KR20180109018A - Method and System for Providing Certification by using Disposable Reverse Direction Reply Message, and Record Medium - Google Patents

Abstract

The present invention relates to an authentication method using a one-time reverse reply message, which safely authenticates the validity of a service, comprising: a first step of performing a procedure of checking a user mobile phone number, an authentication code, and a one-time phone number; a second step of mapping the user mobile phone number, the authentication code, and the one-time phone number, and maintaining the same for a designated valid time; a third step of processing a security code including the authentication code to be output; a fourth step of performing a message authentication procedure; a fifth step of performing a code authentication procedure; and a sixth step of generating an authentication result to provide the same for a service server or user terminal.

Description

TECHNICAL FIELD [0001] The present invention relates to an authentication method and system using a disposable reverse reply message, and a recording medium therefor.

The present invention relates to a method for transmitting a disposable telephone number to a user's cellular phone by forwarding a forward message forwarded to a user's cellular phone via one or more telephone networks, including a disposable telephone number dynamically determined at the time of authentication, A disposable message combining characteristic of a disposable message combining a reverse message sent backward through a telephone network from the mobile phone of the user and a disposable messaging combination characteristic of a disposable message input in a message body area of a reverse reply message corresponding to a reply of a forward message among the disposable messages And verifies the validity of the service provided to the user through the separate data network separated from the telephone network by using the authentication code.

There is provided an SMS authentication for generating an authentication number from a server on the Internet, sending an SMS including the authentication number to a user's cellular phone, and receiving and authenticating the authentication number through a terminal of a user connected to the Internet. However, since the conventional SMS authentication includes the authentication number in the SMS and is sent to the user's mobile phone (= forward transmission), not only can it be captured easily through character interception, but also can easily be taken by phishing, And includes a variety of problems that can be authenticated by inputting a key through a terminal of a third party rather than a terminal used by an actual user because the terminal is authenticated by inputting a key. Accordingly, the Financial Supervisory Service (FSS) recommends the use of the conventional SMS authentication for the additional authentication such as financial transactions, and some banks (for example, NH bank, etc.) have already stopped the conventional SMS authentication service.

Meanwhile, in addition to the SMS authentication for authenticating and forwarding the SMS including the authentication number, the ARS authentication is provided to input and receive the authentication number by dialing the ARS-based phone with the user's telephone. However, such conventional ARS authentication also poses problems such as incoming call control, voice interception, inaccessibility of hearing-impaired persons, restriction of overseas use, and generation of two to three times higher costs than SMS authentication, but there are other alternatives It is a temporary use until now.

Meanwhile, in addition to conventional SMS authentication and ARS authentication, there is provided an app authentication method in which an app is installed in a user's smart phone and additional authentication is provided using the app. However, such a conventional application authentication method has a problem that it is abused by a memory hacking or the like for a smart phone, and has a problem that it can not be used in a feature phone in which an app can not be installed other than a smart phone.

As a result, an additional low-cost and safe authentication method is needed while eliminating the problems of conventional SMS authentication, ARS authentication, and application authentication, and the presently proposed method has technically difficult problems to solve the above problems .

An object of the present invention to overcome the above-mentioned problems is to generate an authentication code associated with service information of the service server when requesting authentication from a service server providing a service designated by a user terminal used by a user, To be used as a calling number of a forward message to be sent to a mobile phone of a user via the mobile communication terminal and a disposable telephone number to be used as a called number of a reverse message to be received in response to the forward message, And mapping the disposable telephone number to a forwarding message including the disposable telephone number as a calling number to the user's cellular phone via the telephone network, and transmitting the forwarding message including the disposable telephone number to the user's cellular phone through a separate data network separated from the telephone network, Through the web / application screen of the user terminal, Code to be output, and the user recognizes the web / application screen of the user terminal based on the reply writing of the forward message from the user's cellular phone that has received the forward message, And receiving the reverse message including the disposable telephone number as the called number and verifying whether the received reverse message is a reverse received message in response to the forward message sent to the user's cellular phone, An authentication method using a disposable reverse reply message in which an authentication code included in a message body area is authenticated for providing a service of the service server by authenticating whether the code corresponds to a security code output through a web / And system and recording medium therefor To provide.

The authentication method using the disposable reverse reply message according to the present invention is a method for interfacing with a service server providing a designated service to a user and exchanging a message via a user's cellular phone and a telephone network, A method of executing a service through an operation server that can be interlocked with a user terminal used by a user, the method comprising: confirming a mobile phone number of a user at authentication for providing a service of the service server, The mobile phone number of the user is used as the calling number of the forward message to be transmitted through the telephone network and the backward message to be received in response to the forward message, Dynamically connect to the called party's number A second step of mapping the user's mobile phone number, the generated authentication code, and the disposable telephone number for a specified valid period of time, a second step of maintaining the user's mobile phone number As a calling number, the forwarding message including the disposable telephone number as a calling number and the contents of the message specified in the message body area, to be sent via a designated telephone network, and via a separate data network separated from the telephone network A third step of outputting a security code including the authentication code through a Web / App screen of the user terminal, and a third step of outputting a security code including the authentication code through a web / Number as a calling number and the disposable telephone number A message authentication procedure for authenticating whether the reverse message including the authentication code entered in the message body area by the user among the security codes output through the web / And a fourth step of authenticating whether the reverse message is validated by checking the calling number of the reverse message and matching the disposable telephone number corresponding to the called number of the reverse message with the mapped mobile number, A fifth step of performing a code authentication procedure of verifying an authentication code included in a message body area of the reverse message and authenticating whether the mobile phone number is matched with an authentication code mapped to the mobile phone number, Generates an authentication result for providing a service of the service server, To a server or a user terminal.

In the authentication method using the disposable reverse reply message according to the present invention, the first step may include hashing one or more pieces of information including information corresponding to service information (or part of service information) for providing a service from the service server, And receiving the generated authentication code.

In the authentication method using the disposable reverse reply message according to the present invention, the first step may include receiving service information for providing a service from the service server, and receiving service information (or part of the service information And a step of verifying the generated authentication code by hashing one or more pieces of information including information corresponding to the authentication code.

The authentication method using the disposable reverse reply message according to the present invention is characterized in that the first step is a step of receiving from the number management module for managing N (N? 2) (1 ≤ n ≤ N) is used as the origination number of the forward message and a disposable telephone number to be used as the destination number of the reverse message.

The authentication method using the disposable reverse reply message according to the present invention is characterized in that the first step comprises the steps of: N (N > = 2) generated by combining a dynamic number of digits designated by a designated station number managed by the number management module, N) (n is an integer of 1 < / = n < / = N) generated by combining the number of digits of the number of digits specified in the designated station number among the telephone numbers of the And identifying the disposable telephone number to be used as the called number of the telephone number.

In the authentication method using the disposable reverse reply message according to the present invention, in the first step, when the mobile phone number of the user is confirmed, the number N of phone numbers from the number management module managing N (N? 2) (1 ≤ n ≤ N) telephone numbers which are not overlapped with each other and have no history mapped with the cell phone number are used as a calling number of a forward message including the mobile phone number as a called number, And confirming with a disposable telephone number to be used as a destination number of the reverse message included in the number.

In the authentication method using the disposable reverse reply message according to the present invention, in the first step, when the mobile phone number of the user is identified, the dynamic number of the number of digits specified in the designated station number managed by the number management module is set to the designated phone number system (N > = 2), which is generated so as not to be duplicated by combining numbers of digits that are not specified in the designated station number among N (N > = 2) N) phone number is used as a calling number of a forward message including the mobile number as a called number, and at the same time, using the mobile number as a calling number and a disposable telephone number to be used as a destination number of an uplink message .

In the authentication method using the disposable reverse reply message according to the present invention, the n-th telephone number is a telephone number that is not used as a disposable telephone number for a predetermined period of time out of N telephone numbers, A telephone number which is not reused for a certain period of time after being used as a one-time telephone number among N telephone numbers, a telephone number which is used as a one-time telephone number among N telephone numbers and which has not been reused for the longest period of time And at least one telephone number of the telephone number.

In the authentication method using the disposable reverse reply message according to the present invention, the second step may further include storing mapping history information on a mapping relationship between the mobile phone number and the disposable telephone number in a designated DB to manage the mapping history information .

The authentication method using the disposable reverse reply message according to the present invention may further comprise the step of starting counting the effective time for maintaining the mapping relationship between the mobile phone number, the authentication code, and the disposable telephone number, Determining whether an effective time for maintaining the mapping relationship has elapsed; and deactivating the mapping relationship between the mobile phone number, the authentication code, and the disposable telephone number when the valid time has elapsed.

In the authentication method using the disposable reverse reply message according to the present invention, the security code may include an authentication code to be input to a message body area of the reverse message, or may include an authentication code to be input to the message body area of the reverse message And a combination of arbitrary dummy codes.

In the authentication method using the disposable reverse reply message according to the present invention, the third step is a step of transmitting the authentication code output through the Web / App screen of the user terminal to the message body area of the reverse message corresponding to the reply of the forward message And outputting guidance information for instructing the user terminal to return via the Web / App screen of the user terminal.

The authentication method using the disposable reverse reply message according to the present invention is characterized in that the third step is a step of transmitting an authentication code To the message body region of the reverse message corresponding to the reply of the forward message, and includes guidance information for guiding the user to reply.

In the authentication method using the disposable reverse reply message according to the present invention, in the third step, security information for guiding the user to safely use the forward message sent to the mobile phone number of the user is transmitted to the web / And outputting the result of the comparison.

In the authentication method using the disposable reverse reply message according to the present invention, the security information may include content information for notifying a user that a direction message for authenticating service provision by a designated service provider is sent to the mobile phone number of the user, Content information indicating that a forward message including the content of the message specified in the body area is sent to the mobile phone number of the user, information indicating that the forward message including the dis- play phone number is transmitted to the mobile phone number of the user, Content information, and content information.

The authentication method using the disposable reverse reply message according to the present invention is characterized in that the reverse message is a message sent through a telephone network to which a mobile phone of a user is subscribed, And verifies whether or not the cell phone number of the cell phone matches the cell phone number actually included in the message and matches the cell phone number of the cell phone with the cell phone number of the cell phone, And is received by a telephone number.

In the authentication method using the disposable reverse reply message according to the present invention, the fourth step includes checking the reverse message received at the designated disposable telephone number, reading out the number system of the origination number of the reverse message, And authenticating the reverse message as a valid message that can be used in the authentication procedure when the calling number of the reverse message is the number system of the mobile phone number.

In the authentication method using the disposable reverse reply message according to the present invention, the fourth step may include: checking a reverse message received at the designated one-time telephone number; and determining a mapping state between the disposable telephone number and the mobile phone number And validating the reverse message as a valid message that can be used in the authentication procedure before the expiration time elapses.

In the authentication method using the disposable reverse reply message according to the present invention, when a message is transmitted from a data network via a telephone network, i (i > = 1) inserted codes set to be automatically inserted into the message body area of the message are maintained Analyzing a code included in the message body area of the reverse message received by the disposable telephone number to confirm whether the code includes at least one of the i insertion codes; And authenticating the reverse message as a valid message that can be used in the authentication procedure if the at least one insertion code is not included in the message body area of the reverse message.

In the authentication method using the disposable reverse reply message according to the present invention, j (j > = 1) excepted codes that are not used as authentication codes among codes that can be input in the message body area of the reverse message are maintained Analyzing the code included in the message body area of the reverse message received by the disposable telephone number to determine whether the message includes at least one exception code among j exception codes; If the at least one exception code is not included in the message body area of the uplink message, confirming that the uplink message is effectively received.

In the authentication method using the disposable reverse reply message according to the present invention, when at least one exception code is included in the message body area of the reverse message, the message body area of the reverse message And outputting the error information.

In the authentication method using the disposable reverse reply message according to the present invention, the fifth step is a process of outputting the generated error information through the Web / App screen of the user terminal when an error occurs in the origination authentication or the code authentication The method comprising the steps of:

The authentication method using the disposable reverse reply message according to the present invention is characterized in that the error information is not transmitted to the user's cellular phone through the forward message in the event of the error.

The recording medium using the disposable reverse reply message according to the present invention is characterized in that it is computer-readable, characterized by recording a program for executing the method of the first aspect.

A system for interworking with a user terminal used by a user through a separate data network separated from the telephone network, the system being capable of exchanging messages via a mobile phone and a telephone network of a user, An authentication code verifying unit for verifying the authentication code generated using the mobile phone number confirmation unit for confirming the mobile phone number of the user and the service information (or a part of the service information) for providing the designated service, A disposable number identifying unit for identifying a disposable telephone number dynamically determined to be used as a calling number of a forward message to be transmitted through the telephone network and a forwarding number of a reverse message to be received in response to the forward message, The mobile phone number and the generated authentication code A mapping maintaining unit for mapping the disposable telephone number and maintaining the disposable telephone number for a designated valid time, a forwarding message including the mobile phone number of the user as a called number, the disposable telephone number as a calling number, Through a designated telephone network, and a separate data network separate from the telephone network to output a security code including the authentication code through a Web / App screen of the user terminal A mobile phone number of the user as a calling number based on a reply writing of the forward message from a mobile phone of a user who has received the forward message and includes the disposable phone number as a called number, Of the security codes printed on the screen, A message authentication unit for authenticating the validity of the reverse message received via the telephone network; a message authentication unit for, when the reverse message is validly received, A source authentication unit for confirming a calling number of an uplink message and authenticating whether a disposable telephone number corresponding to a called number of the uplink message matches a mapped mobile number and an authentication code included in a message body area of the uplink message, And a result processor for generating and providing an authentication result for providing the service based on the result of the origination authentication and the code authentication.

According to the present invention, the disposable telephone number including the disposable telephone number dynamically determined at the time of authentication as a call origination number is transmitted to the user's cellular phone via the at least one telephone network, and the forward- The one-time messaging combination characteristic of the one-time message combined with the reverse message sent backward through the telephone network from the user's mobile phone including the called number and the one-time messaging combination characteristic of the one-time message input in the message body area of the reverse reply message corresponding to the reply of the forward message There is an advantage that the validity of the service provided to the user can be securely and inexpensively authenticated through the separate data network separated from the telephone network by using the disposable authentication code.

1 is a diagram illustrating a configuration of an authentication system using a disposable reverse reply message according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating an information confirmation and mapping process for a disposable message-based authentication procedure according to an embodiment of the present invention.
3 is a diagram illustrating a process of sending a forward message via a telephone network and a process of outputting an authentication code via a data network according to an embodiment of the present invention.
4 is a diagram illustrating a process of authenticating the validity of a service provided through a data network using a disposable reverse reply message received via a telephone network according to an embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention.

In other words, the following embodiments correspond to the preferred embodiment of the preferred embodiment of the present invention. In the following embodiments, a specific configuration (or step) is omitted, or a specific configuration (or step) (Or steps), or an embodiment that incorporates functions implemented in more than one configuration (or step) into any one configuration (or step), a particular configuration (or step) It will be apparent that the present invention is not limited to the embodiments described below. Therefore, it should be clearly stated that various embodiments corresponding to subsets or combinations based on the following embodiments can be subdivided based on the filing date of the present invention.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

1 is a diagram illustrating a configuration of an authentication system using a disposable reverse reply message according to an embodiment of the present invention.

In more detail, FIG. 1 illustrates a process of generating an authentication code associated with service information of the service server 175 when requesting authentication for providing a service from a service server 175 providing a service designated by a user terminal 170 used by a user And is used as a calling number of a forward message to be sent to the user's cellular phone 180 via the telephone network and a disposable telephone number to be used as a called number of a reverse message to be received in response to the forward message, The generated authentication code and the disposable telephone number are mapped and stored, and a forward message including the disposable telephone number as a calling number is sent to the user's cellular phone 180 via the telephone network, Through the web / application screen of the user terminal 170 via the separate data network, And outputs the security code to the user terminal 170. Upon receiving the forward message, the user recognizes the web / application screen of the user terminal 170 based on the reply writing of the forward message from the user's mobile phone 180, Receiving a reverse message including a code in a message body area and including the disposable telephone number as a called number, receiving the reverse message as a response to a forward message sent to the user's mobile phone 180, And authenticates that the authentication code included in the message body area of the reverse message is a code corresponding to the security code output through the Web / App screen of the user terminal 170, and provides the service of the service server 175 The present invention is not limited to the above-described embodiments. One skilled in the art will be able to refer to and / or modify the FIGURE 1 to infer various implementations of the configuration of the authentication system (e.g., some configuration portions omitted, or broken down, or combined implementation methods) However, the present invention is not limited to the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

The system of the present invention includes a user's mobile phone 180 capable of exchanging messages via at least one telephone network including a mobile telephone network of a mobile communication company, a user terminal 170 used by a user to receive a designated service, A service server 175 for providing a service designated by the user terminal 170 through a separate data network separated from the service network 170 and a service server 175 for exchanging messages with the user's mobile phone 180 via the telephone network, And an operation server 100 interlocked with a user terminal 170 used by a user through a separate data network.

The user's cellular phone 180 is a mobile communication terminal capable of transmitting and receiving messages via one or more telephone networks including a cellular phone network of a mobile communication company, and may preferably include a feature phone or a smart phone subscribed to a mobile communication company.

According to an embodiment of the present invention, the user's mobile phone 180 can receive SMS (Short Message Service), EMS (Enhanced Messaging Service), MMS (Multimedia Message Service ), And / or may send at least one message of SMS, EMS, MMS through the message center. Hereinafter, the present invention will be described with reference to an embodiment in which the message transmitted / received to / from the user's cell phone 180 via the telephone network is 'SMS'. However, in the present invention, the embodiment of the message is not limited to 'SMS', and the user's mobile phone 180 can transmit / receive to / from the user's mobile phone 180 via one or more telephone networks including the mobile communication network of the mobile communication company It is evident that any message is included in the scope of the present invention.

The service server 175 is connected to a service provider 170 through a separate data network separate from the telephone network used for sending and receiving messages to and from the user's mobile phone 180, A web-based service is preferably provided using the user terminal 170 used by the user, or an application specified in the user terminal 170 used by the user is installed, and the application-based Can be provided. For example, the service server 175 may include an Internet banking server used by a financial institution including a bank to provide a web-based Internet banking service to a user terminal 170 used by a user. Alternatively, the service server 175 may include a home trading server used by a financial institution including a securities company to provide a home trading service through a home trading application installed in a user terminal 170 used by a user.

The user terminal 170 is a general term of a terminal used by a user to receive a designated service from the service server 175 via a separate data network separated from the telephone network and is preferably connected to a wired data network such as a wired Internet A wired terminal such as a personal computer or a notebook computer, and a wireless terminal such as a tablet PC or a notebook connected to a wireless data network including a wireless LAN.

According to an embodiment of the present invention, the user terminal 170 includes a browser for receiving a web-based service from the service server 175, or a browser for receiving a web-based service from the service server 175 You can install the app.

The operating server 100 is capable of exchanging messages with the user's mobile phone 180 via one or more telephone networks and is capable of exchanging messages through a separate data network separated from the telephone network, The present invention relates to a server-side configuration for performing an authentication procedure according to the present invention, wherein the operating server 100 defines a channel through which a message is exchanged with a user's mobile phone 180 via one or more telephone networks as an 'authentication channel' A channel interlocked with the user terminal 170 used by the user through the separate data network separated from the operating network server 100 or the channel connecting the service server 175 to the user terminal 170 ) Is defined as a 'service channel'. In the present invention, the authentication channel including the telephone network and the service channel including the data network are physically and / or logically separated so as not to interfere with each other.

According to an embodiment of the present invention, a message sent from the operation server 100 to a user's mobile phone 180 via an authentication channel including one or more telephone networks is defined as a 'forward message' 180 to a designated telephone number on the operation server 100 via an authentication channel including at least one telephone network is defined as a 'reverse message'.

Referring to FIG. 1, the operation server 100 includes an authentication request confirmation unit 110 for confirming an authentication request for providing a service of the service server 175, a mobile phone number confirmation unit An authentication code verifying unit 115 for verifying the authentication code generated using the service information (or a part of the service information) for providing the service of the service server 175, A disposable number identification unit (not shown) for identifying a dynamically determined disposable telephone number to be used as a calling number of a forward message to be transmitted through a telephone network, including a called number, and to be used as a called number of a reverse message to be received in response to the forward message A mapping maintaining unit 125 for mapping the mobile phone number of the user, the generated authentication code, and the disposable telephone number to maintain the disposable telephone number for a designated valid time, Respectively.

The service server 175 of the service providing organization requests authentication for providing the service while providing the web / application based service to the user terminal 170 through the service channel including the designated data network, 110 receives authentication request information requesting authentication of the service using a message transmitted and received through an authentication channel including one or more telephone networks separated from the data network from the service server 175.

According to an embodiment of the present invention, the authentication request information may be interworking information for interworking with the user terminal 170 through the service channel including the data network in the operation server 100, Service identification information for identifying the service to be provided to the user through the user terminal 170, user identification information for identifying the user, service information about the service to be provided to the user through the user terminal 170 in the service server 175 (For example, financial transaction information in the case of an Internet banking service, securities transaction information in the case of a home trading service), a part of the service information, a mobile phone number of a user identified by the service server 175, (Or part of the service information), and the disposable telephone number determined by the service server 175, It can be included.

On the other hand, upon confirming the authentication request for service provision of the service server 175 through the authentication request confirmation unit 110, the mobile phone number checking unit 110 may check the mobile phone number of the user through the authentication channel via one or more telephone networks 180), and at the same time, the user's mobile phone 180 uses the mobile phone number of the user to be used as the calling number of the reverse message to be transmitted in the backward direction through the authentication channel, based on the reply writing of the forward message Check.

According to the first mobile phone number confirmation embodiment of the present invention, the service server 175 receives the mobile phone number from the user through the user terminal 170 or registers the mobile phone number in the DB of the service server 175 (For example, included in the authentication request information provided to the operation server 100) to the operation server 100, and the mobile phone number check unit 110 checks the mobile phone number of the user The mobile phone number of the user can be received from the server 175.

According to the second mobile phone number identification method of the present invention, the mobile phone number identification unit 110 may be connected to the user terminal 170 used by the user via the data network (for example, (In cooperation with the user terminal 170 based on the interworking information included in the request information), and receive and receive the mobile phone number of the user from the user terminal 170. [

According to the third embodiment of the present invention, the service server 175 and the operation server 100 share user information, and the mobile phone number identification unit 110 identifies the mobile phone number (E.g., user identification information included in the authentication request information received from the service server 175), and confirm the mobile phone number of the user by referring to the designated DB on the operation server 100 side.

When the authentication request for the service of the service server 175 is confirmed through the authentication request confirmation unit 110, the authentication code verification unit 115 checks the service information of the service server 175 Or a part of the service information).

According to the first authentication code checking embodiment of the present invention, the service server 175 confirms the service information for providing the service, and the one (1) including the information corresponding to the confirmed service information The generated authentication code is provided to the operation server 100 (for example, included in the authentication request information provided to the operation server 100) And the authentication code confirmation unit 115 can receive the authentication code dynamically generated from the service server 175 using the service information (or a part of the service information).

The authentication code confirmation unit 115 receives service information (or a part of service information) for providing a service from the service server 175 (for example, a service server (Or a part of the service information) included in the authentication request information received from the authentication request receiving unit 175, and transmits one or more pieces of information including information corresponding to the confirmed service information (or a part of the service information) The hashing algorithm can be used to dynamically generate the authentication code of the specified code scheme.

On the other hand, upon confirming the authentication request for service provision of the service server 175 through the authentication request confirmation unit 110, the disposable number identification unit 120 may include the mobile phone number of the user as a called number, Is used as a calling number of a forward message to be sent to the user's cellular phone 180 through an authentication channel via the authentication channel and is used in the reverse direction to be forwarded through the authentication channel based on the reply writing of the forward message in the user's cell phone 180 Identifies a dynamically determined disposable telephone number for use as the disposable called number of the message.

According to the first disposable telephone number identification method of the present invention, the operation server 100 includes a number management module (e.g., N (N)) for managing N (N? 2) telephone numbers available for transmitting and receiving messages via a telephone network And a program code executed in the DB 100 and / or the operation server 100), and the disposable number identification unit 120 identifies the N number of telephone numbers managed by the number management module A first n (1? N? N) telephone number may be selected and used as a calling number of the forward message, and at the same time, a one-time telephone number to be used as a destination number of the reverse message.

According to the embodiment of the present invention, the disposable number identification unit 120 does not duplicate the mobile phone number and other phone numbers among the N phone numbers managed by the number management module, , Unused phone numbers after a specified initialization, unused phone numbers after a specified initialization, phone numbers that have been used more than once as one-time phone numbers and have not been reused for a certain period of time, An nth telephone number including a telephone number that more satisfies at least one condition of at least one of the telephone numbers that have not been reused for a long period of time is selected as a calling number of the forward message and used as a called number of the reverse message You will be able to identify with a disposable phone number.

According to the second disposable telephone number identification embodiment of the present invention, the operation server 100 includes a number management module (e.g., N (N)) for managing N (N? 2) telephone numbers available for sending and receiving messages via a telephone network And a program code executed in the DB 100 and / or the operation server 100), and when the mobile phone number of the user is confirmed through the mobile phone number checking unit 110, (120) checks the mapping history information of the identified mobile phone number, selects one of N phone numbers managed by the number management module and does not duplicate and has no history mapped with the mobile phone number based on the mapping history information (N) (1? N? N), uses the cell phone number as a calling number of a forward message including the cell phone number as a called number, and includes the cell phone number as a calling number You can see a disposable phone number that will be used as the destination number of the reverse message.

According to the embodiment of the present invention, the disposable number identification unit 120 may identify the disposable number of the user, which is not duplicated with another phone number being mapped to another mobile phone number among the N phone numbers managed by the number management module, A telephone number that is not used as a disposable telephone number for a certain period of time or longer, a telephone number that is not used as a disposable telephone number after a designated initialization, a disposable telephone number that has not been reused for a certain period of time A telephone number, an nth telephone number including a telephone number that more satisfies at least one condition of at least one of a telephone number that has been used more than once and a telephone number that has not been reused for the longest period of time, And can be used as a disposable telephone number to be used as a destination number of the reverse message .

According to the third disposable telephone number identification method of the present invention, the operation server 100 combines the dynamic numbers of digits designated by the designated station numbers into a designated telephone number system, and transmits N (N (E.g., program code executed in the operating server 100) capable of generating 22 number of telephone numbers, and the disposable number identifying unit 120 identifies N N > = 2) telephone numbers are combined and used as the calling number of the forward message by selecting one of n < th > And a disposable telephone number to be used as a destination number of the reverse message.

According to the embodiment of the present invention, the disposable number identification unit 120 does not duplicate the mobile phone number and other phone numbers being mapped among N (N? 2) phone numbers that can be generated through the number management module, A phone number that is not used as a one-time phone number after a specified period of time, a phone number that is not used as a one-time phone number after a specified initialization, a phone number that has not been reused for more than a certain period of time after being used as one- Numbered telephone number including at least one telephone number of a telephone number that has not been reused for a longest period after being used as a number and is used as a calling number of the forward message and is used as a calling number of the reverse message, You can check it by phone number.

According to the fourth disposable telephone number identification method of the present invention, the operation server 100 combines the dynamic numbers of digits designated by the designated station numbers into a designated telephone number system, and transmits N (N (E.g., program code executed in the operating server 100) capable of generating 22 number of telephone numbers, and when the mobile phone number of the user is confirmed through the mobile phone number checking unit 110, The disposable number identification unit 120 checks the mapping history information of the identified mobile phone number and identifies the number N (N > = 2) of phone numbers that can be generated through the number management module, (1 ≤ n ≤ N) telephone numbers that are generated so as not to overlap with each other and have no history mapped to the mobile phone number based on the mapping history information W can be at the same time as yiyongdoem to the calling number of a forward message including the mobile phone number to the called number identified by the one-time telephone number be used as a called number of the reverse message including the mobile phone number as the calling number.

According to the embodiment of the present invention, the disposable number identification unit 120 can identify the disposable number without being duplicated with other phone numbers being mapped to the mobile phone number among N (N? 2) phone numbers that can be generated through the number management module A phone number that is not used as a one-time phone number after a predetermined period, a phone number that is not used as a one-time phone number after a designated initialization, A first telephone number including at least one telephone number of at least one telephone number that has not been reused for a predetermined period or more, a telephone number that has not been reused for a long period of time after being used as a disposable telephone number at least once, And can be used as a disposable telephone number to be used as a destination number of the reverse message.

According to the fifth disposable telephone number identification method of the present invention, the service server 175 includes a number management module for managing N (N > = 2) telephone numbers, and the N telephone numbers managed by the number management module (1? N? N) telephone numbers that are not duplicated among the numbers of the telephone numbers and provide them to the operation server 100 (for example, provided in the authentication request information provided to the operation server 100) The disposable number identification unit 120 receives the n-th telephone number from the service server 175 and uses the received telephone number as a source number of the forward message and identifies the disposable telephone number to be used as a destination number of the reverse message .

According to the embodiment of the present invention, the service server 175 does not duplicate the mobile phone number and other phone numbers being mapped among the N phone numbers managed by the number management module, and uses the same as the disposable phone number for a predetermined period or more Unused phone numbers, unused phone numbers after a specified initialization, unused phone numbers that have been used as one-time disposable phone numbers, unused phone numbers that have not been reused for a certain period of time, The disposable number identification unit 120 may select the nth telephone number including at least one telephone number among the telephone numbers that have not been reused during the service period and may provide the nth telephone number to the operation server 100, And receives the n < th > telephone number and is used as a calling number of the forward message, It can be confirmed by the disposable telephone number to be used.

According to the sixth disposable telephone number confirmation embodiment of the present invention, the service server 175 includes a number management module for managing N (N > = 2) telephone numbers, (N < = 1 < / = n) which is not duplicated among the N telephone numbers managed by the number management module and has no history mapped to the mobile phone number based on the mapping history information. (e.g., provided in the authentication request information provided to the operation server 100) to the operation server 100, and the disposable number identification unit 120 may identify Receives the n-th phone number from the service server 175, uses the mobile phone number as a calling number of a forward message including the mobile number as a called number, and uses the mobile phone number as a calling number, It can be found in a disposable phone number that will be used as a forwarding number.

According to the embodiment of the present invention, the service server 175 may store the history mapped with the mobile phone number of the identified user without overlapping with the mobile phone number and other phone numbers being mapped among the N phone numbers managed by the number management module A telephone number that is not used as a disposable telephone number for a predetermined period or more, a telephone number that is not used as a disposable telephone number after a designated initialization, a telephone number that has been used for one or more disposable telephone numbers for a predetermined period or more, And may provide an n-th telephone number including at least one telephone number of telephone numbers that have not been reused for the longest period of time after being used as one-time telephone numbers to the operation server 100, The confirmation unit 120 receives the n < th > telephone number from the service server 175 and transmits the originating number And a disposable telephone number to be used as a destination number of the reverse message.

According to the seventh disposable telephone number identification example of the present invention, the service server 175 combines the dynamic numbers of digits designated by the designated station numbers into a designated telephone number system, and transmits N (N (N > = 2) telephone numbers that can be generated by the number management module, wherein the number of N (N > = 2) telephone numbers (1? N? N) telephone numbers which are not included in the authentication request information provided to the operation server 100 (for example, provided in the authentication request information provided to the operation server 100) The disposable number confirmation unit 120 receives the n < th > telephone number from the service server 175 and is used as the origination number of the forward message, and at the same time, You can check with a one-time phone number to be used.

According to the method of the present invention, the service server 175 does not overlap with the mobile phone number and other phone numbers being mapped among N (N? 2) phone numbers that can be generated through the number management module, Phone numbers that are not used as one-off phone numbers, unused phone numbers that have not been used as one-off phone numbers after a specified initialization, phone numbers that have not been reused for more than a certain period of time after being used as one-time phone numbers, And the n-th telephone number including at least one telephone number of the telephone numbers that have not been reused for the longest period after use may be selected and provided to the operating server 100, And receives the n-th telephone number from the service server 175 and is used as a source number of the forward message, You can see a disposable phone number that will be used as the new number.

According to the eighth disposable telephone number identification example of the present invention, the service server 175 combines the dynamic numbers of digits designated by the designated station numbers into a designated telephone number system, and transmits N (N ? 2) number, and when the mobile phone number of the user is confirmed, the mobile terminal confirms the mapping history information of the mobile phone number and confirms N (N?) That can be generated through the number management module. (1? N? N), which is generated so as not to be duplicated by combining digits of a number of digits specified in the designated station number among the 2) telephone numbers, and which has no history mapped with the mobile number based on the mapping history information, ) May be selected and provided to the operation server 100 (for example, provided in the authentication request information provided to the operation server 100) The use number confirmation unit 120 receives the n-th phone number from the service server 175 and uses the mobile phone number as a calling number of a forward message including the mobile phone number as a called number and includes the mobile phone number as a calling number And can be identified by a disposable telephone number to be used as a destination number of a reverse message.

According to an embodiment of the present invention, the service server 175 may receive the mobile phone number of the mobile phone number N (N > = 2) generated by the number management module, , A phone number that is not used as a disposable phone number for a certain period of time or longer, a phone number that is not used as a disposable phone number after a designated initialization, or a disposable phone number that is used more than once and is not reused for a certain period of time A first telephone number including at least one telephone number of a telephone number that has not been reused for a longest period of time after being used as a disposable telephone number at least once, and may provide the selected telephone number to the operation server 100 , The disposable number identification unit 120 receives the n-th telephone number from the service server 175 and transmits the forward message The arcs can be identified yiyongdoem and at the same time to a one-off phone number be used as a called number of the reverse message.

The mobile phone number of the user to be used as the destination number of the forward message to be forwarded to the user's mobile phone 180 through the mobile phone number confirmation unit 110 is confirmed and the service code The authentication code generated using the service information (or a part of the service information) of the mobile phone 180 is used as a calling number of the forward message to be forwarded to the user's mobile phone 180 through the disposable number identification unit 120 And a disposable telephone number to be used as a destination number of an uplink message to be received in the reverse direction with the reply of the forward message is confirmed, the mapping holding unit 125 stores the mobile phone number of the user, the generated authentication code and the disposable telephone number And stores it in a designated medium (e.g., a specified DB, a memory area, or the like) and holds it.

According to an embodiment of the present invention, the mapping holding unit 125 stores the mobile phone number, the authentication code, and the disposable telephone number of the user in a designated medium for a specified effective time, The mobile phone number, the authentication code, and the disposable telephone number are mapped and stored in the designated medium, and at the same time, the effective time for maintaining the mapping relationship between the mobile number, the authentication code, and the disposable telephone number is counted. It is preferable to maintain a state in which the mobile phone number, the authentication code, and the disposable telephone number are mapped to the medium. On the other hand, after the mobile phone number, the authentication code, and the disposable telephone number are mapped and stored in the designated medium, the mapping storage unit 125 confirms whether the effective time for maintaining the mapping relationship has elapsed. It is desirable to deactivate the mapping relationship between the mobile phone number, the authentication code, and the disposable telephone number.

According to an embodiment of the present invention, the mapping holding unit 125 maps the mobile phone number, the authentication code, and the disposable telephone number to a designated medium, and stores the mobile phone number, the disposable telephone number, The mapping history information including the mapping relationship of the mapping of the mapping information to the mapping database is stored and managed in the designated DB. The mapping history information may then be used to avoid cases where the mobile number is mapped to the same or similar disposable telephone number.

Referring to FIG. 1, the operation server 100 includes a mobile phone number of the user as a destination number, and includes the disposable telephone number as a calling number and a forward message including the contents of a message specified in the message body area, And transmits a security code including the authentication code through a web / app screen of the user terminal 170 via a separate data network separate from the telephone network And an information output unit 135 for processing the information.

When the mobile phone number of the user, the generated authentication code, and the disposable telephone number are mapped on the medium designated by the mapping holding unit 125, the message sending unit 130 transmits the mobile phone number of the user to the destination number (For example, the message is a message sent for authentication related to the service information output on the web / application screen of the user terminal 170), and includes the disposable telephone number as the calling number And / or a message indicating that authentication is to be performed through the reply of this message, and / or an authentication code output on the web / application screen of the user terminal 170, Content, etc.).

According to the embodiment of the present invention, the message sending unit 130 transmits the authentication code output through the Web / App screen of the user terminal 170 to the message body area of the forward message, A forward message may be constructed which further includes guidance information for inputting and returning to the message body area of the reverse message.

If the forwarding message including the mobile phone number of the user as a called number and the disposable telephone number as the calling number and including the message body is configured, the message sending unit 130 transmits the forwarding message to the designated sending-side telephone network (E.g., a telephone network used by the server 100 to send a message such as SMS), and the forward message is sent through the sending-side telephone network to the mobile phone number of the user And is received by the mobile phone 180 of the user through an authentication channel via a message center provided in the mobile communication network of the corresponding mobile communication company.

If the forwarding telephone network and the mobile telephone network of the mobile communication company corresponding to the mobile telephone number of the user are the same telephone network, the forward message is transmitted to the user's mobile phone via the authentication channel including the mobile telephone network corresponding to the mobile telephone number of the user 180). If the sending-side telephone network and the mobile telephone network of the mobile communication company corresponding to the mobile telephone number of the user are different kinds of telephone networks, the forward message is sent through the sending-side telephone network and the designated standard (for example, The standard for interworking), and then received by the mobile phone network of the mobile communication company corresponding to the mobile phone number of the user via the message center to the mobile phone network.

On the other hand, if the mobile phone number of the user, the generated authentication code, and the disposable telephone number are mapped on the designated medium, the information output unit 135 transmits the service channel including the separate data network separated from the telephone network And outputs the security code including the authentication code through the web / application screen of the user terminal 170. [

According to the first security code embodiment of the present invention, it is preferable that the security code includes an authentication code confirmed through the authentication code checking unit 115, / App screen and then input to the message body area of the reverse message corresponding to the reply of the forward message sent to the user's mobile phone 180. [ For example, if the authentication code confirmed by the authentication code checking unit 115 is '12', the security code may include '12', '12' is a message body area of the reverse message Lt; / RTI >

According to the second security code embodiment of the present invention, the security code may include a code combination obtained by combining an authentication code and an arbitrary dummy code, which are identified through the authentication code checking unit 115, in a designated code structure, The dummy code includes any code that is output through the web / application screen of the user terminal 170 but is not input into the message body area of the reverse message. For example, if the authentication code confirmed by the authentication code checking unit 115 is '12' and the dummy code is '34', the security code may be '1234' concatenating '12' and '34' '12' is input to the message body region of the reverse message, and '34' may not be inputted to the message body region of the reverse message.

According to the embodiment of the present invention, the information output unit 135 may transmit the service information and the service information through a Web / App screen of the user terminal 170 through a service channel including a separate data network, Or to output the security code to the service information related screen being output through the web / application screen of the user terminal 170. [

According to the embodiment of the present invention, the information output unit 135 inputs the authentication code output through the web / application screen of the user terminal 170 into the message body area of the reverse message corresponding to the reply of the forward message And output the information through the web / application screen of the user terminal 170. The web /

If the security code including the authentication code is output through the Web / App screen of the user terminal 170, the information output unit 135 responds to the reply of the forward message received by the user's mobile phone 180 And transmits the authentication code output from the web / application screen of the user terminal 170 to the user terminal 170 through the web / application screen of the user terminal 170 . For example, when the security code including the authentication code '12' is output through the web / application screen of the user terminal 170, the information output unit 135 may output the security code including the authentication code ' The user terminal 170 may configure the guide information to guide the user to input a two-digit number being output on the screen into the message body area of the reverse message corresponding to the reply of the forward message received by the user's cellular phone 180, To be outputted through the web / application screen of the web browser.

Meanwhile, when a security code obtained by combining an authentication code and an arbitrary dummy code is output through the web / application screen of the user terminal 170, a security code output from the web / The user terminal 170 selects the authentication code except for the authentication code and inputs it to the message body area of the reverse message corresponding to the reply of the forward message received by the user's mobile phone 180, / App screen. For example, when a security code including '1234', which is a combination of an authentication code '12' and an arbitrary dummy code '34', is output through the Web / App screen of the user terminal 170, Corresponding to the reply of the forward message received by the mobile phone 180 of the user, the number corresponding to the first two digits included in the security code being output to the web / application screen of the user terminal 170, The user terminal 170 may configure the guide information to guide the user through the web / app screen of the user terminal 170. In this case,

According to another embodiment of the present invention, the guidance information may be included in a message body area of a forward message sent to the user's cellular phone 180. In this case, And a forward message including the guidance information in a message body area is configured to be transmitted through an authentication channel via one or more telephone networks. can do.

According to the embodiment of the present invention, since the forward message including the content of the message specified by the mobile number of the user is to be sent or sent, the information output unit 135 may transmit the relief information for guiding the forward message to use safely And output the resultant through the web / application screen of the user terminal 170. [ Here, the security information may include content information indicating a user that a direction message for authenticating service provision by a designated service provider is sent to the mobile phone number of the user, a forward message including content of a message specified in the message body area, Content information indicating at least one of (or a combination of) the content information indicating that the forward message including the disposable telephone number is transmitted to the mobile phone number of the user, . ≪ / RTI > This allows the user to safely use the forward message received by his / her cell phone 180.

Referring to FIG. 1, the operation server 100 includes the mobile phone number of the user as a calling number based on the reply writing of the forward message from the mobile phone 180 of the user who has received the forward message, Receives a reverse message including the authentication code input by the user in the message body area of the security code output through the web / application screen of the user terminal 170 including the telephone number as the destination number via the telephone network A message receiver 140 for confirming the received reverse-direction message via the telephone network, and a controller 150 for receiving the reverse message from the user's mobile phone 180 via one or more telephone networks, And a message authentication unit 145 for performing a message authentication procedure for authenticating the user.

The user who owns the mobile phone 180 corresponding to the mobile phone number confirms the contents of the message included in the message body area of the forward message received by the mobile phone 180 of the mobile phone 180, Check the security code displayed on the app screen.

According to the embodiment of the present invention, the message body area of the forward message received by the user's mobile phone 180 and the web / app screen of the user terminal 170 are transmitted to the user terminal 170 And a guidance information for guiding the user to return the authentication code output through the web / application screen of the web / application screen of the user terminal to the message body region of the reverse message corresponding to the reply of the forward message, (For example, an authentication code guided to enter through the guidance information among the security codes output through the web / application screen of the user terminal 170) output via the web / The user terminal 170 displays the message on the web / app screen of the user terminal 170 in the message body area of the reverse message based on the reply writing of the forward message received by the user's mobile phone 180 The authentication code corresponding to the guidance information among the security codes can be inputted and returned. When the mobile phone 180 is a smart phone, an authentication code corresponding to the guide information is input from the security code output through the Web / App screen of the user terminal 170 through reply writing as in the example of FIG. 1 If the mobile phone 180 is a feature phone, the 'reply' menu is selected on the screen displaying the forward message, and the 'security' code displayed on the web / It is possible to input and return the authentication code corresponding to the authentication code.

According to the method of the present invention, the reverse message is sent backward from the user's mobile phone 180 based on the reply writing of the forward message, automatically includes the mobile phone number of the user as the calling number, And the received authentication code is included in the message body area.

The present invention may include a forward message sent to the user's mobile phone 180 by including the disposable telephone number as a calling number and including the mobile phone number of the user as a called number and a forward message sent from the user's mobile phone 180 as a reply to the forward message The combination of the reverse message including the mobile phone number of the user as the calling number and the disposable telephone number as the called number for the authentication procedure of the present invention is valid for one time use based on the disposable telephone number and the message reply structure A forward message including the disposable telephone number as a calling number is defined as a disposable forward message, and a message to be forwarded from the user's mobile phone 180 as a reply to the forward message As a one-time reverse reply message It can of.

According to an embodiment of the present invention, the reverse message is transmitted from the user's mobile phone 180 as a message sent backward from the user's mobile phone 180 based on the reply writing of the forward message, ) Is transmitted to the subscribed communication company system. The communication company system checks the device information of the mobile phone 180 that has sent the reverse message and the mobile phone number actually given to the mobile phone 180 by referring to the DB managing the mobile phone 180 subscribed to the mobile phone 180, Verifies that the cell phone 180 that has sent the reverse message is the cell phone 180 that is subscribed to the cell phone 180 and verifies the cell phone 180 that is the cell phone 180 that has been verified to be subscribed to the cell phone 180, It is determined whether or not a cell phone number corresponding to the calling number included in the uplink message is actually given (i.e., the cell phone number actually assigned to the cell phone 180 that sent the uplink message matches the calling number included in the uplink message) . If the cell phone number of the mobile phone 180 matches the calling number of the uplink message, the communication company system relays the uplink message to be transmitted to the one-time phone number corresponding to the called number included in the uplink message . For example, if the hacker has a clone phone replicating the user's phone 180, there is a possibility that the forward message is also received by the clone phone in addition to the valid phone 180 of the user. The reverse message transmitted backward from the clone phone can be blocked by the communication company system.

The message receiving unit 140 includes the mobile phone number of the user as a calling number based on the reply writing of the forward message from the mobile phone 180 of the user who has received the forward message and includes the disposable telephone number as a called number And receives a reverse message including the authentication code input by the user in the message body area of the security code output through the web / application screen of the user terminal 170 via the telephone network or a separate message server Quot; omitted ").

When the reverse message is received (or confirmed) through the message receiver 140, the message authenticator 145 validates the reverse message from the user's mobile phone 180 via the at least one telephone network to the designated disposable telephone number And performs a message authentication procedure for authenticating that the received valid reverse message is valid.

According to the first message authentication embodiment of the present invention, the message authentication unit 145 reads the number system of the origination number of the reverse message received (or confirmed) through the message receiver 140, Check if it is a numbering system. According to the embodiment of the present invention, since the reverse message received (or confirmed) through the message receiver 140 is a message received backward with the reply of the forward message sent to the user's mobile phone 180, The number must be the user's mobile number. However, a message (for example, SMS or the like) via the telephone network can not only be sent to the mobile phone 180, but can also be a wired telephone connected to a wired telephone network, an internet telephone or a VoIP phone based on the Internet network, You can also send a message via the phone network through the designated gateway. The message authenticator 145 checks whether the number system of the origination number of the reverse message is a number system of the mobile phone number. If the origination number of the reverse message is identified by the number system of the mobile phone number, Authenticate with a valid message available for the authentication procedure, or otherwise automatically discard the reverse message. According to the method of the present invention, when a reverse message is transmitted from the mobile phone 180 to which the mobile phone 180 is subscribed, the communication company system to which the mobile phone 180 is subscribed, It is set so as to relay the reverse message to the receiver only when it is verified that the mobile phone number actually matched with the calling number of the reverse message is matched with the calling number of the reverse message so that if the calling number of the reverse message is a mobile phone number, It can be regarded as a real mobile phone 180. [ According to the embodiment of the present invention, if a communication company subscribed to a fixed line telephone, an internet telephone, or a VoIP phone other than the mobile communication company to which the mobile phone 180 is subscribed also implements the function of verifying the calling number of the reverse message, In addition to the mobile phone 180 subscribed to the mobile communication company, the message authentication unit 145 may extend the call to a landline telephone, an internet telephone, a VoIP phone, etc. In this case, VoIP phone, and the present invention is not limited thereto.

According to the second message authentication embodiment of the present invention, the message authentication unit 145 identifies the disposable telephone number corresponding to the called number of the reverse message received (or confirmed) through the message receiving unit 140, It is confirmed whether or not the effective time for maintaining the mapping state of the disposable telephone number and the mobile phone number that received the reverse message has elapsed or has passed. According to the embodiment of the present invention, the message authentication unit 145 can read the effective time counted by being mapped with the disposable telephone number that received the reverse message and check whether the valid time is before or after the effective time elapses . If the validity period has not elapsed, the message authenticator 145 may authenticate the reverse message with a valid message that can be used in the authentication procedure. Otherwise, the message authentication unit 145 may automatically discard the reverse message.

According to the third message authentication embodiment of the present invention, when the message authentication unit 145 sends a message via the telephone network in the data network, i (i, 1) You can keep the embedded code. Preferably, the i inserted codes are transmitted to a server on the data network (for example, a message sending unit provided in the operating server 100 of FIG. 1), not a terminal on the telephone network (e.g., mobile phone 180 subscribed to the mobile telephone network) (For example, '[', 'Web', and the like) are set to be automatically inserted into a message body area of a message sent via a telephone network on the data network when a message is sent via a telephone network, , 'web', 'WEB', 'web', ']'. Meanwhile, when the mobile phone number is included as a calling number through the message receiving unit 140 and a reverse message including a disposable telephone number as a called number is received (or confirmed), the message authenticating unit 145 transmits, Analyzes the code included in the message body area of the reverse message received (or confirmed) through the message insertion unit 140 and confirms that the inserted code includes at least one of the i inserted codes. If the message authentication unit 145 does not include at least one embedded code in the message body area of the uplink message, the message authentication unit 145 determines that the uplink message is not transmitted via the telephone network on the data network, (E.g., mobile phone 180 subscribed to the mobile telephone network), and authenticate the uplink message as a valid message available for the authentication procedure. Otherwise, the uplink message may be automatically discarded.

According to the embodiment of the present invention, when at least one embedded code is included in the message body region of the uplink message, the message authentication unit 145 transmits the web / application of the user terminal 170 corresponding to the uplink message (E.g., a Web / App screen of the user terminal 170 matched with the mobile number, which is the origination number of the uplink message, or a web / application screen of the user terminal 170 matched with the disposable telephone number, / App screen) and output error information on the message body area of the reverse message through the Web / App screen of the user terminal 170. [ However, when a forward message including error information generated by including an insertion code specified in a message body area of the reverse message is sent to the user's mobile phone 180, a cost for sending a message via the telephone network is additionally generated, It is preferable that the error information for the message body area of the reverse message is not forwarded to the forward message because the error message is generated in the replica phone when the user has the replica phone replicating the mobile phone 180 .

According to the fourth message authentication embodiment of the present invention, the message authenticator 145 may receive the message body area of the reverse message through key input means (for example, a key button, a touch screen, etc.) It is possible to keep j (j ≥ 1) exception codes that can not be used as authentication codes among inputable codes. For example, when the authentication code is composed of only digits including '1' to '9' and '0', the message authenticating unit 145 transmits' J excepting codes including codes such as all the characters except for the numbers including '1' to '9' and '0' and symbols (including spaces such as 'space bar'). Meanwhile, when the authentication code includes numbers and alphabets including '1' to '9' and '0', the message authentication unit 145 may transmit a code that can be input through the key input unit of the mobile phone 180 You can keep j exception codes that contain codes such as all letters and symbols except the middle and the English alphabet. Meanwhile, when the authentication code includes a number including '1' to '9' and '0' and a Korean word, the message authentication unit 145 transmits a code You can keep j exception codes that contain codes such as all digits and symbols except for Chinese digits and Hangul characters. Meanwhile, when the mobile phone number is included as a calling number through the message receiving unit 140 and a reverse message including a disposable telephone number as a called number is received (or confirmed), the message authenticating unit 145 transmits, (Or verified) through the mobile station 140 to determine whether it contains at least one exception code among the j exception codes. If the message authentication unit 145 does not include at least one exception code in the message body area of the uplink message, the message authentication unit 145 receives an authentication code in the message body area of the uplink message from the user ' It is possible to authenticate the reverse message as a valid message that can be used in the authentication procedure without regard to the error, and to consider the input error in the reverse message to be automatically discarded.

Meanwhile, when at least one exception code is included in the message body area of the reverse message, the message authentication unit 145 may transmit the exception message to the web / application of the user terminal 170 corresponding to the reverse message, (E.g., a Web / App screen of the user terminal 170 matched with the mobile number, which is the origination number of the uplink message, or a web / application screen of the user terminal 170 matched with the disposable telephone number, And displays error information on an input error occurring in the authentication code included in the message body area of the reverse message through the web / application screen of the user terminal 170. [ However, when a forward message including error information for an input error including an exception code specified in a message body area of the reverse message is sent to the user's mobile phone 180, a cost for sending a message via the telephone network is added And if the hacker has a clone phone in which the user's cellular phone 180 is cloned, it is possible to recognize the occurrence of an error in the clone phone, so that error information on the message body area of the reverse message is not sent in a forward message However, the present invention is not limited thereto.

According to the fifth message authentication embodiment of the present invention, the message authentication unit 145 may be configured to at least partially combine at least two embodiments among the first to fourth message authentication embodiments to generate the reverse message Authenticating with a valid message available for the authentication procedure, and thus the present invention is not limited thereto.

Referring to FIG. 1, when the reverse message is validly received, the operation server 100 checks the origination number of the reverse message and matches the disposable telephone number corresponding to the called number of the reverse message with the mapped mobile number A source authentication unit 150 for performing an origin authentication process for authenticating whether the mobile communication terminal 100 is authenticated or not, and a code authentication procedure for authenticating whether the authentication code included in the message body area of the reverse message is matched with the authentication code mapped to the mobile phone number And generates an authentication result for providing a service of the service server 175 based on a result of the origination authentication and the code authentication and provides the authentication result to the service server 175 or the user terminal 170 And a result processing unit (160).

When the validity of the uplink message is authenticated through the message authentication unit 145, the originating authentication unit 150 identifies the origination number of the uplink message and transmits the designated media to the media holding unit After confirming the disposable telephone number corresponding to the called number of the reverse message and the mapped mobile number, authenticates whether the calling number of the reverse message matches the mobile number confirmed through the designated medium. Meanwhile, according to another embodiment of the present invention, the originating authentication unit 150 identifies the disposable telephone number corresponding to the called number of the uplink message and transmits the dis- tributed telephone number through the designated medium holding the registered information in the medium holding unit. After confirming the mobile telephone number corresponding to the origination number of the message and the disposable telephone number mapped, authenticate whether the called number of the reverse message matches the disposable telephone number confirmed through the designated medium, The origination authentication procedure is substantially the same as the authentication procedure for checking and comparing the mobile phone number mapped with the disposable phone number corresponding to the called number of the reverse message through the designated medium. According to the method of the present invention, it is preferable that the designated medium effectively maintains the mapping relationship between the disposable telephone number and the mobile phone number only for a designated valid time, and after the expiration of the effective time, Even if the phone number and the mapped mobile number are not confirmed or even confirmed, the disposable number may be mapped to another mobile number.

According to an embodiment of the present invention, when the valid mobile phone number is not confirmed through the designated medium, or when the originating number of the reverse message does not match the mobile phone number confirmed through the designated medium, (For example, a web / app screen of the user terminal 170 matched with the mobile phone number, which is the calling number of the reverse message, or a web / app screen of the user terminal 170 corresponding to the reverse message, To check the Web / App screen of the user terminal 170 matched with the disposable telephone number, which is the called number), and to output the error information on the outgoing authentication through the Web / App screen of the user terminal 170 have. However, when a forward message including the error information for the outgoing authentication is sent to the user's cell phone 180, a cost for sending a message via the telephone network is additionally generated, and a hacker replicates the cell phone 180 of the user It is preferable not to send the error information of the origination authentication in the forward message, but the present invention is not limited thereto.

When the validity of the uplink message is authenticated through the message authenticator 145, the code authenticator 155 checks the authentication code included in the message body area of the uplink message, And / or the authentication code mapped to the disposable telephone number corresponding to the called number of the reverse message, and then transmits the message of the reverse message And performs a code authentication procedure for authenticating whether an authentication code included in the body area matches an authentication code confirmed through the designated medium. According to the method of the present invention, it is preferable that the designated medium effectively maintains the mapping relationship between the mobile phone number, the authentication code, and the disposable telephone number only for a designated valid time, The authentication code mapped to the mobile phone number or the authentication code mapped to the disposable telephone number is not confirmed. Even if the mobile phone number or the disposable phone number is confirmed, the mobile phone number or the disposable phone number may be mapped to the authentication code of another authentication procedure have.

According to the embodiment of the present invention, when a valid authentication code is not confirmed through the designated medium or an authentication code included in the message body area of the reverse message does not match the authentication code confirmed through the designated medium, The code authentication unit 155 checks the Web / App screen of the user terminal 170 corresponding to the uplink message (for example, the web / app screen of the user terminal 170 matched with the mobile number, (Or a web / app screen of the user terminal 170 matched with the disposable telephone number, which is a destination number of the reverse message), and transmits error information on the code authentication through the web / application screen of the user terminal 170 To be output. However, when a forward message including error information on the code authentication is sent to the user's cell phone 180, a cost for sending a message via the telephone network is additionally generated, and a hacker may copy the cell phone 180 of the user It is preferable not to send the error information of the code authentication to the forward message, but the present invention is not limited thereto.

The result processor 160 checks the result of the outgoing authentication performed by the outgoing authentication unit 150 and verifies the result of the code authentication performed by the code authentication unit 155, And outputs the generated authentication result information to the service server 175 and / or transmits the generated authentication result information to the user terminal 170. [ And displays it on the web / application screen of the user terminal 170. [

When the generated authentication result information is provided to the service server 175 or the user terminal 170, the result processing unit 160 transmits the user's mobile phone number, authentication code, and disposable (Or deactivates) the mapping relationship of the telephone number so that the third party (or hacker) can block attempts to exploit the mapping relationship regardless of the remaining time of the validity time maintaining the mapping relationship .

FIG. 2 is a diagram illustrating an information confirmation and mapping process for a disposable message-based authentication procedure according to an embodiment of the present invention.

In more detail, FIG. 2 identifies a mobile phone number of a user at the time of authentication for providing a service and confirms a generated authentication code using service information (or a part of service information) for providing a service of the service server 175 , A dynamically determined disposable telephone number for use as a called number of a forward message to be transmitted through a telephone network including the mobile telephone number of the user as a called number and a forwarding number of an uplink message to be received in response to the forward message The mobile phone number of the user, the generated authentication code, and the disposable telephone number are mapped and stored for a designated valid period of time on a designated medium. If so, see and / or modify Figure 2 to illustrate the various It is to be understood that the present invention may be practiced otherwise than as specifically described herein, but it is to be understood that the present invention is not limited to the embodiment (s) Technical features are not limited.

Referring to FIG. 2, the user terminal 170 requests (200) a service designated by the service server 175 of the service providing organization via the data network through the designated web / application screen, and the service server 175 The user terminal 170 confirms the designated service request via the data network 205 and checks the service information required for providing the requested service through the data network 210. For example, if the service providing organization is a bank, the service server 175 is an Internet banking server, and the service request is a money transfer request, the service server 175 transmits the service request to the user terminal 170, The user can confirm the transfer information for the account transfer (210). If the service information for providing the service is not confirmed, the service server 175 may perform a process of communicating with the user terminal 170 through the data network to check the service information for providing the service 210).

Meanwhile, when the service information for providing the service is confirmed, the service server 175 confirms whether to perform the authentication using the disposable message according to the present invention for providing the service using the confirmed service information (215). If the service using the disposable message is not required for providing the service, the service server 175 performs a procedure for providing the service using the service information to the user terminal 170 through the data network 220 ), The user terminal 170 performs a procedure of receiving a service via the data network from the service server 175 through a web / application screen (225).

Meanwhile, when authentication using the disposable message is to be performed for providing the service, the service server 175 configures the authentication request information including the service information and provides the authentication request information to the designated operation server 100 (230) The operation server 100 receives the authentication request information from the service server 175, and determines whether authentication for the service provision is requested (235).

When confirming the authentication request for service provision of the service server 175, the operating server 100 is used as a destination number of a forward message to be transmitted to the user's cellular phone 180 through an authentication channel via one or more telephone networks (240) the mobile phone number of the user to be used as the calling number of the reverse message to be transmitted backward through the authentication channel based on the reply writing of the forward message in the user mobile phone (180).

According to the first mobile phone number confirmation embodiment of the present invention, the service server 175 receives the mobile phone number from the user through the user terminal 170 or registers it in the DB of the service server 175 And the operation server 100 may receive the mobile phone number of the user from the service server 175 in operation 240.

According to the second mobile phone number identification method of the present invention, the operation server 100 may operate in cooperation with the user terminal 170 used by the user through the data network (for example, the authentication request information received from the service server 175 The user terminal 170 may receive and receive a mobile phone number of the user from the user terminal 170 (operation 240).

According to the third embodiment of the present invention, the service server 175 and the operation server 100 share the user information, and the operation server 100 receives the identifier (E.g., user identification information included in the authentication request information received from the service server 175), the mobile phone number of the user can be confirmed 240 by referring to the designated DB on the operation server 100 side.

Meanwhile, at the time of confirming the authentication request for providing the service of the service server 175, the operation server 100 transmits the authentication information generated by using the service information (or a part of the service information) Check the code (245).

According to the first authentication code checking embodiment of the present invention, the service server 175 confirms the service information for providing the service, and the one (1) including the information corresponding to the confirmed service information The operation server 100 may provide the generated authentication code to the service server 175 (or the service server 100) by hashing the above information with a specified hash algorithm to dynamically generate an authentication code of a specified code scheme, (245) by using the service information (or a part of the service information) from the service information (or service information).

According to the second authentication code verification embodiment of the present invention, the operation server 100 receives service information (or a part of service information) for providing a service from the service server 175 (for example, (Or a part of the service information) included in the authentication request information received from the authentication request information receiving unit 110, and transmits one or more pieces of information including information corresponding to the confirmed service information (or a part of the service information) The authentication code of the designated code system can be dynamically generated (245).

On the other hand, upon confirmation of the authentication request for providing the service of the service server 175, the operation server 100 may include the mobile phone number of the user as a destination number, ) And a dynamically determined use for a disposable destination number of an uplink message to be sent back via the authentication channel based on the reply write of the forward message in the user's mobile phone (180) The disposable telephone number is identified (250).

According to the first disposable telephone number identification method of the present invention, the operation server 100 includes a number management module (e.g., N (N)) for managing N (N? 2) telephone numbers available for transmitting and receiving messages via a telephone network And a program code executed in the DB 100 and / or the operation server 100). In this case, the operation server 100 selects one of the N telephone numbers managed by the number management module, which is not duplicated, and uses the telephone number as a calling number of the forward message And may be identified by a disposable telephone number to be used as a destination number of the reverse message (250).

According to the second disposable telephone number identification embodiment of the present invention, the operation server 100 includes a number management module (e.g., N (N)) for managing N (N? 2) telephone numbers available for sending and receiving messages via a telephone network And a program code executed by the operation server 100. When the mobile phone number of the user is confirmed through the operation server 100, the operation server 100 ) Confirms the mapping history information of the identified mobile phone number, and determines whether or not any of the N phone numbers managed by the number management module is not duplicated and the n < th > (1 < / = N < / = N), selects the phone number, uses the cell phone number as a calling number of a forward message including the cell phone number as a called number, I can see a disposable phone number that will be used as the destination number of messages (250).

According to the third disposable telephone number identification method of the present invention, the operation server 100 combines the dynamic numbers of digits designated by the designated station numbers into a designated telephone number system, and transmits N (N (E.g., a program code executed in the operating server 100) capable of generating? 2? Number of telephone numbers. In this case, the operation server 100 generates a non-overlapping n (n) number of N (N > = 2) telephone numbers generated by combining the non- 1 ≤ N ≤ N) is selected and used as a calling number of the forward message and can be confirmed as a disposable telephone number to be used as a destination number of the reverse message.

According to the fourth disposable telephone number identification method of the present invention, the operation server 100 combines the dynamic numbers of digits designated by the designated station numbers into a designated telephone number system, and transmits N (N (E.g., a program code executed in the operating server 100) capable of generating a phone number of > = 2). When the mobile phone number of the user is confirmed through the operating server 100, The operation server 100 confirms the mapping history information of the identified mobile phone number, and selects a combination of N (N > = 2) phone numbers that can be generated through the number management module, (1 ≤ n ≤ N) phone numbers which are generated so as not to overlap with each other and have no history mapped to the mobile phone number based on the mapping history information, You can check the daepon number to the calling number of a forward message including a called number at the same time as a disposable yiyongdoem phone number be used as a called number of the reverse message including the mobile phone number as the calling number (250).

According to the fifth disposable telephone number identification method of the present invention, the service server 175 includes a number management module for managing N (N > = 2) telephone numbers, and the N telephone numbers managed by the number management module (1 < / = N < / = N) telephone numbers that are not duplicated in the number of the service server (175) And receives the telephone number to be used as the origination number of the forward message, and can be used as a disposable telephone number to be used as the destination number of the reverse message (250).

According to the sixth disposable telephone number confirmation embodiment of the present invention, the service server 175 includes a number management module for managing N (N > = 2) telephone numbers, (N < = 1 < / = n) which is not duplicated among the N telephone numbers managed by the number management module and has no history mapped to the mobile phone number based on the mapping history information. (e.g., provided in the authentication request information provided to the operation server 100) to the operation server 100, and the operation server 100 may select the phone number from the service server 100, (N) is used as a calling number of a forward message including the cell phone number as a called number, and at the same time, I can see a disposable phone number that will be used fenugreek (250).

According to the seventh disposable telephone number identification method of the present invention, the service server 175 combines the dynamic numbers of digits designated by the designated station numbers into a designated telephone number system, and transmits N (N (N > = 2) telephone numbers that can be generated by the number management module, wherein the number of N (N > = 2) telephone numbers (1 < n < N) telephone numbers, which are not included in the telephone number list, from the service server 175 to the operation server 100, And may be used as a source number of the forward message and may be identified as a disposable telephone number to be used as a destination number of the reverse message (250).

According to the eighth disposable telephone number identification example of the present invention, the service server 175 combines the dynamic numbers of digits designated by the designated station numbers into a designated telephone number system, and transmits N (N ? 2) number, and when the mobile phone number of the user is confirmed, the mobile terminal confirms the mapping history information of the mobile phone number and confirms N (N?) That can be generated through the number management module. (1? N? N), which is generated so as not to be duplicated by combining digits of a number of digits specified in the designated station number among the 2) telephone numbers, and which has no history mapped with the mobile number based on the mapping history information, ) To the operation server 100, and the operation server 100 receives the n-th telephone number from the service server 175 The mobile phone number is used as a calling number of a forward message including the mobile phone number as a called number and the mobile phone number can be confirmed as a disposable phone number to be used as a called number of an uplink message including the calling number.

According to the method of the present invention, the disposable telephone number identified through at least one of the first to eighth disposable telephone number identification examples is not duplicated and is not used as a disposable telephone number for a predetermined period or more Phone number, unused phone number after designated initialization, unused phone number, unused phone number that has been used more than once as one-time phone number, unused phone number for more than one period, And may include at least one telephone number out of the telephone numbers.

The mobile phone number of the user is confirmed and the authentication code generated using the service information (or a part of the service information) of the service server 175 is confirmed and the forwarding message to be forwarded to the user's mobile phone 180 When a disposable telephone number to be used as a destination number of an uplink message to be received in the reverse direction is confirmed by the reply of the forward message, the operation server 100 transmits the mobile phone number of the user, the generated authentication code, The disposable telephone number is mapped and stored (255) for a specified valid time in a designated medium (e.g., designated DB or memory area, etc.).

After the mobile phone number of the user is mapped to the authentication code and the disposable telephone number in the designated storage medium, the operation server 100 maintains the mapping relationship between the mobile phone number held in the designated medium, the authentication code, and the disposable telephone number (260). ≪ / RTI > If the expiration time for maintaining the mapping relationship between the mobile phone number, the authentication code, and the disposable telephone number has elapsed, the operation server 100 determines a mapping relationship between the mobile phone number held in the designated storage medium, the authentication code and the disposable telephone number (265).

3 is a diagram illustrating a process of sending a forward message via a telephone network and a process of outputting an authentication code via a data network according to an embodiment of the present invention.

In more detail, FIG. 3 shows a case where after the mobile phone number of the user is mapped with the authentication code and the disposable telephone number, the mobile phone number of the user is included as the called number, the disposable telephone number is included as the calling number, And transmits a security code including the authentication code through the web / application screen of the user terminal 170 via a separate data network separate from the telephone network It will be understood by those skilled in the art that reference is made to and / or modified by reference to FIG. 3 to illustrate various implementations of the process (e.g., some steps may be omitted, Or an altered order), but the present invention encompasses all such envisioned methods of implementation And the technical features thereof are not limited only by the method shown in FIG.

Referring to FIG. 3, when the mobile phone number of the user, the authentication code, and the disposable telephone number are mapped to the designated media through the process of FIG. 2, the operation server 100 includes the mobile phone number of the user as a called number The forwarding message including the disposable telephone number as the calling number and including the contents of the message specified in the message body area is configured 300 and processed to forward the forward message via the designated telephone network.

The mobile phone 180 corresponding to the mobile phone number of the user receives the forward message 310 via the mobile telephone network to which the mobile phone 180 is subscribed 310 and transmits the designated message content included in the message body area of the forward message E.g., guide information, etc.) (315).

Meanwhile, the operation server 100 confirms the web / application screen of the user terminal 170 corresponding to the forward message (320), and transmits the forward message to the operating server 100 via the separate data network, (325) to output the security code including the authentication code through the web / application screen of the terminal 170 (step 325), and the security code output from the web / application screen of the user terminal 170 Guidance information for selecting the authentication code and inputting the authentication code into the message body area of the reverse message corresponding to the reply of the forward message and returning the forward message to the user, and forwarding the forward message received by the user's cellular phone 180 via the telephone network (325) to output one or more pieces of information among the security information that induces the user terminal 170 to display the web / app screen.

The user terminal 170 receives the security code including the authentication code through the data network and outputs the security code through the web / application screen (330), and transmits one or more pieces of the guidance information and the security information, And may be further received through the data network and output through the web / app screen (330).

4 is a diagram illustrating a process of authenticating the validity of a service provided through a data network using a disposable reverse reply message received via a telephone network according to an embodiment of the present invention.

In more detail, in FIG. 4, a forward message via a telephone network is transmitted to a user's cell phone 180, a security code is output through a web / application screen of the user terminal 170, And transmits the disposable telephone number as a called number and outputs the disposable telephone number as a called number through the web / application screen of the user terminal 170 based on the reply writing of the forward message from the mobile phone 180 A message authentication procedure is performed to authenticate whether a reverse message including an authentication code entered in a message body area by a user is validly received via the telephone network, and if the reverse message is validly received, And transmits the dis- play phone number mapped to the dis- play phone number corresponding to the called number of the uplink message And a code authentication process for authenticating whether the mobile communication terminal matches the authentication code mapped to the mobile phone number by verifying the authentication code included in the message body area of the reverse message, , Those skilled in the art will be able to refer to and / or modify the FIG. 4 to implement various implementations of the process (e.g., some steps may be omitted or the sequence may be changed) It should be understood that the present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Referring to FIG. 4, when a forward message via the telephone network is transmitted to the user's mobile phone 180 through the process of FIG. 3 and the security code is outputted through the web / application screen of the user terminal 170, A designated authentication code among the security codes output on the web / application screen of the user terminal 170 according to the message body area of the forward message and the guidance information output to at least one side of the web / The mobile phone 180 inputs the authentication code into the message body area of the reply message of the forward message (step 400).

If the authentication code selected from the security code output on the web / application screen of the user terminal 170 is input to the message body area of the reply write of the forward message, the mobile phone 180 transmits a reply message to the forward message The mobile phone number of the user is included as a calling number, the disposable telephone number is included as a called number, and the security code output through the Web / App screen of the user terminal 170 is input to the message body area (405) the reverse message including the authentication code (405) via the designated mobile telephone network, and the operation server (100) includes the disposable telephone number as the called number based on the reply writing of the forward message, (410) the reverse message forwarded from the reverse link 180 via one or more telephone networks.

If the reverse message forwarded by the mobile phone 180 including the disposable telephone number as a destination number is received via one or more telephone networks, the operation server 100 may include the disposable telephone number as a destination number and transmit the reverse- A message authentication procedure for authenticating the validity of the received reverse message is performed (415).

According to the first message authentication embodiment of the present invention, the operation server 100 reads out the number system of the origination number of the received reverse message, and confirms whether the number system corresponds to the mobile phone number. According to the method of the present invention, since the reverse message is a message received in the reverse direction with the reply of the forward message sent to the user's mobile phone 180, the calling number of the reverse message must be the mobile number of the user. However, a message (for example, SMS or the like) via the telephone network can not only be sent to the mobile phone 180, but can also be a wired telephone connected to a wired telephone network, an Internet telephone or a VoIP phone based on the Internet network, You can also send a message via the phone network through the designated gateway. The operation server 100 checks whether the number system of the origination number of the reverse message is a number system of the mobile phone number, and if the origination number of the reverse message is confirmed as the number system of the mobile number, (415) with a valid message available for the procedure.

According to the second message authentication embodiment of the present invention, the operation server 100 confirms the disposable telephone number corresponding to the called number of the received reverse message, and transmits the disposable telephone number and the mobile phone number It is checked whether the effective time for maintaining the mapping state has elapsed or has elapsed. According to the embodiment of the present invention, the operation server 100 can read the effective time counted and mapped with the disposable telephone number that received the reverse message, and confirm whether the valid time is before or after the effective time has elapsed. If the expiration time is before the expiration time, the operating server 100 may authenticate the reverse message with a valid message available for the authentication procedure (415).

According to the third message authentication embodiment of the present invention, when the operation server 100 sends a message via the telephone network in the data network, i (i > = 1) inserts that are automatically inserted into the message body area of the message You can keep your code. Preferably, when the i inserted codes are transmitted from a server on a data network, not a terminal on the telephone network (for example, the mobile phone 180 subscribed to the mobile telephone network) via the telephone network, Code that is set to be automatically inserted into the message body area of a message to be sent. For example, the code may include one or more codes of '[', 'Web', 'web', 'WEB', 'web', ' . Meanwhile, when the mobile phone number is included as the calling number and an uplink message including the disposable telephone number as the called number is received, the operating server 100 analyzes the code included in the message body area of the received uplink message And at least one of the i inserted codes is included. If the mobile terminal does not include at least one embedded code in the message body area of the reverse message, the operation server 100 determines that the reverse message is not transmitted via the telephone network on the data network, The mobile phone 180 subscribed to the telephone network, or the like) to authenticate the reverse message as a valid message available for the authentication procedure (415).

According to the fourth message authentication embodiment of the present invention, the operation server 100 inputs (inputs) the message body area of the reverse message through the key input means (for example, a key button, a touch screen, etc.) It is possible to keep j (j ≥ 1) exception codes that are not used as authentication codes among the possible codes. For example, when the authentication code is composed of only digits including '1' to '9' and '0', the operating server 100 transmits '1' J " including codes such as all the characters except for the numbers including '0' to '9' and '0' (including spaces such as 'space bar') and the like. Meanwhile, when the authentication code includes numbers and alphabets including '1' to '9' and '0', the operating server 100 transmits a code that can be input through key input means of the mobile phone 180 You can keep j exception codes that contain codes such as all letters and symbols except numbers and alphabets. Meanwhile, when the authentication code includes digits including '1' to '9' and '0' and Hangul words, the operating server 100 transmits a code that can be inputted through key input means of the mobile phone 180 You can keep j exception codes containing codes such as all characters and symbols except numbers and Hangul characters. Meanwhile, when the mobile phone number is included as the calling number and an uplink message including the disposable telephone number as the called number is received, the operating server 100 analyzes the code included in the message body area of the received uplink message Check whether it contains at least one exception code of j exception codes. If the at least one exception code is not included in the message body area of the uplink message, the operation server 100 determines that the input error (415), the authentication server may authenticate the reverse message as a valid message that can be used in the authentication procedure without considering the authentication code.

According to the fifth message authentication embodiment of the present invention, the operation server 100 authenticates the reverse message through at least part of at least two embodiments of the first to fourth message authentication embodiments (415) with a valid message available for the procedure, thereby not limiting the invention.

If the validity of the uplink message is not authenticated, the operation server 100 generates error information of the message authentication procedure 420, and transmits the error information to the user terminal 170 via the data / (425). The user terminal (170) receives the error information of the message authentication procedure through the data network and outputs the error information through the web / application screen (430). Meanwhile, the operation server 100 may discard the error message (435).

On the other hand, if the validity of the uplink message is not authenticated, the operation server 100 checks the origination number of the uplink message, and transmits the uplink message to the called party (440), after confirming the disposable telephone number and the mapped mobile phone number, and then authenticating whether the origination number of the reverse message matches the mobile phone number confirmed through the designated medium.

If the origination number of the reverse message does not match the mobile number identified through the designated medium, the operation server 100 generates the error information of the origination authentication procedure 420, The user terminal 170 processes the error information of the origination authentication procedure through the web / application screen of the user terminal 170 (step 425). The user terminal 170 receives the error information of the origination authentication procedure through the data network, (430). Meanwhile, the operation server 100 may discard the error message (435).

If the source number of the reverse message is matched with the mobile phone number confirmed through the designated medium, the operation server 100 checks the authentication code included in the message body area of the reverse message, After confirming the authentication code mapped with the mobile phone number corresponding to the calling number of the reverse message and / or mapped with the disposable telephone number corresponding to the called number of the reverse message through a designated medium for maintaining the information, (445) a code authentication procedure for authenticating whether an authentication code included in the message body area matches an authentication code identified through the designated medium.

If the authentication code included in the message body region of the reverse message does not match the authentication code mapped to the mobile phone number, the operation server 100 generates error information of the code authentication procedure 420, The user terminal 170 processes the error information of the code authentication procedure through the Web / App screen of the user terminal 170 (425), and the user terminal 170 transmits error information of the code authentication procedure through the data network And outputs it through the web / app screen (430). Meanwhile, the operation server 100 may discard the error message (435).

If the authentication code included in the message body area of the reverse message is matched with the authentication code mapped to the mobile phone number, the operation server 100 searches the service server 175 based on the results of the origination authentication and the code authentication, And provides the authentication result to the service server 175 or the user terminal 170 in step 450. The user terminal 170 generates a disposable message based on the service of the service server 175 (455), and the service server (175) provides the designated service through the web / application screen of the user terminal (170) via the data network based on the authentication results based on the disposable message can do.

100: Operation server 105: Authentication request confirmation part
110: mobile phone number confirmation unit 115: authentication code verification unit
120: disposable number confirmation unit 125: mapping maintenance unit
130: Message sending unit 135: Information output unit
140: message reception unit 145: message authentication unit
150: originating authentication unit 155: code authentication unit
160: Result processing unit 170:
175: service server 180: mobile phone

Claims (25)

And is executed through an operation server that can interoperate with a service server providing a designated service to a user and exchange messages via a user's cellular phone and a telephone network and interworking with a user terminal used by a user through a separate data network separated from the telephone network In the method,
The mobile communication terminal checks the mobile phone number of the user at the authentication for providing the service of the service server, verifies the authentication code generated using the service information (or a part of the service information) for providing the service of the service server, A procedure for identifying a dynamically determined disposable telephone number to be used as a calling number of a forward message to be transmitted through a telephone network including a mobile number as a called number and for use as a called number of a reverse message to be received in response to the forward message A first step of performing a first step;
A second step of mapping the mobile phone number of the user, the generated authentication code, and the disposable telephone number to maintain the mobile phone number for a specified valid time;
A disposable telephone number as a calling number, a forward message including a content of a message specified in a message body area is processed to be sent via a designated telephone network, and a separate message A third step of outputting a security code including the authentication code via a web / app screen of a user terminal via a data network;
The mobile phone number of the user is included as a calling number based on the reply writing of the forward message from the mobile phone of the user who has received the forward message, the calling number includes the disposable phone number as the called number, A fourth step of performing a message authentication procedure for authenticating whether a reverse message including an authentication code entered in a message body area by a user among the security codes output via the telephone network is validly received via the telephone network;
A source authentication procedure for verifying the originating number of the uplink message and authenticating whether the one-time phone number corresponding to the called number of the uplink message matches a mobile number mapped, upon receiving the uplink message, A fifth step of verifying the authentication code included in the mobile phone number and performing a code authentication procedure for authenticating whether the mobile phone number matches the authentication code mapped to the mobile phone number; And
And generating an authentication result for providing a service of the service server based on a result of the origination authentication and the code authentication, and providing the authentication result to the service server or the user terminal.
2. The method according to claim 1,
And a step of receiving an authentication code generated by hashing one or more pieces of information including information corresponding to service information (or a part of service information) for providing a service from the service server, .
2. The method according to claim 1,
Receiving service information for providing a service from the service server; And
And checking the generated authentication code by hashing one or more pieces of information including information corresponding to the service information (or a part of the service information) received from the service server, using the disposable reverse reply message Authentication method.
2. The method according to claim 1,
N number (1? N? N) telephone numbers which are not duplicated among the N telephone numbers from the number management module managing N (N? 2) telephone numbers are used as origination numbers of the forward messages, And confirming the disposable telephone number with a disposable telephone number to be used as a destination number of the reverse message.
2. The method according to claim 1,
(N ≥ 2) telephone numbers that can be generated by combining the dynamic number of the designated number with the designated telephone number system in the designated station number managed by the number management module, (1 < / = N < / = N) telephone number which is not used as a calling number of the forward message and identifies as a disposable telephone number to be used as a destination number of the reverse message. Authentication method using disposable reverse reply message.
2. The method according to claim 1,
When the mobile phone number of the user is confirmed,
N (1? N? N) telephone numbers that are not duplicated among the N telephone numbers from the number management module managing N (N? 2) telephone numbers and have no history mapped with the mobile number, As a calling number of a forward message including a calling number and a calling number of a reverse message including the mobile number as an originating number, using a disposable reverse reply message Authentication method using message.
2. The method according to claim 1,
When the mobile phone number of the user is confirmed,
(N ≥ 2) telephone numbers that can be generated by combining the dynamic number of the number of digits specified in the designated station number managed by the number management module with the designated telephone number system, and combine the non-duplicated numbers of digits specified in the designated station number (1 ≤ n ≤ N) phone number that is generated and has no history mapped to the mobile phone number is used as a calling number of a forward message including the mobile phone number as a called number, And confirming with a disposable telephone number to be used as a destination number of an uplink message including the disposable reverse reply message.
8. The method according to any one of claims 4 to 7,
N phone numbers that are not used as disposable telephone numbers for a certain period of time or longer,
N number of telephone numbers that are not used as one-time telephone numbers after the designated initialization,
A telephone number of N telephone numbers that has not been reused for a certain period of time after being used as a one-time telephone number,
And a telephone number of at least one of telephone numbers that have not been reused for the longest period after being used as a one-time telephone number among N telephone numbers.
2. The method according to claim 1,
Further comprising the step of storing and managing mapping history information on a mapping relationship between the mobile phone number and the disposable telephone number in a designated DB.
The method according to claim 1,
Wherein the second step further comprises counting a validity time for maintaining a mapping relationship between the mobile phone number, the authentication code, and the disposable telephone number,
Confirming whether the validity period of maintaining the mapping relationship has elapsed; And
And deactivating the mapping relationship between the mobile phone number, the authentication code, and the disposable telephone number when the validity time has elapsed.
The method of claim 1,
Includes an authentication code to be entered into a message body area of the reverse message, or
And a combination of the authentication code and any dummy code that is not input in the message body area of the reverse message.
2. The method according to claim 1,
The guidance information for guiding the user to input the authentication code output through the web / application screen of the user terminal into the message body area of the reverse message corresponding to the reply of the forward message and to return the guide information to the user terminal via the web / The method of claim 1, further comprising the step of processing the disposable reverse reply message.
2. The method according to claim 1,
An authentication code output from the web / application screen of the user terminal is input to a message body area of a forward message sent to the mobile phone number of the user, and is returned to the message body area of the reverse message corresponding to the reply of the forward message, The method comprising the steps of: (a) receiving a reverse response message from the mobile terminal;
2. The method according to claim 1,
The method of claim 1, further comprising the step of outputting, through the web / application screen of the user terminal, security information for guiding the user to safely use the forward message sent to the mobile phone number of the user, using the disposable reverse reply message Authentication method.
15. The method according to claim 14,
Content information for notifying a user that a direction message for authenticating service provision by a designated service provider is sent to the mobile phone number of the user,
Content information for informing the user that a forward message including the content of the message specified in the message body area is sent to the mobile phone number of the user,
And contents information indicating that a forward message including the disposable telephone number as a calling number has been sent to the mobile phone number of the user, in response to the disposable reverse reply message.
2. The method of claim 1,
A message sent from a telephone network to which a user's mobile phone is subscribed, verifies whether the cell phone number actually assigned to the cell phone that sent the message matches the calling number included in the message, Wherein the disposable telephone number is received via the communication company system as a disposable telephone number corresponding to the called number included in the message when the mobile number of the message matches the calling number of the message.
The method as claimed in claim 1,
Identifying a reverse message received at the designated disposable telephone number;
Reading the number system of the origination number of the reverse message and confirming whether the number system corresponds to the mobile phone number; And
And authenticating the reverse message as a valid message that can be used in the authentication procedure when the calling number of the reverse message is a number system of the mobile phone number.
The method as claimed in claim 1,
Identifying a reverse message received at the designated disposable telephone number; And
Confirming whether the valid time for maintaining the mapping state between the disposable telephone number and the mobile phone number that has received the reverse message has elapsed; And
And authenticating the uplink message with a valid message that can be used in the authentication procedure if the valid time is before the elapse of the valid time.
The method according to claim 1,
Further comprising the step of maintaining i (i > = 1) embedded codes set to be automatically inserted into the message body area of the message when the message is transmitted from the data network via the telephone network,
In the fourth step,
Analyzing a code included in the message body area of the reverse message received at the disposable telephone number to confirm whether the inserted code includes at least one of the i inserted codes; And
And if the at least one embedded code is not included in the message body area of the uplink message, authenticating the uplink message as a valid message usable in the authentication procedure. .
The method according to claim 1,
(J > = 1) exception codes that are not used as authentication codes among codes that can be input in the message body area of the reverse message in the user's cellular phone,
In the fourth step,
Analyzing a code included in the message body area of the reverse message received by the disposable telephone number and confirming whether it includes at least one exception code among j exception codes; And
Further comprising: confirming that the reverse message is validly received if the at least one exception code is not included in the message body area of the reverse message.
21. The method of claim 20,
And outputting error information for a message body area of the uplink message through a Web / App screen of the user terminal when the at least one exception code is included in the message body area of the uplink message. The authentication method using the disposable reverse reply message.
The method as claimed in claim 1,
And outputting the generated error information through the Web / App screen of the user terminal when an error occurs in the origination authentication or the code authentication.
23. The method of claim 22,
And does not send the error information to the user's cellular phone through the forward message when the error occurs.
A computer-readable recording medium storing a program for executing the method of claim 1.
A system capable of exchanging messages via a mobile phone and a telephone network of a user and interworking with a user terminal used by a user through a separate data network separated from the telephone network,
A mobile phone number confirmation unit for confirming the mobile phone number of the user;
An authentication code verifying unit for verifying an authentication code generated using service information (or a part of service information) for providing a designated service;
A mobile phone number of the user is included as a called number and is used as a calling number of a forward message to be transmitted through the telephone network and a dynamically determined disposable telephone number for use as a called number of an uplink message to be received in response to the forward message Disposable number identification unit;
A mapping unit configured to map the mobile phone number of the user, the generated authentication code, and the disposable telephone number to maintain the disposable telephone number for a designated valid time;
A message sending unit that includes the mobile phone number of the user as a destination number and includes the disposable telephone number as a calling number and processes a forward message including a content of a message specified in a message body area to be sent via a designated telephone network;
An information output unit for outputting a security code including the authentication code through a web / app screen of the user terminal via a separate data network separated from the telephone network;
The mobile phone number of the user is included as a calling number based on the reply writing of the forward message from the mobile phone of the user who has received the forward message, the calling number includes the disposable phone number as the called number, A message reception unit for receiving, via a telephone network, an uplink message including an authentication code input by a user in a message body area of the security code output through the telephone network;
A message authentication unit for authenticating the validity of the reverse message received via the telephone network;
An originating authentication unit for verifying the origination number of the reverse message when the reverse message is received and authenticating whether the disposable telephone number corresponding to the called number of the reverse message is matched with the mapped mobile number;
A code authentication unit for verifying an authentication code included in the message body area of the reverse message and verifying whether the authentication code matches the authentication code mapped to the mobile phone number; And
And a result processor for generating and providing an authentication result for providing the service based on the results of the origination authentication and the code authentication.

Images