KR100956364B1 - Method for generating an one-time password using wipi idle screen - Google Patents

Abstract

Disclosed is a one-time password generation method using a Wi-Fi standby screen. Method for generating a one-time password according to an embodiment of the present invention comprises the steps of receiving a Wi-Fi (WIPI) standby screen information from the authentication server performing the user authentication by comparing the one-time password; Downloading and setting an application of the corresponding Wi-Fi idle screen based on the Wi-Fi idle screen information; And generating a one-time password by performing a hash function using the authentication key included in the Wi-Fi idle screen information as a seed value on the Wi-Fi platform, and further, seeding the authentication key and the one-time password generation request count. You can also create a one-time password by executing a hash function with a value.

OTP (one-time password), WIPI, usually screen, authentication key

Description

How to create a one-time password using Wi-Fi idle screen {METHOD FOR GENERATING AN ONE-TIME PASSWORD USING WIPI IDLE SCREEN}

The present invention relates to the generation of a one-time password (OTP), and more particularly, it is possible to generate a one-time password on a Wi-Fi platform using a Wi-Fi (Wireless Internet Platform for Interoperability) standby screen in a mobile communication terminal. It relates to a one-time password generation method using a Wi-Fi standby screen.

In financial transactions, passwords are widely used as a way to enhance the security by verifying the identity of the trading party. Such a password is recognized as an important means to secure the stability of the transaction in remote financial transactions, such as unattended ATMs, Internet banking, phone banking, and the like.

However, as hacking technologies become more advanced, the stability of financial transactions using passwords is threatened. Recently, one-time password (OTP), one-time password, has been introduced to prevent the possibility of hacking and security deterioration.

OTP has a feature that once created and used it cannot be reused.

As a method for generating a one-time password, a time synchronization method, a challenge-response method, an event method, and the like are known.

The time synchronization method is a method of generating a one-time password by sharing a password key between the OTP generator and the OTP server based on time, and the challenge-response method creates a challenge on the OTP server and informs the user with the one-time password generator. This is how to create a password for a challenge in the one-time password generator.

The event method refers to a method for generating a password by maintaining the same event value between the OTP terminal and the OTP server.

An object according to an embodiment of the present invention is to provide a one-time password generation method using the Wi-Fi standby screen, which can download an application of the Wi-Fi standby screen and generate a one-time password on the Wi-Fi platform.

In order to achieve the above object, a one-time password generation method according to an aspect of the present invention comprises the steps of receiving a Wi-Fi (WIPI) standby screen information from the authentication server performing a user authentication by comparing the one-time password; Downloading and setting an application of the corresponding Wi-Fi idle screen based on the Wi-Fi idle screen information; And generating a one-time password by performing a hash function using the authentication key included in the Wi-Fi idle screen information as a seed value on the Wi-Fi platform.

In the generating of the one-time password, the one-time password may be generated by performing a hash function using the authentication key and the one-time password generation number of times as a seed value.

Method for generating a one-time password according to another aspect of the present invention comprises the steps of receiving the Wi-Fi standby screen information from the authentication server performing the user authentication by comparing the one-time password; Downloading and setting an application of the corresponding Wi-Fi idle screen based on the Wi-Fi idle screen information; Synchronizing a time with the authentication server; And generating a one-time password by performing a hash function using the time synchronized as a seed on the WiPi platform.

In this case, synchronizing the time may synchronize the time of the mobile communication terminal receiving the authentication server and the Wi-Fi standby screen information through a network time protocol (NTP).

One-time password generation method according to another aspect of the present invention comprises the steps of receiving the Wi-Fi idle screen information from the authentication server performing the user authentication by comparing the one-time password; Downloading and setting an application of the corresponding Wi-Fi idle screen based on the Wi-Fi idle screen information; Requesting and receiving a random number from the authentication server; And generating a one-time password by performing a hash function using the random number as a seed on the WiPi platform.

At this time, the random number value is received in an encrypted state, the one-time password can be generated by performing a hash function to decode the encrypted random number value on the WiPi platform as a seed value.

Other objects and features of the present invention in addition to the above objects will be apparent from the description of the embodiments with reference to the accompanying drawings.

Preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

Hereinafter, a method of generating a one-time password using a Wi-Fi standby screen according to an embodiment of the present invention will be described in detail with reference to FIGS. 1 to 5.

In general, the mobile terminal automatically turns on the user's key when power is not turned on, data and voice calls are not made, or execution of a specific application (SMS transmission, acknowledgment, game, music, etc.) executed according to user key input is terminated. Enters the standby mode waiting for input, and displays the standby screen informing the user of the standby mode.

This standby mode is easy to enter since the user does not need any special key operation, and on average, the mobile terminal mode is set for the most time.

The present invention is to set the application of the WIPI idle screen that can provide a variety of information to the standby mode of the standby mode, and to generate the OTP on the WIPI platform to provide to the user.

1 is a diagram illustrating a system for explaining an OTP generation method according to the present invention.

Referring to FIG. 1, the system includes an authentication server 120, a message server 130, a Wi-Fi download (D / L) server 140, and a mobile communication terminal.

The authentication server 120 transmits a value necessary for generating the OTP to the mobile communication terminal 150 so that user authentication can be performed through comparison with the one-time password generated by the mobile communication terminal 150. By comparing the OTP input through the user computer 110, that is, the OTP generated on the WiPi platform of the mobile communication terminal and the previously stored OTP, it is determined whether the user is authenticated.

Here, the authentication server 120 is a text message including a callback URL (URL) of the server that can download the application of the requested Wi-Fi standby screen through the user computer 110, that is, Wi-Fi D / L server 140 It can be provided to the mobile communication terminal.

In this case, the text message provided to the mobile communication terminal 150 may include a callback UEL and an authentication key corresponding to the mobile communication terminal.

Of course, the authentication server 120 stores the information provided to the mobile communication terminal, the authentication key provided to the mobile communication terminal may be used as an identification value for distinguishing each of the plurality of mobile communication terminals. For example, in order to prevent the same OTP from being generated in a plurality of mobile communication terminals, a unique authentication key that is not used at all when transmitting a text message including Wi-Fi idle screen information may be set in the corresponding mobile communication terminal.

Therefore, the authentication server 120 can distinguish the subscribers of the mobile communication terminal through the phone number or the authentication key of the mobile communication terminal, and the authentication key and other specific values, for example, the number of events, the time and the random number for the OTP generation, etc. By comparing the generated OTPs, user authentication can be performed.

In addition, the authentication server 120 may be provided with an application ID (ID) downloaded from the Wi-Fi D / L server 140 to the mobile communication terminal, and may store the information and the application ID transmitted to the mobile communication terminal.

In this case, the authentication server 120 may provide an application ID when providing an encrypted (or encoded) random number to the mobile communication terminal, which is a case where the application ID is used as an element for encoding a random number. The mobile terminal can decode a random number based on the application ID.

Message server 130 by the request of the authentication server 120, Wi-Fi idle screen information, for example, a text message including the assigned authentication key corresponding to the mobile terminal, callback UAL of the Wi-Fi D / L server 140 To the mobile communication terminal through a mobile communication network.

When the Wi-Fi D / L server 140 receives an application of the Wi-Fi standby screen from the mobile communication terminal, the Wi-Fi D / L server 140 provides the application of the requested Wi-Fi standby screen to the mobile communication terminal.

At this time, the Wi-Fi D / L server 140 may provide the application ID provided to the mobile communication terminal to the authentication server (120).

The mobile communication terminal 150 receives the Wi-Fi standby screen information requested by the user through the message server 130 as a text message while the user is connected to the authentication server 120 through the user computer 110, Access to the Wi-Fi D / L server 140 through the callback UAL included in the idle screen information to download the application of the Wi-Fi idle screen.

In addition, the mobile communication terminal 150 may generate an OTP on the WiPi platform based on the authentication key included in the WiPi standby screen information, and display the OTP on one side of the WiPi standby screen so that the user can check the generated OTP.

Of course, the mobile terminal 150 may use a seed value according to a method of generating an OTP. For example, when generating an OTP by an event method, authentication included in the Wi-Fi idle screen information may be used. The hash function is performed using the number of key and event occurrences, that is, the number of OTP generation requests as a seed value, and when generating the OTP by a time synchronous method, the time synchronized with the authentication key and the authentication server 120 is used as a seed value. When the OTP is generated by the challenge-response method, the hash function is performed by using the authentication key and the random number received from the authentication server 120 as a seed as a seed. Can be. Here, the authentication server 120 and the mobile communication terminal can synchronize the time through a network time protocol (NTP), and when using the challenge-response method, the authentication server 120 generates a random number based on the authentication key. Because it generates, you can also execute a hash function that uses only random values as seeds.

In this case, the mobile communication terminal 150 may receive the encoded random number value from the authentication server 120 in the case of the challenge-response method, decode the random number value on the Wi-Fi platform, and if necessary, from the authentication server 120. The application ID may be received together to decode a random value using the application ID.

2 is a flowchart illustrating a method of generating an OTP according to an embodiment of the present invention, which is an operation flowchart of a process of generating an OTP by an event method in a mobile communication terminal.

Referring to FIG. 2, the method for generating an OTP receives the Wi-Fi idle screen information from the authentication server by making a request to the authentication server (S210).

In this case, the Wi-Fi standby screen information is received in the form of a text message, and may include a callback UEL for downloading the application of the Wi-Fi standby screen and an authentication key corresponding to the corresponding mobile communication terminal.

Of course, the authentication key assigned to the mobile communication terminal is preferably a unique value because it is a factor used to distinguish the mobile communication terminal, and the authentication server preferably stores information on the mobile communication terminal and the authentication key.

Access to the Wi-Fi D / L server through the call back UAL included in the received Wi-Fi idle screen information to download the application of the Wi-Fi standby screen and set the screen (S220, S230).

The mobile communication terminal generates an OTP by performing a hash function using the authentication key included in the WiPi idle screen information as a seed value on the WiPi platform, and displays the generated OTP on one side of the WiPi idle screen, thereby allowing the terminal user to check the OTP. (S240 to S260).

Here, if the mobile communication terminal generates the OTP with only the authentication key, the same OTP can be generated even if the OTP is requested to be generated, so that the OTP can be generated differently every time the OTP is generated, as well as the number of OTP generation requests. The number of occurrences of the in event can be used as the seed of the hash function. This will be described with reference to FIG. 3.

3 is a flowchart illustrating an embodiment of operation S240 shown in FIG. 2.

Referring to FIG. 3, the mobile communication terminal calculates the number of requests for generating the OTP, that is, the number of event occurrences in order to generate the OTP (S310).

At this time, the mobile communication terminal can calculate the number of event occurrences by calculating the number of OTP generation requests.

The mobile communication terminal calculates a seed value based on the authentication key included in the Wi-Fi idle screen information and the number of event occurrences calculated by step S310 (S320).

Here, the seed value may be a value calculated by using the authentication key and the number of event occurrences as input values of a preset function, and the function of calculating the seed value may be determined by an operator providing an OTP generation method.

When the seed value is calculated, a hash function is performed using the calculated seed value (S330).

Of course, although the present invention has been described to calculate the seed value through a function, the present invention is not limited thereto, and the authentication key and the number of event occurrences may be directly input to the hash function.

4 is a flowchart illustrating a method of generating an OTP according to another embodiment of the present invention, which is a process of generating an OTP by a time synchronization method in a mobile communication terminal.

Referring to FIG. 4, in the method for generating an OTP, steps S410 to S430 are the same as steps S210 to S230 shown in FIG. 2, and thus description thereof will be omitted.

When the application of the downloaded Wi-Fi standby screen is set on the screen, the time of the terminal and the authentication server is synchronized to generate the OTP using the time (S440).

Here, the time of the terminal and the authentication server can be synchronized through NTP. The terminal receives the time from the exchange that gets the satellite time through NTP, and the time is synchronized by the authentication server receiving the satellite time directly through NTP. You can.

When the time is synchronized, the mobile communication terminal generates an OTP by performing a hash function having the corresponding time as a seed value at a certain time period, for example, 1 minute on the WiPi platform (S450, S460).

Here, although the present invention may generate the OTP at a predetermined time period, the OTP may be generated by performing a hash function having the seed time as the seed value when requesting the OTP generation.

In addition, if only the time is set as the seed value, since the same OTP can be generated in a plurality of terminals, the OTP is performed by performing the hash function using the authentication key assigned to the mobile communication terminal included in the Wi-Fi idle screen information as the seed value. You can also create

When the OTP is generated, the generated OTP may be displayed on one side of the application of the Wi-Fi standby screen displayed on the screen, and may be provided to the terminal user (S470).

FIG. 5 is a flowchart illustrating an operation of generating an OTP by a challenge-response method in a mobile terminal according to another embodiment of the present invention.

Referring to FIG. 5, in the method for generating an OTP, steps S510 to S530 are the same as steps S210 to S230 shown in FIG. 2, and thus description thereof is omitted.

When the application of the downloaded Wi-Fi standby screen is set on the screen, the random number value for generating the OTP is requested to the authentication server and received (S540).

In this case, the random number value received from the authentication server may be a value generated based on the authentication key included in the Wi-Fi idle screen information, and may be encoded and received by a predetermined method. Here, the random number value may be encoded based on the application ID of the Wi-Fi idle screen downloaded from the mobile communication terminal. In this case, it is preferable to receive the application ID as well as the random number value.

The mobile communication terminal decodes the random number value received on the Wi-Fi platform and generates a OTP by performing a hash function using the decoded random number value as a seed value (S550 to S570).

Of course, the mobile communication terminal may use not only a random number but also an authentication key as a seed value. That is, the OTP may be generated by performing a hash function using the random number and the authentication key as the seed value.

When the OTP is generated, the generated OTP may be displayed on one side of the application of the Wi-Fi standby screen displayed on the screen, and may be provided to the terminal user (S580).

The OTP generated by the above embodiments is inputted to a user computer connected to the authentication server and transmitted to the authentication server, whereby the OTP generated by the mobile communication terminal in the authentication server and generated by the preset OTP generation method. Compare the stored OTP and authenticate the user if it matches, otherwise treat it as a user authentication failure.

The one-time password generation method using the Wi-Fi standby screen according to the present invention can be modified and applied in various forms within the scope of the technical idea of the present invention and is not limited to the above embodiments. In addition, the embodiments and drawings are merely for the purpose of describing the contents of the invention in detail, not intended to limit the scope of the technical idea of the invention, the present invention described above is common knowledge in the technical field to which the present invention belongs As those skilled in the art can have various substitutions, modifications, and changes without departing from the technical spirit of the present invention, it is not limited to the above embodiments and the accompanying drawings, as well as the following claims. Judgment should be made including scope and equivalence.

1 is a diagram illustrating a system for explaining an OTP generation method according to the present invention.

2 is a flowchart illustrating a method of generating an OTP according to an embodiment of the present invention.

3 is a flowchart illustrating an embodiment of operation S240 shown in FIG. 2.

4 is a flowchart illustrating a method of generating an OTP according to another embodiment of the present invention.

5 is a flowchart illustrating a method of generating an OTP according to another embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

120: authentication server

130: message server

140: Wifi Download Server

150: mobile communication terminal

Claims (13)

Receiving the Wi-Fi idle screen information through a text message including a callback URL (URL) of the server that can provide the application of the Wi-Fi idle screen received from the authentication server performing user authentication by comparing the one-time password step; Downloading and setting an application of the corresponding Wi-Fi idle screen based on the Wi-Fi idle screen information; And Generating a one-time password by performing a hash function having a seed value as an authentication key included in the Wi-Fi idle screen information on the Wi-Fi platform; One-time password generation method comprising a. The method of claim 1, Generating the one time password And a one-time password generation method by performing a hash function having the authentication key and the one-time password generation request number as seed values. delete The method of claim 1, Displaying the generated one-time password on one side of the Wi-Fi standby screen set on the screen; One-time password generation method further comprising. Receiving the Wi-Fi idle screen information from the authentication server performing the user authentication by comparing the one-time password; Downloading and setting an application of the corresponding Wi-Fi idle screen based on the Wi-Fi idle screen information; Synchronizing a time with the authentication server; And Generating a one-time password by performing a hash function having the time value synchronized as a seed on a Wi-Fi platform; One-time password generation method comprising a. The method of claim 5, Generating the one time password A one-time password generation method for generating a one-time password by performing a hash function at a predetermined time period on the Wipi platform. The method of claim 5, Synchronizing the time Method for generating a one-time password for synchronizing the time of the mobile communication terminal receiving the authentication server and the Wi-Fi standby screen information through a network time protocol (NTP). The method of claim 5, Generating the one time password A one-time password generation method for generating a one-time password by performing a hash function with a seed value of the authentication key included in the synchronized time and the Wi-Fi idle screen information. Receiving the Wi-Fi idle screen information through a text message including a callback URL (URL) of the server that can provide the application of the Wi-Fi idle screen received from the authentication server performing user authentication by comparing the one-time password step; Downloading and setting an application of the corresponding Wi-Fi idle screen based on the Wi-Fi idle screen information; Requesting and receiving a random number from the authentication server; And Generating a one-time password by performing a hash function using the random number as a seed on a Wi-Fi platform; One-time password generation method comprising a. The method of claim 9, The random number is The one-time password generation method is generated based on a pre-stored authentication key corresponding to the mobile communication terminal receiving the Wi-Fi standby screen information in the authentication server. The method of claim 9, The random number value is received in an encrypted state, And generating a one-time password by performing a hash function that decodes the encrypted random number value as a seed value on the WiPi platform. The method of claim 11, And receiving the application ID of the Wi-Fi standby screen together from the authentication server and decoding the random number based on the received application ID. The method of claim 9, Generating the one time password The one-time password generation method of generating a one-time password by performing a hash function with a seed value of the authentication key included in the random number value and the Wi-Fi idle screen information.

Images