiving a login request signal including a customer phone number and login site information; An authentication processing unit for requesting transmission of authentication information to an authentication processing terminal corresponding to a customer telephone number included in the login request signal, and performing authentication processing based on authentication information received from the authentication processing terminal; And a result transmitter configured to generate authentication process result information according to the authentication process of the authentication processor and transmit the result to the login site server corresponding to the login site information included in the login request signal.

In addition, in order to achieve the above object, a control method of a login processing system based on a customer phone number input according to the present invention includes: receiving a login request signal including a customer phone number and login site information; Requesting transmission of authentication information to an authentication processing terminal corresponding to a customer telephone number included in the login request signal, and performing authentication processing based on the authentication information received from the authentication processing terminal; Generating the authentication process result information according to the authentication process and transmitting the generated authentication process result information to the login site server corresponding to the login site information included in the login request signal.

As described above, according to the present invention, by allowing each customer to enter their own phone number when logging in to each site, and then enter a password through a terminal corresponding to the entered phone number, Even if the same password is set in the site, security can be maintained, thereby increasing user convenience.

In particular, when performing authentication processing using the device's unique number instead of the user's ID, even if a third party obtained the customer's USIM chip and password, the user illegally logs in to another site unless the registered terminal is used. In addition, when performing the authentication process using the customer's phone number stored in the USIM chip on behalf of the user's ID, even if the third party obtained the terminal and the password of the customer, if the customer's USIM chip does not exist, the other site is illegal. Can't log in.

1 is a schematic structural diagram of an overall system configuration including a login processing system according to an embodiment of the present invention;
2 is a signal and control flowchart of an entire system including a login processing system according to an embodiment of the present invention;
3 is a signal and control flow diagram of an entire system including a login processing system according to another embodiment of the present invention.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

The overall system configuration including the login processing system 100 according to an embodiment of the present invention is as shown in FIG. 1.

As shown in the figure, the entire system is a terminal operated by a customer, using a service using terminal 210, an authentication processing terminal 220, a login site server 300, a communication company server 400, and a login processing system 100. It may be configured to include.

The service using terminal 210 is, for example, a terminal that a customer accesses and operates on the Internet network to use a specific service (for example, a financial transaction service, a merchandise transaction service, a social networking service, etc.), for example, a personal computer. Or a portable communication terminal.

The authentication processing terminal 220, which is another terminal operated by a customer (user), receives a request for transmission of authentication information from the login processing system 100, and then transmits authentication information including a password input by the customer. Perform the function.

In this case, the authentication processing terminal 220 may further include its own device unique number in the authentication information. In this case, the device unique number may correspond to, for example, a unique code (eg, an International Mobile Equipment Identity (IMEI)) of the terminal itself, which does not change even if different Universal Subscriber Identity Modules (USIMs) are mounted.

Such a device unique number may be included in the authentication information not by a user input but by a function of the authentication processing terminal 220 itself.

The authentication processing terminal 220 includes both wired and wireless communication terminals operable by a customer, and may correspond to a portable mobile communication terminal.

Meanwhile, the login site server 300 refers to a server to which the above-described service using terminal 210 needs to log in to use various services. For example, the login site server 300 may provide a financial transaction service, a product transaction service, or a social relations service. It may correspond to a providing server.

The login site server 300 of the present embodiment processes the login in connection with the login processing system 100 without performing a login function using a conventional ID / password.

For login processing in connection with the login processing system 100, the login site server 300 may include a login request signal including a carrier information and / or a customer phone number and a login site information input by a customer. It can be controlled to be transmitted to.

For example, the login site server 300 may directly transmit the carrier information or the customer's telephone number received from the service using terminal 210 to the login processing system 100 or use the url redirection function using a predetermined web page. Thus, the carrier information and / or the customer phone number and the login site information input by the service customer may be transmitted from the service using terminal 210 to the login processing system 100.

Since the url redirection technology itself used in HyperText Transfer Protocol (HTTP) is only known in the art, a detailed description thereof will be omitted.

The login site information may include an internet address or a site name of the login site.

The login site server 300 receives authentication processing result information from the login processing system 100 and performs login processing (that is, determining which customer is logged in). Register and manage a customer ID that can distinguish each customer, and compare the customer ID included in the authentication processing result information received from the login processing system 100 with the registered customer ID.

At this time, the login site server 300 does not need to separately input or manage public personal information, such as a social security number of each customer, but only needs to manage a customer ID shared with the login processing system 100.

Customer IDs managed by each login site server 300 may be different for the same customer.

The communication company server 400 may be operated by a communication company providing a communication service for the authentication processing terminal 220 of the customer, and may be configured to perform authentication processing for each customer in connection with the login processing system 100. . In particular, the telecommunication company server 400 may manage the past change record of the telephone number of the customer using the authentication processing terminal 220.

Meanwhile, the login processing system 100 receives a login request signal including a customer phone number and login site information, and transmits authentication information to the authentication processing terminal 220 corresponding to the customer phone number included in the login request signal. After performing the authentication process based on the authentication information received from the authentication processing terminal 220, and generates the authentication process result information and transmits to the login site server 300.

Specifically, the login processing system 100 may be configured to include a request receiving unit 110, an authentication processing unit 120, a result transmitting unit 140, and a storage unit 130 as shown in FIG. 1. have.

The request receiving unit 110 performs a function of receiving a login request signal including a customer phone number and login site information. The login request signal may include a customer phone number and login site information. Information associated with the carrier may be further included.

The storage unit 130 may include authentication data, which is necessary information for authentication processing, in which at least two of each customer's customer phone number, password, and device unique number match each other. have.

In particular, the authentication data may be a customer phone number and password of each customer matched, or the device unique number and password of the authentication processing terminal 220 corresponding to each customer may be matched.

The authentication processing unit 120 performs authentication processing as it is, and in such authentication processing, a process of requesting transmission of authentication information to the authentication processing terminal 220 corresponding to the customer phone number included in the login request signal and corresponding A process of using authentication information received from the authentication processing terminal 220 may be included.

In performing the authentication process, the authentication processing unit 120 may perform authentication processing in association with the communication company server 400 corresponding to the communication company information included in the login request signal.

The authentication processor 120 may check the past change record of the customer phone number included in the login request signal and then compare the change record with the customer phone number of each customer included in the authentication data of the storage 130.

For example, if only the customer's past customer phone number is stored in the storage unit 130, the authentication processing unit 120 checks the past change record for the latest customer phone number entered by the customer, even if the latest customer phone. Even if the number is not stored in the storage unit 130, the password or the like corresponding to the latest customer phone number can be confirmed using the past change record.

When the authentication information received from the authentication processing terminal 220 includes a password input by the user, the authentication processing unit 120 corresponds to the password included in the authentication information and the customer corresponding to the corresponding authentication processing terminal 220. After verifying the matching relationship between the telephone numbers using the authentication data, authentication processing can be performed.

That is, the authentication processing unit 120 may check whether the corresponding customer phone number and the password input by the customer match each other using the authentication data stored in the storage unit 130. In this case, it can be said that the customer phone number serves as a kind of ID corresponding to the password.

When the authentication information received from the authentication processing terminal 220 includes the device unique number and the password input by the user, the authentication processing unit 120 stores a matching relationship between the password included in the authentication information and the device unique number. The authentication process may be performed after confirming using the authentication data of the unit 130.

That is, the authentication processing unit 120 may check whether the device unique number of the corresponding authentication processing terminal 220 and the password input by the customer match each other using the authentication data stored in the storage unit 130. In this case, it can be said that the device unique number serves as a kind of ID corresponding to the password.

The authentication processing unit 120 may also check whether the customer's authentication processing terminal 220 corresponding to the customer's phone number is replaced or not. When the result of the check, the customer's authentication processing terminal 220 is replaced, the public certification, After identification is performed using at least one of a credit card authentication and a mobile phone authentication, the device unique number of the terminal 220 for authentication processing of the corresponding customer included in the authentication data may be updated.

In addition, the authentication processing unit 120, even if the customer-related information corresponding to the customer phone number is not registered in advance in the storage unit 130 after the above-described identity verification of the terminal 220 for the authentication processing of the customer The device unique number may be additionally registered in the authentication data.

On the other hand, if the result of the authentication processing by the authentication processing unit 120 is successful authentication, the result transmission unit 140 corresponds to the unique telephone number and the customer ID that can be identified by the login site server 300 to the authentication processing result information. You can send it.

As mentioned above, the customer ID managed by each login site server 300 may be different for the same customer. In this case, the login processing system 100 manages customer IDs that are distinguished for each login site even for the same customer. Of course it should.

Hereinafter, a signal and a control flow of the entire system including the login processing system 100 according to an embodiment of the present invention will be described with reference to FIG. 2.

The login site server 300 transmits a web page for login processing to the service using terminal 210 (step S1). The web page for the login process may be, for example, a web page on which a form for selecting a carrier or entering a customer phone number is formed.

When the customer phone number and the corresponding communication company are input and selected by the customer using the service using terminal 210 (step S3), the service using terminal 210 transmits the communication company and the customer phone number to the login site server 300 ( Step S5).

The login site server 300 transmits a login request signal including a communication company and a customer telephone number received from the service using terminal 210 to the login processing system 100 (step S7).

On the other hand, the login processing system 100 may be matched with a customer phone number, device unique number, password, customer ID (step S6).

When the login processing system 100 receives the login request signal from the login site server 300, the login processing system 100 requests a communication company authentication to the corresponding communication company server 400 using the received communication company and the customer phone number (step S9).

Here, the carrier authentication may be to check whether the corresponding customer is subscribed to or whether to allow communication. The carrier authentication request signal may include a customer phone number.

The communication company server 400 performs the communication company authentication for the corresponding customer phone number (step S11) and then transmits the authentication result to the login processing system 100 (step S13).

The login processing system 100 transmits the authentication information transmission request signal to the terminal 220 for authentication processing (step S17) when the carrier authentication is successful (step S15). At this time, the login processing system 100 may transmit the authentication information transmission request signal to the authentication processing terminal 220 by using the customer phone number received from the login site server 300, based on a specific customer phone number for communication. Since the process of performing the current position check of the terminal 220 for authentication processing is only a known technique, a detailed description thereof will be omitted.

When the password is input from the user (step S19), the authentication processing terminal 220 transmits the input password and the device unique number to the login processing system 100 (step S21).

The login processing system 100 processes the customer authentication using the password and the device unique number received from the authentication processing terminal 220 (step S23). For example, the login processing system 100 determines whether the password received from the authentication processing terminal 220 and the device unique number match the pre-stored data, and processes the customer authentication.

If the customer authentication is successful (step S25), the login processing system 100 extracts the customer ID matching the corresponding device unique number (step S27) and transmits it to the login site server 300 (step S29). In this case, when a plurality of customer IDs are stored for the same customer, the login processing system 100 may extract a customer ID corresponding to the corresponding login site server 300.

When the login site server 300 receives the customer ID as the authentication processing result information from the login processing system 100, the login site server 300 processes the login for the customer corresponding to the corresponding customer ID (step S31) and communicates using the service using terminal 210. Ensure that you remain logged in for.

After the login state is maintained, the process for the customer to purchase goods or perform a financial transaction using the service using terminal 210 is only a well-known technique, and thus a detailed description thereof will be omitted.

Error processing (step S16, step S26) in the above-described process may include the step of transmitting an error message to the login site server 300 or the authentication processing request terminal 220.

Hereinafter, another example made after the login request signal is transmitted from the login site server 300 to the login processing system 100 (step S7) will be described with reference to FIG. 3.

The login processing system 100 requests the past change list while transmitting the customer telephone number to the communication company server 400 (step S41).

The communication company server 400 extracts the past change list corresponding to the received customer telephone number (step S43) and transmits it to the login processing system 100 (step S45).

For example, when a corresponding customer moves a number, the telecommunication company server 400 may transmit a list of past phone numbers before the number move to the login processing system 100.

This means that the customer phone number (for example, the previous phone number) registered in the login processing system 100 and the customer phone number (for example, the current phone number) input by the customer who operates the service using terminal 210 move the number. This is to solve the inconsistency.

Steps S9 to S16 of FIG. 2 may also be performed during the process from step S41 to step S45. For example, a change list request (step S41) and a carrier authentication request (step S9) may be made at the same time.

The login processing system 100 determines whether the customer is already registered using the change list corresponding to the corresponding customer telephone number received from the communication company server 400 (step S47).

If it does not correspond to the registered customer with reference to the change list, the login processing system 100 processes the identity verification process through communication with the authentication processing terminal 220 (step S49).

For example, the login processing system 100 may process identity verification using any one of methods such as authentication using an authorized certificate, authentication using a credit card, and mobile phone authentication. In the case of identity verification, communication with an external predetermined server (for example, a financial server, a communication company server, etc.) may be performed. Since the identification process itself is only a known technology, a detailed description thereof will be omitted.

If the identification is successful (step S51), the login processing system 100 requests a new registration of authentication information from the terminal 220 for authentication processing (step S53).

The authentication processing terminal 220 transmits the authentication information including the password (step S55) input according to the operation of the customer (user) and the device unique number of the authentication processing terminal 220 to the login processing system 100. If so (step S57), the login processing system 100 registers by matching the device unique number and the password (step S59).

In this case, although not shown in FIG. 3, the login processing system 100 may match the customer phone number with the device unique number described above, and further, the user ID of the corresponding login site as the login site server 300 related information. After generating and matching, the generated customer ID information may be transmitted to the login site server 300.

If the result of the determination in step S47 is already registered, the process proceeds from step S17 of FIG. 2 described above.

In the present embodiment, an example in which the corresponding customer information is not registered at all is described, but the above-described process is performed even when the corresponding customer information is already registered but the corresponding customer has replaced the authentication processing terminal 220. Can be applied.

That is, the login processing system 100 may check whether the authentication processing terminal 220 held by the customer is replaced through communication with the communication company server 400, and even in this case, the login processing system 100 may identify the identity described above. After confirmation, the device unique number of the terminal 220 for authentication processing of the customer can be updated.

Alternatively, the login processing system 100 receives the device unique number and password from the authentication processing terminal 220, and if the customer phone number and password match but the device unique number does not match the pre-registered data, authentication is performed. The processing terminal 220 may be provided with a page for selecting an update to a new terminal (ie, the authentication processing terminal 220). In this case, the customer can update and register the new authentication processing terminal 220 in the login processing system 100 in real time at the time of login even when the new authentication processing terminal 220 is not registered. .

In the above-described embodiments, various signals transmitted by the login processing system 100 to the terminal 220 for authentication processing may include a signal for activating a specific app (APP: Applincaion).

For example, the authentication information transmission request signal of step S17 or the authentication information registration request signal of step S53 includes a signal for the authentication processing terminal 220 to automatically activate a specific app having an interface for processing a user's input or Code can be included.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the invention. It is to be understood that such variations and modifications are intended to be included in the scope of the appended claims.

100: login processing system 210: terminal using the service
220: terminal for authentication processing 300: login site server
400: communication company server 110: request receiving unit
120: authentication processing unit 130: storage unit
140: result transmission unit

Claims (14)

(a) receiving a login request signal comprising a customer phone number and login site information;
(b) requesting transmission of authentication information to an authentication processing terminal corresponding to a customer telephone number included in the login request signal, and performing authentication processing based on the authentication information received from the authentication processing terminal;
(c) generating the authentication process result information according to the authentication process of step (b) and transmitting it to the login site server corresponding to the login site information included in the login request signal. Control method of login processing system based on input. The method of claim 1,
The login request signal received in step (a) further includes carrier information,
In the step (b), the control method of the login processing system based on the customer telephone number, characterized in that for performing authentication processing in connection with the communication company server corresponding to the carrier information included in the login request signal. 3. The method according to claim 1 or 2,
Providing authentication data in which a customer telephone number and a password of each customer are matched;
Checking a past change record for the customer telephone number included in the login request signal;
And a step of comparing the change record with the customer telephone number of each customer included in the authentication data. The method of claim 3,
The authentication information received from the authentication processing terminal includes a password input by the user,
In the step (b), after confirming the matching relationship between the password included in the authentication information and the customer telephone number corresponding to the authentication processing terminal using the authentication data, the customer telephone characterized in that the authentication process is performed. Control method of login processing system based on number input. 3. The method according to claim 1 or 2,
The authentication information received from the authentication processing terminal includes a device unique number and a password input by the user,
And providing authentication data in which the device unique number and the password of the authentication processing terminal corresponding to each customer are matched.
In the step (b), the authentication process is performed after confirming the matching relationship between the password included in the authentication information and the device unique number using the authentication data, and controlling the login processing system based on the input of the customer phone number. Way. The method of claim 5,
After confirming whether the customer's authentication processing terminal corresponding to the customer's telephone number is replaced, and when it is replaced, the authentication is performed after verifying the identity using at least one of authentication methods such as authorized authentication, credit card authentication, and mobile phone authentication. And updating the device unique number of the terminal for authentication processing of the corresponding customer included in the data. 3. The method according to claim 1 or 2,
In the step (c), when the authentication processing result by the authentication processing unit corresponds to the authentication success, transmitting the customer ID corresponding to the unique telephone number and identifiable by the login site server in the authentication processing result information. Control method of the login processing system based on the customer telephone number input, comprising a. A request receiving unit which receives a login request signal including a customer telephone number and login site information;
An authentication processing unit for requesting transmission of authentication information to an authentication processing terminal corresponding to a customer telephone number included in the login request signal, and performing authentication processing based on authentication information received from the authentication processing terminal;
And a result transmitter configured to generate authentication process result information according to authentication processing of the authentication processor and transmit the result to the login site server corresponding to the login site information included in the login request signal. Processing system. 9. The method of claim 8,
The login request signal received by the request receiving unit further includes communication company information.
And the authentication processing unit performs authentication processing in association with a communication company server corresponding to the communication company information included in the login request signal. 10. The method according to claim 8 or 9,
Further comprising a storage unit having authentication data matched with the customer telephone number and password of each customer,
The authentication processor checks the past change record for the customer phone number included in the login request signal, and then compares the change record with the customer phone number of each customer included in the authentication data of the storage unit. Login processing system based on number input. The method of claim 10,
The authentication information received from the authentication processing terminal includes a password input by the user,
The authentication processing unit checks a matching relationship between the password included in the authentication information and the customer telephone number corresponding to the corresponding authentication processing terminal using the authentication data, and then performs authentication processing. Based login processing system. 10. The method according to claim 8 or 9,
The authentication information received from the authentication processing terminal includes a device unique number and a password input by the user,
Further comprising a storage unit having authentication data matched with the device unique number and password of the terminal for authentication processing corresponding to each customer,
And the authentication processing unit confirms a matching relationship between the password included in the authentication information and the device unique number by using the authentication data for the storage unit, and performs authentication processing. The method of claim 12,
When the authentication processing unit is confirmed that the replacement of the terminal for the authentication processing of the customer corresponding to the customer phone number is replaced, the identity verification using at least one authentication method of the authentication, credit card authentication, mobile phone authentication And updating the device identification number of the terminal for authentication processing of the corresponding customer included in the authentication data. 10. The method according to claim 8 or 9,
And when the result of the authentication processing by the authentication processing unit corresponds to the authentication success, the result transmitting unit transmits the customer ID corresponding to the unique telephone number and identified by the login site server in the authentication processing result information. Login processing system based on customer telephone number input.

Images