KR101180963B1 - Method for authentication using telephone and system thereof - Google Patents

Abstract

The present invention relates to a method and system for authenticating by using a caller's telephone number to make a call, and specifically, an incoming call number providing unit for providing an incoming call number to which a user should make a call for authentication; A database unit for storing an outgoing telephone number, which is a telephone number of a telephone used by the user for authentication, registered by the user; A lake bridging unit that obtains outgoing telephone number information from a call connection request signal received when the user calls the provided incoming telephone number for authentication, and disconnects the call without making a call connection; And an authenticator configured to process whether or not the user is authenticated by comparing the outgoing telephone number obtained from the lake bride with the outgoing telephone number registered in the database. An authentication system and an authentication method using the same.
According to the present invention, it is possible to cut the charge of the telephone bill while performing authentication using a telephone, thereby dramatically reducing the cost of operating the authentication system, and it is possible to construct an authentication system at a lower cost, and to make an independent incoming call for each user. Assigning numbers has the advantage that security can be further enhanced.

Description

Authentication method and authentication system using a telephone {Method for authentication using telephone and system about}

The present invention relates to a method for authenticating a user using a telephone and a system therefor, and more particularly, to a method and system for authenticating using a telephone number of a calling party.

In the past, in order to buy goods or services, the dominant method was to present a credit card or cash to the seller by directly visiting the store, but as the goods and services are diversified and the sales methods are diversified, various payment methods And authentication methods are being introduced.

One of such authentication and payment methods is a method of performing authentication using a communication device such as a mobile phone or a general landline phone, and when the authentication is performed, payment is made from a predetermined payment method.

The payment may be made through a variety of methods as long as the payment is made by a right payment holder, such as a method of making a payment through a credit card, a method of adding a payment amount to a telephone charge, and the like.

In this case, the most important part is the process of confirming whether or not the rightful settlement right holder, that is, the process of authenticating.

An exemplary method used as such an authentication method is an authentication method using SMS.

In this method, when a user registers his / her mobile phone number on a web page, the system sends an authentication number to a registered mobile phone in the form of an SMS message and authenticates the user by re-entering the authentication number received on the web. It is a way.

This method has a problem that the user must have a mobile phone, there is a problem that the cost for sending an SMS message to each user.

Alternatively, if a user registers his or her phone number on a web page, the system dials the user's phone number and the user prints his or her password or authentication number on the web page according to the system's ARS instructions. There is a way to authenticate by typing.

This method has the disadvantage of being uneconomical in that the system charges the call continuously while the system calls the user.

Alternatively, if a user registers his or her phone number on a web page, the system will call the user's phone number, at which point the user will not answer the call and caller identification (CID). There is a way to perform authentication by inputting the authentication number into a web page.

In this case, if the user does not answer the call, the phone charge is not charged, but when the call comes to an unknown phone number, the user cannot know whether the call is for authentication or if the call is actually from another person. There will be many cases where you will receive a call, and you will still be charged for the call.

In addition, in order to use the CID output to the user's phone as the authentication number, the authentication number, not the actual phone number, must be converted to the CID and transmitted to the user. In this case, the transmitted number is different from the telephone number registered with the existing telecommunication company. It should not be duplicated, should be a telephone number allowed by the telecommunications company, and in order to satisfy both conditions, it is necessary to know the contents of the telecommunications company's database.

For example, if the generated authentication number is determined to be a phone number blocked by a carrier or a non-phone number (eg, a phone number of a station number without 094-7027), the transmission itself may be blocked. There was a problem.

In order to solve the above problems, an object of the present invention is to provide an authentication method using a telephone and an authentication method and system in which the telephone fee is not charged in the authentication process.

In addition, an object of the present invention is to provide a computer-readable recording medium having recorded thereon a program for realizing the above-described method.

In order to achieve the above object, the present invention provides a ringing telephone number providing unit for providing a ringing telephone number to be dialed by the user for authentication; A database unit for storing an outgoing telephone number, which is a telephone number of a telephone used by the user for authentication, registered by the user; A lake bridging unit that obtains outgoing telephone number information from a call connection request signal received when the user calls the provided incoming telephone number for authentication, and disconnects the call without making a call connection; And an authenticator configured to process whether or not the user is authenticated by comparing the outgoing telephone number obtained from the lake bride with the outgoing telephone number registered in the database. Provide an authentication system.

In addition, in order to achieve the above object, the present invention comprises the steps of providing an incoming telephone number that the user must dial for authentication; Storing an outgoing call number, which is a phone number of a phone used by the user for authentication, registered by the user; Acquiring outgoing telephone number information from a call connection request signal received when the user calls the provided incoming telephone number for authentication, and disconnecting the call without making a call connection; And comparing the obtained outgoing call number with the outgoing call number registered in the database unit and processing whether or not the user is authenticated using the matched outgoing call number. do.

Here, the incoming call number providing unit allocates an independent incoming call number to each user and provides the same to the user. The information stored in the database further includes an incoming call number assigned to each user. In addition to the outgoing call number information from the call connection request signal, an incoming call number information is further obtained, and the authentication unit checks whether the incoming call number received from the lake terminal for authentication matches the incoming call number registered in the database. You can also make more use.

The information stored in the database unit may further include a password registered by the user, and the authentication unit may receive a password from the user, and further use whether the registered password matches the registered password for authentication. You can also do that.

In addition, the incoming call number providing unit dials the outgoing call number registered by the user to the incoming call number to the user through a method such that the incoming call number remains as caller information (CID) on the telephone of the outgoing call number. The called phone number may be provided to the user by providing a number or by transmitting a text message including the called phone number to a telephone of an outgoing call number registered by the user.

The present invention also provides a computer readable recording medium having recorded thereon a program for realizing the above method.

According to the present invention, it is possible to cut the charge of the telephone charge while performing authentication using a telephone, thereby reducing the cost of operating an authentication system.

In addition, according to the present invention, since the time that the automatic answering system such as ARS, IVR, etc. is used for one call is very short, there is an advantage that the equipment to be administered can afford at least a large number of telephone calls, thus saving the cost of system construction. There is an advantage to this.

In addition, according to the present invention, it is possible to prevent the case that the user's phone ringing to damage other people by using a method of direct dialing by the user.

In addition, according to the present invention, since the user only needs to make a call to his or her phone for authentication, there is an advantage that the authentication method is very simple.

In addition, according to the present invention, by separately assigning the incoming call number for each user, so that others can not know the incoming call number of the user, there is an advantage that the security is further enhanced.

1 is a schematic diagram illustrating the concept of the present invention
2 is a block diagram showing the configuration of the system of the present invention.
3 to 5 are flow charts illustrating the method of possible embodiments of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic view for explaining the present invention.

As shown in FIG. 1, the user 20 accesses the web server 11 of the system 10 using his terminal 21 capable of internet access, and the system 10 through his telephone 22. The authentication operation is performed by calling the communication server 12.

Specifically, the user 20 accesses the web server 11 and registers his / her telephone number, and makes a call to the telephone number assigned to the communication server 12 using the telephone 22 of the registered telephone number. When making a call, the communication server 12 disconnects the call while receiving only the caller's telephone number (and the called telephone number) information of the calling user's telephone 22 so that the calling user is not charged. In addition, the system 10 performs authentication by an authentication method including a method of determining whether the telephone number registered by the user on the web server 11 and the telephone number actually dialed by the user are the same.

After the authentication is performed, payment methods are generally available in all known payment methods, and there is no particular limitation.

That is, it may be included in the telephone fee of the telephone number registered by the user, or payment may be performed by a credit card or the like registered in advance by the user.

The system of the present invention may be used in a website for product purchases such as various online shopping malls, various game sites, payment sites through online, and other sites requiring user authentication for security.

2 is a block diagram showing the configuration of the system of the present invention.

The authentication system 10 of the present invention includes an incoming phone number providing unit 110, a database unit 120, the lake unit 130 and the authentication unit 140.

If the authentication system of the present invention is used for payment and the like may further include a payment processing unit (not shown) for processing the payment, but the present invention is an invention related to authentication, other parts of the present invention Since it is not a feature part, description thereof will be omitted.

The incoming phone number providing unit 110 provides a phone number to receive a call to the user to be authenticated.

The incoming call number may be a phone number commonly provided to users, or may be an independent phone number for each user.

In addition, the fact that the called telephone number is independent for each user does not mean that one called telephone number is assigned to only one user, but that the called telephone number is assigned regardless of the user's personal information or other information.

For example, if a man is assigned a phone number A and a woman is assigned a phone number B, knowing the user's gender and knowing the phone number assigned to another user with the same gender, It can be seen that it is assigned, so an independent telephone number is not assigned to each user.

However, if a user knows which phone number is assigned to another user and knows the user's personal information and other information, but does not know what phone number is assigned to the user, the user can be regarded as having an independent phone number assigned to each user.

When the called phone number is an independent phone number for each user, all unique phone numbers may be introduced to each user, or the same phone number may be introduced to two or more users, although each user is independent.

Typically, the E1 line of the digital line (ISDN), which can be connected to an Interactive Voice Response (IVR) or the like, can be assigned 30 or more channels, and can assign 30 or more telephone numbers per channel. Even if only one E1 line is connected, more than 1000 phone numbers can be assigned. If one of the assigned phone numbers is assigned to a user, a unique E1 phone number is assigned to each user. More than 1000 users can be authenticated using the line, and more than 2000 users can be authenticated when an incoming call number is assigned to two users.

The more telephone numbers used as the called telephone number, the less likely it is for others to find out the called telephone number assigned to the user, and the higher the security for authentication.

The simplest way to announce the called phone number is to print it on the web page the user has accessed for authentication.

Even when outputting on a web page, there is a method of outputting to a screen that can be viewed by all connected users regardless of whether or not they are logged in. Alternatively, the user may be notified of only the screen displayed when the user logs in by inputting an ID and password. have.

When an independent forwarding phone number is provided for each user who wants to be authenticated, in order to prevent the forwarding phone number from being disclosed to others, it is recommended that the incoming phone number be displayed only for web pages that can be viewed only by the relevant user. Would be preferred.

Another method for guiding the called phone number is to call the telephone of the registered user's phone number in the called phone number providing unit 110 and leave the CID.

At this time, in order not to be confused with calling other people, while the incoming call number providing unit 110 makes a call and rings the phone, the user accesses the web page in real time.

"I'm calling now. Please don't answer the call and try to authenticate by dialing the outgoing phone number that's currently displayed when you verify."

It may be desirable to send a message such as to allow the user to recognize that the incoming call is making a call to inform the called phone number in the authentication system.

In addition, after making a call from the incoming phone number providing unit 110, the phone number of the caller ID information (CID) displayed on the user's phone is entered into the web page, so that the user recognizes the correct phone number as the called phone number. You may be able to verify that you have done so.

As another method of guiding the called phone number, when the registered phone number is a telephone capable of receiving a text message such as a mobile phone, the user sends a text message including the called phone number to the user. You can also have your phone number guided.

When an incoming call number is assigned independently for each user, the incoming call number may be guided differently every time authentication is performed, but it may be more convenient for the user to have a fixed forwarding number for each user. have.

In this case, the user stores the incoming phone number using a name that is difficult for others to know in his or her mobile phone, and enables the user to use it every time to authenticate using the system of the present invention. It is desirable to reduce the inconvenience of having to obtain a certification number.

In addition, even if the user does not assign a new independent phone number for each time of authentication, the system automatically changes the incoming phone number assigned to the user periodically or changes the incoming phone number every time the user applies. You can also strengthen it.

The database unit 120 stores a registered telephone number of a user, and when there are a plurality of total incoming telephone numbers and one incoming telephone number is independently assigned to each user, information about the allocated telephone number is stored.

In addition, when a method of authenticating includes a method of using a password, information about the same is also stored.

Lake Bride 130 receives the call connection request signal transmitted when the user makes a call to the assigned phone number to obtain the user's outgoing telephone number information, etc. included in the signal, and then immediately dials without making a call Do not charge the user or system operator for the call.

When the other party makes a call, the first call connection request signal transmitted includes a dialed number identification service (DNIS) and an outgoing call number information (Automatic Number Identification (ANI)).

Lake receiving unit 130, after receiving only the incoming call number information and the outgoing call number information, rejects the call connection in a state in which the call is not connected, thereby stopping the call connection work so that the call charge is not charged.

In this way, since the authentication system is disconnected without the telephone connection between the user and the system in the process of authentication, the time for which one channel of the authentication system occupies the telephone line is extremely short. Therefore, there is an advantage that more authentication can be performed in the same time even if only a small call capacity.

The authentication unit 140 compares the incoming call number information and the user's outgoing phone number information obtained through the lake unit 130 with the user's incoming phone number information and the outgoing phone number information stored in the database unit 120. The user is treated as authenticated.

In this case, the comparison of the called phone number may be performed only when an independent called phone number is assigned to each user, and when the same phone number is assigned to all users, it is not necessary to compare the called phone numbers.

Meanwhile, the authentication unit 140 may perform authentication by adding another authentication method in addition to the method of comparing the phone numbers.

For example, when a user registers a password in advance, and the authentication unit inputs a password on a web page every time authentication is performed, the password is compared with the password registered in the database unit 120, and matches. Only when both authentication via phone number and password are successful can the user be treated as complete.

A more specific embodiment will be described with reference to FIGS. 3 to 5.

3 is a flow chart illustrating a method of one embodiment of the present invention.

First, when a user accesses a web page operated by the system of the present invention, logs in, and inputs an outgoing telephone number to be used for authentication in a web page, the contents are stored in the database unit 120. (301).

The called phone number providing unit 110 guides the user to the telephone number that the user should call, that is, the called phone number (302).

The incoming call number providing unit 110 may guide the incoming call number to the user by using a method of outputting on a web page to which the user is connected, or by dialing a phone number registered by the user directly in the system. As described above, the phone number may be left through the CID or may be provided to the user through a text message.

In addition, when the incoming call number providing unit 110 guides the incoming call number using a telephone or a text message, the user may input the guided phone number on the web page to confirm whether the user has recognized the correct phone number. You can also do the same.

In the present embodiment, the telephone number provided by the incoming call number providing unit 110 will be described by taking an example that the telephone number is common to all users.

If the user wants to authenticate for the purpose of making a payment, the user first applies for authentication to the authenticator 140 through a web page (303).

An application for authentication may be explicitly requested by the user, or may be implicitly recognized as having applied for authentication if authentication is required during payment or other procedures.

Even if there is no explicit authentication request, if a case can be considered as an authentication request, the authentication unit 140 recognizes that the user applied for authentication.

When the user who applied for authentication calls the called phone number guided by the called phone number providing unit 110 using the phone of the registered phone number, the lake bride 130 calls the call generated by the user making a call. After receiving the connection request signal, the call is disconnected after obtaining the outgoing telephone number information (304).

The authentication unit 140 compares the outgoing telephone number obtained by the lake unit 130 with the telephone number of the user registered in the database unit 120 and processes the authenticated phone numbers when the two telephone numbers match.

Although not shown in the drawings, the authentication unit 140 may be treated as only authenticated when a call is received within a predetermined time after the application for authentication.

Since this is not a feature of the present invention, the description thereof is omitted, but as described above, payment or other procedures may come after the authentication process.

4 is a flowchart illustrating a method of another embodiment of the present invention.

The embodiment of FIG. 4 differs from the embodiment of FIG. 3 in that an independent incoming telephone number is guided for each user, and the telephone number is used for authentication. The details are as follows.

First, a user logs in by accessing a web page operated by the system of the present invention, inputs an outgoing telephone number to be used for authentication in a web page, and the contents thereof are stored in the database unit 120. Is the same as before (401).

The called phone number providing unit 110 guides the user to the phone number that the user needs to call, that is, the called phone number (402).

At this time, the incoming telephone number providing unit 110 allocates one phone number of the plurality of telephone numbers held by the system to the user, guides the user, and stores the telephone number in the incoming telephone number providing unit 110. .

The incoming telephone number provided to the user may or may not be assigned a unique telephone number for each user, but at least an independent telephone number should be assigned for each user.

In other words, the phone number assigned to each user can be duplicated, but the phone number assigned to a user can be inferred by common to all users, or by the user's personal information, other information, or a phone number assigned to another user. No telephone number is assigned.

If the same incoming call number is notified to all users and can be easily disclosed to the outside, it can be easily forged or not by using CID tampering when others know only the user's phone number. In the case of being guided, it is difficult to know the assigned called phone number, so there is an advantage that false authentication cannot be obtained in the above manner.

Since the method for guiding the called phone number to the user by the called phone number providing unit 110 has already been described above, a detailed description thereof will be omitted.

The step 403 in which the authenticator receives the user's request for authentication is the same as the step 303 in the embodiment of FIG.

When the user who applied for authentication makes a call to the called phone number guided by the called phone number providing unit 110 using his registered phone, the lake bride 130 calls the call connection request signal generated by the user making a call. After receiving the outgoing call number information and the incoming call number information among them, the call is disconnected (404).

In the embodiment of Fig. 3, the incoming call number is the same for each user, and since the call connection request signal is received only when the call is made to the phone number, the information on the incoming call number is not used. It is different from the previous embodiment in that the call is disconnected after acquiring the incoming telephone number information because it is also used for authentication.

The authentication unit 140 compares the outgoing phone number and the incoming phone number obtained by the lake bride unit 130 with the telephone number of the user registered in the database unit 120 and the incoming telephone number assigned to the user to match both telephone numbers. If it is treated as an authentication (405).

5 is a flowchart illustrating a method of another embodiment of the present invention.

The embodiment of FIG. 5 is different from the embodiment of FIG. 4 in that the authentication unit 140 receives and uses another information from a user in advance for authentication. Here another representative example of the information may be a password set by the user.

First, a user logs in by accessing a web page operated by the system of the present invention, and enters an outgoing telephone number and a password to be used for authentication in a web page, which he is going to use for authentication. It is stored in the database unit 120 (501).

Subsequently, the step 502 of the incoming phone number providing unit 110 to guide the incoming phone number, using the own phone registered by the user who applied for authentication to the incoming phone number providing unit 110 guided to the incoming phone number; When making a call, step 504 of disconnecting the call after obtaining the outgoing call number information and the incoming call number information from the call connection request signal 130 is the same as in the embodiment of FIG.

On the other hand, the authentication unit 140 allows the user to enter a password registered in advance in the web page, the user receives a password (505).

The authentication unit 140 compares the outgoing phone number and the incoming phone number obtained by the lake bride unit 130 with the telephone number of the user registered in the database unit 120 and the incoming telephone number assigned to the user to match both telephone numbers. If the password entered by the user matches the password registered in advance, the user is treated as authenticated (506).

The method of the present invention can also be embodied as computer readable code on a computer readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disks, optical data storage devices, and the like. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

Claims (11)

An incoming call number providing unit for allocating a new incoming call number to be dialed by the user for authentication each time the user authenticates each user independently and providing the incoming call number to the user;
A database unit for storing an outgoing call number which is a phone number of a telephone used by the user for authentication and an incoming call number assigned to the user registered by the user;
When the user makes a call to the provided incoming call number for authentication, the caller obtains the outgoing call number information and the incoming call number information from the call connection request signal received and disconnects the call without making a call connection. ; And
By using whether the outgoing telephone number obtained from the lake bride and the outgoing phone number registered in the database unit match, and the incoming phone number received from the lake bride unit and the incoming phone number registered in the database unit are matched. Authentication system using a telephone for user authentication, comprising: an authentication unit for processing the authentication of the user. delete According to claim 1, The information stored in the database unit further includes a password registered by the user,
The authentication unit receives a password from the user, and the authentication system using a telephone for user authentication, characterized in that further using whether the input password is the registered password for authentication. The user of claim 1, wherein the called phone number providing unit makes a call to an outgoing call number registered by the user so that the incoming call number remains as a caller information (CID) on the phone of the outgoing call number. Authentication system using a phone for user authentication, characterized in that to provide the incoming telephone number to. The method of claim 1, wherein the called telephone number providing unit provides the called telephone number to the user by a method of transmitting a text message including the called telephone number to a telephone of an outgoing telephone number registered by the user. Authentication system using a phone for user authentication characterized in that. Providing a user with an independent new allocation of an incoming call number to which the user should dial for authentication every time the user authenticates each user;
Storing an outgoing telephone number, which is a telephone number of a telephone used by the user for authentication, and a called telephone number assigned to the user, registered in the user, in a database unit;
Acquiring an outgoing call number information and an incoming call number information from a call connection request signal received when the user calls the provided incoming call number for authentication, and disconnecting the call without making a call connection; And
The user's authentication is performed by comparing the obtained outgoing call number with the outgoing call number registered in the database unit and whether the obtained incoming call number matches the incoming call number registered in the database unit. Processing whether or not; authentication method using a phone for user authentication, comprising a. delete The method of claim 6, wherein the method
Before the authentication, the step of storing the password registered by the user; further includes,
The step of authenticating, after receiving the password from the user, the authentication method using a phone for user authentication, characterized in that further using whether the input password and the registered password for authentication. The method of claim 6, wherein the providing of the incoming call number comprises: calling the outgoing call number registered by the user so that the incoming call number remains as a caller information (CID) on the telephone of the outgoing call number. Authentication method using a phone for user authentication, characterized in that to provide the called phone number to the user through. The method of claim 6, wherein the providing of the incoming call number comprises: sending the incoming call number to the user by transmitting a text message including the incoming call number to a telephone of an outgoing call number registered by the user. Authentication method using a phone for user authentication, characterized in that providing. A computer-readable recording medium having recorded thereon a program for realizing the method according to any one of claims 6 and 8 to 10.

Images