KR100963928B1 - Method for Authenting Wireless One-time with Financial Password and Mobile Phone, Recording Medium - Google Patents

Abstract

The present invention relates to a wireless one-time authentication method associated with a financial password and a mobile phone and a recording medium for the same, the wireless one-time authentication method associated with a financial password, the wireless security authentication processing based on the one-time authentication key using a mobile phone Receiving, at the information receiving means, the security authentication request information formed by combining an account (or card) password (or security card password (or number combination)) and a one-time authentication key through the communication network; Authenticating the validity of the account (or card) password (or security card password (or number combination)) included in the security authentication request information in association with a financial system; Write one-time authentication key generation information and authentication key generation algorithm for authentication key. Generate a one-time authentication key authentication code for the one-time authentication key in association with a storage medium, and compare the one-time authentication key and the one-time authentication key authentication code included in the security authentication request information to validate the one-time authentication key. Authenticating, and transmitting, to the mobile phone, security authentication result information including an authentication result for the account (or card) password (or security card password (or number combination)) and a one-time authentication key in a transmission means. do.

Password, wireless authentication, one-time authentication

Description

Wireless one-time authentication method and system associated with financial password and mobile phone and recording medium therefor {Method for Authenting Wireless One-time with Financial Password and Mobile Phone, Recording Medium}

1 is a view showing the configuration of a one-time authentication key-based wireless security authentication processing system according to an embodiment of the present invention.

2 is a diagram illustrating a program providing system configuration for remotely downloading a one-time authentication program to a wireless terminal according to an embodiment of the present invention.

3 is a diagram illustrating a configuration of wireless terminal information having a one-time authentication program according to an embodiment of the present invention.

4 is a diagram illustrating one-time authentication management information provided to a wireless terminal according to an embodiment of the present invention.

5 is a diagram illustrating one-time authentication management information provided to a wireless terminal according to another embodiment of the present invention.

6 is a diagram illustrating a process of remotely loading and downloading a one-time authentication program to a wireless terminal according to an embodiment of the present invention.

7 is a diagram illustrating a wireless terminal function configuration having a one-time authentication key based wireless security authentication processing function according to an embodiment of the present invention.

8 is a diagram illustrating a configuration of a one-time authentication key-based wireless security authentication processing system according to an embodiment of the present invention.

9 is a diagram illustrating a one-time authentication area output for wireless security authentication processing and a password input process for one-time authentication-based wireless security authentication processing according to an embodiment of the present invention.

FIG. 10 is a diagram illustrating a one-time authentication area output for wireless security authentication processing and a password input process for one-time authentication key-based wireless security authentication processing according to another embodiment of the present invention.

11 is a diagram illustrating a one-time authentication area output for wireless security authentication processing and a password input process for one-time authentication key-based wireless security authentication processing according to another embodiment of the present invention.

12 is a diagram illustrating a password input process for one-time authentication key-based wireless security authentication processing through another area other than the one-time authentication area output and the one-time authentication area output for wireless security authentication processing according to an embodiment of the present invention.

FIG. 13 is a diagram illustrating a password input process for one-time authentication key-based wireless security authentication processing through areas other than one-time authentication area output and one-time authentication area output for wireless security authentication processing according to another embodiment of the present invention. .

14 is a diagram illustrating a password input process for one-time authentication key-based wireless security authentication processing through another area other than one-time authentication area output and one-time authentication area output for wireless security authentication processing according to another embodiment of the present invention. to be.

15 is a diagram illustrating a process of generating a time synchronization-based one-time authentication key for wireless security authentication processing according to an embodiment of the present invention.

16 is a diagram illustrating a process of generating a challenge-response based one-time authentication key for wireless security authentication processing according to an embodiment of the present invention.

17 is a diagram illustrating a process of inputting and transmitting a one-time authentication key according to an embodiment of the present invention.

18 is a diagram illustrating a process of inputting and transmitting a one-time authentication key according to another embodiment of the present invention.

19 is a diagram illustrating a one-time authentication key-based wireless security authentication process according to an embodiment of the present invention.

20 is a diagram illustrating a one-time authentication key-based wireless security authentication process according to an embodiment of the present invention.

<Description of main parts of drawing>

100: program providing server 105: authentication server

110: financial server 115: payment server

120: wireless web server 125: wireless server

130: network operation system 135: wireless terminal

In the present invention, a one-time authentication key-based wireless security authentication process using a mobile phone, the information receiving means by combining the account (or card) password (or security card password (or number combination)) and one-time authentication key from the mobile phone through the communication network Receiving the security authentication request information, and validating the account (or card) password (or security card password (or number combination)) included in the security authentication request information in association with the financial system in the password authentication means. Authenticating and generating a one-time authentication key authentication code for the one-time authentication key in association with a storage medium storing the one-time authentication key generation information and the authentication key generation algorithm for the one-time authentication key in the authentication means. And the one time authentication key and the one time authentication key included in the security authentication request information. Comparing the authentication code to authenticate the validity of the one-time authentication key, and an authentication result for the account (or card) password (or security card password (or number combination)) and the one-time authentication key in a transmission means; It relates to a wireless one-time authentication method associated with a financial password comprising the step of transmitting the security authentication result information to the mobile phone.

As the rapid development of information and communication technology has been applied to the financial industry, most financial transactions (or payments) and various service industries that have been conventionally face-to-face have been made online through non-face-to-face financial transactions (or payments) and online services. Developed into an industry.

As the non-face-to-face financial transactions (or payments) and online service industries are gradually activated, cases of security problems such as online anonymity and security shortcomings in communication protocols are increasing rapidly. The non-face-to-face financial transactions (or payments) and online services are based on a method of using an encryption / decryption-based security protocol to solve anonymity, compensate for shortcomings in communication protocols through real name verification.

Recently, various non-face-to-face financial transactions (or payments) and online services that have been activated online have been transferred to the wireless field using the wireless network due to the opening of the wireless network and the expansion of the wireless communication infrastructure. Most wireless terminals are not only more constrained to MMI (Man Machine Interface) than the wired terminals used online, but also have low computing power, and the communication speed of the wireless network is lower than on-line. Since the security defects are different, it includes a problem that is difficult to apply the security function applied online, the security function applied to the wireless field is to minimize the user input, and to prevent high-level encryption / decryption operation It is preferably made in the form.

On the other hand, as a means for solving the online security problem, a one-time authentication key method called a one-time password (OTP) is commercially available, so-called OTP generator for the security function of the one-time authentication key method Although a module called a wireless terminal is used recently, an example of using the wireless terminal as an OTP generator for an online security function (for example, inputting an OTP generated by a wireless terminal to an online wired terminal) has been commercialized. In order to apply the OTP commercially available online to transactions (or payments) and wireless services, a national policy (eg, a two-factor policy in which the OTP generator must be logically separated from the communication terminal), or security This includes problems on elements (eg, lost wireless terminals, or changes in wireless carriers, etc.).

An object of the present invention for solving the above problems, the information receiving the security authentication request information made by combining the account (or card) password (or security card password (or number combination)) and one-time authentication key from the mobile phone through the communication network A password authentication means for authenticating a validity of the account (or card) password (or security card password (or number combination)) included in the security authentication request information in association with a receiving means and a financial system; And generating a one-time authentication key authentication code for the one-time authentication key in association with a storage medium storing the one-time authentication key generation information and the authentication key generation algorithm for the one-time authentication key, and the one-time authentication included in the security authentication request information. Compare the key and the one-time authentication key authentication code to validate the one-time authentication key A financial means comprising: an authentication means and a transmission means for transmitting the security authentication result information including the authentication result for the account (or card) password (or security card password (or number combination)) and the one-time authentication key to the mobile phone. The present invention provides a wireless one-time authentication system associated with a password.

The wireless one-time authentication method associated with the financial password according to the present invention, in the one-time authentication key-based wireless security authentication processing using a mobile phone, the account (or card) password (or security card password ( Or a combination of numbers)) and a one-time authentication key, and receiving the security authentication request information, and the account (or card) password (or security) included in the security authentication request information in association with the financial system in a password authentication means. Authenticating the validity of the card password (or number combination); and in connection with the storage medium storing the one-time authentication key generation information and the authentication key generation algorithm for the one-time authentication key in the authentication means. Generate a one-time authentication key authentication code for a one-time authentication key, the security authentication Comparing the one-time authentication key included in the information with the one-time authentication key authentication code to authenticate the validity of the one-time authentication key, and in the transmission means, the account (or card) password (or security card password (or number combination) )) And transmitting the security authentication result information including the authentication result for the one-time authentication key to the mobile phone.

On the other hand, it includes a recording medium recording a program for executing the wireless one-time authentication method associated with the above-described financial password.

On the other hand, the wireless one-time authentication system associated with the financial password according to the present invention, the security authentication request made by combining the account (or card) password (or security card password (or number combination)) and one-time authentication key from the mobile phone through the communication network Information receiving means for receiving information, password authentication means for authenticating the validity of the account (or card) password (or security card password (or number combination)) included in the security authentication request information in association with the financial system; And generating a one-time authentication key authentication code for the one-time authentication key in association with a storage medium for storing the one-time authentication key generation information and the authentication key generation algorithm for the one-time authentication key and verifying the validity, and the security authentication request information. Comparing the one-time authentication key and the one-time authentication key included in the one-time authentication code Transmitting security authentication result information including authentication means for authenticating validity of the authentication key and the account (or card) password (or security card password (or number combination)) and the authentication result for the one-time authentication key to the mobile phone. It is characterized by comprising a means.

On the other hand, the mobile phone processing wireless one-time authentication in connection with the financial password according to the present invention, when the one-time authentication key-based wireless security authentication processing using the mobile phone, the account (or card) password (or security card password ( Or an interface output unit for outputting a password input interface for inputting a number)), and assigning a caret to the password input interface to provide the account (or card) password (or security card password (or number combination)). A caret processing unit for processing to be input, and the account (or card) password (or security card password (or number combination)) is input through the password input interface, and a one-time authentication key for wireless one-time authentication processing based on the one-time authentication key. Generated (or the generated one-time authentication key is a one-time authentication key input interface Information generation unit for generating security authentication request information formed by combining the account (or card) password (or security card password (or number combination)) with a one-time authentication key, and the generated security authentication request information. It characterized in that it comprises a security authentication processing unit for transmitting the wireless security authentication to the server on the communication network.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to a user's or operator's intention or custom. Therefore, the definition should be made based on the contents throughout the present invention.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify, integrate, or separate the terminology so that those skilled in the art to which the present invention pertains may clearly understand the present invention. The present invention is by no means limited thereto. That is, each means described above is a server (or terminal) provided on the system shown in the following embodiments, or is a predetermined functional configuration provided in at least one or more servers (or terminals), or at least one or more servers. (Or a terminal) may be an association of at least two or more functional components. In addition, the server (or terminal) shown in the following embodiment is shown to include at least two or more functional components for achieving the technical features of the present invention for convenience, the functional component shown in the server (or terminal) Matched with the above-described means may be provided in two or more different servers (or terminals) according to the role and function of each functional component and the corresponding server (or terminal) operator (or operator), whereby the present invention is not limited No.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram showing the configuration of a one-time authentication key-based wireless security authentication processing system according to an embodiment of the present invention.

In more detail, FIG. 1 illustrates a state in which a terminal screen including at least one of a desktop, a content using screen, a web access screen, a financial transaction screen, and a payment screen is output on a screen of a wireless terminal 135 used by a customer. When the one-time authentication key-based wireless security authentication processing through the wireless terminal 135 is required, generating a one-time authentication key for processing the wireless security authentication includes a one-time authentication screen for use in the wireless security authentication processing; The customer inputs through the one-time authentication area (or the terminal-side output area where the terminal-side screen is output) after processing the one-time authentication area to be output to a predetermined area (or entire area) on the screen of the wireless terminal 135. One-time authentication by linking the account (or card) password (or security card password (or number combination)) with the one-time authentication key As a system configuration for processing a key-based wireless security authentication, those skilled in the art to which the present invention belongs, the present invention is referred to and / or modified to process the one-time authentication key-based wireless security authentication Various implementation methods for the system configuration can be inferred, but the present invention includes all the implementation methods inferred, and the technical features are not limited to the implementation method shown in FIG.

Referring to FIG. 1, the one-time authentication key-based wireless security authentication processing system includes a program providing server 100 that provides the one-time authentication program to at least one or more wireless terminals 135 through a wireless communication network, and a wireless communication network. After accessing the program providing server 100 to download the one-time authentication program and recording it on a recording medium, a one-time authentication key for processing the wireless security authentication through the one-time authentication program is used for the wireless security authentication process. After processing the one-time authentication area including a one-time authentication screen to be output to a predetermined area (or entire area) on the screen of the wireless terminal 135, the terminal-side output to output the one-time authentication area (or the terminal side screen) The account (or card) password (or security car) entered by the customer E-password (or number combination)) and the one-time authentication key in association with the one-time authentication key-based wireless security authentication to the wireless terminal 135, and the validity of the one-time authentication key generated by the wireless terminal 135 At least one of providing a variety of financial transactions (or payment) to the authentication-based additional services based on the authentication server 105 for processing the one-time authentication key-based wireless security authentication and the validation result of the one-time authentication key It characterized in that it comprises a wireless server 125 or more.

In addition, the wireless server 125 has a financial server 110 having at least one financial transaction function according to the one-time authentication key-based wireless security authentication, and at least one payment settlement according to the one-time authentication key-based wireless security authentication. It is preferable to include at least one or more payment server 115 having a function, and a wireless web server 120 having various member authentication / service authentication / terminal authentication function according to the one-time authentication key-based wireless security authentication. Do.

In addition, the wireless communication network includes at least one base station, a control station for controlling the base station and at least one server (or device) for controlling and operating a wireless communication network including the base station and the control station ( 130), characterized in that made.

2 is a diagram illustrating a program providing system for downloading and remotely mounting a one-time authentication program to the wireless terminal 135 according to an embodiment of the present invention.

More specifically, Figure 2 is a one-time authentication key-based wireless security authentication processing for the one-time authentication key based wireless security authentication processing through the wireless terminal 135 used by the customer through a wireless communication network in the wireless security authentication processing system, A one-time authentication area including a one-time authentication screen for generating a one-time authentication key for processing wireless security authentication to be used for the wireless security authentication process is output to a predetermined area (or entire area) on the screen of the wireless terminal 135. After processing, the account (or card) password (or security card password (or number combination)) of the customer input through the one-time authentication area (or the terminal-side output area where the terminal-side screen is output) and the one-time authentication One-time authentication program to handle wireless security authentication based on one-time authentication key by linking keys As a configuration of a system for downloading and remotely mounting the wireless terminal 135, those skilled in the art to which the present invention pertains, refer to and / or modify the present Figure 2 to the wireless terminal 135 It will be possible to infer various implementation methods for downloading and remotely mounting the one-time authentication program, but the present invention includes all the inferred implementation methods and is not limited by the implementation method shown in FIG.

For example, the one-time authentication program is downloaded to a wired terminal (for example, a wired terminal used by a customer or a wired terminal used by a teller employee) through a wired communication network in the program providing system, and then the wired terminal and the wireless terminal 135. It is possible to be mounted on the wireless terminal 135 through a cable communication connecting), or it is possible to manufacture so that the one-time authentication program is mounted on the wireless terminal 135 from the manufacturer of the wireless terminal 135 The present invention is characterized in that it comprises all the possible inference methods.

Hereinafter, the components on the wireless security authentication processing system for downloading and remotely mounting the one-time authentication program to the wireless terminal 135 in FIG. 2 are referred to as "program providing server 100" for convenience, and the program providing server 100 ) Is implemented in the form of a server (or device) provided on the wireless security authentication processing system, as shown in Figure 2, or to download and remotely mount the one-time authentication program to the wireless terminal 135 It is possible to be implemented in the form of functional components provided in the authentication server 105 on the wireless security authentication processing system, it will be apparent that the present invention is not limited thereto.

Referring to FIG. 2 according to an embodiment of the present invention, the program providing system is connected to the program providing server 100 through a wireless communication network, and downloads the one-time authentication program to a wireless terminal 135 for recording on a recording medium. And a program providing server 100 connected to the wireless terminal 135 through a wireless communication network to provide the one-time authentication program to the wireless terminal 135 and provided to the wireless terminal 135. It characterized in that it further comprises an authentication server 105 provided in the wireless security authentication processing system, including at least one or more functional configuration for the one-time authentication key-based wireless security authentication processing through a one-time authentication program.

The wireless terminal 135 is a mobile communication terminal connected to a Code Division Multiple Access (CDMA) / Wide-CDMA (WCDMA) based mobile communication network, a wireless communication terminal connected to an HSDPA based wireless communication network, or an IEEE 802.16x based communication. And at least one or more wireless terminals 135 including at least one portable Internet terminal connected to the high-speed wireless Internet, wherein the wireless terminal 135 is provided at least by the program providing server 100. A function for outputting one or more program providing interface screens, inputting (or selecting) program request information for downloading and remotely mounting the one-time authentication program through the program providing interface screen, and transmitting the program request information to the program providing server 100. Configuration (e.g., browser program and communication functions) Preferable.

Those skilled in the art to which the present invention pertains can easily infer the features of the wireless terminal 135, so a detailed description thereof will be omitted.

According to an embodiment of the present invention, the wireless communication network to which the wireless terminal 135 connects may include at least one of the CDMA based mobile communication network, the HSDPA based wireless communication network, or the IEEE 802.16x based high speed wireless Internet. Do.

The wireless communication network to which the wireless terminal 135 connects includes at least one or more base stations, a control station for controlling the base station, and at least one server (or apparatus) for controlling and operating a wireless communication network including the base station and the control station. Characterized in that it comprises a network operation system (130) including.

The base station is located at an end of the wireless communication network connecting a wireless section with at least one wireless terminal 135 located in a cell (eg, frequency reach) according to a wireless communication protocol defined in the wireless communication network. As a component, it is characterized in that the network operation system 130 to control and operate the radio terminal 135 through the control station.

According to an embodiment of the present invention, when the wireless communication network is a CDMA / WCDMA / GSM-based wireless communication network, the base station connects at least one radio terminal 135 with a radio section based on the CDMA / WCDMA / GSM wireless protocol stack. It is desirable to.

According to another embodiment of the present invention, when the wireless communication network is an HSDPA-based wireless communication network, the base station preferably connects a wireless section with at least one or more radio terminals 135 based on the HSDPA radio protocol stack.

According to another embodiment of the present invention, when the wireless communication network is an IEEE 802.16x based wireless communication network, the base station includes at least one based on a wireless physical (PHY) layer and a media access control (MAC) layer of the IEEE 802.16x protocol. It is preferable to connect the wireless terminal 135 and the wireless section.

The control station controls at least one or more base stations, and is a component on a wireless communication network connecting the base station and the network operation system 130 by wired section. When the wireless communication network is a CDMA / WCDMA / GSM-based wireless communication network, Preferably, the control station includes a base station controller (BSC). When the wireless communication network is an IEEE 802.16x based wireless communication network, the control station includes a packet access router (PAR). desirable.

The network operation system 130 controls at least one or more radio terminals 135 connectable to the radio communication network through at least one or more base stations in association with the control station, and at least one other radio with the radio terminal 135. A communication channel (or a call channel) is connected to a terminal 135 or a server on a communication network, and the various communication charges and additional service use charges corresponding to the communication plan subscribed to the wireless terminal 135 are calculated. .

According to an embodiment of the present invention, when the wireless communication network is a CDMA / WCDMA / GSM-based wireless communication network, the network operation system 130 may include a mobile switching center (MSC) and a HLR (Mobile Switching Center) for processing circuit switching. Interworking function that provides circuit data service and / or packet data service for wireless data communication and connection with other networks in the network infrastructure for voice call and home location register (VLR). IWF), various message centers (e.g., short message center (SMC), multimedia message center (MMC), etc.) and various additional service server farms, and SGSN for processing packet exchange. (Serving GPRS Support Node), GGSN (Gateway GPRS Support Node) and RNC (Radio Network Controller) are preferably included.

According to another exemplary embodiment of the present invention, when the wireless communication network is an IEEE 802.16x based wireless communication network, the network operation system 130 may include a home agent (HA) for mobility of IP to the wireless terminal 135, and Authentication, Authorization and Accounting (AAA) server for user authentication, Network Management Server (Network Management System), FA (Foreign Agent) interworking with the wireless network and at least one external wireless network, and the wireless terminal ( It is preferable to include a Dynamic Host Configuration Protocol (DHCP) server and DNS for allocating and registering Mobile IP (MIP).

According to the present invention, the program providing server 100 connects and manages a communication channel with the wireless terminal 135 through the wireless communication network to provide a web interface corresponding to the wireless terminal 135 and a wireless communication network. It characterized in that it comprises an interface unit 200, whereby the program providing server 100 has a function of a web server that is connected to the wireless terminal 135 and the communication via a wireless communication network.

According to an exemplary embodiment of the present invention, when the wireless terminal 135 is a mobile communication terminal to which a communication channel is connected through a CDMA / WCDMA based wireless communication network, the interface unit 200 is connected to the wireless terminal 135 and the WAP. (Wireless Markup Language) or WML (Wireless Markup Language) or the like to connect a communication channel based on (Wireless Application Protocol) or ME (Mobile Explorer) protocol (or full-browsing based wireless Internet based), and through the communication channel to the wireless terminal 135 It is preferable to perform a function of transmitting and outputting a program providing interface screen in the form of an HTML compatible document and receiving and processing program request information corresponding to the program providing interface screen from the wireless terminal 135.

According to an embodiment of the present invention, when the wireless terminal 135 is a wireless communication terminal to which a communication channel is connected through an HSDPA-based wireless communication network, the interface unit 200 is connected to the wireless terminal 135 and the HSDPA. A communication channel is connected based on a corresponding wireless protocol, the program providing interface screen in the form of an HTML-compatible document is transmitted to the wireless terminal 135 through the communication channel, and outputted, and the program is provided from the wireless terminal 135. It is preferable to perform a function of receiving and processing program request information corresponding to an interface screen.

According to another exemplary embodiment of the present invention, when the wireless terminal 135 is a wireless terminal 135 to which a communication channel is connected through an IEEE 802.16x based wireless communication network, the interface unit 200 may include the wireless terminal ( 135) and a communication channel based on a wireless protocol corresponding to the IEEE 802.16 standard, and transmits and outputs a program providing interface screen to the wireless terminal 135 through the communication channel, and outputs from the wireless terminal 135. It is preferable to perform a function of receiving and processing predetermined program request information corresponding to the program providing interface screen.

According to the present invention, the program providing server 100 when the wireless terminal 135 is connected to the program providing server 100 through the interface unit 200, in conjunction with the interface unit 200, the wireless terminal And an interface providing unit 205 for generating (or extracting) a program providing interface screen for inputting (or selecting) and transmitting program request information at 135.

The interface providing unit 205 is provided in the wireless terminal 135 when the wireless terminal 135 is connected to the program providing server 100 (or a one-time authentication program providing request) through the interface unit 200. A program providing interface screen for inputting (or selecting) program request information corresponding to a function configuration (for example, a browser program provided in the wireless terminal 135) and transmitting the program request information to the program providing server 100 through the wireless communication network. Or generating from the database (not shown) and providing the generated (or extracted) program providing interface screen to the wireless terminal 135 through the wireless communication network in association with the interface unit 200. It features.

Thereafter, the wireless terminal 135 inputs (or selects) program request information based on the program providing interface screen, and transmits the input (or selected) program request information to the program providing server 100 through the wireless communication network. To send).

Here, the program request information is customer information requesting to provide the one-time authentication program to the wireless terminal 135 (for example, customer member information including member ID information and password information of the customer, or the name of the customer, Customer personal information including at least one of a social security number, an address, a contact number, etc.) and operating system (or platform) information provided in the wireless terminal 135 on which the one-time authentication program is mounted. For example, the wireless terminal 135 including at least one of a mobile identification number (MIN), an electronic serial number (ESN), a universal subscriber identity module (USIM) information, and the like, carrier information and terminal model information. ) Information is preferably included.

According to the present invention, the program providing server 100 is a program D / B (225) for storing at least one or more program source or program file corresponding to the one-time authentication program to be provided to the wireless terminal 135, and the wireless When the program request information is received from the terminal 135, the single-use authentication program corresponding to the program request information is extracted or dynamically generated from the program D / B 225, and the wireless terminal is connected through the interface unit 200. Characterized in that it comprises a program providing unit 210 provided to (135).

According to one embodiment of the invention, the program D / B 225 is characterized in that for storing a one-time authentication program file that can operate in the operating system (or terminal platform) provided in the wireless terminal 135, When the program request information is received from the wireless terminal 135, the program providing unit 210 extracts a one-time authentication program file matching the program request information from the program D / B 225. do.

According to another exemplary embodiment of the present invention, the program D / B 225 stores a one-time authentication program source capable of operating in an operating system (or terminal platform) provided in the wireless terminal 135. When the program request information is received from the wireless terminal 135, the program provider 210 extracts a one-time authentication program source matching the program request information from the program D / B 225, and Compile the extracted one-time authentication program source (Compile), characterized in that for dynamically generating a one-time authentication program to be provided to the wireless terminal (135).

Thereafter, the program providing unit 210 provides the extracted (or dynamically generated) one-time authentication program through the wireless communication network to the wireless terminal 135 through the interface unit 200 and remotely mounts the present invention. Those skilled in the art will be familiar with the method of remotely mounting the one-time authentication program (for example, the method of remotely mounting the wireless terminal 135 by attaching a program provider certificate). Detailed description thereof will be omitted for convenience.

The one-time authentication program provided to the wireless terminal 135 by the program providing unit 210 has a function of confirming that the one-time authentication key-based security authentication using the wireless terminal 135 is processed, and when the security authentication is confirmed. And a terminal side output area for outputting a terminal side screen including a password input interface for inputting the account (or card) password (or security card password (or number combination)), and the one-time authentication key based wireless security authentication. A function of processing a one-time authentication area for outputting a one-time authentication screen for processing, and processing so that a caret is assigned to a password input interface on the terminal-side output area so that the account (or card) password (or security card) is processed. A function of processing a password (or number combination)) to be inputted, and the password input interface. The account (or card) password (or security card password (or number combination)) is input, the one-time authentication key for the one-time authentication key-based security authentication processing is generated (or the generated one-time authentication key is a one-time authentication key input) And a function of generating security authentication request information formed by combining the account (or card) password (or security card password (or number combination)) with a one-time authentication key, and the generated security authentication request information. It is characterized in that it comprises a function to transmit to the authentication server 105 on the communication network to process the wireless security authentication.

When the one-time authentication program is downloaded and remotely mounted to the wireless terminal 135 through the program providing unit 210, the wireless terminal 135 first executes the one-time authentication program to validate the one-time authentication program. The program diagnosis mode for authenticating is started. For this purpose, the program providing server 100 diagnoses the validity of the one-time authentication program in cooperation with the one-time authentication program provided in the wireless terminal 135. 215 is provided.

According to an exemplary embodiment of the present invention, the program diagnostic mode generates and transmits a one-time authentication key according to a one-time authentication key-based wireless security authentication procedure in the one-time authentication program provided in the wireless terminal 135, and the one-time authentication. It is desirable to include verifying that the key is valid.

Here, the one-time authentication key-based wireless security authentication, it is preferable that at least one or more of the one-time authentication key generation method of the time-sync (Challenge-Response) method (Time-Synchoronous).

According to the present invention, the program providing server 100 is downloaded to the wireless terminal 135 and the one-time authentication management information corresponding to the remote-mounted one-time authentication program and the one-time authentication program to request the wireless terminal 135 Characterized in that it comprises the information storage unit 220 for storing the information stored in the one-time authentication management D / B 230 by linking the customer information and the wireless terminal 135 information requested to be mounted on.

According to the method of the present invention, when the validity of the one-time authentication program is confirmed as the diagnostic result of the diagnosis unit 215, the information storage unit 220 is downloaded to the wireless terminal 135 and the remote-mounted one-time authentication Preferably, the management information, the customer information corresponding to the customer who has transmitted the program request information, and the wireless terminal 135 information are cooperatively processed and stored in a cooperative process with a predetermined one-time authentication management D / B 230. The one-time authentication management information, the customer information and the wireless terminal 135 information stored in the one-time authentication management D / B 230 is used for the one-time authentication key-based wireless security authentication processing in a wireless security authentication processing system do.

3 is a diagram showing the configuration of the information of the wireless terminal 135 having a one-time authentication program according to the embodiment of the present invention.

In more detail, FIG. 3 illustrates that when the wireless terminal 135 illustrated in the program providing system illustrated in FIG. 2 is a mobile communication terminal, the wireless terminal 135 is processed in association with the one-time authentication management information for the one-time authentication-based wireless security authentication. Regarding the configuration of the wireless terminal 135 information provided in the one-time authentication management D / B 230, those of ordinary skill in the art to which the present invention pertains, refer to and / or modified the present figure 3 for the disposable Various implementation methods for the configuration of the information of the wireless terminal 135 having the authentication program may be inferred, but the present invention includes all the implementation methods inferred above, and the technical description is given only by the implementation method shown in FIG. Features are not limited.

For example, those skilled in the art to which the present invention pertains may refer to, and / or modify, the wireless terminal 135 in addition to the mobile communication terminal by referring to and / or modifying the drawing 3, or IEEE 802.16.x. In the case of the portable Internet terminal, it is possible to infer the configuration of the one-time authentication management information stored in the one-time authentication management D / B 230, and also omitted for convenience in the configuration of the wireless terminal 135 shown in FIG. Inferred information items will be inferred, and it will be apparent that the present invention includes all such inferred methods of implementation.

Referring to FIG. 3, the wireless terminal information includes at least one wireless terminal 135 of a telephone number (MIN), a serial number (ESN), and USIM information (USIM) of the wireless terminal 135 on which the one-time authentication program is mounted. And unique information, and may further include platform information about the wireless terminal 135, carrier information, and terminal model information.

4 is a diagram illustrating one-time authentication management information provided to a wireless terminal 135 according to an embodiment of the present invention.

In more detail, FIG. 4 shows that the wireless terminal 135 shown in the program providing system shown in FIG. 2 is a mobile communication terminal, and a one-time authentication key is used in a time-synchoronous manner with the wireless terminal 135. When providing and mounting a one-time authentication program to generate, showing the configuration of the one-time authentication management information stored in the one-time authentication management D / B 230 shown in the program providing system shown in Figure 2, the present invention Those skilled in the art will be able to infer various implementation methods for constructing the one-time authentication management information provided to the wireless terminal 135 by referring to and / or modifying the present invention. It is made to include all the implementation methods inferred, the technical features are not limited only to the implementation method shown in FIG.

For example, those skilled in the art to which the present invention pertains may refer to, and / or modify, the wireless terminal 135 in addition to the mobile communication terminal HSDPA based wireless communication terminal, or IEEE 802.16.x. In the case of the portable Internet terminal, it is possible to infer the one-time authentication management information configuration stored in the one-time authentication management D / B 230, and also the information omitted for convenience in the one-time authentication management information configuration shown in FIG. It will be apparent that the items will be inferred and the present invention includes all such inferred methods of implementation.

According to the present invention, the one-time authentication program mounted on the wireless terminal 135 through the program providing system shown in FIG. 2 is mounted on the wireless terminal 135 owned by the customer to generate a one-time authentication key. By doing so, the one-time authentication program is characterized in that it comprises a program code that can be driven or operated in the customer wireless terminal 135 platform. For example, if the wireless terminal 135 is equipped with a WIPI (Wireless Internet Platform for Interoperability) platform, the one-time authentication program comprises a program code that operates on a WIPI basis, and other platforms (eg, GVM / SK- If VM / BREW is installed), it includes program code that runs on the platform.

In FIG. 4, the one-time authentication program is provided in the program D / B 225 shown in FIG. 2 in the form of a precompiled program, or the program shown in FIG. 2 in the form of source code to be compiled. It is characterized in that stored in the D / B (225).

When the one-time authentication program is provided in the program D / B 225 in the form of a precompiled program according to an embodiment of the present invention, the wireless terminal 135 through the wireless communication network in the program providing server 100 At the time of providing and mounting the one-time authentication program, at least one or more one-time authentication key generation information corresponding to the one-time authentication program (for example, a secret key value corresponding to a randomly generated number in the program providing server 100) ) Together with the wireless terminal 135 to be stored in a storage device (eg, a memory unit of the wireless terminal 135, or a chip memory unit provided in an IC chip mounted or detached from the wireless terminal 135). Preferably, the disposable authentication program mounted on the wireless terminal 135 generates a one-time authentication key. The authentication program extracts at least one piece of one-time authentication key generation information from the storage device, and generates a one-time authentication key based on the one-time authentication key generation information.

According to another embodiment of the present invention, when the one-time authentication program is stored in the program D / B 225 in the form of source code to be compiled, the program providing server 100 transmits the wireless terminal 135 to the wireless terminal 135. At the time of providing the one-time authentication program, the one-time use of at least one or more one-time authentication key generation information corresponding to the one-time authentication program (for example, a secret key value corresponding to a number randomly generated by the program providing server 100) It is assigned to the one-time authentication key generation information variable included in the authentication program source code, and the one-time authentication program is compiled by compiling the one-time authentication program source code in which at least one or more one-time authentication key generation information is assigned to the one-time authentication key generation information variable. A one-time authentication program generated dynamically as described above. Preferably, a RAM is provided to the wireless terminal 135 through a wireless communication network and mounted thereon. Then, when the one-time authentication program mounted on the wireless terminal 135 generates a one-time authentication key, the one-time authentication program is It is preferable to generate a one-time authentication key based on the one-time authentication key generation information substituted in the one-time authentication program internal variable.

According to another exemplary embodiment of the present invention, even when at least one or more one-time authentication key generation information is substituted into the one-time authentication program as described above, the dynamically generated one-time authentication program to the wireless terminal 135 according to the intention of the person skilled in the art. At the time of providing and mounting, at least one or more other disposable authentication key generation information is provided together with the wireless terminal 135 to be stored in a storage device, and then the one-time authentication program mounted on the wireless terminal 135 is disposable. At the time of generating the authentication key, it is possible to generate a one-time authentication key using both the one-time authentication key generation information provided in the one-time authentication program and the one-time authentication key generation information provided in the storage device, thereby The present invention is not limited.

Referring to FIG. 4, the one-time authentication management information provided to the wireless terminal 135 through the program providing system shown in FIG. 2 is an operating system (or platform) for the wireless terminal 135 on which the one-time authentication program is mounted. Information), a version of the one-time authentication program, an authentication key generation algorithm, at least one or more one-time authentication key generation information, or a one-time authentication key update period. It may be further included, but the present invention is not limited by the information item.

The operating system (or platform) information included in the one-time authentication management information includes a type of operating system (or platform) included in the wireless terminal 135 equipped with the one-time authentication program through the program providing system shown in FIG. Preferably, the operating system (or platform) information is used to identify the operating system (or platform) of the one-time authentication program to be provided to the wireless terminal 135 at the time of upgrading the one-time authentication program.

The version included in the one-time authentication management information includes version information of the one-time authentication program for each platform to be provided to the wireless terminal 135.

According to the embodiment of the present invention, even if the same type of one-time authentication program (for example, one-time authentication program operating on the same platform), the type or version of the authentication key generation algorithm applied according to the version of the one-time authentication program may be different. As a result, since the one-time authentication key generated by the one-time authentication program will also vary, the version information provides information for accurately determining the one-time authentication program mounted on the wireless terminal 135. It is possible to minimize the one-time authentication key authentication error that may occur in the process of authenticating the one-time authentication key generated in the wireless terminal 135 by the version information of the one-time authentication key agent program.

The authentication key generation algorithm included in the one-time authentication management information includes hashing algorithm information applied to the one-time authentication program or detailed attribute information of the hashing algorithm. Currently, the most commonly used hashing algorithms for generating authentication keys are MD4, MD5, SHA, and the like, and a hashing algorithm modified from the hashing algorithm according to an application field (for example, SHA-1 hashing algorithm modified from SHA). Is being used.

The one-time authentication key generation information included in the one-time authentication management information is information for generating a one-time authentication key of the time synchronization method, referring to FIG. 4, the one-time authentication key generation information is a time when the one-time authentication key is generated ( Or time) as first generation information, and is unique to the wireless terminal 135 on which the secret key value corresponding to the value randomly generated by the program providing server 100 or the one-time authentication program is mounted according to the implementation method. It is preferable to use the given MIN / ESN as the second generation information or the third generation information.

Referring to an embodiment of the present invention, when the one-time authentication program uses the MIN / ESN of the wireless terminal 135 as the one-time authentication key generation information for generating the one-time authentication key, the MIN / ESN is a one-time authentication as it is. The MIN / ESN may be used as key generation information, and the MIN / ESN has an excessively large value to prevent the one-time authentication program from overflowing in the process of generating the one-time authentication key. It is possible to convert the data to a value within a certain size by applying a hash function to the device.

The one-time authentication key update period of the one-time authentication management information is a time interval in which the one-time authentication key generated by the one-time authentication program is volatilized and invalidated in time when the authentication key generation algorithm follows the time synchronization scheme. If it is difficult to transmit the time (or time) information when the one-time authentication key is generated with the one-time authentication key in the process of transmitting the one-time authentication key to the authentication server 105 in step (135), the wireless terminal ( It is used to synchronize the one-time authentication key generation time (or time) information between the 135 and the authentication server 105 for a predetermined time. That is, the one-time authentication key generated by the one-time authentication program is transmitted to the authentication server 105 within the one-time authentication key update period, the authentication server 105 is a one-time authentication key authentication code corresponding to the one-time authentication key Should be created. That is, after the one-time authentication key is generated in the one-time authentication program provided in the wireless terminal 135, when the one-time authentication key authentication code is generated within the one-time authentication key update period in the authentication server 105, the one-time authentication The validity of the key is authenticated. Therefore, the one-time authentication key update period is a time required to provide the one-time authentication key generated in the wireless terminal 135 to the wireless terminal 135, and to transmit the one-time authentication key to the authentication server 105 It is preferable to consider the time required and the time required to generate a one-time authentication key authentication code in the authentication server 105, and the like.

According to another exemplary embodiment of the present invention, the authentication key generation algorithm follows a time synchronization scheme and transmits time (or time) information on which the one-time authentication key is generated in the one-time authentication program to the authentication server 105. If it is easy, the one-time authentication key update period may be omitted, or may be set at very short time intervals.

5 is a diagram illustrating one-time authentication management information provided to the wireless terminal 135 according to another embodiment of the present invention.

In more detail, Figure 5 is a wireless terminal 135 shown in the program providing system shown in Figure 2 is a mobile communication terminal, a one-time authentication key in the challenge-response (Challenge-Response) method to the wireless terminal 135 When providing and equipped with a one-time authentication program for generating a, showing the configuration of the one-time authentication management information stored in the one-time authentication management D / B 230 shown in the program providing system shown in Figure 2, the present invention Those skilled in the art can infer various implementation methods for constructing one-time authentication management information provided to the wireless terminal 135 by referring to and / or modifying the present invention. Is made including all the inferred implementation method, the technical features are not limited only to the implementation method shown in FIG.

For example, those of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 5 so that the wireless terminal 135 is an HSDPA based wireless communication terminal in addition to the mobile communication terminal, or IEEE 802.16.x. In the case of the portable Internet terminal, it is possible to infer the configuration of the one-time authentication management information stored in the one-time authentication management D / B 230, and also the information omitted for convenience in the one-time authentication management information configuration shown in FIG. It will be apparent that the items will be inferred and the present invention includes all such inferred methods of implementation.

According to the present invention, the one-time authentication program mounted on the wireless terminal 135 through the program providing system shown in FIG. 2 is mounted on the wireless terminal 135 owned by the customer to generate a one-time authentication key. By doing so, the one-time authentication program is characterized in that it comprises a program code that can be driven or operated in the customer wireless terminal 135 platform. For example, if the wireless terminal 135 is equipped with a WIPI (Wireless Internet Platform for Interoperability) platform, the one-time authentication program comprises a program code that operates on a WIPI basis, and other platforms (eg, GVM / SK- If VM / BREW is installed), it includes program code that runs on the platform.

In FIG. 5, the one-time authentication program is provided in the program D / B 225 shown in FIG. 2 in the form of a precompiled program, or the program shown in FIG. 2 in the form of source code to be compiled. It is characterized in that stored in the D / B (225).

According to an embodiment of the present invention, the one-time authentication program is provided in the program D / B 225 in the form of a pre-compiled program, and the one-time authentication program is for generating the one-time authentication key from the authentication server 105. And a challenge value as one-time authentication key generation information, wherein the program providing server 100 provides the one-time authentication program to the customer wireless terminal 135 via a wireless communication network and mounts the challenge value thereafter. At the time when the one-time authentication program mounted on the wireless terminal 135 generates the one-time authentication key, the one-time authentication program may generate the one-time authentication key based on the challenge value received from the authentication server 105. Do.

According to another embodiment of the present invention, when the one-time authentication program is provided in the program D / B 225 in the form of a precompiled program, the wireless terminal 135 through the wireless communication network in the program providing server 100. At the time when the one-time authentication program is provided and mounted, at least one one-time authentication key generation information corresponding to the one-time authentication program (eg, a secret key corresponding to a random number generated by the program providing server 100) Value) together with the wireless terminal 135 and stored in a storage device (for example, a memory unit of the wireless terminal 135, or a chip memory unit provided in the IC chip mounted or detached from the wireless terminal 135). Preferably, when the one-time authentication program mounted on the wireless terminal 135 generates a one-time authentication key, the one-time authentication program Extracts the challenge value received from the authentication server 105 and at least one-time one-time authentication key generation information from the storage device, and generates a one-time authentication key based on the one-time authentication key generation information.

According to another embodiment of the present invention, when the one-time authentication program is stored in the one-time authentication management D / B 230 in the form of source code to be compiled, the wireless terminal 135 in the program providing server 100. At the time of providing the one-time authentication program with a), at least one or more one-time authentication key generation information corresponding to the one-time authentication program (for example, a secret key value corresponding to a number randomly generated by the program providing server 100) Is substituted into the one-time authentication key generation information variable included in the one-time authentication program source code, and the one-time authentication program source code in which at least one or more one-time authentication key generation information is substituted into the one-time authentication key generation information variable Create a one-time authentication program, dynamically generated one-time as described above It is preferable to provide an authentication program to the wireless terminal 135 through a wireless communication network, and to mount the authentication program. At this time, the one-time authentication program mounted on the wireless terminal 135 generates a one-time authentication key. It is preferable to generate a one-time authentication key based on the challenge value received from the authentication server 105 and the one-time authentication key generation information substituted in the one-time authentication program internal variable.

According to another exemplary embodiment of the present invention, even when at least one or more one-time authentication key generation information is substituted into the one-time authentication program as described above, the dynamically generated one-time authentication program to the wireless terminal 135 according to the intention of the person skilled in the art. At the time of providing and mounting, at least one or more other disposable authentication key generation information is provided together with the wireless terminal 135 and stored in a storage device, and the one-time authentication program mounted on the wireless terminal 135 is a one-time authentication. At the time of generating the key, the one-time authentication program is a challenge value received from the authentication server 105, the one-time authentication key generation information provided in the one-time authentication program and the one-time authentication key generation information provided in the storage device It is possible to generate a one-time authentication key, etc., whereby the present invention It does not specified.

Referring to FIG. 5, the one-time authentication management information provided to the wireless terminal 135 through the program providing system illustrated in FIG. 2 is an operating system (or platform) for the wireless terminal 135 on which the one-time authentication program is mounted. Information, a version of the one-time authentication program, an authentication key generation algorithm, and at least one or more one-time authentication key generation information, which may further include at least one or more information items according to the intention of a person skilled in the art. The present invention is by no means limited to the items.

The operating system (or platform) information included in the one-time authentication management information includes a type of operating system (or platform) included in the wireless terminal 135 equipped with the one-time authentication program through the program providing system shown in FIG. Preferably, the operating system (or platform) information is used to identify the operating system (or platform) of the one-time authentication program to be provided to the wireless terminal 135 at the time of upgrading the one-time authentication program.

The version included in the one-time authentication management information includes version information of the one-time authentication program for each platform to be provided to the wireless terminal 135.

According to the embodiment of the present invention, even if the same type of one-time authentication program (for example, one-time authentication program operating on the same platform), the type or version of the authentication key generation algorithm applied according to the version of the one-time authentication program may be different. As a result, since the one-time authentication key generated by the one-time authentication program will also vary, the version information provides information for accurately determining the one-time authentication program mounted on the wireless terminal 135. By using the version information of the one-time authentication key agent program it is possible to minimize the one-time authentication key authentication error that can occur in the process of authenticating the one-time authentication key generated in the wireless terminal 135.

The authentication key generation algorithm included in the one-time authentication management information includes hashing algorithm information applied to the one-time authentication program or detailed attribute information of the hashing algorithm. Currently, the most commonly used hashing algorithms for generating authentication keys are MD4, MD5, SHA, and the like, and a hashing algorithm modified from the hashing algorithm according to an application field (for example, SHA-1 hashing algorithm modified from SHA). Is being used.

The one-time authentication key generation information included in the one-time authentication management information is information for generating a one-time authentication key of the time synchronization method, referring to FIG. 5, the one-time authentication key generation information is provided in the wireless terminal 135. At the time when the one-time authentication program generates the one-time authentication key, the challenge value provided to the wireless terminal 135 through the authentication server 105 is used as first generation information. The program providing server 100 Secret key value corresponding to the randomly generated value) or MIN / ESN uniquely assigned to the wireless terminal 135 on which the one-time authentication program is mounted, is used as the second generation information or the third generation information. Do.

According to an embodiment of the present invention, the challenge value is an arbitrary value randomly generated by the authentication server 105 at the time when the one-time authentication program included in the wireless terminal 135 generates the one-time authentication key. The challenge server 105 transmits the challenge to the wireless terminal 135 until a one-time authentication key (for example, a response corresponding to the challenge) generated based on the challenge value is received from the wireless terminal 135. It is preferable to maintain a value, and when the one-time authentication key is received, it is preferable to generate the one-time authentication key authentication code based on the challenge value to authenticate the received one-time authentication key.

Referring to an embodiment of the present invention, when the one-time authentication program uses the MIN / ESN of the wireless terminal 135 as the one-time authentication key generation information for generating the one-time authentication key, the MIN / ESN is a one-time authentication as it is. The MIN / ESN may be used as key generation information, and the MIN / ESN has an excessively large value to prevent the one-time authentication program from overflowing in the process of generating the one-time authentication key. It is possible to convert the data to a value within a certain size by applying a hash function to the device, which is determined by the intention of a person skilled in the art or the computing power of the wireless platform.

6 is a diagram illustrating a process of remotely installing and downloading a one-time authentication program to the wireless terminal 135 according to an embodiment of the present invention.

In more detail, FIG. 6 is a process for downloading and remotely mounting the one-time authentication program from the program providing server 100 to the wireless terminal 135 through the program providing system shown in FIG. 2. Those skilled in the art will be able to infer various implementation methods for downloading and remotely mounting the one-time authentication program to the wireless terminal 135 by referring to and / or modifying the drawing 6. The present invention includes all the inferred implementation methods, and is not limited by the implementation method shown in FIG.

Hereinafter, in FIG. 6, the wireless terminal 135 illustrated in FIG. 2 is referred to as a “terminal” for convenience, and the program providing server 100 illustrated in FIG. 2 is referred to as a “server” for convenience.

Referring to FIG. 6, the terminal accesses the server through a wireless communication network, requests the server to download and remotely mount the one-time authentication program (600), and correspondingly, the server sends the one-time authentication program to the server. A program providing interface screen for providing to the wireless terminal 135 is extracted (or generated) and provided to the terminal (605).

Thereafter, the terminal inputs (or selects) program request information through the program providing interface screen (610), and transmits the input (or selected) program request information to the server through the wireless communication network (615). In response, the server extracts (or dynamically generates) a one-time authentication program matching the program request information from the program D / B 225 (620), and extracts (or dynamically generates) the one-time authentication program. It is provided to the terminal via the wireless communication network to be mounted remotely (625).

If the one-time authentication program is remotely mounted to the terminal (630), the terminal executes the one-time authentication program to initiate a diagnostic mode for the one-time authentication program (635), and the terminal correspondingly the one-time authentication Generate a validity diagnostic information through a program and transmit it to the server through the wireless communication network (640), the server receives and read the received validity diagnostic information to confirm the validity of the one-time authentication program (645)

According to an embodiment of the present invention, if the diagnostic mode for the one-time authentication program is generated and transmitted according to the one-time authentication key-based wireless security authentication procedure in the one-time authentication program provided in the wireless terminal 135, It is preferable that the one-time authentication key comprises a check that is valid.

If the validity of the one-time authentication program is not confirmed (650), the server generates program diagnostic error information and transmits the terminal to the terminal through the wireless communication network (655), and then the program providing interface screen to the terminal. And receiving program request information, and extracting (or dynamically generating) a one-time authentication program corresponding to the received program request information and remotely mounting the terminal to the terminal.

On the other hand, if the validity of the one-time authentication program is confirmed (650), the server is a one-time authentication management information corresponding to the one-time authentication program mounted on the terminal, and the customer information and wireless corresponding to the customer who transmitted the program request information Process the terminal 135 in association with the information stored in the one-time authentication management D / B 230 (660), and then the one-time authentication management information and customer information stored in the one-time authentication management D / B 230 and the wireless terminal ( 135) The information may be used for the one-time authentication key-based wireless security authentication processing in a wireless security authentication processing system.

7 is a diagram illustrating a function configuration of a wireless terminal 795 having a one-time authentication key based wireless security authentication processing function according to an embodiment of the present invention.

In more detail, FIG. 7 shows a desktop, a content using screen, and a web connection on a wireless terminal 795 screen used by a customer when the wireless terminal 795 shown in the program providing system shown in FIG. 2 is a mobile communication terminal. If a one-time authentication key-based wireless security authentication process is required in a state in which a terminal-side screen including at least one screen, a financial transaction screen, a payment screen, etc. is already output, a one-time authentication key for processing the wireless security authentication is generated. After processing a one-time authentication area including a one-time authentication screen to be used for the wireless security authentication process to be output to a predetermined area (or all areas) on the screen of the wireless terminal 795, the one-time authentication area (or the terminal side). The account (or card) password (or security card secret) of the customer entered through the terminal output area on which the screen is output A function of a wireless terminal 795 having a one-time authentication program for handling a one-time authentication key-based wireless security authentication by linking a call (or a number combination)) with the one-time authentication key, the present invention belongs to Those skilled in the art will be able to infer various implementation methods for the configuration of the wireless terminal 795 function having the one-time authentication key based wireless security authentication processing function by referring to and / or modifying the drawing 7. The present invention includes all the inferred implementation methods, and the technical features are not limited only to the implementation method illustrated in FIG. 7.

For example, those of ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawing 3 so that the wireless terminal 795 is an HSDPA based wireless communication terminal in addition to the mobile communication terminal, or IEEE 802.16.x. In the case of the portable Internet terminal, it is possible to infer the configuration of the wireless terminal 795 function having the one-time authentication key-based wireless security authentication processing function, and it is apparent that the present invention includes all the inferred implementation methods. It is a bar.

The wireless terminal 795, which provides a mobile communication service according to an embodiment of the present invention, in terms of hardware, has a body, a speaker, a microphone, a keypad, a liquid crystal display (LCD), an antenna, and a battery 783. And a predetermined modem chip (e.g., US Qualcomm) having internal functions such as a code division multiple access (CDMA) modem, a central processing unit / micro processing unit (CPU / MPU), a vocoder, and the like. Qualcomm) 's MSM series modem chips), various memory elements, duplexer filters that separate transmission and reception signals from one antenna, power amplifiers for amplifying transmission signals, high power amplifiers (HPAs), and high power transmission signals Isolator to prevent return, RF / IF SAW filter to remove unwanted out-of-band unwanted signal, frequency up circuit of transmission path, frequency down of reception path Including a circuit circuit, a Voltage Controlled Temperature Compensated X-tal Oscillator (VCTCXO) corresponding to a reference clock source, a UHF frequency synthesizer used as a local signal for frequency up-down conversion, and a codec chip for converting an analog voice signal into a digital signal. The internal components are gradually integrated in the modem chip, and the modem chip provides various multimedia services and / or additional services in addition to the core components for the mobile communication service. Various functions are being integrated together.

Referring to FIG. 7, the wireless terminal 795 having the one-time authentication key-based wireless security authentication processing function structurally outputs a control unit 700 corresponding to the modem chip and a liquid crystal display (LCD). Corresponding to the unit 755, a sound processing unit 757 corresponding to a microphone / speaker, a key input unit 760 corresponding to a keypad, a wireless processing unit 790 corresponding to an antenna and various RF modules, and a nonvolatile memory Memory unit 785, and a battery 783 for predetermined power supply.

In addition, the wireless terminal 795 may be mounted or detached from the wireless terminal 795 to provide various financial (or payment) services and / or various additional services corresponding thereto. Universal Subscriber Identity Module or financial IC chip 765) and an IC chip reader 763 for reading / writing at least one or more information (or data) on the IC chip 765. Do.

The control unit 700 includes a processor and an execution memory including a CPU / MPU provided in the modem chip in hardware, and provides a predetermined program routine for providing a function specific to the wireless terminal 795 from a predetermined memory device. Routine and / or a bus for inputting / outputting program data and a predetermined electronic circuit (or integrated circuit) provided therefor, and the memory unit 785 and / or in software. A generic term for program routines and / or program data loaded from the memory device (or chipset) into the execution memory and computed through the processor to perform a specific function (hence, the one-time authentication key based wireless security authentication processing function. For convenience, a predetermined program routine recorded on the recording medium of the wireless terminal 795 may be stored in the controller 700 for convenience. The program routine included in the controller 700 is basically an operating system routine (not shown) and at least one system management routine (eg, a power management routine, a channel (forward / reverse) management). Routine, handoff routine, etc.), and various functional configurations to be implemented in the wireless terminal 795 by the control unit 700 are realized.

According to the exemplary embodiment of the present invention, after power is supplied to the wireless terminal 795, the operating system routine (not shown), at least one system management routine (not shown), and various system variables corresponding thereto are stored in the controller ( By loading into the execution memory included in the operation 700 and arithmetic processing by the processor, the wireless terminal 795 converts a system setting detailed state, a pilot channel acquisition detailed state, a synchronization channel acquisition detailed state, and a timing change according to a predetermined booting procedure. The operation mode corresponding to the "mobile station initialization state" including the detailed state is set.

After performing the booting procedure, the operating system routine (not shown), one or more system management routines (not shown), and various system variables corresponding thereto are loaded into the execution memory included in the controller 700 and loaded into the processor. The mobile terminal 795 is set to an operation mode corresponding to " mobile station call waiting state ", " system access state " or " call channel state " Perform the Call Processing procedure.

The screen output unit 755 is a function configuration unit for checking the operation mode operation and the operation state corresponding to the operation mode of the wireless terminal 795, one or more including an LCD provided in the wireless terminal 795 And a screen output device and a driver for driving the screen output device, and output at least one key data input through the key input unit 760 in conjunction with the control unit 700, and / Or outputs a menu screen, a function processing screen, and a function processing result screen corresponding to at least one or more functions (or programs) included in the wireless terminal 795, and / or provided in the wireless terminal 795 (or At least one content (eg, text content, image content, multimedia content) to be downloaded is output.

According to the exemplary embodiment of the present invention, the screen output unit 755 performs a function of screen output means for outputting various function processing screens corresponding to the one-time authentication key-based wireless security authentication processing function and a function processing result screen. desirable.

The sound processing unit 757 is a function configuration unit that processes input and output of sound in each operation mode of the wireless terminal 795, and decodes at least one or more encoded sound data to be provided in the wireless terminal 795. And a vocoder and a codec for encoding and encoding a sound signal inputted through a microphone provided in the wireless speaker 795 and / or the wireless terminal 795. .

According to an exemplary embodiment of the present invention, the sound processor 757 may include a sound corresponding to a predetermined ring back tone through the speaker in an operation mode corresponding to the “system access state” among the operation modes of the wireless terminal 795. It is preferable to decode and output data, and / or to encode and input a predetermined voice signal through a microphone in an operation mode corresponding to the "call channel state", or to decode and output a predetermined voice signal through a speaker. .

In addition, the sound processor 757 plays at least one sound content and / or multimedia content provided (or downloaded) by the wireless terminal 795 in at least one operation mode including the "mobile station call waiting state." In this case, it is preferable to decode and output sound data corresponding to the reproduced content.

According to an embodiment of the present invention, the sound processor 757 preferably performs a function of a sound output means for decoding and outputting sound data corresponding to the one-time authentication key-based wireless security authentication processing function.

The key input unit 760 is provided with at least one key button including a predetermined number key and / or a character key and / or a function key. And a driver for driving the key input device, thereby detecting at least one key input signal generated by clicking (or entering) the key button in the key input device. It is characterized by.

According to the present invention, when a predetermined key input signal is detected from a predetermined key button provided in the key input device in a predetermined input mode and / or at least one or more operation modes controlled by the control unit 700, the key. The input unit 760 generates a predetermined key event (eg, MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, MH_KEY_RELEASEEVENT) corresponding to the detected key input signal, and provides the generated key event to the controller 700. The controller 700 reads predetermined key data corresponding to the key event in the current input mode and / or operation mode of the wireless terminal 795 (eg, a specific key event in each input mode and / or operation mode). Read key data from the key table that stores (manages) at least one key data corresponding to the key event; and / or It characterized in that the command to execute the bit and the matching is defined predetermined function shipping dock.

According to the method of the present invention, the key input unit 760 inputs a predetermined telephone number in an operation mode corresponding to the "mobile station call waiting state" of each operation mode of the wireless terminal 795, and enters a predetermined " By entering a call "button, it is preferable to change the operation mode of the radio terminal 795 to an operation mode corresponding to the" system access state ".

In addition, the key input unit 760 inputs a predetermined function key (for example, a menu key) in an operation mode corresponding to the "mobile station call waiting state" of each operation mode of the wireless terminal 795, thereby providing the wireless terminal. It is desirable to execute the various functions provided at 795.

According to the exemplary embodiment of the present invention, the key input unit 760 may perform a function of key input means for inputting at least one or more key data corresponding to the one-time authentication key-based wireless security authentication processing function.

The wireless processor 790 is a functional component that connects a wireless channel with a base station on a mobile communication network in which the wireless terminal 795 operates based on CDMA / WCDMA, and includes a CDMA modem and various RF modules (eg, duplexer filter, power). Amplifiers, high power amplifiers (HPAs), isolators, RF / IF SAW filters, frequency up-circuits, frequency down-conversion circuits, VCTCXOs, UHF frequency synthesizers, etc. for reference clock sources) and antennas It is characterized in that it comprises a driver for driving, in conjunction with the control unit 700 corresponding to each operation mode of the wireless terminal 795 location registration and / or slot mode (slot mode) and / or power control ( Power control) and / or hand-off and / or call processing procedures.

According to an embodiment of the present invention, the wireless processing unit 790 is a radio frequency signal transmission / reception function corresponding to the one-time authentication key based wireless security authentication processing function (eg, antenna control, modulation, synthesis, amplification and / or radio frequency signal). Or performing filtering or the like).

In particular, the wireless processing unit 790 processes the information or signal transmitted from the wireless terminal 795 to the base station into a CDMA stack or receives a CDMA stack from the base station for the one-time authentication-based wireless security authentication processing. It is preferable to include a function for reading a predetermined information or signal from the.

The IC chip reader 763 may be an IC chip 765 (for example, mounted or detached from the wireless terminal 795) through an IC chip 765 standard including ISO / IEC 7816 and / or ISO / IEC 14443. , A functional component for exchanging at least one or more information (or data, or command) with the financial IC chip 765 or USIM), the contact IC card reader compliant with the ISO / IEC 7816 standard, and / or And a contactless IC card reader corresponding to the ISO / IEC 14443 standard, wherein the IC card reader has at least one or more information (or data) with the IC chip 765 through an application protocol data unit (APDU). , Or command).

Referring to the standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip 765 mounted or detached from the customer wireless terminal may include a power supply (VCC), a reset signal (RST), and a clock signal. I / O to communicate with IC chip reader 763 (e.g., command or data exchange, etc.) via contact points such as CLK, ground (GND), programming power supply (VPP), and / or input / output (I / O), etc. A processor unit 770 including an interface 767, at least one computing element including a central process unit (CPU), a micro process unit (MPU), a coprocessor, and / or a coprocessor, and a read only ROM. And a chip memory unit 773 including at least one memory element including a memory, a random access memory (RAM), an electrically erasable and programmable read only memory (EEPROM), a flash memory (FM), and the like. At least one memory device (eg, ROM) among the devices A chip operating system (COS) for managing and operating an IC card internal resource is stored, and predetermined power is supplied from the IC chip reader 763 through a power supply (VCC) contact point of the input / output interface 767. When supplied, the COS stored in the chip memory unit 773 is loaded into a predetermined execution memory to control the overall operation of the IC chip 765, and the clock frequency of the contact point of the clock signal CLK (for example, 3.57 MHz). Alternatively, information or data exchange is controlled between the IC chip 765 and the IC chip reader 763 through an APDU (Application Protocol Data Unit) based on 4.9 MHz.

According to the present invention, the chip memory unit 773 of the IC chip 765 includes at least one IC chip storage information 775 corresponding to a card application for providing the USIM function (or the financial IC chip 765 function). Is stored, and the IC chip storage information 775 is stored to store a data set corresponding to predetermined information or data that is read and / or used by a processor provided in a customer wireless terminal. A program routine (for example, a Java card) that is driven or executed by a processor 780 and an arithmetic function of the processor unit 770 and an instruction set provided by a COS, and used by a processor included in the customer wireless terminal. (Javacard) is a Java Applet) that includes an instruction call code that interacts with the instruction set of the COS and execution code that is processed by the processor unit 770. It is characterized in that comprises a processing unit (777) for the application made.

Here, in particular, the processing unit 777 reads an instruction provided from a processor provided in the customer wireless terminal through the input / output interface 767 through an APDU, and, based on the read command, reads the instruction to the storage unit 780. Read or record at least one or more information or data stored, and provide the result or read information or data to the processor provided in the customer wireless terminal via the input and output interface 767 through an APDU. do.

According to an embodiment of the present invention, the storage unit 780 stores at least one unique information of the wireless terminal 795 for the one-time authentication key-based wireless security authentication processing function, wherein the storage unit ( The unique information of the wireless terminal 795 stored in the 780 may be a radio number 795, a USIM information, an IC chip 765 unique information, a dynamic (or fixed) IP address, etc. assigned to the wireless terminal 795. It is preferable to include at least one.

According to an embodiment of the present invention, when authenticating the account (or card) password (or security card password (or number combination)) of the customer on the wireless terminal 795, the storage unit 780 is the non-face-to-face. Security card information (or account (or card) password (including city) including security card serial number and at least one security card password corresponding to the security card issued (or provided) to the customer for the validity of the financial transaction. It is preferable to register and save).

According to a preferred embodiment of the present invention, the chip memory unit 773 of the IC chip 765 includes a security structure based on ISO / IEC 10202. Accordingly, the chip memory unit 773 may include a CSN. And a protection area for storing secret information such as a chip serial number, a COS control area, a user application area, a read / write access area, an application program area, a FAT (File Allocation Table) management area, and the like. IC chip storage information 775 is preferably stored in an area excluding the protection area and the COS control area.

In addition, according to ISO / IEC 7816 and / or ISO / IEC 14443 ICC standards, the chip memory unit 773 may include one master file (MF) corresponding to a root file, and the master file. ATR (Answer To Reset) including function information on at least one stored information at a lower portion, at least one dedicated file (DF) corresponding to each ICC stored information, and disposed below the dedicated file. And a file structure including an element file (EF) including substantial information and / or data for a smart card service. The IC chip storage information 775 according to the present invention also includes the file structure as described above. It is made to include.

According to an embodiment of the present invention, if the IC chip 765 is a financial IC chip (or USIM having financial information), the IC chip storage information 775 includes an electronic bankbook and a financial common network. It is preferable to include a financial account (or financial product) means, and / or credit card payment method, debit card payment method, check card payment method, prepaid card ( Prepaid Card) It is preferable to include at least one payment means, electronic wallet (Electronic Wallet) payment means.

The memory unit 785 corresponds to a storage medium for storing at least one or more information (or data) in the wireless terminal 795, and / or a recording medium for recording program codes corresponding to at least one or more program routines. The generic term for volatile memory includes read only memory (ROM) corresponding to the read-only memory, flash memory (FM), electrically erasable and programmable read only memory (EEPROM), and the like. It is characterized by.

According to the exemplary embodiment of the present invention, the ROM information of the nonvolatile memory is not to be stored, and the flash memory is provided through an operating system routine, a call processing program routine, and / or the wireless terminal 795. Various application program routines and information or data for the same are stored, and the EEPROM is extracted and / or generated during the execution of the application included in the terminal registration related parameters and phone number (eg, address book) or the wireless terminal 795. Preferably at least one or more information (or data) is stored.

According to an embodiment of the present invention, the memory unit 785 stores at least one unique information of the wireless terminal 795 for the one-time authentication key-based wireless security authentication processing function, and the wireless terminal 795 The unique information may include at least one of a radio terminal 795 telephone number assigned to the radio terminal 795, an electronic serial number (ESN), a dynamic (or fixed) IP address, and the like.

In one embodiment of the present invention, when the customer's account (or card) password (or security card password (or number combination)) is authenticated on the wireless terminal 795, the memory unit 785 is the non-face-to-face finance. Security card information (or account (or card) password (not shown)), including a security card serial number corresponding to the security card issued (or provided) to the customer for validation of the transaction, and at least one security card password. It is desirable to register and store.

Referring to FIG. 7, the wireless terminal 795 includes a terminal side screen including at least one of a desktop screen, a content usage screen, a web access screen, a financial transaction screen, a payment screen, and the like on the screen of the wireless terminal 795. And a terminal-side screen processing unit 705 corresponding to various programs to be output. The terminal-side screen processing unit 705 is connected to the screen output unit 755 on the screen of the wireless terminal 795. A background screen processing unit corresponding to a background program outputting a background screen, a content screen processing unit corresponding to a content using program outputting a content use screen on the screen of the wireless terminal 795 in association with the screen output unit 755; A browser processing unit (not shown) corresponding to a browser program that outputs a web access screen to the screen of the wireless terminal 795 in association with the screen output unit 755; A financial transaction screen processing unit (not shown) corresponding to a financial transaction program (or a browser program) for outputting a financial transaction screen on the screen of the wireless terminal 795 in connection with the screen output unit 755; and the screen output unit. It is preferable to include at least one payment screen processing unit (not shown) corresponding to a payment program (or a browser program) for outputting a payment screen on the screen of the wireless terminal 795 in association with 755.

Those skilled in the art will be familiar with the various features corresponding to the terminal-side screen processing unit 705 and the technical features of the functional components corresponding to the programs. Detailed description thereof will be omitted for convenience.

Referring to FIG. 7, for the one-time authentication key-based wireless security authentication processing, the wireless terminal 795 is a one-time authentication processing unit 710 corresponding to the one-time authentication program provided through the program providing system shown in FIG. 2. And a one-time authentication processing unit 710, a security authentication confirmation unit 720 for confirming whether the one-time authentication key-based wireless security authentication using the wireless terminal 795 is processed, and the security. When confirming the authentication, the one-time authentication area for the one-time authentication key-based wireless security authentication processing is output to a certain area (or the entire area) on the screen of the wireless terminal 795, or the account (or card) password of the customer ( Or a financial output screen including a first password input interface for inputting a security card password (or number combination)) And an output processing unit 725 for processing a transaction output area and a one-time authentication area for outputting a one-time authentication screen for the one-time authentication key-based wireless security authentication process.

According to one embodiment of the invention, the one-time authentication processing unit 710 is preferably driven (or activated) in conjunction with the key input unit 760.

For example, when the wireless terminal 795 is provided with a key button for driving (or activating) the one-time authentication processing unit 710, the one-time authentication processing unit 710 is driven (or activated) by the key button input. It is preferable.

Alternatively, the one-time authentication processor 710 is driven on a terminal side screen including at least one of a desktop screen, a content usage screen, a web access screen, a financial transaction screen, and a payment screen output on the screen of the wireless terminal 795. When the menu is provided (or activated), it is preferable that the one-time authentication processor 710 is driven (or activated) by menu selection through the key input unit 760.

According to another embodiment of the present invention, the terminal screen displayed on the screen of the wireless terminal 795 is a content use screen, a web access screen, a financial transaction in the form of a wireless web document including at least one tag string (or script). At least one screen, a payment screen, and the like, and when the tag string (or script) includes a tag string (or script) for driving (or activating) the one-time authentication processing unit 710, the disposable The authentication processor 710 may be driven (or activated) by the tag string (or script).

For example, when a terminal (or a script) for automatically driving (or activating) the one-time authentication program is included in the terminal-side screen output on the screen of the wireless terminal 795, the one-time authentication processing unit 710 may include the tag string ( Or a script).

Alternatively, when a terminal (or a script) corresponding to a user interface for driving the one-time authentication program is included in the terminal-side screen output on the screen of the wireless terminal 795, the one-time authentication processing unit 710 may include the tag string ( Or via a user interface and a key input unit 760 corresponding to a script).

According to another exemplary embodiment of the present invention, program driving information corresponding to the one-time authentication program is received through a wireless communication network, or a desktop, content use screen, web access screen, and financial transaction are displayed on the screen of the wireless terminal 795. When the program operation information corresponding to the one-time authentication program is included in the terminal-side screen processing unit 705 corresponding to various programs for outputting a terminal-side screen including at least one screen, a payment screen, and the like, the one-time authentication processor ( 710 is preferably driven (or activated) by the program driving information.

According to one embodiment of the invention, when the one-time authentication processing unit 710 is driven (or activated), the security authentication confirmation unit 720 is the one-time authentication processing unit 710 in response to the driving (or activation) The wireless terminal 795 is characterized in that the one-time authentication key-based wireless security authentication confirms that the processing is requested.

According to another exemplary embodiment of the present invention, after the one-time authentication processing unit 710 is driven (or activated), the desktop, content use screen, web access screen, financial transaction screen, payment on the screen of the wireless terminal 795 Wireless security for using the content corresponding to the terminal screen, web access, financial transactions, or payment processing by the terminal screen processing unit 705 corresponding to various programs for outputting a terminal screen including at least one screen or the like. When requesting authentication, the security authentication verification unit 720 is characterized in that the wireless terminal 795 confirms that the one-time authentication key-based wireless security authentication processing is requested.

According to another exemplary embodiment of the present invention, after the one-time authentication processing unit 710 is driven (or activated), the content input corresponding to the terminal-side screen is used, the web access, and the financial transaction through the key input unit 760. , Or when an authentication command (or key data) for wireless security authentication for payment processing is input, the security authentication verification unit 720 requests the one-time authentication key-based wireless security authentication processing from the wireless terminal 795. Characterized in that it is confirmed.

When confirming the one-time authentication key-based wireless security authentication using the wireless terminal 795 through the security authentication confirmation unit 720, the output processing unit 725, a predetermined area (or entire area) on the screen of the wireless terminal 795 And a one-time authentication area for wireless security authentication processing based on a one-time authentication key, and the account (or card) password (or security card password (or) of the customer on the screen of the wireless terminal 795. A terminal-side output area for outputting a terminal-side screen including a first password input interface for inputting a number combination)), and a one-time authentication area for outputting a one-time authentication screen for the one-time authentication key-based wireless security authentication process is outputted. It is preferable to process.

According to the method of the present invention, when the one-time authentication area is output in a certain area on the screen of the wireless terminal 795, the output processing unit 725 is output to the entire area of the screen of the wireless terminal 795. Preferably, the terminal side screen area is reduced in a predetermined direction to set the terminal side output area, and the disposable authentication area is set in the reduced remaining area.

For example, if the entire area of the screen of the wireless terminal 795 includes coordinates of (0,0) to (7, Y), the output processing unit 725 sets the terminal side screen area at (0,0). Set the terminal-side output area by reducing to (7-x, Yy), and set the one-time authentication area to the coordinates of (7, Y) in the reduced and remaining (7-x + 1, Y-y + 1) It is desirable to.

Alternatively, when the one-time authentication area is output to a certain area on the screen of the wireless terminal 795, the output processing unit 725 is within the terminal side screen area that is output to the entire area of the screen of the wireless terminal 795. It is preferable to set the one-time authentication area by inserting a one-time authentication screen.

For example, if the entire area of the screen of the wireless terminal 795 includes coordinates of (0,0) to (7, Y), the output processing unit 725 is (7-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area by inserting the one-time authentication screen into the terminal side screen area corresponding to the coordinate of (7, Y).

Alternatively, when the one-time authentication area is output to a certain area on the screen of the wireless terminal 795, the output processing unit 725 is a schedule on the terminal side screen area that is output to the entire area of the screen of the wireless terminal 795. It is preferable to set the one-time authentication area in an overlap method (or pop-up method) in the area.

For example, if the entire area of the screen of the wireless terminal 795 includes coordinates of (0,0) to (7, Y), the output processing unit 725 is (7-x, Yy) of the terminal-side screen area. ), It is preferable to set the one-time authentication area including the one-time authentication screen in an overlap method (or a pop-up method) in the terminal layer screen area upper layer (Layer) corresponding to the coordinate of (7, Y).

According to another exemplary embodiment of the present invention, the output processing unit 725 for processing the one-time authentication screen for the one-time authentication key-based wireless security authentication processing to be output on the screen of the wireless terminal 795 is the one-time authentication processing unit 710. It is apparent that the present invention is not limited thereto, and may be provided to a program manager (not shown) associated with the one-time authentication program in the wireless terminal 795.

Referring to FIG. 7, for the one-time authentication key-based wireless security authentication process, the one-time authentication processing unit 710 provided in the wireless terminal 795 is provided in the memory unit 785 (or the IC chip 765). A check unit 750 for confirming at least one or more disposable authentication key generation information required for generating the one-time authentication key from the chip memory unit 773, and an authentication key generation algorithm based on the one-time authentication key generation information. And a generation unit 745 for generating a one-time authentication key for the one-time authentication key-based wireless security authentication process. When the authentication key generation method includes a challenge-response method, the wireless processing unit 790 And a communication processing unit 753 receiving the one-time authentication key generation information corresponding to the challenge.

When the one-time authentication area is output by the output processor 725 on the screen of the wireless terminal 795, and a one-time authentication key generation for the one-time authentication key-based wireless security authentication processing using the wireless terminal 795 is requested. The verification unit 750 confirms at least one piece of one-time authentication key generation information required for generating the one-time authentication key from the memory unit 785 (or the chip memory unit 773 included in the IC chip 765). It is characterized by.

When the authentication key generation method includes a challenge-response method according to an embodiment of the present invention, the communication processing unit 753 is a single-use corresponding to the challenge to the authentication server 105 in association with the wireless processing unit 790. The method may further include requesting authentication key generation information and receiving at least one or more one-time authentication key generation information required for generating the one-time authentication key from the authentication server 105.

When generating a one-time authentication key of the time synchronization method according to an embodiment of the present invention, the confirmation unit 750 is the memory unit 785 (or chip memory unit 773 provided in the IC chip 765) It is preferable to check at least one or more one-time authentication key generation information necessary for generating the one-time authentication key from the), and to check the time information for generating the one-time authentication key from the timer provided in the wireless terminal 795.

According to another exemplary embodiment of the present invention, when generating a challenge-response single-use authentication key, the verification unit 750 may include a chip memory unit 773 provided in the memory unit 785 (or the IC chip 765). Confirm at least one or more one-time authentication key generation information required for generating the one-time authentication key from the)), and at least one or more one-time authentication key required for generating the one-time authentication key from the authentication server 105 in association with the communication processing unit (753) It is desirable to receive the generation information.

When at least one or more one-time authentication key generation information necessary for generating the one-time authentication key is confirmed as described above, the generation unit 745 uses the authentication key generation algorithm based on the at least one or more one-time authentication key generation information. Characterized by generating a one-time authentication key for the one-time authentication key-based wireless security authentication process, wherein the one-time authentication key preferably comprises a data block of a predetermined length.

Those skilled in the art to which the present invention pertains correspond to a time synchronization method (or challenge-response method) using an authentication key generation algorithm based on the identified at least one piece of disposable authentication key generation information. Since you will be familiar with the technical features for generating a one-time authentication key, a detailed description thereof will be omitted for convenience.

Referring to FIG. 7, for the one-time authentication key-based wireless security authentication process, the one-time authentication processing unit 710 provided in the wireless terminal 795 has a predetermined area on the one-time authentication area when the one-time authentication area is output. Outputting a one-time authentication start screen (or interface) to the device, and when one-time authentication is started through the one-time authentication start screen (or interface), validity of the one-time authentication key based wireless security authentication process on a predetermined area on the one-time authentication area. Outputting a first password input interface for inputting a password for authentication, and if the validity of the wireless security authentication process through the password is authenticated, the account (or card) password of the customer to be authenticated in association with the one-time authentication key (Or security card password (or number combination)) When the interface is output and the validity of the wireless security authentication process through the password (or security card password (or number combination)) is authenticated, a one-time authentication key generation screen (or interface) is displayed in a predetermined area on the one-time authentication area. Outputting, when the one-time authentication key generation is requested through the one-time authentication key generation screen (or interface), and the requested one-time authentication key is generated through the generation unit 745 and output to a predetermined area on the one-time authentication area. The customer outputs a one-time authentication key input interface for inputting a one-time authentication key to a predetermined area on the one-time authentication area, and when the one-time authentication key-based wireless security authentication is processed, ends the one-time authentication key on a certain area on the one-time authentication area. An interface output unit 730 for outputting a screen (or an interface) and the first ratio; When a password is input through the password input interface, the validity of the one-time authentication key-based wireless security authentication process is authenticated through the password, and when the requested one-time authentication key is generated through the generation unit 745, the And a security authentication processing unit 740 for outputting the one-time authentication key to a predetermined area on the one-time authentication area and processing the generated one-time authentication key to be input through the one-time authentication key input interface. 2 If the account (or card) password (or security card password (or number combination)) of the customer is input based on the password input interface, the account (or card) password (or security card password (or Number combination) and the generation unit 745 (or the one-time authentication key input inter) And an information generation unit 735 for generating security authentication request information including the one-time authentication key input through the face. The one-time authentication key and the account (or card) password (or When security authentication request information including a security card password (or number combination) is generated, the security authentication processing unit 740 transmits the security authentication request information to the authentication server 105 on the communication network through the communication processing unit 753. By doing so, the one-time authentication key and the account (or card) password (or security card password (or number combination)) are linked to the wireless security authentication.

When the one-time authentication area is output on the screen of the wireless terminal 795 through the output processing unit 725, a one-time authentication start screen (or interface) is output to a predetermined area on the one-time authentication area, and the one-time authentication start screen When the one-time authentication is started through the interface (or interface), the interface output unit 730 is a first password for inputting a password for validity authentication for the one-time authentication key-based wireless security authentication processing in a predetermined area on the one-time authentication area. And outputting an input interface.

When a password is input through the first password input interface, the security authentication processor 740 may verify validity of the one-time authentication key-based wireless security authentication process through the password.

When password authentication information (not shown) matching the password is stored in the memory unit 785 according to an embodiment of the present invention, the security authentication processing unit 740 compares the input password with the password authentication information. It is preferable to check the validity of the one-time authentication key-based wireless security authentication.

According to another embodiment of the present invention, when the password includes a series of numbering systems, the security authentication processing unit 740 performs the one-time authentication key through number system analysis (or hash code generation) of the input password. It is desirable to check the validity of the base wireless security authentication.

According to another embodiment of the present invention, when the customer's account (or card) password (or security card password (or number combination)) and one-time authentication key is used in connection with the wireless security authentication according to the intention of the skilled person The outputting of the first password input interface and authenticating the password input through the first password input interface may be omitted, and the present invention is not limited thereto.

In addition, the interface output unit 730 outputs a second password input interface for inputting the account (or card) password (or security card password (or number combination)) of the customer being processed in association with the one-time authentication key Characterized in that.

In addition, the interface output unit 730 outputs a one-time authentication key generation screen (or interface) to a certain area on the one-time authentication area, and the one-time authentication key generation request through the one-time authentication key generation screen (or interface) When the one-time authentication key for the one-time authentication key-based wireless security authentication processing is generated by the one-time authentication key generation request, the security authentication processing unit 740 is located in a predetermined area on the one-time authentication area. It characterized in that for outputting the one-time authentication key.

In addition, the interface output unit 730 is characterized in that the customer outputs a one-time authentication key input interface for inputting the generated one-time authentication key for a wireless security authentication process to a predetermined area on the one-time authentication area.

The one-time authentication key is generated through the generation unit 745 or the one-time authentication key is input through the generated one-time authentication key input interface, and the account of the customer is based on the second password input interface ( Or card) password (or security card password (or number combination)) is input, the information generation unit 735 is the account (or card) password (or security card password (or number combination)) of the customer entered; And generating security authentication request information including the one-time authentication key generated through the generation unit 745 (or inputted through the one-time authentication key input interface) in association with the security authentication processor 740. ) Is associated with the communication processing unit 753 and the one-time authentication key and the account (or card) password (or security card password (or number set) )) And the generated security authentication request information has been processed to be transferred to the authentication server 105 on the network is characterized in that the one-time authentication key based wireless security authentication to be processed comprises a.

If the one-time authentication key-based wireless security authentication is processed, the interface output unit 730 is characterized in that for outputting a one-time authentication key end screen (or interface) in a predetermined area on the one-time authentication area, the one-time authentication key When the one-time authentication key-based wireless security authentication is terminated through an end screen (or an interface), the output processor 725 deletes the one-time authentication area on the screen of the wireless terminal 795 and displays the terminal-side output area. The wireless terminal 795 may return to the entire area of the screen.

Referring to FIG. 7, for the one-time authentication key-based wireless security authentication processing, the one-time authentication processing unit 710 provided in the wireless terminal 795 is connected to the key input unit 760 and the wireless terminal 795. And a caret processor 715 for processing a caret between the terminal output area and the disposable authentication area on the screen to move.

According to the present invention, when the first password input interface, the second password input interface, or the one time authentication key input interface is output to another area (eg, the terminal side output area) other than the one time authentication area, the caret processing unit ( 715 is configured to move the caret assigned to the one-time authentication area to an area (eg, a terminal side output area) to which the first password input interface, the second password input interface, or the one time authentication key input interface is output. Characterized in that.

At this time, at least one or more numbers (or codes) for the wireless security authentication process are input through the first password input interface or the one-time authentication key input interface output to the other area (eg, the terminal side output area). Or, when the account (or card) password (or security card password (or number combination)) of the customer is input through the second password input interface, the caret processing unit 715 moves the caret to the one-time authentication area. Characterized in that the processing to be assigned.

8 is a diagram illustrating a configuration of a one-time authentication key based wireless security authentication processing system according to an embodiment of the present invention.

In more detail, FIG. 8 processes the one-time authentication key-based wireless security authentication through the wireless terminal 135 having a functional configuration corresponding to the one-time authentication program shown in FIG. 7 through the program providing system shown in FIG. As a system configuration, specifically, the wireless terminal 135 shown in FIG. 7 includes the customer's account (or card) password (or security card password (or number combination)) and the one-time authentication key in association with each other. After generating the security authentication request information to the authentication server 105 via a wireless communication network, the authentication server 105 in connection with the financial system 840 for storing the financial ledger information for the customer in the account (or Card) authenticate the validity of the password (or security card password (or number combination)), and the one-time authentication key authentication matching the one-time authentication key By generating a code and comparing with the one-time authentication key, it is a diagram showing a system configuration for processing wireless security authentication using the one-time authentication key.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 8 to infer various implementation methods for the one-time authentication key based wireless security authentication processing system configuration, but the present invention. Is made including all the inferred implementation method, the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 8, the one-time authentication key-based wireless security authentication system includes at least one wireless terminal 135 having a functional configuration corresponding to the one-time authentication program shown in FIG. 7, and the wireless terminal 135. And at least one base station connecting the wireless section, and a control station controlling the base station and at least one server (or device) controlling and operating a wireless communication network including the base station and the control station. Characterized in that it comprises a 130, in connection with the network operation system 130 receives the one-time authentication key information generated and transmitted in the wireless terminal 135, one-time authentication matching the one-time authentication key By generating a key authentication code and comparing with the one-time authentication key, wireless security authentication using the one-time authentication key is processed. The one characterized in that obtained by having the authentication server (105).

In addition, the one-time authentication key-based wireless security authentication processing system, in conjunction with the authentication server 105 processes at least one or more financial transactions (or payment) in accordance with the one-time authentication key-based wireless security authentication, or the one-time use Characterized in that it comprises at least one or more wireless server 125 for performing various member authentication / service authentication / terminal authentication according to the wireless security authentication, wherein the wireless server 125 is the one-time authentication key The financial server 110 having at least one financial transaction function based on the wireless security authentication, the payment server 115 having at least one payment function based on the one-time authentication based on the wireless security authentication, and the disposable service. Wireless web server 120 with various member authentication / service authentication / terminal authentication functions based on authentication key-based wireless security authentication An preferably comprises at least one.

In FIG. 8 according to an embodiment of the present invention, in order to effectively explain the technical features for the one-time authentication key-based wireless security authentication process to those skilled in the art, the one-time authentication key for convenience. Although the authentication server 105 for processing the wireless security authentication based on, and the wireless server 125 for providing various additional services based on the one-time authentication key-based wireless security authentication as a separate server, the present invention is not limited thereto. According to the intention of the person skilled in the art, the one-time authentication key-based wireless security authentication function provided in the authentication server 105 (for example, the information receiving unit 810, the information checking unit 815, the extracting unit 820, and the authentication unit shown below). (830) is provided in the wireless server 125 (for example, the financial server 110 provided in a financial institution), or the authentication server 105 and the wireless server 125 is one Burrow bayida place apparently found that it is possible to be implemented.

The wireless terminal 135 is a mobile communication terminal connected to a Code Division Multiple Access (CDMA) / Wide-CDMA (WCDMA) based mobile communication network, a wireless communication terminal connected to an HSDPA based wireless communication network, or an IEEE 802.16x based communication. And at least one wireless terminal 135 including at least one portable internet terminal connected to the high-speed wireless internet, wherein the wireless terminal 135 is a wireless terminal 135 shown in FIG. It is characterized by comprising a functional configuration.

Those skilled in the art to which the present invention pertains can easily infer the technical features of the wireless terminal 135 including the functional configuration of the wireless terminal 135 shown in FIG. Detailed description is omitted for convenience.

According to an embodiment of the present invention, the wireless communication network to which the wireless terminal 135 connects may include at least one of the CDMA based mobile communication network, the HSDPA based wireless communication network, or the IEEE 802.16x based high speed wireless Internet. Do.

The wireless communication network to which the wireless terminal 135 connects includes at least one or more base stations, a control station for controlling the base station, and at least one server (or apparatus) for controlling and operating a wireless communication network including the base station and the control station. Characterized in that it comprises a network operation system (130) including.

The base station is located at an end of the wireless communication network connecting a wireless section with at least one wireless terminal 135 located in a cell (eg, frequency reach) according to a wireless communication protocol defined in the wireless communication network. As a component, it is characterized in that the network operation system 130 to control and operate the radio terminal 135 through the control station.

According to an embodiment of the present invention, when the wireless communication network is a CDMA / WCDMA / GSM-based wireless communication network, the base station connects at least one radio terminal 135 with a radio section based on the CDMA / WCDMA / GSM wireless protocol stack. It is desirable to.

According to another embodiment of the present invention, when the wireless communication network is an HSDPA-based wireless communication network, the base station preferably connects a wireless section with at least one or more radio terminals 135 based on the HSDPA radio protocol stack.

According to another embodiment of the present invention, when the wireless communication network is an IEEE 802.16x based wireless communication network, the base station includes at least one based on a wireless physical (PHY) layer and a media access control (MAC) layer of the IEEE 802.16x protocol. It is preferable to connect the wireless terminal 135 and the wireless section.

The control station controls at least one or more base stations, and is a component on a wireless communication network connecting the base station and the network operation system 130 by wired section. When the wireless communication network is a CDMA / WCDMA / GSM-based wireless communication network, Preferably, the control station includes a base station controller (BSC). When the wireless communication network is an IEEE 802.16x based wireless communication network, the control station includes a packet access router (PAR). desirable.

The network operation system 130 controls at least one or more radio terminals 135 connectable to the radio communication network through at least one or more base stations in association with the control station, and at least one other radio with the radio terminal 135. A communication channel (or a call channel) is connected to a terminal 135 or a server on a communication network, and the various communication charges and additional service use charges corresponding to the communication plan subscribed to the wireless terminal 135 are calculated. .

According to an embodiment of the present invention, when the wireless communication network is a CDMA / WCDMA / GSM-based wireless communication network, the network operation system 130 may include a mobile switching center (MSC) and a HLR (Mobile Switching Center) for processing circuit switching. Interworking function that provides circuit data service and / or packet data service for wireless data communication and connection with other networks in the network infrastructure for voice call and home location register (VLR). IWF), various message centers (e.g., short message center (SMC), multimedia message center (MMC), etc.) and various additional service server farms, and SGSN for processing packet exchange. (Serving GPRS Support Node), GGSN (Gateway GPRS Support Node) and RNC (Radio Network Controller) are preferably included.

According to another exemplary embodiment of the present invention, when the wireless communication network is an IEEE 802.16x based wireless communication network, the network operation system 130 may include a home agent (HA) for mobility of IP to the wireless terminal 135, and Authentication, Authorization and Accounting (AAA) server for user authentication, Network Management Server (Network Management System), FA (Foreign Agent) interworking with the wireless network and at least one external wireless network, and the wireless terminal ( It is preferable to include a Dynamic Host Configuration Protocol (DHCP) server and DNS for allocating and registering Mobile IP (MIP).

Referring to FIG. 8, the authentication server 105 may include an interface unit 800 connecting at least one wireless terminal 135 and a one-time authentication key-based secure communication channel for a one-time authentication-based wireless security authentication process. The one-time authentication key for the one-time authentication key-based wireless security authentication processing from the wireless terminal 135 through the wireless communication network in conjunction with the interface unit 800, the account (or card) password (or security card password) Information receiving unit 810 for receiving the security authentication request information including an association (or a number combination)) and information on the wireless terminal 135 transmitting the one-time authentication key through the wireless communication network (or a wireless communication protocol). It is characterized by comprising an information confirmation unit 815 to confirm.

Referring to Figure 8, the authentication server 105 is the account (or card) password (or security card password (or number combination)) of the customer included in the security authentication request information for the one-time authentication key-based wireless security authentication processing ) And a password authentication unit that authenticates the validity of the account (or card) password (or security card password (or number combination)) in connection with the financial system 840 storing the financial ledger information for the customer. 805 is provided.

Referring to FIG. 8, the authentication server 105 extracts one-time authentication program information associated with the wireless terminal 135 information from the one-time authentication management D / B 835 for one-time authentication-based wireless security authentication processing. The same authentication key generation conditions for generating the one-time authentication key in the extraction unit 820 and the one-time authentication program provided in the wireless terminal 135 based on the extracted one-time authentication program information (for example, the same one-time authentication key) Generating one-time authentication key authentication code using generated information and authentication key generation algorithm), and comparing the generated one-time authentication key with the one-time authentication key included in the security authentication request information received from the wireless terminal 135 and The authentication unit 830 for authenticating the validity of the received one-time authentication key, and in connection with the interface unit 800 through the wireless communication network And a transmitting unit 825 for transmitting the security authentication result information including the validity authentication result for the one-time authentication key to the wireless terminal 135, as shown in FIG. When the authentication server 105 is provided outside the wireless server 125, the transmission unit 825 at least one of the one-time authentication key-based wireless security authentication processing of the validity authentication result for the one-time authentication key Characterized in that the transmission to the wireless server 125 to share.

The interface unit 800 connects at least one wireless terminal 135 and a communication channel for the one-time authentication key based wireless security authentication process through a wireless communication network, wherein the communication channel is the security authentication request information. It is desirable to include an encryption / decryption-based secure communication channel for.

The information receiving unit 810 receives the security authentication request information transmitted from the wireless terminal 135 through the interface unit 800, and the information checking unit 815 receives the security authentication request information. In the receiving process, the information on the wireless terminal 135 that has transmitted the one-time authentication key through the wireless communication network (or wireless communication protocol) is characterized in that it is confirmed.

According to an exemplary embodiment of the present invention, the security authentication request information is provided through the information receiving unit through a separate one-time authentication key exchange protocol defined between the one-time authentication program provided in the wireless terminal 135 and the interface unit 800 ( 810 is preferably received.

According to another exemplary embodiment of the present invention, the security authentication request information is transmitted to the information receiver 810 through an encryption / decryption protocol based on a data communication protocol defined in a wireless communication network to which the wireless terminal 135 is connected. Is preferably received.

The password authentication unit 805 checks the customer information associated with the wireless terminal 135 information from the one-time authentication management D / B 835, and through the wireless terminal 135 information (or customer information) In connection with the financial system 840 storing the financial ledger information for the customer it characterized in that the validity of the account (or card) password (or security card password (or number combination)) of the customer.

According to an embodiment of the present invention, the password authentication unit 805 may include the wireless terminal 135 information (or customer information) and the account (or card) password (or security card password (or number) included in the security authentication request information. Combination)) to the financial system 840, whereby the financial system 840 authenticates the validity of the customer's account (or card) password (or security card password (or number combination)). .

The extractor 820 extracts the disposable authentication program information associated with the wireless terminal 135 information from the one-time authentication management D / B 835 based on the confirmed wireless terminal 135 information and the authentication unit. 830, characterized in that provided.

The authentication unit 830 generates the same one-time authentication key generation information and the authentication key generation algorithm used to generate the one-time authentication key in the one-time authentication program provided in the wireless terminal 135 based on the extracted one-time authentication program information. By generating a one-time authentication key authentication code, and comparing the one-time authentication key included in the security authentication request information received from the wireless terminal 135 with the generated one-time authentication key authentication code, for the received one-time authentication key Characterizing authenticity.

Here, the validity of the one-time authentication key is authenticated by the authentication unit 830 is confidentiality, authentication, integrity and non-repudiation of the one-time authentication key-based wireless security authentication process. Nonrepudiation).

When the validity of the one-time authentication key is authenticated through the authentication unit 830, the transmission unit 825 receives a validity authentication result for the one-time authentication key through the wireless communication network in association with the interface unit 800. Characterized by generating a security authentication result information, characterized in that for transmitting to the wireless terminal (135).

When the authentication server 105 is provided outside the wireless server 125 as shown in FIG. 8, the transmission unit 825 displays a result of validity authentication for the one-time authentication key. It is characterized in that the transmission to the at least one or more wireless server 125 that needs to be based on the wireless security authentication processing, and correspondingly, the wireless server 125 at least based on the validity authentication result for the one-time authentication key It is characterized by processing one or more financial transactions (or payments), or processing various member authentication / service authentication / terminal authentication.

According to another embodiment of the present invention, when the wireless security authentication function of the authentication server 105 is provided in the wireless server 125, the transmission unit 825 may change the validity authentication result for the one-time authentication key. The function of sharing and transmitting to the wireless server 125 may be omitted, whereby the present invention is not limited.

9 is a diagram illustrating a one-time authentication area output for wireless security authentication processing and a password input process for one-time authentication-based wireless security authentication processing according to an embodiment of the present invention.

In more detail, FIG. 9 illustrates a terminal side screen including at least one of a desktop screen, a content usage screen, a web access screen, a financial transaction screen, and a payment screen on a screen of the wireless terminal 135 shown in FIG. When the one-time authentication key-based wireless security authentication function is driven through the key input means provided in the wireless terminal 135 in the state, to process the one-time authentication key-based wireless security authentication on the screen of the wireless terminal 135 After processing to output the one-time authentication area included in the one-time authentication screen, after outputting a first password input interface on the one-time authentication area to authenticate the terminal side validity for the one-time authentication key-based wireless security authentication, the one-time Outputting the second password input interface on the authentication area to the account (or card) password (or security card password) of the customer (Or a combination of numbers)) to illustrate a process of authenticating with a first factor for the one-time authentication key based wireless security authentication process, but for convenience, the process of outputting the one-time authentication start screen (or interface) is omitted. Shall be.

For example, although FIG. 9 illustrates the output of the one time authentication area on the screen of the wireless terminal 135 and then outputs the first password input interface on the one time authentication area, the present invention is limited thereto. The first password input interface may be output to another area in addition to the one-time authentication area, and the present invention is characterized by including all the inferred implementation methods.

In addition, FIG. 9 outputs the second password input interface to the one-time authentication area before the one-time authentication key is generated through the process shown in FIG. 15 or FIG. Although a password (or a combination of numbers)) is described as being processed to be input, this is to reduce the incidence of one-time authentication error over the synchronization time, when the one-time authentication key is generated in a time synchronization manner, the intention of the skilled person According to the process of inputting the account (or card) password (or security card password (or number combination)) of the customer may be performed after the one-time authentication key is generated through the process shown in FIG.

9 illustrates that the second password input interface for inputting the account (or card) password (or security card password (or number combination)) of the customer is output on the one-time authentication area. Therefore, the present invention is not limited thereto, and the second password input interface may be output to another area other than the one-time authentication area.

Referring to FIG. 9, a terminal-side screen including at least one of a desktop screen, a content usage screen, a web access screen, a financial transaction screen, and a payment screen is displayed on the wireless terminal 135 screen shown in FIG. And a key input (or a one-time authentication key-based wireless security authentication-related user interface included in the terminal-side screen) through a key input unit provided in the wireless terminal 135 while outputting the terminal-side screen. When the one-time authentication program is driven through the associated key input (905), the wireless terminal 135 checks whether or not the wireless security authentication process by generating the one-time authentication key through the one-time authentication program (910).

According to one embodiment of the present invention, when the one-time authentication program is driven (or activated), the one-time authentication program is a one-time authentication key based wireless security authentication in the wireless terminal 135 in response to the program driving (or activation). It is desirable to confirm that this processing is requested.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), a screen, a content use screen, a web access screen, a financial transaction screen, a payment screen, and the like are displayed on the screen of the wireless terminal 135. When the terminal side screen processing unit corresponding to various programs outputting at least one terminal screen including at least one request for wireless security authentication for content use, web access, financial transaction, or payment processing corresponding to the terminal screen, The one-time authentication program preferably confirms that the one-time authentication key-based wireless security authentication processing is requested in the wireless terminal 135.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), the content input, web access, financial transaction, or payment processing corresponding to the terminal screen is performed through the key input means. When an authentication command (or key data) for wireless security authentication is input, the one-time authentication program preferably checks that the one-time authentication key-based wireless security authentication is requested in the wireless terminal 135.

If the one-time authentication key-based wireless security authentication process is confirmed as a result of the checking (915), the wireless terminal 135 has a one-time authentication area for outputting a one-time authentication screen for the wireless security authentication process through the one-time authentication program. The wireless terminal 135 processes the output on the screen (920).

According to the exemplary embodiment of the present invention, when the one-time authentication area is output in a predetermined area on the screen of the wireless terminal 135, the wireless terminal 135 is output in the entire area of the screen of the wireless terminal 135. Preferably, the terminal-side screen area is reduced in a predetermined direction to set a terminal-side output area, and the one-time authentication area is set in the reduced and remaining area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (9, Y), the wireless terminal 135 sets the terminal side screen area to (0,0). Set the terminal-side output area by reducing to (9-x, Yy), and setting the one-time authentication area to the coordinates of (9, Y) in the reduced and remaining (9-x + 1, Y-y + 1) It is desirable to.

Alternatively, when the one-time authentication area is output to a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is within the terminal side screen area that is output to the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area by inserting a one-time authentication screen.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (9, Y), the wireless terminal 135 is (9-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area by inserting the one-time authentication screen into the terminal side screen area corresponding to the coordinate of (9, Y).

Alternatively, when the one-time authentication area is output in a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is a constant on the terminal screen area output on the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area in an overlap method (or pop-up method) in the area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (9, Y), the wireless terminal 135 is (9-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area including the one-time authentication screen in an overlap method (or a pop-up method) in the terminal layer screen area upper layer (Layer) corresponding to the coordinates of (9, Y).

Thereafter, the wireless terminal 135 outputs a first password input interface for inputting a password for validating authentication for the one-time authentication key-based wireless security authentication process in a predetermined area on the one-time authentication area, and inputting the first password. It is checked whether the password is input through the interface (925).

If the password is input through the first password input interface (930), the wireless terminal 135 checks the validity of the one-time authentication key based wireless security authentication through the input password (935).

According to an embodiment of the present invention, when password authentication information (not shown) matching the password is stored in the memory unit, the wireless terminal 135 compares the input password with the password authentication information to perform the one-time authentication. It is desirable to verify the validity of key-based wireless security certificates.

According to another embodiment of the present invention, when the password includes a series of number systems, the wireless terminal 135 is based on the one-time authentication key through number system analysis (or hash code generation) of the input password. It is desirable to verify the validity of the wireless security certificate.

If the validity of the one-time authentication key-based wireless security authentication is not confirmed through the input password (940), the wireless terminal 135 generates the password validity error information and outputs it on the one-time authentication area ( 945), the process of inputting the password by outputting the first password input interface to the one-time authentication area is repeated.

On the other hand, if the validity of the one-time authentication key-based wireless security authentication is verified through the input password (940), the wireless terminal 135 is the account (or card) password ( Or outputting a second password input interface for inputting a security card password (or number combination), and the account (or card) password (or security card password (or number combination)) of the customer via the second password input interface. In step 950, the input unit checks whether the key is input.

If the account (or card) password (or security card password (or number combination)) of the customer is input through the second password input interface (955), the wireless terminal 135 is the account (or card) of the customer ) It handles one-time authentication key based wireless security authentication through one-time authentication key associated with password (or security card password (or number combination)).

FIG. 10 is a diagram illustrating a one-time authentication area output for wireless security authentication processing and a password input process for one-time authentication key based wireless security authentication processing according to another embodiment of the present invention.

In more detail, FIG. 10 illustrates a screen for using a content in the form of a wireless web document, a web access screen, in which a terminal screen output to the wireless terminal 135 illustrated in FIG. 7 includes at least one tag string (or script). Including at least one financial transaction screen, payment screen, etc., and when the one-time authentication key-based wireless security authentication processing function is driven through the tag string (or script), the key input provided in the wireless terminal 135 When the one-time authentication key-based wireless security authentication function is driven through the means, the one-time authentication area including the one-time authentication screen for processing the one-time authentication key-based wireless security authentication is output on the screen of the wireless terminal 135. After that, by outputting a first password input interface on the one-time authentication area to the one-time authentication key-based wireless security authentication After authenticating the terminal side validity, and outputs a second password input interface on the one-time authentication area to input the account (or card) password (or security card password (or number combination)) of the customer to the one-time authentication key A process of authenticating with a first factor for a base wireless security authentication process is illustrated and described, but a process of outputting the one-time authentication start screen (or interface) will be omitted for convenience.

For example, although FIG. 10 illustrates the output of the one time authentication area on the screen of the wireless terminal 135 and then outputs the first password input interface on the one time authentication area, the present invention is limited thereto. The first password input interface may be output to another area in addition to the one-time authentication area, and the present invention is characterized by including all the inferred implementation methods.

In addition, FIG. 10 outputs the second password input interface to the one-time authentication area before the one-time authentication key is generated through the process shown in FIG. 15 or FIG. Although a password (or a combination of numbers)) is described as being processed to be input, this is to reduce the incidence of one-time authentication error over the synchronization time, when the one-time authentication key is generated in a time synchronization manner, the intention of the skilled person According to the process of inputting the account (or card) password (or security card password (or number combination)) of the customer may be performed after the one-time authentication key is generated through the process shown in FIG.

10 illustrates that the second password input interface for inputting the customer's account (or card) password (or security card password (or number combination)) is output on the one-time authentication area. As a result, the present invention is not limited thereto, and the second password input interface may be output to an area other than the one-time authentication area.

Referring to FIG. 10, a one-time wireless web document including a tag string (or a script) for driving a one-time authentication program is received by the wireless terminal 135 illustrated in FIG. 7, and the contents corresponding to the wireless web document are used. When the terminal-side screen including at least one screen, a web access screen, a financial transaction screen, a payment screen, etc. is output (1000), the one-time authentication is performed by a program driving related tag string (or script) included in the wireless web document. The program is driven (1005).

For example, when the terminal-side screen output on the screen of the wireless terminal 135 includes a string (or a script) for automatically driving (or activating) the one-time authentication program, the one-time authentication program is the tag string (or script). It is preferred to be driven (or activated) by.

Alternatively, when the terminal-side screen output on the screen of the wireless terminal 135 includes a string (or a script) corresponding to the user interface for driving the one-time authentication program, the one-time authentication program is the tag string (or the script). It is preferable to be driven (or activated) through key input through a user interface corresponding to the key input means.

Thereafter, the wireless terminal 135 confirms whether or not the wireless security authentication process by generating a one-time authentication key through the one-time authentication program (1010).

According to one embodiment of the present invention, when the one-time authentication program is driven (or activated), the one-time authentication program is a one-time authentication key based wireless security authentication in the wireless terminal 135 in response to the program driving (or activation). It is desirable to confirm that this processing is requested.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), a screen, a content use screen, a web access screen, a financial transaction screen, a payment screen, and the like are displayed on the screen of the wireless terminal 135. When the terminal screen processing unit corresponding to various programs outputting at least one terminal screen including at least one request for wireless security authentication for content use, web access, financial transaction, or payment processing corresponding to the terminal screen Preferably, the one-time authentication program confirms that the one-time authentication key-based wireless security authentication is processed in the wireless terminal 135.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), the content input, web access, financial transaction, or payment processing corresponding to the terminal screen is performed through the key input means. When an authentication command (or key data) for wireless security authentication is input, the one-time authentication program preferably checks that the one-time authentication key-based wireless security authentication is requested in the wireless terminal 135.

If the one-time authentication key-based wireless security authentication process is confirmed as a result of the checking (1015), the wireless terminal 135 has a one-time authentication area for outputting a one-time authentication screen for the wireless security authentication process through the one-time authentication program. The wireless terminal 135 processes the output on the screen (1020).

According to the exemplary embodiment of the present invention, when the one-time authentication area is output in a predetermined area on the screen of the wireless terminal 135, the wireless terminal 135 is output in the entire area of the screen of the wireless terminal 135. Preferably, the terminal-side screen area is reduced in a predetermined direction to set the terminal-side output area, and the disposable authentication area is set in the reduced remaining area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (10, Y), the wireless terminal 135 sets the terminal side screen area at (0,0). Set the terminal-side output area by reducing to (10-x, Yy), and setting the one-time authentication area at the coordinates of (10, Y) in the reduced and remaining (10-x + 1, Y-y + 1) It is desirable to.

Alternatively, when the one-time authentication area is output to a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is within the terminal side screen area that is output to the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area by inserting a one-time authentication screen.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (10, Y), the wireless terminal 135 is (10-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area by inserting the one-time authentication screen into the terminal side screen area corresponding to the coordinate of (10, Y).

Alternatively, when the one-time authentication area is output in a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is a constant on the terminal screen area output on the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area in an overlap method (or pop-up method) in the area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (10, Y), the wireless terminal 135 is (10-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area including the one-time authentication screen in an overlap method (or a pop-up method) in the terminal layer screen area upper layer (Layer) corresponding to the coordinate of (10, Y).

Thereafter, the wireless terminal 135 outputs a first password input interface for inputting a password for validating authentication for the one-time authentication key-based wireless security authentication process in a predetermined area on the one-time authentication area, and inputting the first password. Confirm that the password is input through the interface (1025).

If the password is input through the first password input interface (1030), the wireless terminal 135 checks the validity of the one-time authentication key based wireless security authentication through the input password (1035).

According to an embodiment of the present invention, when password authentication information (not shown) matching the password is stored in the memory unit, the wireless terminal 135 compares the input password with the password authentication information to perform the one-time authentication. It is desirable to verify the validity of key-based wireless security certificates.

According to another embodiment of the present invention, when the password includes a series of number systems, the wireless terminal 135 is based on the one-time authentication key through number system analysis (or hash code generation) of the input password. It is desirable to verify the validity of the wireless security certificate.

If the validity of the one-time authentication key-based wireless security authentication is not confirmed through the input password (1040), the wireless terminal 135 generates the password validity error information and outputs it on the one-time authentication area ( 1045), the process of inputting the password by outputting the first password input interface to the one-time authentication area.

On the other hand, if the validity of the one-time authentication key-based wireless security authentication is confirmed through the input password (1040), the wireless terminal 135 in the predetermined area on the one-time authentication area of the customer's account (or card) password ( Or outputting a second password input interface for inputting a security card password (or number combination), and the account (or card) password (or security card password (or number combination)) of the customer via the second password input interface. Verify that is entered (1050).

If the account (or card) password (or security card password (or number combination)) of the customer is input through the second password input interface (1055), the wireless terminal 135 is the account (or card) of the customer ) It handles one-time authentication key based wireless security authentication through one-time authentication key associated with password (or security card password (or number combination)).

11 is a diagram illustrating a one-time authentication area output for wireless security authentication processing and a password input process for one-time authentication key-based wireless security authentication processing according to another embodiment of the present invention.

In more detail, in FIG. 11, program driving information for the one-time authentication program is received through a wireless communication network through the wireless terminal 135 shown in FIG. 7, and the one-time authentication key-based wireless security authentication processing is performed through the program driving information. When the function is driven, the one-time authentication key based wireless security authentication processing through the key input means provided in the wireless terminal 135, when the function is driven, the one-time authentication key based wireless security authentication on the screen of the wireless terminal 135 After processing to output a one-time authentication area including a one-time authentication screen for processing a, and outputs a first password input interface on the one-time authentication area to authenticate the terminal side validity for the one-time authentication key-based wireless security authentication And outputting a second password input interface on the one-time authentication area to account for the customer (or Card) Enter a password (or security card password (or number combination)) to illustrate the process of authenticating with the first factor for the one-time authentication key-based wireless security authentication processing, for convenience, the one-time authentication start screen (or interface) ) Will be omitted.

For example, although FIG. 11 illustrates the output of the one-time authentication area on the screen of the wireless terminal 135 and then outputs the first password input interface on the one-time authentication area, the present invention is limited thereto. The first password input interface may be output to another area in addition to the one-time authentication area, and the present invention is characterized by including all the inferred implementation methods.

In addition, FIG. 11 outputs the second password input interface to the one-time authentication area before the one-time authentication key is generated through the process shown in FIG. 15 or FIG. Although a password (or a combination of numbers)) is described as being processed to be input, this is to reduce the incidence of one-time authentication error over the synchronization time, when the one-time authentication key is generated in a time synchronization manner, the intention of the skilled person According to the process of inputting the account (or card) password (or security card password (or number combination)) of the customer may be performed after the one-time authentication key is generated through the process shown in FIG. .

11 illustrates that the second password input interface for inputting the account (or card) password (or security card password (or number combination)) of the customer is output on the one-time authentication area. As a result, the present invention is not limited thereto, and the second password input interface may be output to an area other than the one-time authentication area.

Referring to FIG. 11, a terminal side screen including at least one of a desktop screen, a content usage screen, a web access screen, a financial transaction screen, and a payment screen is displayed on the wireless terminal 135 screen shown in FIG. During output, if program driving information for the one-time authentication program is received through the wireless communication network (1100), the wireless terminal 135 drives the one-time authentication program through the program driving information (1105).

Thereafter, the wireless terminal 135 checks whether the wireless security authentication process is performed by generating a one-time authentication key through the one-time authentication program (1110).

According to one embodiment of the present invention, when the one-time authentication program is driven (or activated), the one-time authentication program is a one-time authentication key based wireless security authentication in the wireless terminal 135 in response to the program driving (or activation). It is desirable to confirm that this treatment has been requested.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), a screen, a content use screen, a web access screen, a financial transaction screen, a payment screen, and the like are displayed on the screen of the wireless terminal 135. When the terminal side screen processing unit corresponding to various programs outputting at least one terminal screen including at least one request for wireless security authentication for content use, web access, financial transaction, or payment processing corresponding to the terminal screen, The one-time authentication program preferably confirms that the one-time authentication key-based wireless security authentication processing is requested in the wireless terminal 135.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), the content input, web access, financial transaction, or payment processing corresponding to the terminal screen is performed through the key input means. When an authentication command (or key data) for wireless security authentication is input, the one-time authentication program preferably checks that the one-time authentication key-based wireless security authentication is requested in the wireless terminal 135.

If the one-time authentication key-based wireless security authentication process is confirmed as a result of the checking (1115), the wireless terminal 135 has a one-time authentication area for outputting a one-time authentication screen for the wireless security authentication process through the one-time authentication program. The wireless terminal 135 processes the output on the screen (1120).

According to the exemplary embodiment of the present invention, when the one-time authentication area is output in a predetermined area on the screen of the wireless terminal 135, the wireless terminal 135 is output in the entire area of the screen of the wireless terminal 135. Preferably, the terminal-side screen area is reduced in a predetermined direction to set the terminal-side output area, and the disposable authentication area is set in the reduced remaining area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (11, Y), the wireless terminal 135 sets the terminal screen area at (0,0). Set the terminal-side output area by reducing to (11-x, Yy), and set the one-time authentication area to the coordinates of (11, Y) in the reduced and remaining (11-x + 1, Y-y + 1) It is desirable to.

Alternatively, when the one-time authentication area is output to a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is within the terminal side screen area that is output to the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area by inserting a one-time authentication screen.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (11, Y), the wireless terminal 135 is (11-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area by inserting the one-time authentication screen into the terminal-side screen area corresponding to the coordinate of (11, Y).

Alternatively, when the one-time authentication area is output in a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is a constant on the terminal screen area output on the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area in an overlap method (or pop-up method) in the area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (11, Y), the wireless terminal 135 is (11-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area including the one-time authentication screen in an overlap method (or a pop-up method) in the terminal layer screen area upper layer (Layer) corresponding to the coordinate of (11, Y).

Thereafter, the wireless terminal 135 outputs a first password input interface for inputting a password for validating authentication for the one-time authentication key-based wireless security authentication process in a predetermined area on the one-time authentication area, and inputting the first password. It is checked whether the password is input through the interface (1125).

If the password is input through the first password input interface (1130), the wireless terminal 135 checks the validity of the one-time authentication key based wireless security authentication through the input password (1135).

According to an embodiment of the present invention, when password authentication information (not shown) matching the password is stored in the memory unit, the wireless terminal 135 compares the input password with the password authentication information to perform the one-time authentication. It is desirable to verify the validity of key-based wireless security certificates.

According to another embodiment of the present invention, when the password includes a series of number systems, the wireless terminal 135 is based on the one-time authentication key through number system analysis (or hash code generation) of the input password. It is desirable to verify the validity of the wireless security certificate.

If the validity of the one-time authentication key-based wireless security authentication is not confirmed through the input password (1140), the wireless terminal 135 generates the password validity error information and outputs it on the one-time authentication area ( 1145) The process of inputting the password by outputting the first password input interface to the one-time authentication area is repeated.

On the other hand, if the validity of the one-time authentication key-based wireless security authentication is confirmed through the input password (1140), the wireless terminal 135 is the account (or card) password ( Or outputting a second password input interface for inputting a security card password (or number combination), and the account (or card) password (or security card password (or number combination)) of the customer via the second password input interface. In operation 1150, it is checked whether is inputted.

If the account (or card) password (or security card password (or number combination)) of the customer is input through the second password input interface (1155), the wireless terminal 135 is the account (or card) of the customer ) It handles one-time authentication key based wireless security authentication through one-time authentication key associated with password (or security card password (or number combination)).

12 is a diagram illustrating a password input process for one-time authentication key-based wireless security authentication processing through areas other than one-time authentication area output and one-time authentication area output for wireless security authentication processing according to an embodiment of the present invention.

In detail, FIG. 12 shows a terminal screen including at least one of a desktop screen, a content usage screen, a web access screen, a financial transaction screen, and a payment screen on a screen of the wireless terminal 135 shown in FIG. When the one-time authentication key-based wireless security authentication function is driven through a key input unit provided in the wireless terminal 135 in the state, the wireless one-time authentication key-based wireless security authentication is processed on the screen of the wireless terminal 135. After processing to output the one-time authentication area included in the one-time authentication screen, the authentication of the terminal side for the one-time authentication key-based wireless security authentication through the first password input interface output to the terminal output area in addition to the one-time authentication area Then, the customer's account through the second password input interface output to the terminal output area in addition to the one-time authentication area A process of authenticating with a first factor for the one-time authentication key-based wireless security authentication by inputting a left (or card) password (or security card password (or number combination)) will be described. The process of outputting the (or interface) will be omitted.

For example, although FIG. 12 illustrates that the first password input interface is output to the terminal output area output on the screen of the wireless terminal 135 in addition to the one-time authentication area, the present invention is not limited thereto. The first password input interface may be output to any area on the screen of the wireless terminal 135, and thus the present invention is not limited thereto.

In addition, FIG. 12 outputs the second password input interface to the one-time authentication area before the one-time authentication key is generated through the process shown in FIG. 15 or FIG. 16, thereby displaying the customer's account (or card) password (or security card). Although described as a process of processing a password (or a combination of numbers) to be input, the present invention is by no means limited thereto, and the account (or card) password (or security card password ( Or number combination)) may be performed after the one-time authentication key is generated through the process shown in FIG. 15 or FIG. 16.

12 illustrates that the second password input interface for inputting the account (or card) password (or security card password (or number combination)) of the customer is output on the one-time authentication area. As a result, the present invention is not limited thereto, and the second password input interface may be output to an area other than the one-time authentication area.

Referring to FIG. 12, a terminal-side screen including at least one of a desktop screen, a content usage screen, a web access screen, a financial transaction screen, and a payment screen is displayed on the entire area of the wireless terminal 135 screen illustrated in FIG. 7. And outputting (1200), while outputting the terminal screen, the key input via the key input means provided in the wireless terminal 135 (or the one-time authentication key-based wireless security authentication-related user interface included in the terminal-side screen and When the one-time authentication program is driven through the associated key input (1205), the wireless terminal 135 checks whether the wireless security authentication process is performed by generating the one-time authentication key through the one-time authentication program (1210).

According to one embodiment of the present invention, when the one-time authentication program is driven (or activated), the one-time authentication program is a one-time authentication key based wireless security authentication in the wireless terminal 135 in response to the program driving (or activation). It is desirable to confirm that this processing is requested.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), a screen, a content use screen, a web access screen, a financial transaction screen, a payment screen, and the like are displayed on the screen of the wireless terminal 135. When the terminal side screen processing unit corresponding to various programs outputting at least one terminal screen including at least one request for wireless security authentication for content use, web access, financial transaction, or payment processing corresponding to the terminal screen, The one-time authentication program preferably confirms that the one-time authentication key-based wireless security authentication processing is requested in the wireless terminal 135.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), the content input, web access, financial transaction, or payment processing corresponding to the terminal screen is performed through the key input means. When an authentication command (or key data) for wireless security authentication is input, the one-time authentication program preferably checks that the one-time authentication key-based wireless security authentication is requested in the wireless terminal 135.

If it is confirmed that the one-time authentication key-based wireless security authentication process is confirmed (1215), the wireless terminal 135 is a one-time authentication area for outputting a one-time authentication screen for the wireless security authentication process through the one-time authentication program. The wireless terminal 135 processes the output on the screen (1220).

According to the exemplary embodiment of the present invention, when the one-time authentication area is output in a predetermined area on the screen of the wireless terminal 135, the wireless terminal 135 is output in the entire area of the screen of the wireless terminal 135. Preferably, the terminal-side screen area is reduced in a predetermined direction to set the terminal-side output area, and the disposable authentication area is set in the reduced remaining area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (12, Y), the wireless terminal 135 sets the terminal side screen area at (0,0). Set the terminal-side output area by reducing to (12-x, Yy), and set the one-time authentication area to the coordinates of (12, Y) in the reduced and remaining (12-x + 1, Y-y + 1) It is desirable to.

Alternatively, when the one-time authentication area is output to a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is within the terminal side screen area that is output to the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area by inserting a one-time authentication screen.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (12, Y), the wireless terminal 135 is (12-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area by inserting the one-time authentication screen into the terminal side screen area corresponding to the coordinate of (12, Y).

Alternatively, when the one-time authentication area is output in a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is a constant on the terminal screen area output on the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area in an overlap method (or pop-up method) in the area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (12, Y), the wireless terminal 135 is (12-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area including the one-time authentication screen in an overlap method (or a pop-up method) in the terminal layer screen area upper layer (Layer) corresponding to the coordinate of (12, Y).

Thereafter, the wireless terminal 135 allocates a caret to a first password input interface allocated to the terminal-side output area, and checks whether the password is input through the first password input interface (1225).

If the password is input through the first password input interface (1230), the wireless terminal 135 checks the validity of the one-time authentication key based wireless security authentication through the input password (1235).

According to an embodiment of the present invention, when password authentication information (not shown) matching the password is stored in the memory unit, the wireless terminal 135 compares the input password with the password authentication information to perform the one-time authentication. It is desirable to verify the validity of key-based wireless security certificates.

According to another embodiment of the present invention, when the password includes a series of number systems, the wireless terminal 135 is based on the one-time authentication key through number system analysis (or hash code generation) of the input password. It is desirable to verify the validity of the wireless security certificate.

If the validity of the one-time authentication key-based wireless security authentication is not confirmed through the input password (1240), the wireless terminal 135 generates the password validity error information and outputs it on the one-time authentication area ( 1245), the process of inputting the password by outputting the first password input interface to the one time authentication area.

On the other hand, if the validity of the one-time authentication key-based wireless security authentication is confirmed through the input password (1240), the wireless terminal 135 is the account (or card) password (or security card password (or number combination) of the customer Assign a caret to a second password input interface assigned to the terminal-side output area for inputting a)), and via the second password input interface, the account (or card) password (or security card password (or number) of the customer; Combination)) is input (1250).

If the account (or card) password (or security card password (or number combination)) of the customer is input through the second password input interface (1255), the wireless terminal 135 is the account (or card) of the customer. ) It handles one-time authentication key based wireless security authentication through one-time authentication key associated with password (or security card password (or number combination)).

FIG. 13 is a diagram illustrating a password input process for one-time authentication key based wireless security authentication processing through another area other than one-time authentication area output and one-time authentication area output for wireless security authentication processing according to another embodiment of the present invention. .

In more detail, FIG. 13 illustrates a content usage screen, a web access screen, and a web page form in which a terminal screen output to the wireless terminal 135 shown in FIG. 7 includes at least one tag string (or script). At least one financial transaction screen, a payment screen, etc. are made, and when the one-time authentication key-based wireless security authentication function is driven through the tag string (or script), the key provided in the wireless terminal 135 When the one-time authentication key-based wireless security authentication function is driven through the input means, the one-time authentication area including the one-time authentication screen for processing the one-time authentication key-based wireless security authentication is output on the screen of the wireless terminal 135. Then, the one-time authentication key through the first password input interface output to the terminal output area in addition to the one-time authentication area After authenticating the terminal-side validity for the semi-wireless security authentication, the account (or card) password (or security card password (or number) of the customer through the second password input interface output to the terminal-side output area in addition to the one-time authentication area. Combination)) will be described with reference to the process of authenticating with a first factor for the one-time authentication key-based wireless security authentication process, for convenience, the process of outputting the one-time authentication start screen (or interface) will be omitted.

For example, although FIG. 13 illustrates that the first password input interface is output to the terminal output area output on the screen of the wireless terminal 135 in addition to the one-time authentication area, the present invention is not limited thereto. The first password input interface may be output to any area on the screen of the wireless terminal 135, and thus the present invention is not limited thereto.

In addition, FIG. 13 outputs the second password input interface to the one-time authentication area before the one-time authentication key is generated through the process shown in FIG. 15 or FIG. Although described as a process of processing a password (or a combination of numbers) to be input, it is by no means limited by the present invention, the account (or card) password (or security card password (or Number combination)) may be performed after the one-time authentication key is generated through the process shown in FIG. 15 or FIG.

In addition, FIG. 13 illustrates that the second password input interface for inputting the account (or card) password (or security card password (or number combination)) of the customer is output on the one-time authentication area. As a result, the present invention is not limited thereto, and the second password input interface may be output to an area other than the one-time authentication area.

Referring to FIG. 13, a one-time wireless web document including a tag string (or a script) for driving a one-time authentication program is received by the wireless terminal 135 shown in FIG. 7, and the contents corresponding to the wireless web document are used. When a terminal side screen including at least one screen, a web access screen, a financial transaction screen, a payment screen, etc. is output (1300), the one-time authentication is performed by a program driving related tag string (or script) included in the wireless web document. The program is driven (1305).

For example, when the terminal-side screen output on the screen of the wireless terminal 135 includes a string (or a script) for automatically driving (or activating) the one-time authentication program, the one-time authentication program is the tag string (or script). It is preferred to be driven (or activated) by.

Alternatively, when the terminal-side screen output on the screen of the wireless terminal 135 includes a string (or a script) corresponding to the user interface for driving the one-time authentication program, the one-time authentication program is the tag string (or the script). It is preferable to be driven (or activated) through key input through a user interface corresponding to the key input means.

Thereafter, the wireless terminal 135 checks whether the wireless security authentication process is performed by generating a one-time authentication key through the one-time authentication program (1310).

According to one embodiment of the present invention, when the one-time authentication program is driven (or activated), the one-time authentication program is a one-time authentication key based wireless security authentication in the wireless terminal 135 in response to the program driving (or activation). It is desirable to confirm that this processing is requested.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), a screen, a content using screen, a web access screen, a financial transaction screen, a payment screen, and the like are displayed on the screen of the wireless terminal 135. When the terminal side screen processing unit corresponding to various programs outputting at least one terminal screen including at least one request for wireless security authentication for content use, web access, financial transaction, or payment processing corresponding to the terminal screen, The one-time authentication program preferably confirms that the one-time authentication key-based wireless security authentication processing is requested in the wireless terminal 135.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), the content input, web access, financial transaction, or payment processing corresponding to the terminal screen is performed through the key input means. When an authentication command (or key data) for wireless security authentication is input, the one-time authentication program preferably checks that the one-time authentication key-based wireless security authentication is requested in the wireless terminal 135.

If the one-time authentication key-based wireless security authentication process is confirmed as a result of the checking (1315), the wireless terminal 135 has a one-time authentication area for outputting a one-time authentication screen for the wireless security authentication process through the one-time authentication program. The wireless terminal 135 processes the output on the screen (1320).

According to the exemplary embodiment of the present invention, when the one-time authentication area is output in a predetermined area on the screen of the wireless terminal 135, the wireless terminal 135 is output in the entire area of the screen of the wireless terminal 135. Preferably, the terminal-side screen area is reduced in a predetermined direction to set a terminal-side output area, and the one-time authentication area is set in the reduced and remaining area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (13, Y), the wireless terminal 135 sets the terminal side screen area to (0,0). Set the terminal-side output area by reducing to (13-x, Yy), and set the one-time authentication area to the coordinates of (13, Y) in the reduced and remaining (13-x + 1, Y-y + 1) It is desirable to.

Alternatively, when the one-time authentication area is output to a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is within the terminal side screen area that is output to the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area by inserting a one-time authentication screen.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (13, Y), the wireless terminal 135 is (13-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area by inserting the one-time authentication screen into the terminal side screen area corresponding to the coordinate of (13, Y).

Alternatively, when the one-time authentication area is output in a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is a constant on the terminal screen area output on the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area in an overlap method (or pop-up method) in the area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (13, Y), the wireless terminal 135 is (13-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area including the one-time authentication screen in an overlap method (or a pop-up method) in a terminal-side screen area upper layer (Layer) corresponding to the coordinate of (13, Y).

Thereafter, the wireless terminal 135 allocates a caret to a first password input interface allocated to the terminal-side output area, and checks whether the password is input through the first password input interface (1325).

If the password is input through the first password input interface (1330), the wireless terminal 135 checks the validity of the one-time authentication key based wireless security authentication through the input password (1335).

According to an embodiment of the present invention, when password authentication information (not shown) matching the password is stored in the memory unit, the wireless terminal 135 compares the input password with the password authentication information to perform the one-time authentication. It is desirable to verify the validity of key-based wireless security certificates.

According to another embodiment of the present invention, when the password includes a series of number systems, the wireless terminal 135 is based on the one-time authentication key through number system analysis (or hash code generation) of the input password. It is desirable to verify the validity of the wireless security certificate.

If the validity of the one-time authentication key based wireless security authentication is not confirmed through the input password (1340), the wireless terminal 135 generates the password validity error information and outputs the information on the one-time authentication area ( 1345), the process of inputting the password by outputting the first password input interface to the one-time authentication area.

On the other hand, if the validity of the one-time authentication key-based wireless security authentication is confirmed through the input password (1340), the wireless terminal 135 is the account (or card) password (or security card password (or number combination) of the customer Assign a caret to a second password input interface assigned to the terminal-side output area for inputting a)), and via the second password input interface, the account (or card) password (or security card password (or number) of the customer; Combination)) is input (1350).

If the account (or card) password (or security card password (or number combination)) of the customer is input through the second password input interface (1355), the wireless terminal 135 is the account (or card) of the customer. ) It handles one-time authentication key based wireless security authentication through one-time authentication key associated with password (or security card password (or number combination)).

14 is a diagram illustrating a password input process for one-time authentication key-based wireless security authentication processing through other areas than the one-time authentication area output and one-time authentication area output for wireless security authentication processing according to another embodiment of the present invention. to be.

In more detail, in FIG. 14, program driving information for the one-time authentication program is received through a wireless communication network through the wireless terminal 135 illustrated in FIG. 7, and the one-time authentication key-based wireless security authentication process is performed through the program driving information. When the function is driven, the one-time authentication key based wireless security authentication processing through the key input means provided in the wireless terminal 135, when the function is driven, the one-time authentication key based wireless security authentication on the screen of the wireless terminal 135 After processing to output a one-time authentication area including a one-time authentication screen for processing the terminal, the terminal-side validity of the one-time authentication key based wireless security authentication through the first password input interface output to the terminal side output area in addition to the one-time authentication area After authenticating the second password input to the terminal output area in addition to the one-time authentication area The process of authenticating with the first factor for the one-time authentication key-based wireless security authentication process by inputting the account (or card) password (or security card password (or number combination)) of the customer through the data interface will be described. For convenience, the process of outputting the one-time authentication start screen (or interface) will be omitted.

For example, although FIG. 14 illustrates that the first password input interface is output to the terminal output area output on the screen of the wireless terminal 135 in addition to the one-time authentication area, the present invention is not limited thereto. The first password input interface may be output to any area on the screen of the wireless terminal 135, and thus the present invention is not limited thereto.

In addition, FIG. 14 outputs the second password input interface to the one-time authentication area before the one-time authentication key is generated through the process shown in FIG. 15 or FIG. 16, thereby displaying the account (or card) password (or security card) of the customer. Although described as a process of processing a password (or a combination of numbers) to be input, it is by no means limited by the present invention, the account (or card) password (or security card password (or Number combination)) may be performed after the one-time authentication key is generated through the process shown in FIG. 15 or FIG.

In addition, although FIG. 14 illustrates that the second password input interface for inputting the account (or card) password (or security card password (or number combination)) of the customer is output on the one-time authentication area, As a result, the present invention is not limited thereto, and the second password input interface may be output to an area other than the one-time authentication area.

Referring to FIG. 14, a terminal side screen including at least one of a desktop screen, a content usage screen, a web access screen, a financial transaction screen, and a payment screen is displayed on the entire area of the screen of the wireless terminal 135 illustrated in FIG. 7. During output, if program driving information for the one-time authentication program is received through a wireless communication network (1400), the wireless terminal 135 drives the one-time authentication program through the program driving information (1405).

Thereafter, the wireless terminal 135 checks whether the wireless security authentication process is performed by generating a one-time authentication key through the one-time authentication program (1410).

According to one embodiment of the present invention, when the one-time authentication program is driven (or activated), the one-time authentication program is a one-time authentication key based wireless security authentication in the wireless terminal 135 in response to the program driving (or activation). It is desirable to confirm that this processing is requested.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), a screen, a content use screen, a web access screen, a financial transaction screen, a payment screen, and the like are displayed on the screen of the wireless terminal 135. When the terminal side screen processing unit corresponding to various programs outputting at least one terminal screen including at least one request for wireless security authentication for content use, web access, financial transaction, or payment processing corresponding to the terminal screen, The one-time authentication program preferably confirms that the one-time authentication key-based wireless security authentication processing is requested in the wireless terminal 135.

According to another exemplary embodiment of the present invention, after the one-time authentication program is driven (or activated), the content input, web access, financial transaction, or payment processing corresponding to the terminal screen is performed through the key input means. When an authentication command (or key data) for wireless security authentication is input, the one-time authentication program preferably checks that the one-time authentication key-based wireless security authentication is requested in the wireless terminal 135.

If it is confirmed that the one-time authentication key-based wireless security authentication process is confirmed (1415), the wireless terminal 135 has a one-time authentication area for outputting a one-time authentication screen for the wireless security authentication process through the one-time authentication program. The wireless terminal 135 processes the output on the screen (1420).

According to the exemplary embodiment of the present invention, when the one-time authentication area is output in a predetermined area on the screen of the wireless terminal 135, the wireless terminal 135 is output in the entire area of the screen of the wireless terminal 135. Preferably, the terminal-side screen area is reduced in a predetermined direction to set the terminal-side output area, and the disposable authentication area is set in the reduced remaining area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (14, Y), the wireless terminal 135 sets the terminal side screen area at (0,0). Set the terminal-side output area by reducing to (14-x, Yy), and set the one-time authentication area to the coordinates of (14, Y) in the reduced and remaining (14-x + 1, Y-y + 1) It is desirable to.

Alternatively, when the one-time authentication area is output to a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is within the terminal side screen area that is output to the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area by inserting a one-time authentication screen.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (14, Y), the wireless terminal 135 is (14-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area by inserting the one-time authentication screen into the terminal side screen area corresponding to the coordinate of (14, Y).

Alternatively, when the one-time authentication area is output in a certain area on the screen of the wireless terminal 135, the wireless terminal 135 is a constant on the terminal screen area output on the entire area of the screen of the wireless terminal 135. It is preferable to set the one-time authentication area in an overlap method (or pop-up method) in the area.

For example, if the entire area of the screen of the wireless terminal 135 includes coordinates of (0,0) to (14, Y), the wireless terminal 135 is (14-x, Yy) of the terminal-side screen area. It is preferable to set the one-time authentication area including the one-time authentication screen in an overlap method (or a pop-up method) in the terminal layer screen area upper layer (Layer) corresponding to the coordinate of (14, Y).

Thereafter, the wireless terminal 135 allocates a caret to a first password input interface allocated to the terminal-side output area, and checks whether the password is input through the first password input interface (1425).

If the password is input through the first password input interface (1430), the wireless terminal 135 checks the validity of the one-time authentication key based wireless security authentication through the input password (1435).

According to an embodiment of the present invention, when password authentication information (not shown) matching the password is stored in the memory unit, the wireless terminal 135 compares the input password with the password authentication information to perform the one-time authentication. It is desirable to verify the validity of key-based wireless security certificates.

According to another embodiment of the present invention, when the password includes a series of number systems, the wireless terminal 135 is based on the one-time authentication key through number system analysis (or hash code generation) of the input password. It is desirable to verify the validity of the wireless security certificate.

If the validity of the one-time authentication key-based wireless security authentication is not confirmed through the input password (1440), the wireless terminal 135 generates the password validity error information and outputs it on the one-time authentication area ( 1445), the process of inputting the password by outputting the first password input interface to the one time authentication area;

On the other hand, if the validity of the one-time authentication key-based wireless security authentication is confirmed through the input password (1440), the wireless terminal 135 is the account (or card) password (or security card password (or number combination) of the customer Assigns a caret to a second password input interface assigned to the terminal output area for inputting)), and via the second password input interface the account (or card) password (or security card password (or number) of the customer; Combination)) is input (1450).

If the account (or card) password (or security card password (or number combination)) of the customer is input through the second password input interface (1455), the wireless terminal 135 is connected to the account (or card) of the customer. ) It handles one-time authentication key based wireless security authentication through one-time authentication key associated with password (or security card password (or number combination)).

15 is a diagram illustrating a process of generating a time synchronization-based one-time authentication key for wireless security authentication processing according to an embodiment of the present invention.

More specifically, Figure 15 is a one-time authentication key-based wireless security authentication through the process shown in Figure 9 or Figure 10 or Figure 11 or Figure 12 or Figure 13 or Figure 14 in the wireless terminal 135 shown in Figure 7 When the validity is confirmed, a process of generating a one-time authentication key by a time synchronization method based on the validation result is illustrated. If a person of ordinary skill in the art belongs to the present invention, refer to FIG. Alternatively, it may be modified to infer various implementation methods for the time synchronization-based one-time authentication key generation process for the wireless security authentication process, but the present invention includes all the inferred implementation methods, as shown in FIG. The technical features are not limited only to the implemented method.

For example, those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 15 to generate or process the time synchronization-based one-time authentication key in association with the one-time authentication key. The implementation method of inputting the account (or card) password (or security card password (or number combination)) of the customer may be inferred, and the present invention is characterized by including all the inferred implementation methods. .

Referring to Figure 15, the wireless terminal 135 shown in Figure 7 through the process shown in Figure 9 or Figure 10 or Figure 11 or Figure 12 or Figure 13 or Figure 14 the validity of the one-time authentication key based wireless security authentication If this is confirmed, the wireless terminal 135 includes a one-time authentication key generation screen (or interface) for requesting (or commanding) to generate a one-time authentication key in a predetermined area on the one-time authentication area, and outputs the data (1500). The caret allocated to the terminal-side output area is moved to the one-time authentication area and processed to be allocated (1505).

When the caret is assigned to the one-time authentication area, the wireless terminal 135 uses the one-time authentication key generation screen (or interface) output to the one-time authentication area based on the caret moved to the one-time authentication area. Check whether key generation is requested (or commanded) (1510).

If the one-time authentication key generation request (or command) is not confirmed through the one-time authentication key generation screen (or interface) (1515), the wireless terminal 135 is a caret assigned to the one-time authentication area through a key input. Relocates to the terminal-side output area and allocates and processes various key inputs through the terminal-side screen based on the reassigned caret, thereby using the terminal-side screen based on the caret assigned to the terminal-side output area. Various services (or information processing) are performed (1520).

Thereafter, the wireless terminal 135 checks whether the caret assigned to the terminal output area moves to the one time authentication area through a key input (1525).

If the caret allocated to the terminal-side output area does not move back to the one-time authentication area (1530), the wireless terminal 135 uses various care-based screen-based services (or Information processing) (1535), and the terminal-based screen-based various services (or information processing) using the caret are repeated until the caret moves to the one-time authentication area.

On the other hand, when the caret assigned to the terminal output area is moved back to the one-time authentication area (1530), the wireless terminal 135 is a one-time authentication key output to the one-time authentication area based on the caret moved to the one-time authentication area. It is checked whether a one-time authentication key generation is requested (or commanded) through the generation screen (or interface) (1510).

If the one-time authentication key generation request (or command) is confirmed through the one-time authentication key generation screen (or interface) (1515), the wireless terminal 135 is a memory unit (or a chip memory unit provided in the IC chip) Check the one-time authentication key generation information of the time synchronization method with the timer (1540).

If the one-time authentication key generation information of the time synchronization method is confirmed (1545), the wireless terminal 135 substitutes the at least one or more confirmed one-time authentication key generation information into an authentication key generation algorithm to perform the wireless security authentication process. Generate a one-time authentication key for (1550).

16 is a diagram illustrating a process of generating a challenge-response based one-time authentication key for wireless security authentication processing according to an embodiment of the present invention.

More specifically, Figure 16 is a one-time authentication key-based wireless security authentication through the process shown in Figure 9 or Figure 10 or Figure 11 or Figure 12 or Figure 13 or Figure 14 in the wireless terminal 135 shown in Figure 7 When the validity is confirmed, a process of generating a one-time authentication key in a challenge-response method based on the validation result is illustrated. If a person of ordinary skill in the art belongs to the present invention, refer to FIG. It is possible to infer various implementation methods for the challenge-response based one-time authentication key generation process for the wireless security authentication process by changing the present invention, but the present invention includes all the implementation methods inferred, FIG. 16 The technical features are not limited only to the implementation method shown in FIG.

For example, those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 16 to create the challenge-response based one-time authentication key or associate with the one-time authentication key after generation. It will be possible to infer an implementation method of inputting the account (or card) password (or security card password (or number combination)) of the customer to be processed, and the present invention is characterized in that it includes all the inferred implementation methods. do.

Referring to FIG. 16, the wireless terminal 135 shown in FIG. 7 has a one-time authentication key-based wireless security authentication validity through the process shown in FIG. 9 or 10 or 11 or 12 or 13 or 14. If confirmed, the wireless terminal 135 outputs a 1600 including a one-time authentication key generation screen (or interface) requesting (or commanding) to generate a one-time authentication key in a predetermined area on the one-time authentication area, and the terminal. The caret assigned to the side output area is moved to the one-time authentication area and processed to be allocated (1605).

When the caret is assigned to the one-time authentication area, the wireless terminal 135 uses a one-time authentication key through a one-time authentication key generation screen (or interface) outputted to the one-time authentication area based on the caret moved to the one-time authentication area. Verify that creation is requested (or commanded) (1610).

If the one-time authentication key generation request (or command) is not confirmed through the one-time authentication key generation screen (or interface) (1615), the wireless terminal 135 is a caret assigned to the one-time authentication area through a key input. Relocates to the terminal-side output area and allocates and processes various key inputs through the terminal-side screen based on the reassigned caret, thereby using the terminal-side screen based on the caret assigned to the terminal-side output area. Various services (or information processing) are performed (1620).

Thereafter, the wireless terminal 135 checks whether the caret assigned to the terminal output area moves to the one time authentication area through a key input (1625).

If the caret assigned to the terminal-side output area does not move back to the one-time authentication area (1630), the wireless terminal 135 uses a caret assigned to the terminal-side output area to provide various services based on the terminal-side screen (or Information processing) (1635), and the terminal-based screen-based various services (or information processing) using the caret are repeated until the caret moves to the one-time authentication area.

On the other hand, if the caret assigned to the terminal output area is moved back to the one-time authentication area (1630), the wireless terminal 135 is a one-time authentication key output to the one-time authentication area based on the caret moved to the one-time authentication area It is checked whether the one-time authentication key generation is requested (or commanded) through the generation screen (or interface) (1610).

If the one-time authentication key generation request (or command) is confirmed through the one-time authentication key generation screen (or interface) (1615), the wireless terminal 135 to the challenge server 105 through the wireless communication network-the challenge- Requesting and receiving first one-time authentication key generation information corresponding to a response challenge (1640), and N-th (N) corresponding to a challenge-response method through the memory unit (or a chip memory unit provided in the IC chip). = 2,3, ...) Confirm the one-time authentication key generation information (1645).

If the challenge-response one-time authentication key generation information is confirmed (1650), the wireless terminal 135 substitutes the at least one or more confirmed one-time authentication key generation information into an authentication key generation algorithm to process the wireless security authentication. Generate a one-time authentication key for (1655).

17 is a diagram illustrating a process of inputting and transmitting a one-time authentication key according to an embodiment of the present invention.

In more detail, FIG. 17 outputs the one-time authentication key generated by the one-time authentication key generation process shown in FIG. 15 or 16 in the wireless terminal 135 shown in FIG. 7 to the screen of the wireless terminal 135. This is a process for inputting through the one-time authentication area and transmitting to the authentication server 105 shown in FIG. 8, and those skilled in the art to which the present invention pertains refer to FIG. 17 and / or It will be able to infer various implementation methods for the process of transforming by inputting and sending the one-time authentication key, but the present invention comprises all the implementation methods inferred, the technical only by the implementation method shown in FIG. Features are not limited.

Referring to FIG. 17, the wireless terminal 135 shown in FIG. 7 uses an account (or card) password (or card) of the customer through a second password input interface output to the one-time authentication area (or terminal output area). Check whether the security card password (or number combination) is input (1700).

If the account (or card) password (or security card password (or number combination)) of the customer is input through the second password input interface (1705), the wireless terminal 135 is shown in FIG. 15 or FIG. Through the illustrated one-time authentication key generation process, it is checked whether one-time authentication key for processing the wireless security authentication is generated through at least one or more one-time authentication key generation information and an authentication key generation algorithm (1710).

If the one-time authentication key for the wireless security authentication process is generated (1715), the wireless terminal 135 is divided into the terminal-side output area on the screen of the wireless terminal 135 in a predetermined area on the output of the one-time authentication area. Output the generated one-time authentication key (1720), output the one-time authentication key input interface to a predetermined area on the one-time authentication area output by dividing the terminal-side output area (1725), and the one-time authentication key input interface In operation 1730, a one-time authentication key for validity authentication for the one-time authentication key-based wireless security authentication process is input.

If it is confirmed that the one-time authentication key is input (1735), the wireless terminal 135 is the one-time authentication key and the account (or card) password of the customer entered through the one-time authentication key input screen (or interface) And generating security authentication request information including a security card password (or number combination) (1740), and the one-time authentication key and the customer's authentication server 105 through the wireless communication network to the authentication server 105 shown in FIG. The security authentication request information including the account (or card) password (or security card password (or number combination)) is transmitted (1745).

According to another embodiment of the present invention, when the security authentication request and the financial transaction (or payment settlement) are made together, the one-time authentication key may be included in the financial transaction request information (or payment request information) and transmitted. This makes it clear that the present invention is not limited.

18 is a diagram illustrating a process of inputting and transmitting a one-time authentication key according to another embodiment of the present invention.

In more detail, FIG. 18 outputs the one-time authentication key generated through the process of generating the one-time authentication key shown in FIG. 15 or 16 in the wireless terminal 135 shown in FIG. 7 on the screen of the wireless terminal 135. This is about the process of inputting through the terminal-side output area to the authentication server 105 shown in Figure 8, if the person of ordinary skill in the art, the present reference 18 Alternatively, it may be inferred that various implementation methods for the process of inputting and transmitting the one-time authentication key may be inferred, but the present invention includes all the implementation methods inferred, and only the implementation method illustrated in FIG. The technical features are not limited.

Referring to FIG. 18, the wireless terminal 135 shown in FIG. 7 uses an account (or card) password (or card) of the customer through a second password input interface output to the terminal output area (or one-time authentication area). Check whether the security card password (or number combination) is input (1800).

If the account (or card) password (or security card password (or number combination)) of the customer is input through the second password input interface (1805), the wireless terminal 135 is shown in FIG. 15 or FIG. Through the illustrated one-time authentication key generation process, it is determined whether one-time authentication key for processing the wireless security authentication is generated through at least one or more one-time authentication key generation information and an authentication key generation algorithm (1810).

If the one-time authentication key for the wireless security authentication process is generated (1815), the wireless terminal 135 outputs the generated one-time authentication key in a predetermined area on the one-time authentication area on the screen of the wireless terminal 135 and In operation 1820, a caret is allocated to the one-time authentication key input interface included in the terminal-side output area (1825), and the validity authentication for the one-time authentication key based wireless security authentication process is performed through the one-time authentication key input interface. Check whether the one-time authentication key is input (1830).

If it is confirmed that the one-time authentication key is input (1835), the wireless terminal 135 is the one-time authentication key and the account (or card) password of the customer entered through the one-time authentication key input screen (or interface) (1840) generates security authentication request information including a security card password (or number combination), and transmits the one-time authentication key and the customer's authentication key to the authentication server 105 shown in FIG. The security authentication request information including the account (or card) password (or security card password (or number combination)) is transmitted (1845).

According to another embodiment of the present invention, when the security authentication request and the financial transaction (or payment) are made together, the one-time authentication key may be included in the financial transaction request information (or payment request information) and transmitted. This makes it clear that the present invention is not limited.

19 is a diagram illustrating a one-time authentication key based wireless security authentication process according to an embodiment of the present invention.

In more detail, FIG. 19 illustrates the one-time authentication from the wireless terminal 135 shown in FIG. 7 to the authentication server 105 shown in FIG. 8 through the one-time authentication key transmission process shown in FIG. 17 or 18. The present invention relates to a process of processing the one-time authentication key-based wireless security authentication by validating the one-time authentication key in the authentication server 105 when transmitting the security authentication request information including a key. Those skilled in the art will be able to infer various implementation methods for the one-time authentication key based wireless security authentication process by referring to and / or modifying the drawing 19, but the present invention provides all the implementation methods inferred above. It is made, including, and the technical features are not limited only to the implementation method shown in FIG.

19, the one-time authentication key from the wireless terminal 135 shown in FIG. 7 to the authentication server 105 shown in FIG. 8 through the one-time authentication key transmission process shown in FIG. 17 or FIG. When transmitting the security authentication request information including the, the authentication server 105 receives the security authentication request information including the one-time authentication key through a wireless communication network (1900), the wireless communication network (for example, a network on a wireless communication network) In operation 1905, information on the wireless terminal 135 that transmits the security authentication request information is confirmed by reading the protocol associated with the operation system 130 or by reading the protocol for receiving the security authentication request information.

If the information on the wireless terminal 135 that transmits the security authentication request information is confirmed (1910), the authentication server 105 is connected to the one-time authentication management D / B 835 shown in Figure 8 the wireless terminal (135) check the customer information associated with the information (1915), the confirmed customer information (or wireless terminal 135 information) and the account (or card) password (or security card password (or number combination)) of the customer ) Is transmitted to the financial system 840 that stores the financial ledger information of the customer to check the validity of the account (or card) password (or security card password (or number combination)) (1920).

If the validity of the customer's account (or card) password (or security card password (or number combination)) is not verified (1925), the authentication server 105 is a one-time authentication key corresponding to the password validation error The security authentication result information including the validation result is generated and transmitted to the wireless terminal 135 (1955).

On the other hand, when the validity of the customer's account (or card) password (or security card password (or number combination)) is confirmed (1925), the authentication server 105 is a one-time authentication management D / B shown in FIG. In operation 1930, the one-time authentication key generation information and the authentication key generation algorithm corresponding to the one-time authentication key are checked from the one-time authentication key management information associated with the wireless terminal 135 information.

If the one-time authentication key generation information and authentication key generation algorithm corresponding to the one-time authentication key is confirmed (1935), the authentication server 105 is the one-time authentication through the verified one-time authentication key generation information and authentication key generation algorithm. Generate a one-time authentication key authentication code corresponding to the key (1940), and compares the one-time authentication key included in the security authentication request information with the generated one-time authentication key authentication code to check the validity of the one-time authentication key ( 1945).

If the validity of the one-time authentication key is confirmed (1950), the authentication server 105 generates security authentication result information including the one-time authentication key validation result through the wireless communication network to the wireless terminal 135 And the one-time authentication key to the wireless server 125 (eg, the financial server 110, the payment server 115, the wireless web server 120, etc.) requesting the one-time authentication key-based wireless security authentication. In response to sharing the validity result (1960), the wireless server 125 corresponding to at least one financial transaction, payment and authentication based on the one-time authentication key validity result Provide additional services.

20 is a diagram illustrating a one-time authentication key-based wireless security authentication process according to an embodiment of the present invention.

In more detail, FIG. 20 illustrates the one-time authentication in the authentication server 105 shown in FIG. 8 through the one-time authentication key based wireless security authentication process shown in FIG. 19 in the authentication server 105 shown in FIG. After generating security authentication result information including a key validation result and transmitting the result to the wireless terminal 135 shown in FIG. 7, the wireless terminal 135 processes the wireless security authentication using the security authentication result information. As for the person skilled in the art to which the present invention pertains, various implementation methods for the one-time authentication key based wireless security authentication process may be inferred by referring to and / or modifying the drawing 20. The present invention includes all the inferred implementation methods, and the technical features are not limited to the implementation method illustrated in FIG.

Referring to FIG. 20, the one-time authentication key in the authentication server 105 shown in FIG. 8 through the one-time authentication key-based wireless security authentication process shown in FIG. 19 in the authentication server 105 shown in FIG. After generating security authentication result information including a validity result and transmitting it to the wireless terminal 135 shown in FIG. 7, the wireless terminal 135 validates the one-time authentication key from the authentication server 105 through a wireless communication network. In operation 2000, it is checked whether security authentication result information including the verification result (eg, validity approval or validity error) is received.

If the security authentication result information is received (2005), the wireless terminal 135 extracts the one-time validation result from the security authentication result information and outputs it to a predetermined area on the one-time authentication area (2010), the disposable The one-time authentication key end screen (or interface) is output to a certain area on the authentication area (2015).

Thereafter, it is checked whether the wireless security authentication process using the one-time authentication key ends through the one-time authentication key end screen (or an interface) output on the one-time authentication area (2020).

If the wireless security authentication process using the one-time authentication key is terminated through the one-time authentication key end screen (or interface) (2025), the wireless terminal 135 forms the one-time authentication area on the screen of the wireless terminal 135. In operation 2030, the terminal-side output area is output to the entire area of the screen of the wireless terminal 135.

According to the present invention, in the one-time authentication key-based wireless security authentication processing through the wireless terminal used by the customer, the account password for the customer account, or the security card password (or number combination) issued to the customer for non-face-to-face financial transactions By authenticating in conjunction with the one-time authentication key, there is an advantage to solve the two-factor problem for the one-time authentication key-based wireless security authentication processing, and improve the reliability and security of the wireless security authentication.

Claims (4)

In the method for processing wireless security authentication through the one-time authentication key in the financial institution server that agreed the mobile phone and one-time authentication key generation information and authentication key generation algorithm, Storing the one-time authentication key generation information and the authentication key generation algorithm agreed upon with the mobile phone by connecting with the security card information; In the wireless security authentication processing based on a one-time authentication key using a mobile phone, a one-time-use generated from the mobile phone user's security card password (or number combination), one-time authentication key generation information and authentication key generation algorithm provided in the mobile phone Receiving security authentication request information made by combining an authentication key; A first factor authentication step of authenticating the validity of the security card password (or number combination) included in the security authentication request information through a financial system storing the security card password of the mobile phone user; When the first factor authentication, the one-time authentication key authentication code to be compared with the one-time authentication key generated by the stored one-time authentication key generation information and authentication key generation algorithm, and the one-time authentication key included in the security authentication request information and the A second factor authentication step of authenticating the validity of the one-time authentication key by comparing the one-time authentication key authentication code; And transmitting the security authentication result information including the authentication result for the one-time authentication key to the mobile phone during the first and second factor authentications. . A recording medium comprising a program for executing the method of claim 1. In the system for processing wireless security authentication through the one-time authentication key included in the financial institution server that agreed the mobile phone and one-time authentication key generation information and authentication key generation algorithm, Information storage means for storing the one-time authentication key generation information and the authentication key generation algorithm agreed upon with the mobile phone in connection with security card information; In the wireless security authentication processing based on a one-time authentication key using a mobile phone, a one-time-use generated from the mobile phone user's security card password (or number combination), one-time authentication key generation information and authentication key generation algorithm provided in the mobile phone Information receiving means for receiving the security authentication request information made by combining the authentication keys; Password authentication means for authenticating a first factor validity of the security card password (or number combination) included in the security authentication request information through a financial system storing the security card password of the mobile phone user; When the first factor authentication, the one-time authentication key authentication code to be compared with the one-time authentication key generated by the stored one-time authentication key generation information and authentication key generation algorithm, and the one-time authentication key included in the security authentication request information and the Authentication means for authenticating a second factor validity of the one-time authentication key by comparing a one-time authentication key authentication code; And And a transmission means for transmitting the security authentication result information including the authentication result for the authentication key to the mobile phone. delete

Images