KR101007294B1 - Membership certificating system and method by using a portable terminal - Google Patents

Abstract

PURPOSE: A method and a system of member certification using a mobile terminal are provided to photograph a display unit for recognition by a direct mobile terminal, thereby requesting certification. CONSTITUTION: A certification unit(5) certificates a mobile terminal which ID for certification is given. A display unit for recognition(7) recognized through an image recognition unit(21). A certification server(9) compares the ID for certification and an certification identification code of a mobile terminal with a pre-stored certification unit information and member certification information. According to a certification result of a certification server, a certification module(27) certificates a member.

Description

Membership certification system and method by using a portable terminal}

The present invention relates to a member authentication system using a mobile terminal and a method thereof, and more particularly, when a user who is a member enters a specific workplace offline or rents an article at a specific workplace, an authentication desk or a loan of goods. Member authentication system and method using a mobile terminal that allows a member to be authenticated through a simple procedure of recognizing a mobile terminal having a labeling means for recognition, such as a bar code posted to an authentication unit installed at an entrance or a product entrance, etc. It is about.

In general, a workplace that controls access to a user or an object for the purpose of providing a specific service or renting an object off-line is provided with a person or equipment for access control at the entrance, and a user, such as a member, who has been authorized to enter or leave the room. Distribute the membership card, etc., printed on the barcode, and present this membership card when entering or leaving the bank. However, since the barcode acting as an authentication key is exposed, duplication is easy, and thus security is very weak.

In addition, recently, various types of authentication devices are included in access control devices to determine whether the user is an authorized user. In order to solve the above bar code exposure problem, a personal identification card having a barcode is stored in a personal mobile device to store the above bar code exposure problem. Barcodes stored in can be used like barcodes printed on physical membership cards. An example of this is the “Internet mobile phone barcode authentication and payment system” filed in Korean Patent Application No. 10-2001-0035983. As shown schematically by reference numeral 101 in FIG. 1, the system generates a barcode by reading the barcode 107 displayed on the screen 108 of the mobile phone, that is, the mobile terminal 110, on the barcode reader 121. The member 111 is authenticated by checking the previously stored authentication information through the system 111.

However, such a conventional authentication system 101, in particular, in the case of a laser barcode reader 121 due to the diffuse reflection of the screen 108 of the mobile terminal 110 when the barcode 107 is read by the barcode reader 121. There was a problem that the barcode 107 could not be recognized normally.

In addition, the authentication system 101 as described above should be handed to the access control personnel of the user's mobile terminal 110 in the majority of the authentication process, there may be a discomfort caused by the exchange of personal items, the procedure is complicated, etc. There was also a problem caused by inconvenience.

The present invention has been proposed to solve the above problems, while utilizing the personal mobile terminal for membership authentication, while eliminating security vulnerabilities due to the exposure of the authentication key in the mobile terminal, while simplifying the authentication process and false beyond the normal authentication unit Its purpose is to provide a secure and convenient authentication solution by blocking its use and increasing operational efficiency.

In order to achieve the above object, the present invention provides an authentication unit for performing an authentication procedure for a member having a mobile terminal to which an ID for authentication has been granted through membership; Recognition indicator means posted on the authentication unit and recognized through the image recognition means of the mobile terminal to extract the identification code unique to the authentication unit to the mobile terminal; The authentication ID and the authentication by comparing the authentication ID and the authentication unit identification code transmitted from the mobile terminal with previously stored authentication unit information and member authentication information when connected to the mobile terminal and the communication network upon request for membership authentication. An authentication server for determining the adequacy of the sub-identification code; And an authentication computer installed in the authentication unit so as to be connected to the authentication server through a communication network, and installed with an authentication module configured to authenticate members according to the authentication result of the authentication server with respect to the authentication ID and the authentication code. It provides a member authentication system using a mobile terminal comprising a.

In addition, the authentication server further includes location information for the authentication unit, the mobile terminal is transmitted to the authentication server with the authentication ID and the authentication unit identification code from the portable terminal when a member authentication request It is preferable to determine suitability of the authenticator positional information by matching the positional information with the authenticator positional information.

In addition, the image recognition means is preferably a camera or an optical scanner.

In addition, the label means for recognition is preferably a bar code, a symbol, a character, a number, or a predetermined image.

In addition, the location information module is a GPS module, the location information is preferably a GPS coordinate.

The present invention also provides a member registration step of receiving an ID for authentication through member registration and storing it in a portable terminal of a member name; The authentication unit, which is a member through the membership registration step, extracts an identification code unique to the authentication unit by recognizing a mark for recognition of the authentication unit through the image recognition unit of the mobile terminal in the authentication unit that wants the member authentication. Authentication start step to store in; An authentication request step of transmitting the authentication unit identification code extracted in the authentication start step together with the authentication ID to an authentication server through a communication network; Appropriateness of the authentication ID and the authentication unit identification code by matching the authentication ID and the authentication unit identification code transmitted to the authentication server in the authentication request step with the authentication unit information and member authentication information previously stored in the authentication server. An authentication step of determining; An authentication key returning step of sending an authentication key from the authentication server to the authentication computer for authentication of the authentication unit when it is determined that the authentication ID and the authentication unit identification code are appropriate in the authentication step; And an authentication approval step of performing a member authentication in the authentication module of the authentication computer by the authentication key sent back in the authentication key returning step.

In addition, the authentication request step is to transmit the location information of the mobile terminal with the authentication ID and the authentication unit identification code to the authentication server, wherein the authentication step is the authentication ID and the The location information of the mobile terminal transmitted to the authentication server together with an authentication unit identification code is compared with the location information of the authentication unit previously stored in the authentication server together with the authentication unit information and member authentication information. It is preferable to determine suitability.

Therefore, according to the member authentication system and method using a portable terminal according to the present invention, the authentication ID stored in the form of data in the personal portable terminal to the authentication server sent to the authentication server, the identification mark, such as a barcode exposed to the outside Since the means are used as an auxiliary means, there is no fear that the authentication ID will be exposed to the outside, and thus the authentication security can be further improved.

In addition, when a user authenticates a member in the authentication unit, authentication is performed by a simple procedure of requesting authentication by directly photographing or scanning a recognition cover means with a mobile terminal. Therefore, when a user passes the mobile terminal to another person for authentication, Authentication process can be safely and conveniently performed without inconvenience or discomfort.

In addition, when the authentication request, the location information of the mobile terminal is also transmitted to the authentication server to check against the location information of the authentication unit that has requested the authentication, thereby preventing false use of attempting authentication with a recognition cover unit copied from a remote place from the authentication unit. As a result, the operational efficiency of the certification process can be improved.

1 is a block diagram schematically showing an authentication system using a conventional portable terminal.
Figure 2 is a block diagram conceptually showing a member authentication system using a mobile terminal according to the present invention.
Figure 3 is a block diagram schematically showing a member authentication system using a mobile terminal according to the present invention.
4 is a flowchart sequentially illustrating a member authentication method using a portable terminal according to the present invention.

Hereinafter, a member authentication system using a portable terminal according to a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

The member authentication system of the present invention is a member authentication system using an image recognition device such as a camera of a personal portable terminal, as shown in Figs. 2 and 3, the authentication unit 5, the recognition label means 7 for recognition, and authentication. It consists of a server 9 and an authentication computer 11.

Here, the authentication unit (5) is a part where member authentication is performed offline by the member authentication system (1) of the present invention, as shown in FIG. This refers to the work space where the certification process for members is actually performed.

Therefore, the authentication unit 5 should secure a space in which personnel for guiding or monitoring an authentication procedure such as a guide or a security guard can be arranged, and a user who wants to authenticate a member, that is, a computer for authentication in a location separated from the member ( 11), the labeling means 7 for recognition is arrange | positioned in the position which is easily accessible to a user, respectively.

The recognition cover means 7 is a means for actively requesting member authentication using a mobile terminal 10, that is, a mobile phone, etc. possessed by a member who desires member authentication, as shown in FIG. 2. The image recognition means of the mobile terminal 10 carried by the user is posted on the authentication unit 5, that is, on the desk or other easily accessible location of the information desk or article rental unit to facilitate shooting or scanning by the user. It has various types of image information that can be recognized through 21. In this case, the image recognition means 21 of the mobile terminal 10 may be a general small camera or an optical scanner used as a bar code reader embedded in a mobile phone, and may be a subject recognized by the image recognition means 21. As the image information, various types of predetermined images that are displayed or coded with certain rules such as barcodes, symbols, letters, numbers, and the like may be used. In addition, after the image information of the recognition indicator means 7 recognized through the image recognition means 21 as described above or decoded, the identification unit (5) on which the recognition indicator means 7 is posted is identified. The unique identification code 25 can be extracted, and the extracted identification code 25 is stored in the mobile terminal 10.

The authentication server 9 is connected to the mobile terminal 10 used for the authentication request through a communication network such as a voice communication network or an internet network to determine whether to be authenticated, as shown in FIGS. 2 and 3. It is installed at the unit 5 and the remote site, the authentication ID 23 and the authentication unit identification code 25 is transmitted from the mobile terminal 10 of the member who wants to authenticate, and when the authentication request is made, the authentication ID ( 23) and the authentication unit identification code 25 are compared with the authentication unit information and member authentication information previously stored in the DB 31 to verify whether the authentication ID 23 and the authentication unit identification code 25 requested for authentication are appropriate. Determine whether or not. If the authentication server 9 confirms that the authentication ID 23 and the authentication unit identification code 25 transmitted from the mobile terminal 10 are suitable, the authentication server 9 generates an authentication key 29 to generate an authentication computer ( 11) to return to.

Finally, the authentication computer 11 is a part for performing authentication processing according to the determination result of the authentication server 9, as shown in Figs. 2 and 3, is installed in the authentication unit 5 and similarly establishes a communication network. Is connected to the authentication server (9) through the authentication key (29) returned from the authentication server (9) to the authentication ID (23) and authentication unit identification code 25 of the mobile terminal 10 for the authentication request The authentication module 27 is provided to perform final authentication approval.

On the other hand, the authentication server (9) may further include location information for each authentication unit (5) on the DB (31), in which case the request for authentication when the member authentication request from the specific authentication unit (5) Not only the ID 23 and the authentication unit identification code 25 for authentication from the mobile terminal 10, but also the position information generated by the location information module 13 such as a GPS module mounted on the mobile terminal 10, that is, the GPS coordinates. In addition, it is also possible to transmit to the authentication server (9), the authentication unit location information transmitted by matching the location information of the transmitted mobile terminal 10 with the authentication unit (5) location information already stored in the authentication server (9) Further, it is possible to determine whether or not the authentication request itself is appropriate.

Now, a member authentication method using the portable terminal according to the member authentication system 1 using the portable terminal of the present invention configured as described above is as follows.

Member authentication method using a mobile terminal according to the present invention is a member authentication by a method of recognizing the cover means for recognition posted on the authentication unit as a mobile terminal, as shown in FIG. (S10), authentication start step (S20), authentication request step (S30), authentication step (S40), authentication key return step (S50), and the member authentication step (S60).

In this case, first, the registration step (S10) is a step of registering the service on / offline in order to receive a specific service that requires authentication at the time of entry or exit of the goods on-line, wherein the service is entered from the offline or If a cashier control is performed, that is, a service that requires authentication when a user enters or exits a product such as a book or the like, all of the services are applicable without asking about the service itself. However, in the member registration step (S10), the authentication ID 23 for access authentication is given to a user who wants to register on / offline, and the authentication ID 23 granted is a mobile terminal in the name of the member subscriber ( 10) to be stored.

Next, the authentication start step (S20) is a step in which the user actively initiates member authentication, in this step, a user who becomes a member in the member registration step (S10) wants member authentication, that is, of the service workplace to enter The authentication unit 5, such as the information desk installed at the doorway or the rental stand installed at the entrance of the workplace where the goods to be rented are stored, starts membership authentication through the mobile terminal 10 in which the authentication ID 23 is stored. do.

To this end, the user uses the image recognition means 21, such as a camera of the mobile terminal 10, in which the authentication ID 23 is stored, the recognition cover means consisting of barcodes or numbers posted on the authentication unit 5 ( 7) recognition, that is, photographing, wherein the mobile terminal 10 decrypts when the recognition mark means 7 is encrypted as a bar code, and directly recognizes the mark when not recognized as a number. The identification code 25 unique to the authenticator 5 is extracted from the means 7 and stored temporarily.

Then, the authentication request step (S30) is a step for requesting the member authentication to the authentication server (9) at a remote location in the authentication unit (5), in this step the recognition mark means for recognition in the authentication start step (S20) The authentication unit identification code 25 and the authentication ID 23 granted at the time of membership registration are transmitted from the mobile terminal 10 to the authentication server 9 through a communication network such as a voice communication network.

Next, the authentication step (S40) is a step in which authentication is directly performed by the authentication server (9), in this step, the authentication ID (23) transmitted to the authentication server (9) in the authentication request step (S30) and The authentication part identification code 25 is transmitted in contrast with the authentication part identification code 25 such as the member personal authentication information such as the member ID already stored in the authentication server 9 and the authentication part identification code 25 such as the authentication part 5 serial number. It is determined whether the authentication ID 23 and the authentication unit identification code 25 are appropriate by determining whether or not the authentication is appropriate.

Then, the authentication key returning step (S50) is a step of making the authentication key 29 according to the determination result in the authentication step (S40) and sending it back to the authentication unit (5) where there is an authentication request, in the authentication step (S40). If it is determined that the authentication ID 23 and the authentication unit identification code 25 are appropriate, an authentication key 29 for allowing authentication is generated and returned to the authentication computer 11 of the authentication unit 5, and vice versa. If not, the authentication computer 11 is notified of the authentication failure, and the member authentication procedure according to the present invention is terminated.

Finally, the member authentication step (S60) is a step of final processing of the member authentication according to the authentication result in the authentication server (9), in this step the authentication computer from the authentication server (9) in the authentication key return step (S50) The authentication key 29 returned to (11) is processed by the authentication module 27 to finally approve member authentication.

On the other hand, in order to block the false authentication request made outside the authentication unit 5, that is, for example, outside the radius of the authentication unit 5 by 50m using the copied recognition means 7 for identification, in the authentication request step (S30) authentication ID ( 23) and when transmitting the authentication unit identification code 25 to the authentication server (9) is transmitted to the location information, such as GPS coordinates of the mobile terminal 10 together with the pre-stored in the authentication server (9) in the authentication step (S40) Check whether the location of the mobile terminal 10 that has been authenticated by matching the location information such as GPS coordinates of the authentication unit 5 matches the location of the corresponding authentication unit 5 to confirm the suitability of the location information of the mobile terminal 10. May be determined. As a result of the determination, if it is determined that it is appropriate, the authentication ID 23 and the authentication unit identification code 25 are carried out normally. On the contrary, if it is determined that it is not suitable, the authentication failure is immediately transmitted to the authentication computer 11. And the member authentication process is completed.

1: Member Certification System 5: Certification Department
7: Marking means for recognition 9: Certificate server
10: portable terminal 11: authentication computer
13: location information module 21: image recognition means
23: ID for authentication 25: identification code for recognition
27: authentication module 29: authentication key
31: authentication server DB

Claims (10)

An authentication unit 5 in which an authentication procedure is performed for a member having a mobile terminal 10 to which an ID 23 for authentication is granted through membership;
Posted to the authentication unit 5 is recognized through the image recognition means 21 of the mobile terminal 10 to extract the identification code 25 unique to the authentication unit 5 to the mobile terminal 10. Recognition label means 7;
When there is a member authentication request connected to the mobile terminal 10 through a communication network, authentication unit information previously stored in the authentication ID 23 and the authentication unit identification code 25 transmitted from the mobile terminal 10 and An authentication server 9 for judging suitability of the authentication ID 23 and the authentication unit identification code 25 by checking with the member authentication information; And
Installed in the authentication unit 5 so as to be connected to the authentication server 9 through a communication network, and the result of the proper determination of the authentication server 9 with respect to the authentication ID 23 and the authentication unit identification code 25; Member authentication system using a mobile terminal, characterized in that it comprises a; authentication computer (27) is installed to authenticate the member according to. The method according to claim 1,
The authentication server 9 further includes location information about the authentication unit 5, so that when the member authentication request is made, the authentication ID 23 and the authentication unit identification code (from the portable terminal 10) 25) the suitability of the authenticator position information is determined by matching the position information of the portable terminal 10 transmitted to the authentication server 9 with the authenticator position information. Membership Authentication System. The method according to claim 1 or 2,
The member recognition system using a portable terminal, characterized in that the image recognition means 21 is a camera or an optical scanner. The method according to claim 1 or 2,
The label means for recognition (7) is a member authentication system using a mobile terminal, characterized in that the bar code, symbols, letters, numbers, or a predetermined image. The method of claim 2,
The location information module (13) is a GPS module, the member authentication system using a mobile terminal, characterized in that the GPS coordinates. Member registration step of receiving the authentication ID 23 through the membership registration and storing in the portable terminal 10 of the member name (S10);
Recognizing cover means for recognition of the authentication unit (5) through the image recognition means 21 of the mobile terminal 10 in the authentication unit (5) the user who becomes a member through the membership registration step (S10) Recognizing (7), the authentication start step (S20) for extracting the identification code (25) unique to the mobile terminal 10 and storing it in the portable terminal (10);
An authentication request step (S30) of transmitting the authentication unit identification code (25) extracted in the authentication start step (S20) together with the authentication ID (23) to the authentication server (9) through a communication network;
The authentication unit information and the member authentication information previously stored in the authentication server 9, the authentication ID 23 and the authentication unit identification code 25 transmitted to the authentication server 9 in the authentication request step (S30). An authentication step (S40) of judging suitability of the authentication ID (23) and the authentication unit identification code (25) by collating with;
When the authentication ID 23 and the authentication unit identification code 25 are determined appropriate in the authentication step S40, the authentication computer 11 of the authentication unit 5 from the authentication server 9 An authentication key sending step (S50) of sending the authentication key 29 to the second server; And
And an authentication approval step (S60) for performing member authentication in the authentication module 27 of the authentication computer 11 by the authentication key 29 returned in the authentication key returning step (S50). Member authentication method using a mobile terminal. The method of claim 6,
The authentication request step (S30) is to transmit the location information of the mobile terminal 10 with the authentication ID 23 and the authentication unit identification code 25 to the authentication server 9, the authentication Step S40 is the location information of the mobile terminal 10 transmitted to the authentication server 9 together with the authentication ID 23 and the authentication unit identification code 25 in the authentication request step (S30). The portable terminal, characterized in that the suitability of the location information of the mobile terminal is determined by matching the location information of the authentication unit 5 previously stored in the authentication server 9 together with the authentication unit information and member authentication information. Member authentication method using. The method according to claim 6 or 7,
The image recognition means 21 is a member authentication method using a portable terminal, characterized in that the camera or optical scanner. The method according to claim 6 or 7,
The label means for recognition (7) is a member authentication method using a portable terminal, characterized in that the bar code, symbols, letters, numbers, or a predetermined image. The method of claim 7, wherein
The location information module (13) is a GPS module, wherein the location information is a member authentication method using a mobile terminal, characterized in that the GPS coordinates.

Images