KR100960114B1 - Method and apparatus for offering certification service - Google Patents

Abstract

The present invention relates to an integrated authentication service method and system. In the integrated authentication service method, when a member registration menu is selected on a web site, a service interface including a predetermined authentication number is transmitted to the subscriber, and the subscriber is authenticated by comparing the authentication number input by the subscriber with the transmitted authentication number. According to the present invention, the personal information can be efficiently protected at the member registration stage by authenticating the subscriber without inputting the social security number.

Open gateway, service interface, authentication server, subscriber authentication

Description

Integrated certification service method and system {Method and apparatus for offering certification service}

The present invention relates to an integrated authentication service system and method using an open interface, and to an integrated authentication service system and method including an authentication server for authenticating a subscriber through an open gateway using previously stored communication terminal information of a user. will be.

In recent years, the development of related technologies such as high-speed Internet and wireless Internet has enabled the Internet to be indispensable for modern people who can acquire or exchange various information necessary for leisure activities such as work, education, knowledge search, shopping, community, advertisement, and games. It became the chapter of. The Internet is not restricted by time and place, but is widely used in various layers and fields.

In order to acquire or exchange information through the Internet or to use e-commerce services, a member must register as an Internet web site that provides information, and enter personal information including a social security number to join as a member. The process of entering personal information may expose you to the risk of personal information leakage due to security vulnerabilities in personal computers, and it is inconvenient to input personal information for each Internet web site.

In particular, since most Internet web sites identify subscribers with their resident registration numbers upon membership registration, the resident registration numbers of subscribers may be leaked while entering the resident registration numbers. Therefore, it is necessary to prevent the leakage of the social security number at the time of subscriber confirmation by using an alternative means instead of the social security number, and to identify the subscriber by using other means.

In addition, as one person subscribes to many web sites, it is often difficult to efficiently manage a web site he subscribes to. In this case, the personal information of the subscriber may be leaked and misused due to hacking or the like on a web site that has not been reconnected for a certain period of time after joining the membership.

Accordingly, an object of the present invention is to provide an integrated authentication service system and method that can be registered as a member of a web site through subscriber authentication using a communication terminal.

Integrated authentication service method according to the present invention for achieving the above object, storing the information of the authentication service subscriber, receiving a subscriber authentication request according to the member registration menu from a predetermined website, predetermined according to the subscriber authentication request Transmitting a service interface including an authentication number of the terminal to the subscriber, inputting an authentication number to the terminal of the subscriber according to the transmitted service interface, and comparing the transmitted authentication number with the input authentication number Step, and if the transmitted authentication number and the input authentication number is identical. Transmitting the stored authentication service subscriber information to the web site.

On the other hand, the integrated authentication service system according to the present invention, an open gateway connected to the Internet and transmitting a service interface including a predetermined authentication number, and stores the information of the authentication service subscriber, and receives a subscriber authentication request from the website server And an authentication server for requesting the service interface transmission to the open gateway through the Internet, and the authentication server stores the stored authentication when the authentication number included in the transmitted service interface and the authentication number input by the subscriber match. The service subscriber information is retrieved and transmitted to the web site server.

According to the present invention, a service interface necessary for authentication is transmitted to a communication terminal of a subscriber according to a subscriber authentication method selected by an authentication service subscriber. By authenticating the subscriber by comparing the predetermined authentication number included in the transmitted service interface with the authentication number input by the subscriber, it is possible to efficiently protect personal information when subscribing to the web site as a member.

Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

1 is a view provided to explain a network including an integrated authentication service system according to an embodiment of the present invention. Referring to FIG. 1, a network according to the present embodiment includes a personal computer 100 used by an authentication service subscriber, and a communication terminal 110. The personal computer 100 includes means for accessing a web site via the Internet. The communication terminal 110 includes a mobile communication terminal 115 and a wired terminal 120, and the mobile communication terminal 115 and the wired terminal 120 are connected to a wireless communication network and a wired communication network, respectively, so as to provide a mobile communication and wired communication service. To provide.

In addition, the network according to the present embodiment includes an open gateway 130, an authentication server 140, an authentication server database 150, a communication company server 160, a communication company server database 170, a website server 180, and a web. A site server database 190. The authentication server 140 is a server that provides an authentication service, and provides an authentication service web site that can be connected to the personal computer 100 through the Internet.

When the personal computer 100 is used to access the authentication service web site provided by the authentication server 140, the user may input predetermined personal information and subscribe to the authentication service through a subscriber authentication procedure. The information of the authentication service subscriber is stored in the authentication server database 150, and when the subscriber wants to subscribe to a predetermined web site as a member, the subscriber is withdrawn by the authentication server 140 and transmitted to the server of the web site to which the user wants to register. .

The communication company server 160 is a server for providing a mobile communication service or a wired communication service, and is connected to a mobile communication terminal or a wired terminal through a wireless communication network and a wired communication network, respectively. The telecommunication company server 160 is connected to the telecommunication company server database 170 which stores the information of the communication service subscriber and manages the information of the communication service subscriber.

The web site server 180 provides a web site that can be connected to the personal computer 100 through the Internet. If necessary, the web site server 180 may provide a subscription service through the web site. The web site server 180 stores and manages information of a subscriber registered as a member of the web site in the web site server database 190.

Meanwhile, the network according to the present embodiment includes an open gateway 130 that interconnects a plurality of communication networks including the Internet, a wireless communication network, and a wired communication network. The open gateway 130 is connected to the authentication server 140 via the Internet, and to the personal computer 100, the mobile communication terminal 115, and the wired terminal 120 according to the subscriber authentication method transmitted by the authentication server 140. Allow the information required for subscriber authentication to be sent.

2 is a block diagram provided to explain an integrated authentication service system according to an embodiment of the present invention. Referring to FIG. 2, the authentication service system according to the present embodiment includes an authentication server 140 connected through the Internet, and an open gateway 130. The authentication server 140 may include a subscriber information manager 210 managing subscriber information subscribed to an authentication service, an authentication server database unit 220 storing the subscriber information, a web site server 180 and an open gateway through the Internet. 130, the service logic unit 240 for retrieving the subscriber information stored in the Internet interface unit 230 and the authentication server database unit 220 and transmitting the subscriber information to the predetermined web site through the Internet interface unit 230. Include.

The open gateway 130 calls a service interface such as a gateway database unit 250 for storing service information and payment information necessary for providing an authentication service, a text message corresponding to a method of providing an authentication service, and a voice call. An application caller 260, a communication unit 270 connected to the Internet and a wireless communication network, and a control unit 280 for transmitting a service interface necessary for providing an authentication service through the communication unit 270.

When the subscriber of the authentication service wants to register as a member of a predetermined web site, when the subscriber inputs personal information including an ID, a password, a carrier, and a phone number on the web site, the server 180 of the web site authenticates. The server 140 requests subscriber authentication. When requesting subscriber authentication, the service logic unit 240 determines whether the information of the subscriber stored in the authentication server database unit 220 exists, and if the information of the subscriber exists, the subscriber authentication service to the open gateway 130. Ask to provide.

The open gateway 130 transmits a text message necessary for authentication to the subscriber according to the method of providing the subscriber authentication service requested by the authentication server 140. In one embodiment, when a request for providing a subscriber authentication service through transmission of an authorization number included in a text message is received, the controller 280 calls the text message service through an application caller 260 and sends a predetermined approval number to the text. Write in the message.

The control unit 280 requests the communication company server 160 connected through the communication unit 270 to transmit the text message recorded with the authorization number. The communication company server 160 transmits the text message to the subscriber through a communication network.

After the text message is transmitted, when the subscriber inputs an authorization number through the personal computer 100, the service logic unit 240 determines whether the authorization number transmitted by the communication server 160 is identical to the input authorization number. . As a result of the determination, if the inputted authorization number matches the transmitted authorization number, the service logic unit 240 registers the subscriber authentication success message to the web site server 180 and the subscriber's stored in the authentication server database unit 220. The information is sent to the web site server 180.

The web site server 180 transmits the subscriber authentication success message to the personal computer 100 and stores the subscriber information in the web site server database 190 to complete the membership registration procedure. Through the above process, the authentication service subscriber can easily register as a member on a predetermined web site without having to input personal information including a social security number.

3A to 3D are flowcharts provided to explain an integrated authentication service method according to an embodiment of the present invention. 3A is a flowchart illustrating a method for subscribing to the integrated authentication service according to an embodiment of the present invention. The method for subscribing to the integrated authentication service according to the present embodiment is performed through the Internet using the personal computer 100. Beginning with accessing the site (S300a).

When the member registration menu is selected in the authentication service web site (S305a), the authentication server 140 receives the personal information necessary for membership in the authentication service (S310a). The personal information includes an ID, a password, a carrier, and a phone number. The telecommunication company may include a service provider for providing a mobile communication service and a service provider for providing a wired communication service, and the phone number includes a phone number assigned to the mobile communication terminal 115 or the wired terminal 120 of the subscriber. .

When the input of the personal information is completed, the authentication server 140 determines whether the subscriber authentication method for identifying the subscriber is selected (S315a). In the present embodiment, the subscriber authentication method includes authentication through a social security number telephone input, authentication through input of an authorization number transmitted in a text message, and authentication through input of an authorization number transmitted in a voice call.

When the authentication method through the resident registration number telephone input is selected, the service logic unit 240 of the authentication server 140 requests the resident registration number input guide call to the communication company server 160 through the open gateway 130 connected to the Internet ( S320a). The service logic unit 240 requests a call from the telecommunication company server 160 corresponding to the telecommunication company and the phone number of the subscriber stored in the authentication server database unit 220.

When a call is requested, the communication company server 160 sends the resident registration number guidance guide phone to any one of the subscriber's mobile communication terminal 115 and the wired terminal 120 according to the subscriber's carrier and telephone number transmitted together with the subscriber authentication request. Send (S325a). When the subscriber inputs his / her resident registration number using either one of the mobile communication terminal 115 and the wired terminal 120 according to the telephone guide, the communication company server 160 enters the entered resident registration number into the communication company server database 170. It is compared whether or not matched with the stored subscriber registration number (S330a).

The communication company server 160 notifies the authentication server 140 of the comparison result of step S330a, and the service logic unit 240 of the authentication server 140 determines whether the subscriber authentication succeeds according to the comparison result (S365a). If it is determined that the subscriber authentication is successful in step S365a, the authentication server 140 displays the subscriber authentication success message on the authentication service web site, and receives additional personal information such as an email and an address (S370a). The authentication server 140 completes the authentication service member registration by storing the received additional personal information in the authentication server database unit 150 (S375a).

If the subscriber authentication method is selected by inputting the authorization number transmitted in the text message in step S315a, the authentication server 140 requests the open gateway 130 to send a text message including the authorization number (S335a). When the text message is requested to be transmitted, the controller 280 of the open gateway 130 draws out the text message service interface from the application caller 260.

The controller 280 transmits a text message including a predetermined approval number to the mobile communication terminal 115 or the wired terminal 120 through the communication unit 270 connected to the wireless communication network and the wired communication network (S340a). The authorization number is transmitted to the authentication server 140.

When the authorization number is input through the mobile communication terminal 115 or the wired terminal 120 in which the text message is transmitted, the service logic unit 240 of the authentication server 140 may input the authorization number and the authorization number transmitted. Comparison is made (S345a). The service logic unit 240 determines whether the subscriber authentication succeeds according to the comparison result (S365a).

If it is determined that the subscriber authentication is successful in step S365a, the authentication server 140 displays the subscriber authentication success message on the authentication service web site, and receives additional personal information such as an email and an address (S370a). The authentication server 140 completes the authentication service member registration by storing the received additional personal information in the authentication server database unit 150 (S375a).

If the subscriber authentication method is selected by inputting the authorization number transmitted to the voice call in step S315a, the authentication server 140 requests a voice call notification including the authorization number to the open gateway 130 (S350a). When the voice call notification is requested, the controller 280 of the open gateway 130 withdraws the voice call service interface from the application caller 260.

The controller 280 transmits a voice call for guiding a predetermined approval number through the communication unit 270 connected to the wireless communication network and the wired communication network (S355a), and transmits the approval number to the authentication server 140.

When the authorization number is input as the voice call is sent, the service logic unit 240 of the authentication server 140 compares the input authorization number with the authorization number notified by the voice call (S360a). The service logic unit 240 determines whether the subscriber authentication succeeds according to the comparison result (S365a).

If it is determined that the subscriber authentication is successful in step S365a, the authentication server 140 displays the subscriber authentication success message on the authentication service web site, and receives additional personal information such as an email and an address (S370a). The authentication server 140 completes the authentication service member registration by storing the received additional personal information in the authentication server database unit 150 (S375a).

3B is a flowchart illustrating a method of registering as a member of a web site by using the integrated authentication service system according to an embodiment of the present invention, and begins by selecting a member registration menu by accessing a predetermined web site (S300b). . When the member registration menu is selected, the server 180 of the web site receives personal information including an ID, a password, a communication company, and a phone number necessary for membership (S305b). When the personal information is input, the web site server 180 requests subscriber authentication to the authentication server 140, and the authentication server 140 receives a subscriber authentication method as the subscriber authentication is requested (S310b).

When the authentication method is selected through the social security number telephone input in step S310b, the service logic unit 240 of the authentication server 140 requests subscriber authentication to the communication company server 160 through the open gateway 130 connected to the Internet (S315b). ). The service logic unit 240 retrieves the subscriber's carrier and telephone number stored in the authentication server database unit 220 and transmits the subscriber's authentication request to the carrier's server 160 together with the subscriber's authentication request.

The communication company server 160 notifies the social security number guide call to the mobile communication terminal 115 or the wired terminal 120 of the subscriber connected through the communication network as the subscriber authentication is requested (S320b). When the resident registration number is input through the mobile communication terminal 115 or the wired terminal 120 as the resident registration number guide telephone is notified, the communication company server 160 stores the entered resident registration number and the subscriber's resident registration number stored in the communication company server database unit 170. Compare The comparison result is transmitted to the authentication server 140 through the open gateway 130, the authentication server 140 determines whether the subscriber authentication is successful according to the comparison result (S360b).

On the other hand, if the subscriber authentication method is selected by inputting the authorization number sent to the text message in step S310b, the authentication server 140 requests the open gateway 130 to send a text message containing the authorization number (S330b). When the text message is requested to be transmitted, the controller 280 of the open gateway 130 draws out the text message service interface from the application caller 260.

The controller 280 transmits a text message including a predetermined approval number to the mobile communication terminal 115 or the wired terminal 120 through the communication unit 270 connected to the wireless communication network and the wired communication network (S335b). The number is sent to the authentication server 140.

When the approval number is input through the mobile communication terminal 115 or the wired terminal 120 to which the text message is transmitted, the service logic unit 240 of the authentication server 140 is transmitted to the input approval number and the text message. Compare the approval number (S340b). The service logic unit 240 determines whether the subscriber authentication succeeds according to the comparison result (S360b).

If the subscriber authentication method is selected by inputting the authorization number transmitted to the voice call in step S310b, the authentication server 140 requests the open gateway 130 to send a voice call including the authorization number (S345b). When the voice call origination is requested, the controller 280 of the open gateway 130 withdraws the voice call service interface from the application caller 260.

The controller 280 transmits a voice call for guiding a predetermined approval number through the communication unit 270 connected to the wireless communication network and the wired communication network (S350b), and transmits the approval number to the authentication server 140.

When the approval number is input as the voice call is sent, the service logic unit 240 of the authentication server 140 compares the input approval number with the approval number notified by the voice call (S355b). The service logic unit 240 determines whether the subscriber authentication succeeds according to the comparison result (S360b).

If it is determined in step S360b that subscriber authentication has failed, the service logic unit 240 of the authentication server 140 transmits a subscriber authentication failure message to the user (S365b). The subscriber authentication failure message may be transmitted to the mobile communication terminal 115 or the wired terminal 120 connected through the open gateway 130 or to the personal computer 100 connected through the Internet.

If it is determined in step S360b that the subscriber authentication is successful, the service logic unit 240 retrieves the subscriber information stored in the authentication server database unit 220 and transmits the subscriber information to the web site server 180 (S370b). When the transmitted subscriber information is confirmed, the service logic unit 240 notifies the web site server 180 of the successful subscriber authentication, and completes the membership without inputting personal information including the social security number (S375b).

When the membership is completed, the web site server 180 transmits the information of the web site to the authentication server 140. The service logic unit 240 receives the web site information through the internet interface unit 230 and stores the web site information in the authentication server database unit 220 (S380b). Web site information stored in the authentication server database unit 220 is managed by the subscriber storage unit 210. The web site information may include a URL address of the web site, a membership registration date, the number of visits, and the last visit date and time.

3C is a flowchart provided to explain a method for retrieving a password from a web site registered as a member using an authentication service system according to an embodiment of the present invention. Referring to FIG. 3C, the subscriber starts by selecting a password retrieval menu from a website previously registered as a member (S300c).

When the password find menu is selected, the server 180 of the web site receives an ID, a communication company, and a phone number registered in the web site from the subscriber (S305c). Web site server 180 transmits the received ID, carrier and telephone number to the authentication server 140, the service logic unit 240 of the authentication server 140 authenticates the subscriber information corresponding to the transmitted information The server database unit 220 searches.

The service logic unit 240 may receive a subscriber authentication method according to the subscriber information retrieved from the authentication server database unit 220 (S310c). According to the subscriber authentication method selected by the subscriber in step S310c, the authentication server 140 requests subscriber authentication from the open gateway 130 or the carrier server 180 (S315c to S355c).

The authentication server 140 determines whether the subscriber authentication requested to the open gateway 130 or the carrier server 180 is successful (S360c). As a result of the determination in step S360c, if it is determined that subscriber authentication has failed, the authentication server 140 transmits a subscriber authentication failure message (S365c). The subscriber authentication failure message may be transmitted to the personal computer 100 connected through the Internet or to the mobile communication terminal 115 or the wired terminal 120 connected to the communication network through an open gateway.

If it is determined in step S360c that the subscriber authentication is successful, the authentication server 140 transmits a subscriber authentication success message to the web site server 180 (S370c). When the website server 180 receives the subscriber authentication success message, the website server 180 retrieves the subscriber's password from the website server database 190 (S375c), and notifies the subscriber of the retrieved password (S380c). The password may be notified by an e-mail of a subscriber stored in the web site server database 190, or may be notified through one of the mobile communication terminal 115 and the wired terminal 120.

3D is a flowchart provided to explain a method of managing subscriber information stored in the authentication server database unit 220 using an authentication service system according to an embodiment of the present invention. Referring to FIG. 3D, the authentication service subscriber starts by logging in by accessing the authentication service web page (S300d).

When the subscriber information management menu is selected from the authentication service web page after login (S310d), the authentication server 140 displays a list of web sites to which the authentication service subscriber is registered as a member on the authentication service web page (S320d). When the web site list is displayed, the service logic unit 240 determines whether a management menu is selected (S330d).

According to the menu selected in step S330d, the authentication server 140 manages a web site list. The subscriber may search and manage the web site address according to the importance according to the menu selected in S330d (S340d), or search and manage the web site address according to the category classification (S350d). Also, a category in which the web site stored in the authentication server database unit 220 is classified may be generated and deleted (S360d).

When the web site list management task ends, the terminated management task is stored in the subscriber information management unit 210, and the service logic unit 240 determines whether another management menu is selected (S370d). If another management menu is selected in step S370d, the authentication server 140 continues the web site list management operation. If no other management menu is selected in step S370d, the authentication server 140 ends the web site list management operation.

4A is a flowchart provided to explain a subscriber authentication method through a social security number telephone input. Referring to FIG. 4A, as the subscriber authentication method is selected through the social security number telephone input, the authentication server 140 transmits a subscriber authentication request signal to the open gateway 130 (S400a), and the open gateway 130 performs the subscriber authentication. The request signal is transmitted to the communication company server 180 again (S405a).

The communication company server 180 transmits an acknowledgment character to the open gateway 130 to notify that the subscriber authentication request signal has been received (S410a), and the open gateway 130 sends a response character to the authentication server 140. Send a notification to notify that the subscriber authentication request has been completed (S415a).

On the other hand, the communication company server 180 receiving the subscriber authentication request retrieves the information of the subscriber is requested authentication from the carrier server database 170 (S420a). The subscriber information retrieved by the communication company server 180 includes a subscriber's social security number, a telephone number, and the like. When the subscriber information is retrieved in step S420a, the communication company server 180 transmits the resident registration number input guide phone to the subscriber's communication terminal 110 according to the subscriber information (S425a). The communication terminal 110 may be a mobile communication terminal 115 or a wired terminal 120, and the resident registration number input guide telephone may be transmitted in the form of ARS.

When the subscriber enters the resident registration number using the communication terminal 110 according to the resident registration number input guide telephone (S430a), the communication company server 180 checks whether the entered resident registration number and the subscriber's registration number stored in the communication company server database 170 match. (S435a). The communication company server 180 transmits the test result to the open gateway 130 (S440a), and the open gateway 130 transmits the test result to the authentication server 140 (S445a).

The authentication server 140 notifies the open gateway 130 that the check result has been received through the response text (S450a), and the open gateway 130 receives the response text from the authentication server 140, thereby providing a communication company server ( In step S455a, a response message for receiving the test result is sent. The authentication server 140 may determine whether the subscriber authentication is successful according to the test result received from the open gateway 130.

4B is a flowchart provided to explain a subscriber authentication method through input of an authorization number sent in a text message. Referring to FIG. 4B, as a subscriber authentication method is selected through input of an authorization number transmitted through a text message, the authentication server 140 requests notification of an authorization number from the open gateway 130 (S400b).

When the open gateway 130 receives the authorization number notification request, the gateway 130 transmits a response text to the authentication server 140 (S410b), and sends a text message (SMS) including the authorization number to the subscriber's communication terminal 110. It transmits (S420b). The open gateway 130 may call the text message service interface through the application caller 260 to notify the approval number according to the subscriber's carrier and phone number information stored in the open gateway database 250. The text message including the authorization number is transmitted to the mobile communication terminal 115 or the wired terminal 120.

When the text message is transmitted, the open gateway 130 transmits a response text to the authentication server 140 and notifies the authorization number transmitted in the text message (S430b). On the other hand, if the subscriber enters the approval number through the personal computer (100) (S440b), the authentication server 140 is successful by authenticating the subscriber by comparing the approval number entered by the subscriber with the approval number received from the open gateway 130 Determine if you did.

4C is a flowchart provided to explain a subscriber authentication method through input of an authorization number transmitted through a voice call. Referring to FIG. 4C, as a subscriber authentication method is selected through input of an authorization number transmitted through a voice call, the authentication server 140 requests notification of the authorization number through a voice call to the open gateway 130 (S400c).

The open gateway 130 transmits the response text to the authentication server 140 in response to the request for notification of the authorization number (S410c), and sends a voice call to the subscriber's communication terminal 110 to guide the authorization number (S410c). S420c). The open gateway 130 may call the voice call service interface through the application caller 260 to notify the approval number according to the subscriber's carrier and phone number information stored in the open gateway database 250.

When the voice call is sent, the open gateway 130 transmits a response text to the authentication server 140 to notify the authorization number sent to the voice call (S430c). On the other hand, if the subscriber enters the approval number through the personal computer (100) (S440c), the authentication server 140 is successful by authenticating the subscriber by comparing the approval number entered by the subscriber with the approval number received from the open gateway 130 Determine if you did.

5 is a view provided to explain a data table stored in the integrated authentication service system according to an embodiment of the present invention. Referring to FIG. 5, the authentication server database 150 includes a subscriber information table 500 and a website information table 510. The subscriber information table 500 includes information such as a subscriber ID, a password, a carrier, a phone number, an address, and an e-mail required to provide an authentication service. The website information table 510 includes a website address, category classification, importance, ID, membership date, and date and time of last visit, which are required for the authentication service subscriber to manage a website registered in the authentication service.

Meanwhile, the present invention can be embodied as processor readable codes on a processor readable recording medium. The processor-readable recording medium includes all kinds of recording devices that store data that can be read by the processor. Examples of the processor-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, and the like, and also include a carrier wave such as transmission through the Internet. The processor-readable recording medium can also be distributed over network coupled computer systems so that the processor-readable code is stored and executed in a distributed fashion. In addition, functional programs, codes, and code segments for implementing the user tracking method can be easily inferred by programmers in the art to which the present invention belongs.

While the preferred embodiments of the present invention have been shown and described, the present invention is not limited to the specific embodiments described above, and the present invention is not limited to the specific embodiments of the present invention, without departing from the spirit of the invention as claimed in the claims. Various modifications can be made by those skilled in the art, and these modifications should not be individually understood from the technical spirit or the prospect of the present invention.

1 is a view provided to explain a network including an integrated authentication service system according to an embodiment of the present invention;

2 is a block diagram provided to explain an integrated authentication service system according to an embodiment of the present invention;

3A to 3D are flowcharts provided to explain an integrated authentication service method according to an embodiment of the present invention;

4a to 4c are flow charts provided to explain the integrated authentication service method according to an embodiment of the present invention, and

5 is a view provided to explain a data table stored in the integrated authentication service system according to an embodiment of the present invention.

Claims (16)

delete delete delete delete delete delete delete delete An open gateway connected to the Internet and transmitting a service interface including a predetermined authentication number; And An authentication server that stores information of an authentication service subscriber and requests transmission of the service interface to the open gateway through the Internet when receiving a subscriber authentication request from a web site server; Including When the authentication number included in the transmitted service interface and the authentication number input by the subscriber match, the authentication server retrieves the stored authentication service subscriber information and transmits the stored authentication service subscriber information to the web site server. system. The method of claim 9, A communication company server connected to the open gateway through a predetermined communication network; More, The authentication server, upon receiving a subscriber authentication request from the web site server, requests the service interface transmission including a predetermined authentication number to the communication company server through the open gateway. The method of claim 9, wherein the authentication server, A database unit storing information of the authentication service subscriber; A subscriber information management unit managing information stored in the database unit; An internet communication unit connected to the Internet for transmitting and receiving information to and from the web site server and the open gateway; And A service logic unit for requesting the service interface transmission through the internet communication unit and retrieving information stored in the database unit and transmitting the information to the web site server if the subscriber authentication is successful; Integrated authentication service system comprising a. The method of claim 9, wherein the open gateway, A communication unit connected to the Internet and a communication network; An application caller for calling the service interface; And A control unit which transmits a service interface called by the application calling unit to the subscriber and transmits an authentication number included in the called service interface to the authentication server; Integrated authentication service system comprising a. The method of claim 9, wherein the open gateway, When the service interface transmission is requested, the integrated authentication service system, characterized in that for transmitting any one of a text message and a voice call including a predetermined authorization number to the subscriber. The method of claim 10, wherein the communication server, When the authentication server requests the service interface transmission, the integrated authentication service system, characterized in that for calling the subscriber to enter the resident registration number of the subscriber to the communication terminal of the subscriber. 15. The method of claim 14, wherein the carrier server, Comparing the resident registration number entered by the subscriber and the resident registration number of the subscriber stored in the database of the communication company server, and transmits the comparison result to the authentication server. The method of claim 9, The web site server requests subscriber authentication to the authentication server when the subscriber selects a password finder menu on the web site. And the authentication server requests transmission of the service interface when the subscriber authentication is requested.

Images