KR100738913B1 - Method and System for Assigning Password to Authentication Short Message Service in Mobile Telecommunication System - Google Patents

Abstract

The present invention relates to a method and system for assigning a password to an authentication short message in a mobile communication system.

The present invention provides a web page including a mobile communication network for providing a mobile communication service including a short message service, a mobile communication terminal for receiving an authentication short message including a password code through the mobile communication network, and a server, and providing a web page from a user. An outgoing system for transmitting a signal according to the purchase of goods or service provision of the goods, an internet network for providing a connection path for the mobile communication terminal to access the outgoing system, and to transmit and receive data; and the web page provided by the outgoing system In the mobile communication system for outputting a password, and a password for the authentication short message comprising a personal terminal for purchasing goods or services provided according to the user's selection, receiving the signal from the originating system, Whether the signal is an authentication request signal If the authentication request signal, the authentication short message including the password code to provide a Short Message Service Center (SMSC) for transmitting to the mobile terminal.

According to the present invention, by assigning a password to the authentication short message in the mobile communication system, it is possible to prevent a crime that can additionally occur when the user loses the mobile communication terminal, the children pay bills using the mobile communication terminal of the parents It is effective to prevent it.

Authentication, authorization, password, authentication short message

Description

Method and System for Assigning Password to Authentication Short Message Service in Mobile Telecommunication System}

1 is a flowchart illustrating an electronic payment authentication method using a short message service in a conventional mobile communication system.

2 is a block diagram showing a schematic configuration of a mobile communication system for assigning a password to an authentication short message according to an embodiment of the present invention;

3 is a flowchart illustrating a method for assigning a password to an authentication short message in a mobile communication system according to an exemplary embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

210: mobile communication terminal 220: mobile communication network

222: base station transmitter 224: base station controller

226 mobile communication switching center 228 data core network

230: SMSC 240: origination system

250: internet network 260: personal terminal

The present invention relates to a method and system for assigning a password to an authentication short message in a mobile communication system. More specifically, in the mobile communication system, the SMSC receives a signal from the calling system, determines whether the received signal is an authentication request signal, and generates an authentication short message including a password code in the case of the authentication request signal. The mobile communication terminal transmitting to the terminal and receiving the authentication short message relates to a method and system for assigning a password to an authentication short message in a mobile communication system for setting a password in the authentication short message according to a password code.

 With the development of information and communication technology and the rapid development of computer network technology based on it, the number of users increases, and the expansion of e-commerce activities and services related to the use of wired / wireless computer network, and the like, "User Authentication" is very important. It has become an important and essential information processing process. "User authentication" is a technology that enables data providers and receivers to trust and verify each other in the process of data transmission and reception on the network, thereby enabling stable trading of goods, services, and financial transactions between providers and receivers. to be.

If user authentication is not done properly, service providers and sellers of goods will not be able to verify the user's credibility, so they will not be able to make stable payments for selling goods or using services. There will be many limitations in the provision of services. This is a problem in that the service user is not provided with high quality service.

As described above, user authentication becomes an essential matter in providing services through electronic commerce and computer networks. Recently, related technologies and methods have been proposed and implemented in various forms.

1 is a flowchart illustrating an electronic payment authentication method using a short message service in a conventional mobile communication system.

Referring to FIG. 1, the shopping mall server receives a purchase request signal for a product from a subscriber through a mobile communication network (S110).

When the subscriber selects the payment method using the mobile communication terminal, the payment authentication server determines whether the subscriber is registered in the payment authentication server (S112).

If the subscriber is not registered in step S112, the payment authentication server receives a terminal number, a password and a social security number from the subscriber, and registers the member (S114).

When the payment verification server registers as a member and transmits a purchase request signal to the shopping mall server, the payment verification server receives a terminal number and a password from the subscriber through the shopping mall server and receives information about the purchase price and the affiliate store number (S116). ).

The payment authentication server requests the subscriber's subscriber information input through the shopping mall server to the mobile communication service provider server (S118).

The mobile service provider server extracts the requested subscriber information from the subscriber database and transmits it to the payment authentication server (S120).

The payment authentication server determines a payment limit of the subscriber based on the received subscriber information (S122).

In addition, the payment authentication server evaluates the subscriber's credit rating according to the subscriber information stored in the member database, and transmits a payment authentication failure signal to the shopping mall server when it is determined that the subscriber is inappropriate to pay for the product purchase (S134). ).

If the payment authentication server determines that the subscriber is suitable to pay for the purchase order in the shopping mall server according to the credit rating of the subscriber, the payment authentication server generates and stores the authentication value using the algorithm of the processor provided therein. The server transmits to the service provider server (S124).

The mobile service provider server transmits the authentication value received from the payment authentication server to the mobile communication terminal in the form of a short message (S126).

The shopping mall server receives an authentication value from the subscriber through the computer (S128). Here, the authentication value is input from the subscriber through the web page provided by the shopping mall server.

The shopping mall server transmits the authentication value received from the subscriber to the payment authentication server (S130).

The payment authentication server compares the authentication value received from the shopping mall server with the authentication value transmitted to the mobile communication server (S132).

If the authentication values do not match in step S132, the payment authentication failure signal is transmitted to the shopping mall server (S134).

If the authentication values match in step S132, the payment authentication server notifies the shopping mall server and the mobile communication service provider server of the authentication result (S136).

The shopping mall server stores the authentication result in the sales database and delivers the authenticated payment product to the subscriber (S138).

Meanwhile, when a user uses the Internet, an authentication method that pays for the transaction of goods and the provision of a service through mobile payment and charges a fee for a mobile communication phone is mainly used. In the case of reporting to the mobile service provider, the mobile communication company stops only the outgoing call of the mobile communication terminal immediately, and stops the incoming call after a certain period of time.

Therefore, when a user who acquires a mobile terminal is authenticated using an authentication short message received by the mobile terminal obtained by entering the Internet site, and purchases an item or provides a service, the original owner of the mobile terminal is not intended. There may be a problem of being charged.

In order to solve the above problems, the present invention, in the mobile communication system, the SMSC receives a signal from the originating system, determines whether the received signal is an authentication request signal, and if the authentication request signal authentication including a password code Generating a short message and transmitting the short message to the mobile communication terminal, and receiving the authentication short message, the mobile communication terminal granting a password to the authentication short message in the mobile communication system for setting a password in the authentication short message according to the password code; The purpose is to provide a system.

Accordingly, according to a first object of the present invention, there is provided a mobile communication network for providing a mobile communication service including a short message service, a mobile communication terminal for receiving an authentication short message including a password code through the mobile communication network, and a server. An outgoing system for providing a web page and transmitting a signal according to a purchase or service provision of a user, an internet network for providing a connection path for the mobile communication terminal to access the outgoing system, and to transmit and receive data; A mobile communication system for outputting the web page provided by a system and for assigning a password to an authentication short message including a personal terminal for purchasing an item or receiving a service according to a user's selection, the mobile communication system comprising: Receiving the signal, the received phase The signal is judged whether or not the authentication request signal, and if the authentication request signal provides an SMSC (Short Message Service Center) for generating the authentication SMS message containing the password code sent to the mobile terminal.

According to a second object of the present invention, there is provided a mobile communication network for providing a mobile communication service including a short message service, a mobile communication terminal for receiving an authentication short message including a password code through the mobile communication network, purchase of goods from a user, An outgoing system for transmitting a signal according to service provision, an internet network for providing a connection path for the mobile communication terminal to access and transmit data, and to purchase goods or receive a service according to the user's selection In the method for giving a password to the authentication short message in a mobile communication system comprising a Short Message Service Center (SMSC) for generating the authentication short message comprising a personal terminal and a password code to transmit to the mobile communication terminal, a) the use from the originating system Receiving a signal according to the purchase of goods or the provision of a service by a person; (b) determining whether the signal received from the originating system is an authentication request signal; (c) generating the authentication short message when it is determined that the signal received in step (b) is the authentication request signal; And (d) transmitting the authentication short message to the mobile communication terminal.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

2 is a block diagram illustrating a schematic configuration of a mobile communication system for assigning a password to an authentication short message according to a preferred embodiment of the present invention.

A mobile communication system for assigning a password to an authenticated short message according to a preferred embodiment of the present invention includes a mobile communication terminal 210, a mobile communication network 220, and a short message service center (SMSC). 230), the originating system 240, the Internet network 250 and the personal terminal 260.

The mobile communication terminal 210 is wirelessly connected to the mobile communication network 220 to provide a voice call function for performing a normal voice call by wireless communication with another mobile communication terminal or a landline phone, and also uses the SMSC 230. To send and receive short messages, multimedia messages, and the like.

Here, the mobile communication terminal is a PDA (Personal Digital Assistant), cellular phone, PCS (Personal Communication Service) phone, Hand-Held PC (GSM), Global System for Mobile (GSM) phone, W-CDMA (Wide band CDMA) ), A CDMA-2000 phone, a mobile broadband system (MBS) phone, etc., and the type thereof may be determined according to the type of mobile communication system constituting the mobile communication network. Here, MBS phone refers to a mobile phone to be used in the fourth generation system currently being discussed.

To this end, the mobile communication terminal 210 creates, edits, or edits a short message or a multimedia message as well as a basic configuration as a mobile communication terminal for using a voice communication service and a wireless data service or a wireless Internet service provided by the mobile communication network 220. It is provided with a message application for performing operations such as modifying, storing, deleting, transmitting and receiving a short message or a multimedia message using the SMSC 230, and outputting the transmitted and received messages on the screen.

In addition, the mobile communication terminal 210 according to a preferred embodiment of the present invention receives an authentication short message including a password code from the SMSC 230 through the mobile communication network 220, the user in the authentication short message according to the password code Set a preset password from the password, and when entering the password to check the authentication short message, if the password is incorrect for a certain number of times, the authentication short message is not checked.

In addition, the mobile communication terminal 210 according to the preferred embodiment of the present invention includes a specific word including authentication, approval, payment, etc. in an authentication short message including a password code received by the mobile communication terminal 210. Even automatically set a preset password from the user.

The mobile communication network 220 includes a base station transmitter 222, a base station controller 224, a mobile switching center (MSC) 226, and a data core network (DCN) 228, It is wirelessly connected to the mobile communication terminal 210 and performs various functions for providing a mobile communication service such as a short message service provided from the SMSC 230.

Here, the base station transmitter 122 not only transmits the position information received from the mobile communication terminal 210 to the base station controller 224, but also wired / wireless conversion and transmission and reception of wireless signals between the mobile communication terminal 210 and the base station controller 224. And the like, and a network termination device directly connected to the mobile communication terminal 210. In addition, the base station transmitter 222 is disposed in units of cells and performs location registration to determine the location of the mobile communication terminal 210 existing in the cell area under its control.

The base station controller 224 controls the base station transmitter 222, and allocates and releases radio channels such as paging channels and traffic channels for the mobile communication terminal 210, and transmits the mobile communication terminal 210 and the base station transmitter 222. It performs output control, soft hand-off and hard hand-off decision, transcoding and vocoding, and operation and maintenance of wireless access network.

The mobile communication switching center 226 includes a plurality of electronic exchanges to perform basic and additional service processing, incoming and outgoing call processing of subscribers, location registration and handoff procedures, and interworking with other networks.

To this end, the mobile communication switching center 226 may include an access switching subsystem (ASS) that performs distributed call processing, an INS (interconnection network subsystem) that performs centralized call processing, and a centralized function of operation and maintenance (CCS). It may include a subsystem such as a Central Control Subsystem (LOC), a Location Registration Subsystem (LRS) that performs a function of storing and managing information on a mobile subscriber. In addition, the mobile communication switching center 226 may include an Asynchronous Transfer Mode (ATM) switch (not shown) to transmit data in a cell-based packet manner to increase transmission speed and efficiency of line use.

The data core network 228 may include a high speed data service for providing a packet data communication service, an internet / intranet access service, a virtual private network (VPN) access service, a simple IP and a mobile IP service, Performs Point-to-Point Protocol (PPP) authentication, billing, and packet compression.

The SMSC 230 uses the mobile communication network 220 to transmit and receive numbers and letters bidirectionally between various text delivery systems (PC communication system, Internet server system, mobile communication terminal, etc.) and subscribers. SMSC 230 according to a preferred embodiment of the present invention receives a signal from the originating system 240, determines whether the received signal is an authentication request signal, and if the authentication request signal authentication short including a password code A message is generated and transmitted to the mobile communication terminal 210.

The outgoing system 240 may be a system such as a shopping mall system, a financial company system, and a travel agency system, and includes a separate server in the system to provide a web page, and to purchase goods or provide a service from a user through the provided web page. A signal such as a purchase request signal, a payment request signal, a message request signal, and an authentication request signal is transmitted to the SMSC 230. Here, when the originating system 240 is an authentication company system, the authentication company system also generates an authentication short message including a password code.

The Internet network 250 includes various services existing in the TCP / IP protocol and its upper layers, namely, Hypertext Transfer Protocol (HTTP), Telnet, File Transfer Protocol (FTP), Domain Name System (DNS), and Simple Mail Transfer Protocol (SMTP). ), A global open computer network architecture that provides Simple Network Management Protocol (SNTP), Network File Service (NFS), and Network Information Service (NIS). The internet network 250 according to the preferred embodiment of the present invention is a communication network that provides a connection path for the mobile communication terminal 210 to access and transmit data to and from the source system 240.

The personal terminal 260 according to the preferred embodiment of the present invention connects to the originating system 240 using the Internet network 250 according to a user's key manipulation, and outputs a web page provided by the originating system 240. , A computer for purchasing an item or receiving a service according to a user's selection, and may be any one of a desktop computer and a notebook computer, and for storing a web browser and a program for accessing the Internet network 250. It has a built-in memory and control unit for executing and controlling programs.

3 is a flowchart illustrating a method for assigning a password to an authentication short message in a mobile communication system according to an exemplary embodiment of the present invention.

Referring to FIG. 3, the SMSC 230 receives a signal according to a user's purchase of goods or a service provided from the originating system 240 (S310).

The SMSC 230 determines whether the signal received from the originating system 240 is an authentication request signal (S320).

If the signal received in step S320 is an authentication request signal, the SMSC 230 generates an authentication short message (S330). Here, the authentication short message generated by the SMSC 230 includes a password code necessary for the mobile communication terminal 210 to set a preset password from the user in the authentication short message.

If the signal received in step S320 is not an authentication request signal, the SMSC 230 generates a general short message (S322).

The SMSC 230 transmits the generated general short message to the mobile communication terminal 210 (S324).

The SMSC 230 transmits the generated authentication short message to the mobile communication terminal 210 (S340). Here, the mobile communication terminal 210 receiving the authentication short message sets a preset password from the user in the authentication short message according to the password code included in the authentication short message.

The above description is merely illustrative of the technical idea of the present invention, and those skilled in the art to which the present invention pertains may make various modifications and changes without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, according to the present invention, by assigning a password to the authentication short message in the mobile communication system, it is possible to prevent a crime that can additionally occur when the user loses the mobile communication terminal, the children are parents of the mobile communication terminal There is an effect that prevents the payment to be tampered with.

Claims (7)

A mobile communication network providing a mobile communication service including a short message service, a mobile communication terminal for receiving an authentication short message including a password code through the mobile communication network, and a server to provide a web page, and to purchase an item from a user. B) a transmission system for transmitting a signal according to service provision, an internet network providing a connection path for the mobile communication terminal to access and transmit data, and output the web page provided by the transmission system; In the mobile communication system for giving a password to the authentication short message comprising a personal terminal to purchase goods or receive a service according to the user's selection, Receives the signal from the originating system, determines whether the received signal is an authentication request signal, and if the authentication request signal is generated, generates the authentication short message including the password code and transmits it to the mobile communication terminal. Short Message Service Center (SMSC) Including, but the mobile communication terminal is a mobile terminal for assigning a password to the authentication short message, characterized in that the user is not able to check the authentication short message when the event of the wrong number of passwords for the authentication short message occurs a specific number of times; Communication system. The method of claim 1, And if the originating system is an authentication company system, the authentication company system also generates a password for the authentication short message including the password code. The method of claim 1, The mobile communication terminal assigns a password to the authentication short message, characterized in that for setting the preset password in the authentication short message according to the password code. delete The method of claim 1, The mobile communication terminal automatically assigns a password to the authentication short message, wherein the predetermined short message is automatically set even when a specific word including authentication, approval, and payment is included in the authentication short message received. system. A mobile communication network providing a mobile communication service including a short message service, a mobile communication terminal receiving an authentication short message including a password code through the mobile communication network, and an outgoing transmission of a signal according to the purchase of a product or service provision from a user A system, an internet network for providing a connection path for the mobile communication terminal to access and transmit data, a personal terminal for purchasing goods or providing a service according to a user's selection, and a password code; In the method for giving a password to the authentication short message in a mobile communication system including a Short Message Service Center (SMSC) for generating the authentication short message and transmits to the mobile communication terminal, (a) receiving a signal according to the user's purchase of goods or service provision from the originating system; (b) determining whether the signal received from the originating system is an authentication request signal; (c) generating the authentication short message when it is determined that the signal received in step (b) is the authentication request signal; And (d) transmitting the authentication short message to the mobile communication terminal; Including the, but the mobile terminal is a password to the authentication short message in the mobile communication system, characterized in that the user does not check the authentication short message when the event occurs a wrong number of times for the authentication short message How to give. The method of claim 6, After step (d) above, (e) generating a general short message if the signal received in step (b) is not the authentication request signal; And (f) transmitting the general short message to the mobile communication terminal Method for granting a password to the authentication short message in a mobile communication system characterized in that it further comprises.

Images