KR100790496B1 - Authentication Method, System, Server and Recording Medium for Controlling Mobile Communication Terminal by Using Authentication Key - Google Patents

Abstract

The present invention relates to an authentication method, a system and a recording medium for controlling a mobile terminal using an authentication key.

The present invention provides a user terminal for generating and transmitting an authentication key to request authentication, and upon receiving notification of waiting for authentication, request and receive an authentication code, and generate and transmit a combination authentication information by combining the authentication key and the authentication code; When the authentication key is received from the user terminal, the authentication key is delivered, the temporary authentication information is requested, received and stored, the waiting for authentication to the user terminal, and the combination authentication information and the temporary authentication information are received by receiving the combination authentication information from the user terminal. A mobile communication terminal which allows the control of the user terminal only when the authentication is successful by performing authentication by comparing; And receiving the authentication key from the mobile communication terminal and receiving the temporary authentication information, generating an authentication code, generating the temporary authentication information by combining the authentication code with the authentication key, and transmitting the temporary authentication information to the mobile communication terminal, and requesting the authentication code from the user terminal. Provided is an authentication system for controlling a mobile communication terminal using an authentication key, characterized in that it comprises an authentication server for transmitting the authentication code to the user terminal.

According to the present invention, it is possible to authenticate the external device to control the mobile communication terminal, it is possible to prevent the content stored in the mobile communication terminal to be exposed to illegal users or by unauthorized methods to protect the privacy and expensive content In addition to preventing the illegal use of the mobile communication terminal, it is possible to prevent the use of the mobile communication terminal illegally, thereby preventing the innumerable damage of the mobile communication subscriber using the mobile communication terminal.

Mobile terminal, external device, computer, authentication, content, security, control, password

Description

Authentication Method, System, Server and Recording Medium for Controlling Mobile Communication Terminal by Using Authentication Key}

1 is a block diagram schematically illustrating an authentication system for controlling a mobile terminal using an authentication key according to a first embodiment of the present invention;

2 is a flowchart illustrating an authentication method for controlling a mobile terminal using an authentication key according to the first embodiment of the present invention.

3 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an authentication key according to a second embodiment of the present invention;

4 is a block diagram schematically illustrating an authentication system for controlling a mobile terminal using an encryption algorithm according to a third embodiment of the present invention;

5 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an encryption algorithm according to a third embodiment of the present invention;

6 is a block diagram schematically illustrating an authentication system for controlling a mobile communication terminal using an encryption algorithm according to a fourth embodiment of the present invention;

7 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an encryption algorithm according to a fourth embodiment of the present invention;

8 is a flowchart illustrating an authentication method for controlling a mobile terminal over time according to a fifth embodiment of the present invention;

9 is a block diagram schematically illustrating an authentication server according to a third embodiment and a fourth embodiment of the present invention;

10 is an exemplary view showing a user information table according to a preferred embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

110 and 410: user terminal 120 and 610: mobile communication terminal

130: mobile communication network 140: Internet

150, 420, 620: authentication server

The present invention relates to an authentication method, a system and a recording medium for controlling a mobile terminal using an authentication key. More specifically, in order to prevent unauthorized use of an external device such as an illegal user or an unauthorized computer to download the contents by controlling the mobile communication terminal, the mobile communication service and the Internet service may be used when the mobile communication service and the Internet service are available. The present invention relates to a method, a system, and a recording medium for authenticating a user or an external device to control a mobile communication terminal using an authentication key through an interworking between a communication terminal and an external device and an authentication server on a network.

BACKGROUND With the rapid development of computer, electronic and communication technologies, various wireless communication services using wireless communication networks have been provided. The most basic wireless communication service is a voice call service that allows wireless communication between mobile subscribers using a mobile communication terminal regardless of time and place. In recent years, a wireless data service has emerged, which allows a mobile communication subscriber to perform data communication using a wireless communication network while the mobile subscriber is moving.

Accordingly, the mobile subscribers can freely move anywhere at any time by using the voice call service and make voice calls with the other party, as well as various information necessary for life using the wireless data service, for example, news, weather, sports, and securities. , Exchange rates, traffic information, etc. can be provided while moving in a variety of forms, such as text, voice, images.

Such wireless communication services include a mobile communication service implemented as a code division multiple access (CDMA) 2000 system, a wideband CDMA (WCDMA) system, a wireless local area network (WLAN) service, and a wireless internet broadband (WiBro) service. Etc. Wireless communication services such as mobile communication service, wireless LAN service, WiBro service, etc. have been recently specialized in high speed data communication service due to rapid technology development.

Accordingly, a subscriber of a wireless communication service (hereinafter referred to as a 'wireless subscriber') may transmit and receive various data by wirelessly accessing another subscriber or the Internet wirelessly while moving. That is, the wireless subscriber not only carries out voice communication while carrying a terminal (hereinafter referred to as a "wireless terminal") that performs a wireless communication service, but also accesses the Internet by using wireless Internet technology to access text, images, Multimedia data services such as voice or video are provided.

Recently, with the development of the Internet and multimedia data technology, a content provider (CP) that provides various contents such as multimedia communication, network games, video games, mobile photobooks, and broadcast programs has emerged. It also plays the role of a multimedia terminal that downloads, stores and uses various contents provided by.

In this way, the wireless terminal does not merely serve as a communication means for voice call or data communication, but also serves as a multipurpose electronic communication device that downloads, stores and utilizes various contents. A technology has been developed that connects an external device to download content stored in a wireless terminal to an external device or uploads to a wireless terminal stored in an external device to share and use the stored content between the wireless terminal and the external device. There is an advantage that can utilize the content stored in their wireless terminal or an external device more diversely.

However, the content sharing technology between the wireless terminal and the external device includes a problem of illegal use of content. In other words, the contents provided by the content provider may be provided free of charge, but are usually provided for a fee. If the illegal user other than the user who purchased the content provided for the fee is used without the permission of the content provider, the copyright is used. There is a problem of infringement.

In addition, a user who uses a wireless terminal stores various text information such as a video, a video or a recorded voice, a short message, a multimedia message, a schedule, a phone number, and the like that are recorded on the wireless terminal. When an illegal user downloads content such as video, video, voice, and text information by controlling the wireless terminal using an external device, the user's important information such as personal information or privacy is violated. There is a problem that is exposed.

However, until now, when downloading contents stored in the wireless terminal to an external device or uploading contents of the external device to the wireless terminal, a person who wants to synchronize and use the wireless terminal and the external device through a program installed on the external device By inputting an arbitrarily set ID and password, there is a problem in that the wireless terminal can be easily controlled by an external device without additional authentication process, so that the control of the wireless terminal is not strictly authenticated.

In order to solve such a problem, the present invention uses both a mobile communication service and an Internet service in order to prevent an illegal user or an external device such as an unauthorized computer from illegally using the mobile communication terminal to download contents. If available, a method, system and recording medium for authenticating a user or an external device that wants to control a mobile communication terminal using an authentication key through interworking between the mobile communication terminal and an external device and an authentication server on a network may be provided. Its main purpose is.

In order to achieve the above object, the present invention, in the system for performing the authentication for control, the authentication key is generated and sent to request authentication, and if the notification waiting for authentication request and receive the authentication code, authentication key and authentication A user terminal for generating a combination authentication information by combining the codes and transmitting the combined authentication information; When the authentication key is received from the user terminal, the authentication key is delivered, the temporary authentication information is requested, received and stored, the waiting for authentication to the user terminal, and the combination authentication information and the temporary authentication information are received by receiving the combination authentication information from the user terminal. A mobile communication terminal which allows the control of the user terminal only when the authentication is successful by performing authentication by comparing; And receiving the authentication key from the mobile communication terminal and receiving the temporary authentication information, generating an authentication code, generating the temporary authentication information by combining the authentication code with the authentication key, and transmitting the temporary authentication information to the mobile communication terminal, and requesting the authentication code from the user terminal. Provided is an authentication system for controlling a mobile communication terminal using an authentication key, characterized in that it comprises an authentication server for transmitting the authentication code to the user terminal.

Further, according to another object of the present invention, in the method for authenticating a user terminal to control the mobile communication terminal in conjunction with the authentication server, (a) receiving the authentication key from the mobile communication terminal received the authentication key from the user terminal; Receiving and requesting temporary authentication information; (b) generating an authentication code; (c) generating a temporary authentication information by combining the authentication key and the authentication code and transmitting the temporary authentication information to the mobile communication terminal; And (d) receiving an authentication code from the user terminal and transmitting the authentication code to the user terminal.

According to still another object of the present invention, there is provided a near field communication means for communicating with a mobile communication terminal, a network communication means for communicating with an authentication server, and a control means for performing authentication for controlling a mobile communication terminal. In the computer, software executed by the control means to perform authentication, comprising: a function of registering user information by sending user information to an authentication server; Generating an authentication key, transmitting the authentication key to the mobile communication terminal, and requesting authentication to control the mobile communication terminal to receive and store temporary authentication information from the authentication server and to transmit an authentication waiting response; Receiving an authentication waiting response from the mobile communication terminal, requesting and receiving an authentication code from the authentication server; And a combination of the authentication key and the authentication code to generate a combination authentication information, transmit the authentication information to the mobile communication terminal, receive the authentication result, and control the mobile communication terminal according to the authentication result. A computer readable recording medium having recorded therein authentication software for authenticating communication terminal control is provided.

In addition, according to another object of the present invention, the local area communication means for performing wired and wireless communication with the user terminal, the wireless communication means for performing wireless communication to communicate with the authentication server using a mobile communication network, controlling the overall operation A software for authenticating a user terminal in a mobile communication terminal including control means, comprising: a function of transmitting an authentication key to an authentication server using a mobile communication network and requesting temporary authentication information when receiving an authentication key from the user terminal; Receiving temporary storage information from the authentication server and storing the temporary authentication information, and notifying the user terminal that the authentication terminal is in a waiting state for authentication; Receiving combination authentication information from the user terminal, performing authentication by comparing the combination authentication information and the temporary authentication information, and then generating and transmitting an authentication result to the user terminal; And a function for receiving a control command from a user terminal that has been successfully authenticated and operating according to the control command. Provide the medium.

Further, according to another object of the present invention, in a system for performing authentication for control, after generating an authentication key and sending it to the authentication server to request authentication and receiving an authentication code, a combination of the authentication key and the authentication code Generating a combination authentication information and transmitting the combination authentication information; Receives and stores temporary authentication information from the authentication server, receives combination authentication information from the user terminal, and performs authentication by comparing the combination authentication information with the temporary authentication information. terminal; And an authentication server that generates an authentication code and transmits the authentication code to the user terminal upon receiving the authentication key from the mobile communication terminal, and generates temporary authentication information by combining the authentication key and the authentication code to transmit to the mobile communication terminal. An authentication system for controlling a mobile communication terminal using an authentication key is provided.

In addition, according to another object of the present invention, in the method for authenticating a user terminal to control the mobile communication terminal in conjunction with the authentication server, (a) receiving the authentication key from the user terminal to generate an authentication code and the user terminal Transmitting to; And (c) generating a temporary authentication information by combining the authentication key and the authentication code and transmitting the temporary authentication information to the mobile communication terminal.

In addition, according to another object of the present invention, in a method for performing authentication according to time for a user terminal intended to use a mobile communication terminal in a mobile communication terminal, (a) authentication is successful to allow control of the user terminal step; (b) storing an authentication success time which is a time at which authentication is successful, and calculating and storing the authentication expiration time; (c) receiving a control command from a user terminal; (d) checking whether the current time is the authentication expiration time; And (e) informing the user terminal that the authentication has expired and blocking the control when the current time is the authentication expiration time.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

1 is a block diagram schematically illustrating an authentication system for controlling a mobile communication terminal using an authentication key according to a first embodiment of the present invention.

An authentication system for controlling a mobile communication terminal using an authentication key according to the first embodiment of the present invention includes a user terminal 110, a mobile communication terminal 120, a mobile communication network 130, an internet 140, and an authentication server 150. ).

The user terminal 110 is a computer that communicates with various network servers through the Internet 140 and is connected to the mobile communication terminal 120 to control the mobile communication terminal 120. The user terminal 110 may be a desktop computer, a notebook computer, a work computer. It may be a station or the like, and may include a web browser for accessing the Internet, a memory for storing a program, a microprocessor for executing and operating a program, and the like.

The user terminal 110 according to the first embodiment of the present invention is a wired / wireless communication device such as a mobile communication terminal 120, a RS-232C (Recommended Standard-232C), a universal serial bus (USB), an infrared data association (IrDA), and the like. Is connected by wire or wireless by using and connected to the authentication server 150 using TCP / IP through the Internet 140, the mobile communication terminal 120 and the mobile terminal through the interworking with the authentication server 150 Perform an authentication procedure to control 120.

To this end, the user terminal 110 according to the first embodiment of the present invention communicates with the authentication server 150 through a short-range communication means for performing wired or wireless communication with the mobile communication terminal 120 and the Internet 140. A user terminal by executing network communication means for transmitting / receiving, input / output means for receiving commands and data from a user and outputting information, storage means for storing a first authentication module which is software for performing the above-described authentication procedure, and an authentication module; Control means for controlling 110 to perform the above-described authentication procedure.

Here, the first authentication module is software for performing a procedure for authentication, which is executed by the control means so that the control means receives user information for allowing the user terminal 110 to control the mobile communication terminal 120. A function of registering user information by transmitting the user information, and entering a control mode for controlling the mobile communication terminal 120, generating an authentication key and transmitting the request to the mobile communication terminal 120 to request authentication. Control to receive and store temporary authentication information from the authentication server 150, and upon receiving an authentication wait response from the mobile communication terminal 120, request and receive an authentication code from the authentication server 150, and an authentication key. And the combination of the authentication code to generate a combination authentication information sent to the mobile communication terminal 120 and receives the authentication result according to the mobile communication terminal It includes the function of controlling the terminal 120.

In addition, the first authentication module analyzes the authentication result received from the mobile communication terminal 120 to check the control level, grasps the control right to control the mobile communication terminal 120 according to the control level, and moves according to the control right. And a function of controlling the communication terminal 120.

The mobile communication terminal 120 is a wireless terminal that performs a mobile communication service including a voice call service, a wireless internet service, and a short message service provided by the mobile communication network 130, and includes video, video, voice, game, and text information. Store various contents such as the memory.

The mobile communication terminal 120 according to the first embodiment of the present invention includes a short range communication means for performing wired and wireless communication with the user terminal 110, a wireless communication means for performing communication with the mobile communication network 130, and a user terminal ( 110 and a storage means for storing a second authentication module, which is software for performing an authentication procedure in association with the authentication server 150, and controlling the mobile communication terminal 120 to execute the authentication procedure by executing the second authentication module. Means.

Here, the second authentication module is a software for performing a procedure for authentication. When the second authentication module receives an authentication key for control from the user terminal 110, the second authentication module transmits the authentication key to the authentication server 150 using the mobile communication network 120. A function for requesting temporary authentication information, a function for receiving and storing temporary authentication information from the authentication server 150 and for notifying the user terminal 110 that the authentication is in a waiting state, and upon receiving the combination authentication information from the user terminal 110, the temporary authentication. And a function of generating an authentication result by comparing the information with the combined authentication information and transmitting the result to the user terminal 110 and receiving a control command from the user terminal 110 that has successfully authenticated and operating according to the control command.

Meanwhile, the mobile communication terminal 120 transmits an authentication key to the authentication server 150 and receives temporary authentication information from the authentication server 150, preferably using a short message service. In addition, the mobile communication terminal 120 preferably uses an extended short message service that does not output the message content on the screen. In the case of using a conventional short message service, a user or an illegal user can check the contents of a message, that is, an authentication key for authentication, temporary authentication information, etc. through message software such as a message manager provided in the mobile communication terminal 120. This is because there is a concern that the authentication can be arbitrarily controlled.

The mobile communication network 130 is a network implemented as a mobile communication system providing a mobile communication service including a voice call service, a short message service, and a wireless data service to the mobile communication terminal 120, and authenticates with the mobile communication terminal 120. Relays data transmitted and received between the server 150. Here, the mobile communication system may be a short message service such as a code division multiple access (CDMA) 2000 system, a wideband CDMA (WCDMA) system, a wireless local area network (WLAN) system, or a wireless internet broadband (WiBro) system. It may be a wireless communication system that provides a wireless data service.

The Internet 140 is a service that exists in the TCP / IP protocol and its upper layers, namely Hypertext Transfer Protocol (HTTP), Telnet, File Transfer Protocol (FTP), Domain Name Server (DNS), and Simple Mail Transfer Protocol (SMTP). , An open computer network structure that provides a simple network management protocol (SNTP), a network file service (NFS), and a network information service (NIS), and transmits and receives data between the user terminal 110 and the authentication server 150. Relays

The authentication server 150 according to the first embodiment of the present invention is implemented as a general network server, receives a request for registration of user information from the user terminal 110, and receives an authentication key from the mobile communication terminal 120. When the temporary authentication information is requested, an authentication code is generated using an encryption algorithm, and then the temporary authentication information combining the authentication key and the authentication code is generated and transmitted to the mobile communication terminal 120.

In addition, if the authentication server 150 according to the first embodiment of the present invention receives the authentication key from the user terminal 110 and requests an authentication code, the user terminal 110 or the user terminal ( Check whether the user using 110 is a legitimate user, and transmits the authentication code to the user terminal (110).

In addition, the authentication server 150 according to the first embodiment of the present invention may store and manage the history of the authentication processing result, that is, the authentication history, which is the result of the authentication, and provide it to the administrator, the user terminal 110 or If there is a request from the mobile communication terminal 120 may provide a history of authentication.

2 is a flowchart illustrating an authentication method for controlling a mobile terminal using an authentication key according to a first embodiment of the present invention.

In order to control the mobile terminal 120, the user may use user information such as an ID and password for logging into the authentication server 150, and an IP address of the user terminal 110 to control the mobile terminal 120. When inputting to the terminal 110 and instructing the registration of the user information, the user terminal 110 generates the user information by processing the input data, transmits the authentication server 150 and requests the registration of the user information (S202). .

The authentication server 150 stores and registers the received user information in a database and transmits the registration to the user terminal 110 to respond to user information registration (S206). The user terminal 110 receives the output on the screen and the user confirms that the user information is normally registered. In this case, the authentication server 150 may notify the user terminal 110 of the response to the user information registration through the Internet 140 as described above, but other communication means such as a wired telephone or another mobile communication terminal of the user. It could be used.

After the user information is registered as described above, when the user attempts to control the mobile communication terminal 120 by operating the user terminal 110, the user terminal 110 enters the control mode to store the first authentication module stored in the memory. Start the procedure for authentication by running. That is, the user terminal 110 generates an authentication key, transmits it to the mobile communication terminal 120, and requests authentication (S208). Here, the authentication key is, for example, a 4-bit key value arbitrarily generated by the authentication module.

When receiving the authentication key, the mobile communication terminal 120 executes the second authentication module, creates the received authentication key as an extended short message, and transmits the received authentication key to the authentication server 150 using the mobile communication network 130. Request temporary authentication information for authenticating 110 (S210).

The authentication server 150 checks the authentication key upon receiving the extended short message, generates arbitrary authentication codes for authenticating the user terminal 110, and generates temporary authentication information combining the received authentication key and the authentication code. In operation S212, the mobile communication network 130 transmits the extended short message to the mobile communication terminal 120 (S214). Here, the authentication code may be, for example, an 8-bit authentication code, and thus, the temporary authentication information may include 12 bits in which a 4-bit authentication key and an 8-bit authentication code are combined. The mobile communication terminal 120 stores the received temporary authentication information in a memory and notifies the user terminal 110 of the waiting state for authentication (S218).

The user terminal 110 notified of the waiting state for authentication transmits the authentication key transmitted to the mobile communication terminal 120 in step S208 to the authentication server 150 to request an authentication code (S220). In this case, the user terminal 110 may request authentication for the IP address of the user and the user terminal 110 by transmitting the user information registered in step S202 to step S206.

When the authentication server 150 that has received the authentication code is requested to authenticate using the user information as described above, whether the ID and password of the user and the IP address match the registered user ID and password, and registered in the corresponding ID. Check whether it matches the IP address (S222), if it does not match, transmits an authentication failure response to the user terminal 110 (S224), and if it matches, transmits to the mobile communication terminal 120 in step S212. The authentication code is transmitted to the user terminal 110 to notify the authentication code response (S226). Here, when the authentication server 150 is not requested to authenticate using the user information, only the authentication code is transmitted to the user terminal 110 as in step S226.

The user terminal 110 which has received the authentication failure response as in step S224 does not control the mobile communication terminal 120, and the user terminal 110 which has received the authentication code and received the authentication code response as in step S226 is received. The combination authentication information is generated by combining the authentication code and the authentication key sent to the mobile communication terminal 120 in step S208 (S228). Here, since the authentication key is 4 bits and the authentication code is 8 bits, the combined authentication information is also 12 bits.

The user terminal 110 generating the combination authentication information transmits the combination authentication information to the mobile communication terminal 120 (S230), and the mobile communication terminal 120 receiving the combination authentication information transmits the authentication server 150 in step S214. The authentication is performed by comparing the temporary authentication information received from the combination authentication information with each other and confirming whether they match with each other (S232).

The mobile communication terminal 120 determines that the authentication failed when the temporary authentication information and the combination authentication information do not match as a result of the check in step S232, and notifies the user terminal 110 of the authentication failure response indicating that authentication failed ( In step S234, when the control of the user terminal 110 is not allowed and the temporary authentication information and the combination authentication information match, it is determined that the authentication is successful, and the user terminal 110 notifies the authentication success response indicating that the authentication is successful (S236). ), The control of the user terminal 110 is allowed.

The user terminal 110 notified of the authentication success response from the mobile communication terminal 120 transmits an AT command such as an external interface (EIF) to the mobile communication terminal 120 and transmits a control command (AT command) through the control command. 120 can be controlled.

In the above, the user terminal 110 transmits an authentication key to the mobile communication terminal 120 and requests authentication so that the mobile communication terminal 120 receives temporary authentication information from the authentication server 150 and the authentication waiting state is established. The first embodiment of receiving the authentication code from the authentication server 150 has been described.

Hereinafter, the user terminal 110 does not transmit the authentication key to the mobile communication terminal 120, but the user terminal 110 transmits the authentication key directly to the authentication server 150 so that the authentication server 150 moves. The method of transmitting the temporary authentication information to the communication terminal 120 and the authentication code to the user terminal 110 will be described with reference to the second embodiment.

In the authentication system for controlling the mobile communication terminal using the authentication key according to the second embodiment of the present invention, the user terminal 110, the mobile communication terminal 120, and the user terminal 150 in the system described with reference to FIG. 1 will be described later. Operation as described in the method and other details are the same, so the detailed description is omitted.

3 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an authentication key according to a second embodiment of the present invention.

Since the steps S302 to S306 are the same as the method for registering the user information with the authentication server 150 as in the steps S202 to S206 described with reference to FIG. 2, a detailed description thereof will be omitted.

The user terminal 110 that has registered the user information enters a control mode to control the mobile communication terminal 120, generates an authentication key, and transmits the authentication key to the authentication server 150 to request authentication (S308). In this case, when performing authentication of the user by using the user information, the authentication server 150 checks whether the user information and the registered user information match (S310), and if not, sends an authentication failure response to the user terminal. In step S312, if there is a match, an authentication code is generated (S314), and the authentication code is sent to the user terminal 110 to notify the authentication code response (S316).

In addition, the authentication server 150 generates temporary authentication information by combining the generated authentication code and the authentication key, and transmits the temporary authentication information to the mobile communication terminal 120 (S318). The mobile communication terminal 120 receiving the temporary authentication information stores the temporary authentication information (S320) and notifies the user terminal 110 of the waiting state for authentication (S322).

The user terminal 110 notified of the waiting state for authentication generates a combination authentication information by combining the generated authentication key and the authentication code received from the authentication server 150 (S324), and as described through steps S230 to S236. When the combination authentication information is transmitted to the mobile communication terminal 120 (S326), the mobile communication terminal 120 performs authentication by comparing the temporary authentication information with the combination authentication information (S328), and if it does not match, the authentication failure response. Notify the user terminal 110 (S330), and if it matches, notifies the user terminal 110 of the successful authentication response (S332), and informs the user terminal 110 of the authentication result.

In the above, the authentication system and method for controlling the mobile communication terminal using the authentication key according to the first and second embodiments of the present invention have been described with reference to FIGS. In the authentication system and method for controlling a mobile communication terminal using an authentication key according to the first and second embodiments of the present invention, the user terminal 110 can use the Internet 140, and the mobile communication terminal 120 moves. This is possible only when the mobile communication service can be performed using the communication network 120. However, because of the spatial and temporal constraints due to the characteristics of the Internet and mobile communication services, an authentication scheme for controlling a mobile terminal should be considered when the Internet and mobile communication services are not provided.

Hereinafter, when the user terminal 110 can access the Internet 150 and the mobile communication terminal 120 cannot perform a mobile communication service through the third and fourth embodiments, respectively, and the user terminal 110. An authentication system and method for controlling the mobile communication terminal 120 when the user cannot access the Internet 150 and the mobile communication terminal 120 can perform a mobile communication service will be described.

4 is a block diagram schematically illustrating an authentication system for controlling a mobile communication terminal using an encryption algorithm according to a third embodiment of the present invention.

An authentication system for controlling a mobile communication terminal using an encryption algorithm according to a third embodiment of the present invention includes a mobile communication terminal 120, the Internet 140, a user terminal 410, and an authentication server 420.

The mobile communication terminal 120 is the same as the conventional mobile communication terminal described with reference to FIG. That is, in the description of the mobile communication terminal 120 described with reference to FIG. 1, the mobile communication terminal 120 stores contents as an object of control rather than interworking with the user terminal 110 and the authentication server 410. Mobile communication terminal. The Internet 140 relays data transmitted and received between the user terminal 410 and the authentication server 420 as described above with reference to FIG. 1.

The user terminal 410 performs authentication for controlling the mobile communication terminal 120 in conjunction with the authentication server 420 as well as the role of the conventional computer described above. That is, the user terminal 410 according to the third embodiment of the present invention is an input / output means for receiving data and commands from a user and outputting information, a short-range communication means for communicating with the mobile communication terminal 120, and an authentication server. The mobile communication terminal is provided with a network communication means for performing data communication with the 150, a storage means for storing the third authentication module for performing the above-described authentication, and a control means for controlling the overall operation of the user terminal 110. When controlling the 120, the third authentication module is executed to perform authentication through interworking with the authentication server 150.

Here, the third authentication module is a function that is executed by a control means to register login information with the authentication server 420, accesses the authentication server 420 to request login, and receives or generates a random number upon successful login. Storing and transmitting to the authentication server 420, receiving and storing encrypted first authentication information from the authentication server 620, generating second authentication information by processing the stored random number, and first authentication information; By comparing the second authentication information and confirming whether or not match, the software performs a function of performing the control of the mobile communication terminal 120 only when authentication is successful.

When the authentication server 420 according to the third embodiment of the present invention receives the login information from the user terminal 410 and receives a registration request, the authentication server 420 stores and registers the login information. When the login request is received from the user terminal 410, the login is performed. When the request is made, the received login information and the stored login information are compared and checked to determine whether the login is successful, and the login result is transmitted to the user terminal 410, and the user terminal 410 succeeded in logging in. When receiving a random number from the first authentication information encrypted using an encryption algorithm such as MD5 (Message Digest 5) algorithm or CAVE (Cellular Authentication & Voice Encryption) algorithm is generated and transmitted to the user terminal 410.

In addition, the authentication server 420 according to the third embodiment of the present invention manages the history of the authentication processing result, that is, the result of performing authentication, that is, the administrator who manages the authentication server 420 to inquire the authentication history. When receiving an inquiry request from the user terminal 410 or the mobile communication terminal 120, the authentication history may be provided.

5 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an encryption algorithm according to a third embodiment of the present invention.

When the user operates the user terminal 410 to control the mobile communication terminal 120 and inputs login information such as an ID, a password, and a MAC (Media Access Control) address, the user terminal 410 receives the input login information. It transmits to the authentication server 420 and requests registration of login information (S502). The authentication server 620, which has been requested to register the login information, stores and registers the received login information in a database (S504) and notifies the user terminal 410 that the login information has been normally registered (S506).

Thereafter, when the user manipulates the user terminal 410 to control the mobile communication terminal 120, the user terminal 410 executes the stored authentication module to perform authentication for controlling the mobile communication terminal 120. . That is, the user terminal 410 transmits an ID, a password, and a MAC address of the user terminal 410 to access and log in to the authentication server 620 (S508).

Receiving the ID and password of the user and the MAC address of the user terminal 410, the authentication server 620 checks whether or not the login success by encrypting and matching the user ID and password with the ID stored in the database ( S510, if it does not match, notifies the user terminal 410 of the login failure response indicating that the login has failed (S512), and if it matches, checks whether the received MAC address matches the MAC address stored in the database. (S514) If not matched, the user terminal 410 notifies the login failure response indicating that the login has failed (S516), and if not, notifies the user terminal 410 of the login success response indicating the successful login. (S518).

The user terminal 410 notified that the login has been successfully received receives or generates an arbitrary random number (S520), and transmits the generated random number to the authentication server 420 (S522). The authentication server 420 that has received the random number may request the authentication by using an encryption algorithm such as an MD5 algorithm or a CAVE algorithm, a mobile directory number (MDN) of the mobile communication terminal 120, a random number, and a mobile communication terminal 120. After generating the first authentication information as an output value by encrypting the electronic serial number (ESN) (S524), the first authentication information is transmitted to the user terminal 410 (S526).

Here, the authentication server 420 uses the MAC address of the user terminal 410 in obtaining the MDN and ESN of the mobile communication terminal 120. That is, the authentication server 420 grasps the MDN of the mobile communication terminal 120 corresponding to the MAC address of the user terminal 410 in the database provided, and moves from the subscriber DB in association with the subscriber DB of the mobile communication network 120. Obtain the MDN and ESN of the communication terminal 120.

The user terminal 410 stores the received first authentication information and enters a control mode (S528). The user terminal 410 entering the control mode generates second authentication information by processing the stored random number (S530). Here, the user terminal 410 generates the second authentication information by processing, that is, encrypting the random number with the same algorithm as the encryption algorithm provided in the authentication server 420. Accordingly, the user terminal 410 encrypts the MDN of the mobile communication terminal 120, the random number, and the ESN of the mobile communication terminal 120 to generate second authentication information as an output value.

The user terminal 410, which has generated the second authentication information, compares the first authentication information received in step S526 with the generated second authentication information (S540), and if it does not match, to control the mobile communication terminal 120. Recognizes that the number is not recognized and outputs a message indicating that it cannot be controlled (S534), and if there is a match, waits for input of a control command for controlling the mobile communication terminal 120 (S536). When the command is input, the mobile communication terminal 120 is controlled according to the input control command.

6 is a block diagram schematically illustrating an authentication system for controlling a mobile communication terminal using an encryption algorithm according to a fourth embodiment of the present invention.

An authentication system for controlling a mobile communication terminal using an encryption algorithm according to a fourth embodiment of the present invention includes a user terminal 110, a mobile communication network 130, a mobile communication terminal 610, and an authentication server 620.

The user terminal 110 serves as a conventional computer described with reference to FIG. 1, and the mobile communication network 130 is a network providing a typical mobile communication service described with reference to FIG. 1. That is, in the description of the user terminal 110 described with reference to FIG. 1, the user terminal 110 is intended to control the mobile communication terminal 610 instead of interworking with the mobile communication terminal 610 and the authentication server 620. A target computer is a typical computer connected to the mobile communication terminal 610 by wire or wireless. As described above with reference to FIG. 1, the mobile communication network 130 is a network for providing a mobile communication service including a wireless data service to the mobile communication terminal 410. Therefore, detailed description of the user terminal 110 and the mobile communication network 130 will be omitted here.

The mobile communication terminal 610 according to the fourth embodiment of the present invention not only serves as the conventional mobile communication terminal described above with reference to FIG. 1 but also permits the control of the user terminal 110 in association with the authentication server 620. Perform authentication. That is, the mobile communication terminal 610 according to the fourth embodiment of the present invention includes input / output means for receiving data and commands from a mobile subscriber and outputting information, short-range communication means for communicating with the user terminal 110; Wireless communication means for performing data communication with the authentication server 620, storage means for storing the fourth authentication module for performing authentication, and a control means for controlling the overall operation of the mobile communication terminal 610, the user terminal In connection with 110, if there is a request for control from the user terminal 110, authentication is performed through interworking with the authentication server 620.

Here, the fourth authentication module is executed by the control means to register login information with the authentication server 620, access the authentication server 620, request a login, and if the login is successful, a random number is input or generated and Storing and transmitting to the authentication server 620, receiving and storing encrypted first portable authentication information from the authentication server 620, generating second portable authentication information by processing the stored random number, and first portable. By comparing the authentication information and the second portable authentication information and confirming whether or not matched to perform the authentication and the function to allow the control of the user terminal 110 only when the authentication is successful.

In addition, the fourth authentication module analyzes the second mobile authentication information to check the control level included in the second mobile authentication information, grasps the control right according to the control level, and then controls the control of the user terminal according to the control right. Allow only control based on control authority and block control not conforming to control authority.

When the authentication server 620 according to the fourth embodiment of the present invention receives login information from the mobile communication terminal 610 and requests registration, the authentication server 620 stores and registers login information and receives a login request from the mobile communication terminal 610. When the login is requested, it is determined whether the login is successful by comparing the received login information with the registered login information and confirming whether the login is successful, and transmitting the login result to the mobile communication terminal 610, and successfully logging in the mobile communication. When the random number is received from the terminal 610, first mobile authentication information encrypted using an encryption algorithm such as an MD5 algorithm or a CAVE algorithm is generated and transmitted to the mobile communication terminal 610.

In addition, the authentication server 620 according to the fourth embodiment of the present invention may store and manage the history of the authentication processing result, that is, the authentication history, which is the result of the authentication, and provide the same to the administrator, the user terminal 110 or If there is a request from the mobile communication terminal 610, it may provide an authentication history.

7 is a flowchart illustrating an authentication method for controlling a mobile terminal according to a fourth embodiment of the present invention.

The mobile subscriber operates the mobile communication terminal 610 to register a user or a computer that can control the mobile communication terminal 610, and inputs an ID and a password. Login information including a password and its own MDN is generated and transmitted to the authentication server 620 to request registration of the login information (S702). The authentication server 620, which has been requested to register the login information, stores and registers the received login information in a database (S704), and notifies the mobile communication terminal 610 that the login information has been normally registered (S706).

Thereafter, when the user connects the user terminal 110 and the mobile communication terminal 610 to control the mobile communication terminal 610 and inputs a control command for control, the user terminal 110 enters the control mode. The mobile communication terminal 610 requests permission of the control. The mobile communication terminal 610, which has received the permission of the control, executes the fourth authentication module to perform authentication for control. That is, the mobile communication terminal 610 transmits an ID, a password, and an MDN to access and log in to the authentication server 620 (S708).

The authentication server 620 that receives the user's ID, password, and MDN checks whether the login succeeds by encrypting the ID and password with the ID stored in the database, and checks whether the login succeeds (S710). Notify the mobile terminal 610 of the login failure response indicating that the service failed (S712), and if it matches, checks whether the received MDN matches the MDN stored in the database (S714), and if it does not match, login Notify the mobile terminal 610 of the login failure response indicating that the failure (S716), and if it matches, notifies the mobile terminal 510 of the login success response indicating the successful login (S718).

The mobile communication terminal 610 notified of the successful login has received or generated an arbitrary random number (S720), and transmits the random number to the authentication server 620 (S722). The authentication server 620 that receives the random number may request the authentication by using an encryption algorithm such as an MD5 algorithm or a CAVE algorithm, a mobile directory number (MDN) of the mobile communication terminal 610, a random number, and a mobile communication terminal 610. After the electronic serial number (ESN) is encrypted to generate the first portable authentication information as an output value (S724), the first portable authentication information is transmitted to the mobile communication terminal 610 (S726).

The mobile communication terminal 610 stores the received first portable authentication information (S728), and generates the second portable authentication information by processing the stored random number (S730). Here, the mobile communication terminal 610 generates the second portable authentication information by processing a random number with the same algorithm as the encryption algorithm provided in the authentication server 620. Accordingly, the mobile communication terminal 610 generates the second portable authentication information which is an output value by encrypting the date, the MDN, the random number, and the ESN that requested the authentication.

The mobile communication terminal 610 which has generated the second portable authentication information compares the first portable authentication information received in step S726 with the generated second portable authentication information (S732), and if it does not match, the user terminal 110. In operation S734, a message indicating that it cannot be controlled is transmitted (S734), and if it matches, the control of the user terminal 110 is allowed and the control command is received from the user terminal 110 to operate according to the control command (S736).

In the above description, the user terminal 110 to control the mobile communication terminal 120 by interworking between the user terminal 110, the mobile communication terminal 120, and the authentication server 150 through the first and second embodiments is described. The method of authentication has been described, and when the mobile communication terminal 120 cannot perform a mobile communication service according to the third embodiment, a method of performing authentication by interworking between the user terminal 410 and the authentication server 420. As described above, when the user terminal 110 cannot perform an Internet service through the fourth embodiment, a method of performing authentication by interworking between the mobile communication terminal 610 and the authentication server 620 has been described. . In other words, the method of performing authentication has been described above.

On the other hand, when the authentication is successful in the user terminal (110, 410) and the mobile communication terminal (120, 610) as described above, the control between the user terminal (110, 410) and the mobile communication terminal (120, 610), Once authentication is successful, there is a problem that control can be continued unless the connection is disconnected.

That is, if a legitimate user performs authentication and controls the mobile communication terminals 120 and 610 to the user terminals 110 and 410 and then leaves the connection without disconnecting, the illegal user moves to the user terminals 110 and 410. Since the communication terminals 120 and 610 can be controlled, a method of preventing the communication terminals 120 and 610 should be devised. Therefore, in the following, when the user terminals 110 and 410 control the mobile communication terminals 120 and 610, a predetermined time may occur while the user terminals 110 and 410 or the mobile communication terminals 120 and 610 perform the control. After that, a method of expiring authentication will be described with reference to FIG. 8 as a fifth embodiment.

8 is a flowchart illustrating an authentication method for controlling a mobile terminal over time according to a fifth embodiment of the present invention.

In FIG. 8, for convenience of description, only the authentication method for controlling the mobile communication terminal over time in the mobile communication terminals 120 and 610 is illustrated. However, this is only for convenience of description, and those skilled in the art may be configured similarly to the method for illustrating an authentication method for controlling a mobile terminal over time in the user terminals 110 and 410. Keep in mind that you can.

If the authentication is successful as described through the first to fourth embodiments (S810), the mobile terminal 120, 610 that has performed the authentication stores the date and time of successful authentication, that is, the authentication success time, and authenticates. The authentication expiration time to release the success is calculated and stored (S820). Here, authentication expiration time is the time which added predetermined time (for example, 24 hours) from authentication success time. That is, for example, assuming that the authentication success time is 22:34 on February 24, 2005, the authentication expiration time is 22:34 on February 25, 2005, which is 24 hours plus the authentication success time.

The mobile communication terminals 120 and 610 storing the authentication expiration time receive a control command from the user terminals 110 and 410 (S830). Upon receiving the control command, the mobile communication terminals 120 and 610 check whether the current time is the authentication expiration time (S840).

If the current time is not the authentication expiration time, as a result of checking in step S840, the mobile communication terminals 120 and 610 perform a corresponding operation according to the control command (S850), proceed to step S830 to receive the control command again, If the current time is the authentication expiration time, the user terminal 110, 410 is notified that the authentication time has expired (S860), and control of the user terminals 110, 410 is blocked.

As a result, even if the connection for control is not released after successful authentication once, illegal users can be prevented from illegally controlling the mobile communication terminals 120 and 610, and the right user can use the mobile communication terminals 120 and 610. Can provide enough time to control

9 is a block diagram schematically illustrating an authentication server according to a third embodiment and a fourth embodiment of the present invention.

Although the authentication servers 420 and 620 according to the third and fourth embodiments of the present invention perform somewhat different roles according to the third and fourth embodiments, the user terminal 410 is connected through a wired network. The algorithm for processing authentication is merely a difference between interworking with the mobile communication terminal 610 through a wireless network or the like.

Accordingly, an integrated authentication server performing both the roles of the authentication server 420 according to the third embodiment and the authentication server 620 according to the fourth embodiment will be described with reference to FIG. 9.

The authentication servers 420 and 620 according to the third and fourth embodiments of the present invention are referred to as a wired network processing unit 910, a wireless network processing unit 920, and a user interface (UI). The provision unit 930, the authentication unit 940, the encryption unit 950, the database unit 960, and the external interworking unit 970 are included.

The wired network processing unit 910 is a wired communication means for communicating with the user terminal 410 through the Internet 140. The wireless network processor 920 is a wired communication means for communicating with the mobile communication terminal 610 through the mobile communication network 130. The wired network processing unit 910 and the wireless network processing unit 920 respectively relay data transmitted and received between the user terminal 410, the mobile communication terminal 610, and the UI provider 930.

The UI provider 930 includes a login information register 932, a login processor 934, an authentication processor 936, and an authentication history manager 936. The login information registration unit 932 provides a UI for registering the login information to the user terminal 410 or the mobile communication terminal 610 and registers the login information by storing the login information in the database unit 940 when the login information is received. The terminal 410 or the mobile communication terminal 610 notifies that the login information is normally registered.

When the login processing unit 934 receives the login information from the user terminal 410 or the mobile communication terminal 610 and requests a login, the login processing unit 934 determines whether the login is successful by checking whether the login information matches the login information stored in the database unit 940. The result is transmitted to the user terminal 410 or the mobile communication terminal 610.

When the authentication processor 936 receives a random number from the user terminal 410 or the mobile communication terminal 610, the authentication processor 936 transmits the random number to the authentication unit 960, and the first authentication information or the first portable authentication information from the authentication unit 960. Receives and transmits to the user terminal 410 or the mobile communication terminal 610. When the authentication processing unit 936 transmits the first authentication information or the first portable authentication information to the user terminal 410 or the mobile communication terminal 610, the authentication processing unit 936 transmits the authentication processing result to the authentication history management unit 938. Here, the result of the authentication processing means that when authentication is requested to a specific mobile communication terminal, that is, when a random number is received for authentication on a specific mobile communication terminal, the date and date of requesting the authentication and the user terminal 410 or mobile communication requesting authentication. This refers to information about the terminal 610.

In addition, when the authentication processor 936 receives a random number from the user terminal 410, transmits a random number to the wired authentication unit 952 of the authentication unit 950, and receives a random number from the mobile communication terminal 610. Next, the random number is transmitted to the wireless authentication unit 954 of the authentication unit 950 to request the output of the result value.

The authentication history management unit 938 receives the authentication processing result from the authentication processing unit 936 and generates the authentication processing result as authentication history information in the form of a list for each MDN of the mobile communication terminal for which authentication is requested, and stores the result in the database unit 940. When an authentication history is requested from the user terminal 410 or the mobile communication terminal 610, the corresponding authentication history information is retrieved from the authentication history information stored in the database 940 to the user terminal 410 or the mobile communication terminal 610. Send.

The database unit 940 receives the login information from the login information registerer 932 and stores the login information for each MDN of the mobile communication terminal. When the login information is requested from the login processor 934, the database unit 940 retrieves the corresponding login information and transmits the login information. Authentication history information is received from 938 and stored.

The authenticator 950 includes a wired authenticator 952 and a wireless authenticator 954 to perform authentication. When authentication is requested from the user terminal 410, the wired authentication unit 952 receives the random number received from the user terminal 410 in the authentication processing unit 936, and then, from the database unit 940, the wired authentication unit 952 of the user terminal 410. Receives the MDN corresponding to the MAC address, receives the ESN corresponding to the MDN from the subscriber database of the mobile communication network 130 using the external interworking unit 970, and includes the date, MDN, random number and ESN requested authentication The encryption information is generated and transmitted to the encryption unit 960, the first authentication information is received from the encryption unit 960, and transmitted to the authentication processing unit 936.

In addition, when authentication is requested from the mobile communication terminal 610, the wireless authentication unit 954 uses the external interworking unit 970 when the authentication processing unit 936 receives a random number received from the mobile communication terminal 610. Receives the ESN corresponding to the MDN of the mobile communication terminal 610 from the subscriber database of the mobile communication network 130, generates the mobile encryption information including the date, the MDN, the random number, and the ESN for which authentication is requested, and then encrypts it. ), The first mobile authentication information is received from the encryption unit 960 and transmitted to the authentication processing unit 936.

When the encryption unit 960 receives the encryption information or the portable encryption information from the wired authentication unit 952 or the wireless authentication unit 954, respectively, the encryption unit 960 encrypts the first authentication information or an encryption algorithm such as an MD5 algorithm or a CAVE algorithm. After the first portable authentication information is generated, it is transmitted to the wired authentication unit 952 or the wireless authentication unit 954.

The external interworking unit 970 communicates with the subscriber database that manages the information on the plurality of mobile communication subscribers and the plurality of mobile communication terminals in the mobile communication network 130, and transmits the data requested from the authentication unit 950 to the subscriber database. Search for it, extract it, and deliver it.

As described with reference to FIG. 9, the authentication servers 420 and 620 according to the third and fourth embodiments authenticate in cooperation with the user terminal 410 through a wired network and the mobile communication terminal 610 through a wireless network. Do this. However, as described above, although FIG. 9 illustrates an authentication server capable of authenticating authentication for both the user terminal 410 and the mobile communication terminal 610, that is, if necessary, only interworking with the user terminal 410 If only or in the case of interworking with the mobile communication terminal 610 may be configured only to the corresponding portion.

Meanwhile, according to the present invention, the control class is assigned to the user or the user terminal 110 or 410 to control the mobile communication terminal 120 or 610, and the mobile communication terminal 120 according to the user or the user terminal 110 or 410. Authentication may be processed to vary the authority to control 610. Hereinafter, a method of processing authentication by changing control authority through FIG. 10 will be described.

10 is an exemplary view showing a user information table according to a preferred embodiment of the present invention.

The authentication servers 150, 420, and 620 described through the first to fourth embodiments receive, store, and register user information or login information from the user terminals 110 and 410 or the mobile communication terminals 120 and 610. do. At this time, the authentication server (150, 420, 620) is stored in a database with user information or login information, for example, as shown in the table shown. That is, the authentication server (150, 420, 620), the control class, IP address, MAC address, ID, password of the user terminal (110, 410) to control for each MDN of the mobile communication terminal (120, 620) to be controlled Store, register, and manage user descriptions, control rights, etc. in a table format.

Therefore, in the first embodiment, when the authentication server 150 transmits the authentication code to the user terminal 110, the authentication server 150 checks the IP address received from the user terminal 110 to check and control the control class corresponding to the IP address. After generating the authority information that is information on the authority, and transmits to the user terminal (110). When the user terminal 110 receives the authority information, when the authentication is successful with the mobile communication terminal 120, the user terminal 110 may perform only control regarding the control authority specified in the authority information.

That is, for example, the user terminal 110 has a cross section having an IP address of 210.192.214.181, the control class is 1, and the control authority can download the content stored in the mobile communication terminal 120, and the mobile communication terminal. The content may be uploaded to 120. Therefore, an administrator who is a user who uses the user terminal 110 may control both downloading and uploading the mobile communication terminal 120 to the user terminal 110.

In addition, in the second embodiment, when the authentication server 420 transmits the first authentication information to the user terminal 410, the authentication server 420 checks a control level corresponding to the ID, password, and MAC address received from the user terminal 410. The authority information is generated and then transmitted to the user terminal 410. The user terminal 410 confirming the control level may perform control only for the control authority specified in the control level.

In addition, in the third embodiment, when the authentication server 620 transmits the first portable authentication information to the mobile communication terminal 610, the authentication server 620 receives a control level corresponding to the ID, password, and MDN received from the mobile communication terminal 610. After confirming and generating the authority information, and transmits to the mobile communication terminal (610). Upon checking the control level, the mobile communication terminal 610 receives a control command from the user terminal 110, and processes the control command only when it meets the control level, and rejects the processing when the control command does not match.

In this way, by specifying the control authority of the user terminal (110, 410) in the authentication server (150, 420, 620), one mobile communication terminal (120, 610) a plurality of users (for example, administrator, test, When the user wants to control, the user can classify the tasks that can be controlled by each user, such as an external device such as a computer, a keyboard, a game pad, etc. to control the mobile communication terminals 120 and 610. Security controls for 110, 410) can be strengthened.

The above description is merely illustrative of the technical idea of the present invention, and those skilled in the art to which the present invention pertains may make various modifications and changes without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, according to the present invention, the user who wants to control the mobile communication terminal or an external device such as a computer, a keyboard, a game pad, etc. can be authenticated, and contents such as mobile photobooks and personal information stored in the mobile communication terminal are illegal. It can be prevented from being exposed to the user or the outside by unauthorized means, protects privacy and prevents the illegal use of expensive contents, and prevents unauthorized use of the mobile communication terminal. It is possible to prevent the innumerable damages of the mobile subscribers in advance.

In addition, the control authority can be set and designated differently for each user or external device that wants to control the mobile communication terminal, so that when a plurality of users or multiple external devices want to control one mobile communication terminal, only appropriate permission is granted. Strengthen security control for mobile communication terminals.

Claims (16)

In a system that performs authentication for control, A user terminal generating and transmitting an authentication key to request the authentication, and upon receiving notification of the waiting for authentication, requesting and receiving an authentication code, generating and transmitting a combination authentication information by combining the authentication key and the authentication code; When the authentication key is received from the user terminal, the authentication key is transmitted, the temporary authentication information is requested, received and stored, the waiting for the authentication is received to the user terminal, and the combination authentication information is received from the user terminal. A mobile communication terminal allowing control of the user terminal only when the authentication is successful by comparing the temporary authentication information with the combination authentication information; And Receiving the authentication key from the mobile communication terminal and generating the authentication code when the temporary authentication information is requested, generating the temporary authentication information by combining the authentication code with the authentication key, and transmitting the temporary authentication information to the mobile communication terminal, An authentication server for transmitting the authentication code to the user terminal when the authentication code is requested from the user terminal. Authentication system for controlling a mobile terminal using an authentication key comprising a. The method of claim 1, wherein the authentication system, And a mobile communication network for providing a short message service, wherein the mobile communication terminal and the authentication server transmit and receive the authentication key and the temporary authentication information using the short message service. Authentication system for communication terminal control. The method of claim 2, wherein the mobile communication terminal and the authentication server, Authentication system for controlling a mobile terminal using an authentication key, characterized in that for transmitting and receiving the authentication key and the temporary authentication information as an extended short message that does not output on the screen. The method of claim 1, wherein the user terminal, And transmitting the authentication key and the combination authentication information to the mobile communication terminal using a control command (AT command). The method of claim 4, wherein the control command, Authentication system for controlling a mobile terminal using an authentication key, characterized in that the EIF (External Interface) command. In the authentication server authentication method for a user terminal to control the mobile terminal, (a) receiving the authentication key from the mobile communication terminal that receives the authentication key from the user terminal and requesting temporary authentication information; (b) generating an authentication code; (c) generating the temporary authentication information by combining the authentication key and the authentication code and transmitting the temporary authentication information to the mobile communication terminal; And (d) receiving the authentication code from the user terminal and transmitting the authentication code to the user terminal Authentication method for controlling a mobile terminal using an authentication key comprising a. In a computer comprising near field communication means for communicating with a mobile communication terminal, network communication means for communicating with an authentication server, and control means for performing authentication for controlling the mobile communication terminal, As the software for performing the authentication, Generating and transmitting an authentication key to the mobile communication terminal and requesting authentication to control the mobile communication terminal to receive and store temporary authentication information from the authentication server and to transmit an authentication waiting response; Receiving the authentication waiting response from the mobile communication terminal, requesting and receiving an authentication code from the authentication server; And A function of generating a combination authentication information by combining the authentication key and the authentication code, transmitting to the mobile communication terminal, receiving an authentication result, and controlling the mobile communication terminal according to the authentication result; A computer-readable recording medium having recorded therein authentication software for authenticating control of a mobile communication terminal using an authentication key. The method of claim 7, wherein the authentication software, Analyzing the authentication result to confirm a control level, grasping a control right to control the mobile communication terminal according to the control level, and further comprising a function of controlling the mobile communication terminal according to the control right. A computer-readable recording medium having recorded thereon authentication software for authenticating control of a mobile terminal using an authentication key. In a mobile communication terminal comprising a short-range communication means for performing wired and wireless communication with a user terminal, wireless communication means for performing wireless communication to communicate with an authentication server using a mobile communication network, and control means for controlling the overall operation, Software for authenticating a user terminal, Receiving an authentication key from the user terminal, transmitting an authentication key to the authentication server using the mobile communication network, and requesting temporary authentication information; Receiving and storing the temporary authentication information from the authentication server, and notifying the user terminal of the authentication waiting state; Receiving combination authentication information from the user terminal, performing the authentication by comparing the combination authentication information and the temporary authentication information, and then generating and transmitting an authentication result to the user terminal; And A function for receiving a control command from the user terminal that has succeeded in authentication and operating according to the control command A recording medium readable by a mobile communication terminal having recorded therein authentication software for authenticating control of a mobile communication terminal using an authentication key. In a system that performs authentication for control, A user terminal generating an authentication key and transmitting the authentication key to the authentication server to request authentication and receiving an authentication code, generating the combination authentication information by combining the authentication key and the authentication code, and transmitting the combination authentication information; The user only receives and stores temporary authentication information from the authentication server, receives the combination authentication information from the user terminal, and performs the authentication by comparing the combination authentication information with the temporary authentication information. A mobile communication terminal allowing control of the terminal; And When the authentication key is received from the mobile communication terminal, an authentication code is generated and transmitted to the user terminal, and the authentication for generating the temporary authentication information by combining the authentication key and the authentication code and transmitting the authentication key to the mobile terminal. server Authentication system for the control of the mobile communication terminal using an authentication key comprising a. The method of claim 10, wherein the authentication system, Further comprising a mobile communication network for providing a short message service, wherein the authentication server transmits the temporary authentication information to the mobile communication terminal using the short message service in the form of a short message. Authentication system for the control of the mobile communication terminal. The method of claim 10, wherein the user terminal, And transmitting the combination authentication information to the mobile communication terminal using a control command, wherein the control command is an external interface (EIF) command. In the authentication server authentication method for a user terminal to control the mobile terminal, (a) receiving an authentication key from the user terminal, generating an authentication code, and transmitting the authentication code to the user terminal; And (c) generating temporary authentication information by combining the authentication key and the authentication code and transmitting the temporary authentication information to the mobile communication terminal; Authentication method for the control of the mobile communication terminal using the authentication key comprising a. delete delete delete

Images