KR101331575B1 - Method and system blocking for detour hacking of telephone certification - Google Patents

Abstract

The present invention relates to a method and system for blocking the detour hacking of telephone certification. The system for blocking the detour hacking of the telephone certification according to the present invention includes a service server (30) which requests the telephone certification from a telephone certification server assembly and a telephone certification server (41) which successively performs a first telephone certification process and a second telephone certification process. [Reference numerals] (10) User terminal assembly;(11) Telephone terminal;(12) Server connection terminal;(20) Internet;(30) Service server;(40) Electronic authentication server assembly;(41) Telephone authentication server;(42) Payment server;(43) Abnormal symptom analyzing server;(60) Cooperative communication company server assembly;(60-1) First communication company server;(60-n) nth communication company server;(70) Telephone network/mobile communication network

Description

Method and system blocking for detour hacking of telephone certification}

The present invention relates to a method and system for preventing telephone authentication bypass hacking, and more particularly, to prevent telephone authentication bypass hacking for blocking telephone authentication bypass hacking such as forgery of session information on a network packet in an open environment such as an internet network. It relates to a method and a system.

1 is a conceptual diagram illustrating a hacking method of a telephone authentication bypass method. Referring to FIG. 1, the current phone authentication itself does not generate a hacking case, but a telephone authentication bypass hacking example of inducing a hacker to authenticate the user or intercepting the user's authentication result has been generated.

In other words, a number of cases of telephone authentication bypass have recently occurred, and there is a case of showing a false screen to the telephone authentication service user and attempting to log in to the account at the same time. For the scenario of such a telephone authentication bypass case, referring to FIG. 1, first, a malicious code is installed in a PC corresponding to a terminal for accessing a server (P1). In this case, the malware shows a false screen to the user when the game is executed, and has the function of delivering the user input information to the hacker.

After the step (P1), the user enters the ID / password after the game login (P2). At this time, the user's PC runs a false login screen while the hacker's PC runs the actual login screen, and the ID and password entered on the user's false login screen are cut off by the hacker and proceed automatically or manually.

Thereafter, a telephone authentication request using the user's telephone terminal is performed (P3). Accordingly, the user performs normal phone authentication with a phone number registered in advance, and when the phone authentication is completed, the user PC is stopped or is forced to reboot.

In the hacker PC, after a successful stealing due to the stolen ID and password and the phone authentication performed by the user, the hacker logs out after realizing the authentication purpose such as cutting off the item within a few minutes (P4).

Accordingly, the user is without any doubt, after the PC reboot, the normal information, such as when checking the account status, the item is taken out of important information (P5).

On the other hand, in contrast to the hacking method of the phone authentication bypass method, in the case of OTP, MOTP, and SMS authentication, the malicious code is distributed to the user's PC, and when the user enters the authentication number into the PC, the hacker enters the authentication number. It can also be acquired.

In this case, the malicious code installed in the user PC blocks the normal access of the user by using a form of forced reboot of the user PC, and during that time, the hacker completes the normal login authentication using the valid authentication number.

In this case, the authentication itself is stolen, which is different from the authentication bypass hacking that steals the authentication result.

The hacking method of the telephone authentication bypass method is also possible through forgery of the session in an open network such as a game room.

Accordingly, in the technical field, telephone authentication provides only additional information that cannot be verified by hackers to the user to prevent authentication bypass, or if the user cannot verify such additional information, it can be recognized as an abnormal symptom and bypasses phone authentication. There is a demand for developing technology to block hacking.

[Related Technical Literature]

1. Patent Application No. 10-2005-0053023, title of the invention: User authentication method using the caller ID service

2. Patent application No. 10-2006-0041731, title of the invention: TEL (Telephony Authentication Login System)

The present invention is to solve the above problems, to prevent authentication bypass by providing only additional information to the user that the hacker can not verify in the phone authentication, or if the user does not confirm such additional information, it may be recognized as an abnormal symptom. It is to provide a method and system for preventing phone authentication bypass hacking to block phone authentication bypass hacking.

In addition, the present invention provides a method and system for preventing phone authentication bypass hacking to provide a function for preventing damage even when phone authentication bypass hacking by providing a form that requires two or more authentications that cannot be achieved by hacking purposes. It is to.

However, the objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

In order to achieve the above object, a telephone authentication bypass hacking blocking method according to an embodiment of the present invention includes a server connection terminal 12 among a user terminal assembly 10 including a phone terminal 11 and a server connection terminal 12. In response to a request for access to the service server 30 through the Internet network 20, the service server 30 responds to a phone authentication request to the phone authentication server 41 of the electronic authentication server assembly 40. To implement on the UI screen of the server connection terminal 12 for the caller number including the one-time authentication number or transaction number generated by the telephone authentication server 41, the telephone authentication server 41 and the Call the one-time authentication number or the transaction number to the ARS message in the call connection state with the phone terminal 11 so that the phone authentication is performed by checking whether the one-time authentication number or the transaction number on the UI screen matches. First phone authentication process; And the main service request through the Internet network 20 from the server connection terminal 12 in the call connection state, even when the service server 30 completes the login authentication by the first telephone authentication process. In the case of the second phone authentication process to perform the phone authentication in the same manner as the first phone authentication process according to the phone authentication request to the phone authentication server 41; .

At this time, the first telephone authentication process, the service server 30 is a first request for telephone authentication to the telephone authentication server 41 of the electronic authentication server assembly 40 through a direct communication network or the Internet network 20 Step 1-1; The first and second steps of the phone authentication server 41 generating a one-time authentication number or a transaction number; A first to third step of the telephone authentication server 41 transmitting to the service server 30 through the direct communication network or the internet network for the one-time authentication number or the transaction number; The service server 30 transmits the one-time authentication number or the transaction number to the server connection terminal 12 through the Internet network 20 for the purpose of implementing the UI screen on the server connection terminal 12. Steps 1-4; A step 1-5 of the server access terminal 12 implementing a one-time authentication number or a transaction number received on a UI screen; The telephone authentication server 41 is affiliated communication server connected to the TCP / IP (50) for the telephone authentication request using the caller number (representative caller number + one-time authentication number (or transaction number) generated in the first and second steps)) The first to sixth of the group 60 is transmitted to the telephone company 11 matching the telephone terminal 11 to be transmitted to the telephone terminal 11 through the telephone network / mobile communication network 70 by the matching partner server step; The telephone terminal 11 is a one-time authentication number (or transaction number) implemented in the server access terminal 12 and the backseat one-time authentication number of the representative caller number for the telephone authentication request received from the telephone authentication server 11. (1-7) to implement the caller number on the screen for checking whether the match (or transaction number) between; The telephone terminal 11 transmits to the matching affiliated communication company server connected to the telephone network / mobile communication network 70 and the telephone authentication server 41 via the TCP / IP 50 by the matching affiliated communication company server. After the call is connected with the user, completing steps 1-8 of performing separate phone authentication according to the ARS guide (adding a guide when using a transaction number); And a step 1-9 in which the phone authentication server 41 transmits a phone authentication result to the service server 30 through the direct communication network or the internet network 20. .

In addition, before the step 1-1, the server connection terminal 12 in response to the request for access to the service server 30 through the Internet network 20 to the service server 30 (12) A first preparation step of receiving an access completion notification from the service; A second preparation step of transmitting, by the server connection terminal 12, an ID and password, which are user authentication information, to the service server 30 through the Internet network 20; And the ID and password of the server connection terminal 12 in which the service server 30 stores the ID and password, which are the user authentication information, in a database DB 31. A third preparatory step of checking whether or not to match with) and proceeding to step 1-1 if there is a match; .

In addition, in the second telephone authentication process, the service server 30 determines whether to provide a service according to a phone authentication result performed by the phone authentication server 41, and determines whether the service is provided through the internet network 20. It is preferably performed on the assumption that the phone authentication success / server login completion message is transmitted to the server connection terminal 12.

In the second telephone authentication process, the server connection terminal 12 transmits and receives data to and from the service server 30 through the Internet network 20 according to a user input for a main service request. Step 2-1 of transmitting a service request; The service server 30 determines whether double phone authentication (second phone authentication) is required for the main service request, and when double phone authentication is required, the service server 30 transmits the call through the direct communication network or the Internet network 20. A second step 2-2 of transmitting a phone authentication success / server login completion message to the server access terminal 12 again; Step 2-3 of the server connection terminal 12 transmitting a main service execution request to the service server 30 through the Internet network 20; Step 2-4 of the service server 30 transmitting a telephone authentication request to the telephone authentication server 41 through the direct communication network or the Internet network 20; Step 2-5 of the phone authentication server 41 generates a one-time authentication number or transaction number; A second to sixth step of the telephone authentication server 41 transmitting the one-time authentication number or transaction number generated in the second to fifth steps to the service server 30 through the direct communication network or the internet network; The service server 30 is connected to the server access terminal 12 through the Internet network 20 to implement the one-time authentication number or transaction number to the UI screen of the server access terminal 12, the second 2- Steps 2-7 for transmitting the one-time authentication number or transaction number generated in step 5; Steps 2-8 of the server access terminal 12 implementing the one-time authentication number or transaction number generated in steps 2-5 on a user UI screen; The telephone terminal connected to the TCP / IP 50 makes a telephone authentication request using the caller ID server 41 using the calling party number (representative caller number + one-time authentication number (or transaction number) generated in steps 2-8). (2) steps 9-9 of transmitting to the telephone company 11 through the telephone network / mobile communication network 70 by transmitting to the affiliate telecommunication company server matching with the matching telecommunication company server; The telephone terminal 11 receives the one-time authentication number (or transaction number) implemented on the UI screen of the server access terminal 12 in steps 2-8 and the phone authentication request received in steps 2-9. Step 2-10 of implementing a calling party number for confirming whether or not a back-end one-time authentication number (or transaction number) of the representative caller number for the screen; A second telephone terminal 11 performing a separate telephone authentication according to an ARS guide (additional guidance when using a transaction number) in a call connection state with the telephone authentication server 11 set by the first telephone authentication process; -11 steps; And a second to twelve step of the telephone authentication server 41 transmitting the telephone authentication result according to the second to eleventh steps through the direct communication network or the internet network 20 to the service server 30; .

Telephone authentication bypass hacking blocking system according to an embodiment of the present invention to achieve the above object, the user terminal assembly 10 consisting of a telephone terminal 11 and the server connection terminal 12; The server connection terminal 12 requests the telephone authentication to the electronic authentication server assembly 40 according to an access request to the service server 30 through the Internet network 20 and a main service request after the access request. Performing a service server 30; And provided on the electronic authentication server assembly 40, and after receiving the telephone authentication request, implements the UI screen of the server connection terminal 12 for a caller number including a one-time authentication number or a transaction number. Calling the one-time authentication number or the transaction number to the ARS message in a call connection state with the phone terminal 11 so that the phone authentication is performed by checking whether the one-time authentication number or the transaction number on the UI screen matches. Telephone authentication server 41; The phone authentication server 41 sequentially performs a first phone authentication process according to the access request and a second phone authentication process according to a main service request after the access request. The second telephone authentication process is performed while maintaining a call connection state in the first telephone authentication process.

In this case, the main service request is preferably one of a request for item transaction, cash filling / gift and customer information change.

In addition, the telephone authentication server 41 generates a one-time authentication number or a transaction number according to a request for telephone authentication through a direct communication network or the internet network 20 in the first and second telephone authentication processes, The one-time authentication number or the transaction number generated by the service server 30 is preferably transmitted through the direct communication network or the Internet network.

In addition, the service server 30, the one-time authentication number or the transaction number for the purpose of implementing the UI screen on the server connection terminal 12 in the first and second telephone authentication process the Internet network 20 By transmitting to the server connection terminal 12 through the), so that the one-time authentication number or transaction number is implemented on the UI screen of the server connection terminal 12, the telephone authentication server 41, the caller number Sending a phone authentication request using (representative caller number + one-time authentication number (or transaction number)) to an affiliate telecommunication company server that matches the telephone terminal 11 of the affiliate telecommunication company server assembly 60 connected to TCP / IP 50. It is preferable to be transmitted to the telephone terminal 11 through the telephone network / mobile communication network 70 by the matching affiliated carrier server.

In addition, the telephone terminal 11, from the one-time authentication number (or transaction number) and the telephone authentication server 11 implemented in the server connection terminal 12 in the first and second telephone authentication process After implementing the calling party number for checking whether the back-seat one-time authentication number (or transaction number) of the representative caller number for the received telephone authentication request is displayed on the screen, the matching partnership connected to the telephone network / mobile communication network 70 After transmitting to the communication company server and the telephone connection with the telephone authentication server 41 through the TCP / IP (50) by the matching partner server server, perform a separate telephone authentication according to the ARS guidance (additional guidance when using the transaction number) It is desirable to complete.

In addition, the server connection terminal 12, the server connection terminal (according to the request to access the service server 30 through the Internet network 20 to perform the first telephone authentication process (Aceess) 12, after receiving the access completion notification from the Internet network 20, and transmits the user ID information (ID) and password (Password), the user authentication information to the service server 30, the service server ( 30 is matched with the ID (ID) and password (Password) of the user authentication information and the ID (ID) and password (Password) of the server connection terminal 12 stored in the database (DB: 31) It is preferable to proceed with the first telephone authentication process if it checks whether it matches.

In addition, the service server 30 determines whether to provide a service according to a result of the first telephone authentication performed by the telephone authentication server 41 to perform the second telephone authentication process. In this case, it is preferably performed on the assumption that the phone authentication success / server login completion message is transmitted to the server access terminal 12 through the Internet network 20.

The method and system for preventing phone authentication bypass hacking according to an embodiment of the present invention provides an effect of blocking phone authentication bypass hacking such as forgery using malicious code or forgery of session information on a network packet in an open environment such as an internet network. do.

In addition, the telephone authentication bypass hacking blocking method and system according to another embodiment of the present invention, by displaying a one-time number on the terminal for the user connection, and by adding a one-time number to the caller number when the user phone authentication, the ARS after the telephone connection The telephone connection is normally performed to complete the first phone authentication, and even after the first phone authentication is completed, the second phone authentication is performed while maintaining the phone call, thereby providing the effect of blocking the actual hacking purpose.

1 is a conceptual diagram illustrating a hacking method of a telephone authentication bypass method.
2 is a diagram illustrating a system for bypassing authentication of a telephone hacking bypass according to an embodiment of the present invention.
3 is a flowchart illustrating a first telephone authentication process among the phone authentication bypass hacking blocking method according to an embodiment of the present invention.
4 is a flowchart illustrating a second telephone authentication process among the phone authentication bypass hacking blocking method according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a detailed description of preferred embodiments of the present invention will be given with reference to the accompanying drawings. In the following description of the present invention, detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

In the present specification, when any one element 'transmits' data or signals to another element, the element can transmit the data or signal directly to the other element, and through at least one other element Data or signal can be transmitted to another component.

2 is a diagram illustrating a system for bypassing authentication of a telephone hacking bypass according to an embodiment of the present invention. Referring to Figure 2, the telephone authentication bypass hacking blocking system is a user terminal assembly 10, the Internet network 20, service server 30, electronic authentication server assembly 40, TCP / IP (50) and affiliated communication company server The aggregate 60 is included.

The user terminal aggregation 10 includes a telephone terminal 11 and a server connection terminal 12, and corresponds to a terminal operated and possessed by the same user.

The server access terminal 12 performs a user authentication process through access to the service server 30 through the Internet network 20.

The Internet network 20 may be a next-generation wired and wireless network for providing high-speed multimedia services. The internet network 20 serves to mutually transmit signals and data between the server connection terminal 12, the service server 30, the electronic authentication server assembly 40, and other systems.

The service server 30 is not merely the telephone authentication according to the conventional verification using the caller ID, but the telephone authentication server 41 by the telephone authentication request to the telephone authentication server 41 of the electronic authentication server assembly 40. After confirmation by the server connection terminal 12 for the caller number including the one-time authentication number or transaction number generated by the, provides a differentiation method in that the telephone authentication is performed through the ARS.

In addition, the service server 30, even if the login authentication including the first phone authentication described above is completed, the item transaction, cash corresponding to the main service request through the Internet network 20 from the server connection terminal 12 In the case of important actions such as charging / gifting and changing customer information, the second phone authentication is additionally required, and even if the hacker is logged in due to the phone authentication bypass, the phone hacking server prevents the hacking purpose from being realized. Perform in conjunction with 41).

The electronic authentication server assembly 40 includes a telephone certificate server 41, a payment server 42, and an abnormal symptom analysis server 43. Here, the abnormal symptom analysis server 43 checks the authenticity of the telephone by checking the calling number during the authentication process, and confirms the general verification process for the abnormal signs.

The TCP / IP 50 is a high speed network of a large communication network capable of large capacity, long distance voice and data service using Transmission Control Protocol / Internet Protocol, and can be Internet (Internet). Also, the TCP / IP 50 may be a next-generation wired network for providing a high-speed multimedia service based on an ALL IP (Internet Protocol). In the present invention, the TCP / IP 50 transmits signals and data between the electronic authentication server set 40, the affiliate communication server server set 60, and other systems.

The affiliated communication company server assembly 60 includes the first communication company server 60-1 to the nth communication company server 60-n, where n is a natural number of two or more, and one of the plurality of communication server servers is the telephone terminal 11. Corresponds to the server operated by the affiliate carrier.

3 is a flowchart illustrating a first telephone authentication process among the phone authentication bypass hacking blocking method according to an embodiment of the present invention. 2 and 3, the server connection terminal 12 of the user terminal assembly 10 requests access to the service server 30 through the Internet network 20 (S11).

After the step S11, the service server 30 grants the access according to the step S11, and then notifies the server access terminal 12 of the access completion through the internet network 20 (S12). .

After step S12, the server access terminal 12 transmits user ID information, ID and password, to the service server 30 through the Internet network 20 to the service server 30. Provided (S13).

After the step (S13), the service server 30 is connected to the server terminal 12 for storing the ID (ID) and password (Password) that is the user authentication information received in the step (S13) in the database (DB: 31) Check whether the ID (ID) and password (Password) is matched (S14).

If the result of the check in step S14 is matched, the service server 30 requests a phone authentication to the phone authentication server 41 of the electronic authentication server assembly 40 through the direct communication network or the Internet network 20 (S15). .

After step S15, the phone authentication server 41 generates a one-time authentication number or transaction number (for example, 1234) (S16). The one-time authentication number and transaction number generated in the present invention correspond to a separate authentication number from the one-time ARS authentication number. In another embodiment of the present invention, the one-time authentication number and transaction number is generated in the service server 30, and then through the direct communication network or the Internet network 20 to the telephone authentication server 41 of the electronic authentication server assembly 40 The phone authentication server 41 can secure the delivery method.

After step S16, the phone authentication server 41 transmits the one-time authentication number or transaction number generated in step S16 to the service server 30 through the direct communication network or the Internet network 20 (S17). Meanwhile, the one-time authentication number or transaction number is generated every time the session is connected to the server connection terminal 12 possessed by the user by the phone authentication server 41 or the service server 30, and then verified when reconnecting. Take it.

After step S17, the service server 30 transmits the one-time authentication number or transaction number to the server connection terminal 12 via the Internet network 20 for the purpose of implementing the UI screen on the server connection terminal 12 ( S18).

After step S18, the server access terminal 12 implements the one-time authentication number or transaction number received in step S18 on the UI screen (S19).

After the step (S19), the telephone authentication server 41 is a telephone terminal 11 of the affiliated telecommunications company server 60 connected to the TCP / IP (50) for the telephone authentication request using the calling party number (representative caller number + one-time authentication number) By transmitting to the affiliated telecommunications company server that matches, to be transmitted to the telephone terminal 11 through the telephone network / mobile communication network 70 by the affiliated telecommunications carrier server (S20).

In this case, the caller number generated by the phone authentication server 41 at the time of the call authentication request is composed of a combination of a representative caller number and a one-time authentication number (or transaction number). For example, the representative caller number is 1599-0000, If the authentication number (or transaction number) is 1234, the calling party number is preferably generated as 1599-0000-1234.

After step S20, the telephone terminal 11 is received in the "step one-time authentication number (or transaction number) implemented on the UI screen of the terminal 12 for server connection" and "step S20" A caller number for checking whether or not the back digit one-time authentication number (or transaction number) of the representative caller number for the phone authentication request is implemented as a screen (S21).

The telephone terminal 11 implementing the caller ID in a state capable of being confirmed according to step S21 is connected to an affiliated telecommunication company server that matches the telephone terminal 11 among the affiliated telecommunication company server assemblies 60 connected to the telephone network / mobile communication network 70. By transmitting, after the telephone connection with the telephone authentication server 41 through the TCP / IP (50) by the affiliated telecommunications company server, the separate telephone authentication is performed according to the ARS guidance (additional guidance when using the transaction number) (S22). In this case, the one-time authentication number or transaction number is displayed according to the phone verification step (S18) according to the ARS guidance, and the one-time authentication number or transaction number is called by the ARS message when the phone authentication request is made. It is used as a means of checking for a match.

After step S23, the phone authentication server 41 transmits the phone authentication result according to step S22 to the service server 30 through the direct communication network or the Internet network 20 (S23).

4 is a flowchart illustrating a second telephone authentication process among the phone authentication bypass hacking blocking method according to an embodiment of the present invention. 2 and 4, the service server 30 determines whether to provide a service according to a phone authentication result performed by the phone authentication server 41 in step S23 of FIG. 3 (S31).

After step S31, the service server 30 transmits a phone authentication success / server login completion message to the server access terminal 12 through the Internet network 20 when the phone authentication by the phone authentication server 41 is successful. (S32).

After the step S32, the server-connection terminal 12 according to the user's input for the main service request (for example, a request for selling items related to the game, etc. when the service server 30 is a server for the game) (S33a). The main service request is transmitted through data transmission and reception with the service server 30 through the Internet network 20 (S33b).

After step S33b, the service server 30 determines whether double phone authentication (secondary phone authentication) is required for the main service request in step S33b (S34). In other words, it is determined whether it is necessary to perform telephone double authentication to prevent the realization of the purpose of the telephone authentication bypass hacking. In this case, additional phone authentication is performed while maintaining the call where the phone authentication according to step S22 of FIG. 3 is completed. That is, since it takes only 1 to 2 minutes to log in to sell the item after the log in step S32, the call is terminated after the completion of the log-in authentication, and the call is maintained in a state that maintains the call rather than re-authenticating the item. It is to perform authentication.

If the telephone call is maintained, there is a burden on the telephone fee, but if additional telephone authentication is requested to the telephone terminal 11 while the server connection terminal 12 is being rebooted, a hacking abnormal symptom may occur. It provides measurable advantages. In other words, if the hacking purpose can be realized within a few minutes after login, additional phone authentication is performed while the phone call is maintained after the completion of the login phone authentication.

After the step S34, the service server 30 again transmits the phone authentication success / server login completion message to the server access terminal 12 through the direct communication network or the Internet network 20 when double phone authentication is required ( S35).

According to step S35, the server connection terminal 12 transmits a main service performance request (item sale request) to the service server 30 through the Internet network 20 (S36).

After step S36, the service server 30 transmits a phone authentication request to the phone authentication server 41 through the direct communication network or the Internet network 20 (S37).

After step S37, the phone authentication server 41 generates a one-time authentication number or transaction number (eg, '12345') (S38).

After step S38, the phone authentication server 41 transmits the one-time authentication number or transaction number to the service server 30 through the direct communication network or the Internet network 20 (S39).

After the step (S39), the service server 30 is a one-time use to the server connection terminal 12 through the Internet network 20 for the implementation of a one-time authentication number or transaction number to the UI screen of the server connection terminal 12 Transmit the authentication number or transaction number (S40).

After step S40, the server connection terminal 12 implements the one-time authentication number or transaction number received in step S40 on the user UI screen (S41).

After the step (S41), the phone authentication server 41 uses the caller number (representative caller number + one-time authentication number) to the phone terminal of the affiliated telecommunications company server 60 connected to the TCP / IP (50) request for phone authentication (11) By transmitting to the affiliated telecommunications company server that matches, and to be transmitted to the telephone terminal 11 through the telephone network / mobile communication network 70 by the affiliated telecommunications carrier server (S42). In this case, the caller number generated by the phone authentication server 41 at the time of the call authentication request is composed of a combination of the representative caller number and the one-time authentication number (or transaction number). For example, the representative caller number is 1599-0000, If the one-time authentication number (or transaction number) is 12345, the calling party number is preferably generated as 1599-0000-12345.

After step S42, the telephone terminal 11 is a one-time authentication number (or transaction number) implemented on the UI screen of the server connection terminal 12 in step S41 and the phone authentication request received in step S42 Implement the calling party number for checking whether the back digit one-time authentication number (or transaction number) of the representative caller number for the screen (S43).

After step S43, the telephone terminal 11 transmits to the affiliate telecommunication company server that matches the telephone terminal 11 of the affiliate telecommunication company server assembly 60 connected to the telephone network / mobile communication network 70, thereby transmitting TCP by the affiliate telecommunication company server. After the telephone connection with the telephone authentication server 41 through / IP (50), and completes the separate telephone authentication in accordance with the ARS guidance (additional guidance when using the transaction number) (S44). In this case, the one-time authentication number or transaction number is displayed according to the phone verification step (S18) according to the ARS guidance, and the one-time authentication number or transaction number is called by the ARS message when the phone authentication request is made. It is used as a means of checking for a match.

After step S44, the phone authentication server 41 transmits the phone authentication result to the service server 30 through the direct communication network or the Internet network 20 (S45).

The present invention can also be embodied as computer-readable codes on a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored.

Examples of the computer-readable recording medium include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device and the like, and also implemented in the form of a carrier wave (for example, transmission over the Internet) .

The computer readable recording medium may also be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. And functional programs, codes, and code segments for implementing the present invention can be easily inferred by programmers skilled in the art to which the present invention pertains.

As described above, preferred embodiments of the present invention have been disclosed in the present specification and drawings, and although specific terms have been used, they have been used only in a general sense to easily describe the technical contents of the present invention and to facilitate understanding of the invention , And are not intended to limit the scope of the present invention. It is to be understood by those skilled in the art that other modifications based on the technical idea of the present invention are possible in addition to the embodiments disclosed herein.

10: User terminal aggregation
11: Telephone terminal
12: terminal for server connection
20: Internet network
30: service server
31: Database
40: Electronic authentication server aggregation
41: phone authentication server
42: Payment server
43: Abnormal Signs Analysis Server
50: TCP / IP
60: Collaboration carrier server aggregation
60-1 to 60-n: First to nth communication company servers
70: telephone network / mobile communication network

Claims (12)

In response to a request for access to the service server 30 from the user terminal assembly 10 including the telephone terminal 11 and the server connection terminal 12, the server connection terminal 12 is connected to the service server 30 through the Internet network 20. Caller number, the service server 30 includes a one-time authentication number or transaction number generated by the phone authentication server 41 in response to a phone authentication request to the phone authentication server 41 of the electronic authentication server assembly 40 On the UI screen of the server connection terminal 12 for the implementation, the one-time authentication number or the transaction number in the ARS message in the call connection state between the phone authentication server 41 and the phone terminal 11 A first telephone authentication process for performing phone authentication by calling a method to check whether the one-time authentication number or transaction number on the UI screen match; And
Even if the service server 30 completes the login authentication by the first telephone authentication process, the main service request through the Internet network 20 from the server connection terminal 12 in the call connection state is In the case of an item transaction, cash filling / gift, or customer information change, the second telephone to perform the telephone authentication in the same manner as the first telephone authentication process according to the telephone authentication request to the telephone authentication server 41. Certification process; Phone authentication bypass hacking blocking method comprising a.
The method of claim 1, wherein the first telephone authentication process,
A first step of the service server 30 requesting phone authentication to the phone authentication server 41 of the electronic authentication server assembly 40 through a direct communication network or the internet network 20;
The first and second steps of the phone authentication server 41 generating a one-time authentication number or a transaction number;
A first to third step of the telephone authentication server 41 transmitting to the service server 30 through the direct communication network or the internet network for the one-time authentication number or the transaction number;
The service server 30 transmits the one-time authentication number or the transaction number to the server connection terminal 12 through the Internet network 20 for the purpose of implementing the UI screen on the server connection terminal 12. Steps 1-4;
A step 1-5 of the server access terminal 12 implementing a one-time authentication number or a transaction number received on a UI screen;
The telephone authentication server 41 of the affiliated communication company server group 60 connected to the TCP / IP 50 to request a telephone authentication request using a calling party number combining a representative calling party number and a self-generated one-time authentication number or transaction number. A first step 6-6 of transmitting to the telephone company 11 through the telephone network / mobile communication network 70 by transmitting to an affiliate communication company server matched with the telephone terminal 11;
The telephone terminal 11 is a one-time authentication number or transaction number implemented in the server connection terminal 12, and the last digit one-time authentication number of the representative caller number for the telephone authentication request received from the telephone authentication server 41 or Steps 1-7 for implementing the calling party number on the screen for checking whether the transaction numbers match;
The telephone terminal 11 transmits to the matching affiliated communication company server connected to the telephone network / mobile communication network 70 and the telephone authentication server 41 via the TCP / IP 50 by the matching affiliated communication company server. After the call is connected to the mobile terminal, completing steps 1-8 according to the ARS instructions; And
A first to nineth step in which the telephone authentication server 41 transmits a telephone authentication result to the service server 30 through the direct communication network or the internet network 20; Phone authentication bypass hacking blocking method comprising a.
The method according to claim 2, Before the first step 1-1,
The server connection terminal 12 receives an access completion notification from the server connection terminal 12 in response to an access request to the service server 30 through the Internet network 20. 1 preparation step;
A second preparation step of transmitting, by the server connection terminal 12, an ID and password, which are user authentication information, to the service server 30 through the Internet network 20; And
The service server 30 stores the user ID information (ID) and password (Password) of the user authentication information in the database (DB) 31 previously stored in the database (ID) ID (ID) and password (Password) A third preparatory step of checking whether or not to match with and proceeding to step 1-1 if a match is found; Phone authentication bypass hacking blocking method further comprising a.
The method of claim 2, wherein the second telephone authentication process,
The service server 30 determines whether to provide a service according to the result of the telephone authentication performed by the telephone authentication server 41, and successfully authenticates the telephone to the server access terminal 12 through the internet network 20. Method for preventing the authentication of the phone authentication bypass, characterized in that performed on the premise that the / server login completion message.
The method of claim 4, wherein the second telephone authentication process,
A step 2-1 of the server connection terminal 12 transmitting a service request through data transmission and reception with the service server 30 through the internet network according to a user input for a main service request;
The service server 30 determines whether the second telephone authentication is required for the main service request, and when the second telephone authentication is required, the terminal for connecting to the server through the direct communication network or the internet network 20 ( Step 2-2 of again transmitting a phone authentication success / server login completion message to 12);
Step 2-3 of the server connection terminal 12 transmitting a main service execution request to the service server 30 through the Internet network 20;
Step 2-4 of the service server 30 transmitting a telephone authentication request to the telephone authentication server 41 through the direct communication network or the Internet network 20;
Step 2-5 of the phone authentication server 41 generates a one-time authentication number or transaction number;
A second to sixth step of the telephone authentication server 41 transmitting the one-time authentication number or transaction number generated in the second to fifth steps to the service server 30 through the direct communication network or the internet network;
The service server 30 is connected to the server access terminal 12 through the Internet network 20 to implement the one-time authentication number or transaction number to the UI screen of the server access terminal 12, the second 2- Steps 2-7 for transmitting the one-time authentication number or transaction number generated in step 5;
Steps 2-8 of the server access terminal 12 implementing the one-time authentication number or transaction number generated in steps 2-5 on a user UI screen;
The telephone authentication server 41 matches a telephone authentication request with the telephone terminal 11 connected to the TCP / IP 50 by using a calling party number that combines a representative calling party number with a one-time generated authentication number or a transaction number. A second step 9-9 to be transmitted to the telephone terminal 11 through the telephone network / mobile communication network 70 by the matching affiliated communication company server;
The telephone terminal 11 performs a one-time authentication number or transaction number implemented on the UI screen of the server access terminal 12 in steps 2-8, and the phone authentication request received in steps 2-9. A second step of implementing a calling party number for confirming whether a back-seat single-use authentication number or a transaction number of the representative caller number for the screen is displayed;
Step 2-11 of the telephone terminal 11 completing a separate telephone authentication according to ARS guidance in a call connection state with the telephone authentication server 41 set by the first telephone authentication process; And
A second to 12th step of the telephone authentication server 41 transmitting the telephone authentication result according to the second step 11-11 to the service server 30 through the direct communication network or the internet network 20; Phone authentication bypass hacking blocking method comprising a.
A user terminal assembly 10 composed of a telephone terminal 11 and a server connection terminal 12;
The server connection terminal 12 receives an access request to the service server 30 through the Internet network 20, and any one of request for item transaction, cash charge / gift and customer information change after the access request. A service server 30 for performing a telephone authentication request to the electronic authentication server assembly 40 according to a corresponding main service request;
The electronic authentication server assembly 40 is provided on the UI screen of the server connection terminal 12 for the caller number including the one-time authentication number or the transaction number after receiving the telephone authentication request. Calling the one-time authentication number or the transaction number to the ARS message in the call connection state with the telephone terminal 11 so that the phone authentication is performed by checking whether the one-time authentication number or the transaction number on the UI screen matches. Telephone authentication server 41; Including;
The telephone authentication server 41 sequentially performs the first telephone authentication process according to the access request and the second telephone authentication process according to the main service request after the access request, and the second telephone The telephone authentication bypass hacking blocking system, wherein the authentication process is performed while maintaining a call connection state in the first telephone authentication process.
delete The method according to claim 6, wherein the telephone authentication server 41,
In the first and second telephone authentication process, a one-time authentication number or transaction number is generated according to a request for telephone authentication through a direct communication network or the Internet network 20, and the generated one-time authentication number or transaction number is directly applied to the direct authentication. Telephone authentication bypass hacking blocking system, characterized in that for transmitting to the service server via a communication network or the Internet network.
The method according to claim 8, wherein the service server 30,
The one-time authentication number or the transaction number for the purpose of implementing the UI screen on the server access terminal 12 in the first and second telephone authentication process through the Internet network 20 to the server terminal 12 By transmitting to), if the one-time authentication number or transaction number is implemented on the UI screen of the server connection terminal 12,
The telephone authentication server 41,
The telephone authentication request using the calling party number combining the representative calling party number and the self-generated one-time authentication number or transaction number is matched with the telephone terminal 11 among the affiliated telecommunication company server groups 60 connected to the TCP / IP 50. The system for transmitting a telephone authentication bypass hacking block, characterized in that the transmission to the telephone terminal (11) through the telephone network / mobile communication network (70) by transmitting to the partner carrier server matching.
The method according to claim 9, wherein the telephone terminal 11,
The one-time authentication number or transaction number implemented in the server access terminal 12 in the first and second phone authentication process, and the representative caller number for the phone authentication request received from the phone authentication server 41 After implementing the calling party number to confirm the match between the back-seat one-time authentication number or transaction number,
After transmitting to the matching affiliated communication company server connected to the telephone network / mobile communication network 70 and making a call connection with the telephone authentication server 41 through the TCP / IP 50 by the matching affiliated communication company server, ARS guide According to the phone authentication bypass hacking blocking system, characterized in that to complete a separate phone authentication.
The method according to claim 10, The server connection terminal 12,
In response to the request for access to the service server 30 through the Internet network 20 to perform the first telephone authentication process, an access completion notification is received from the server access terminal 12. After that, if the user ID information (ID) and password (Password) is transmitted to the service server 30 through the Internet network 20,
The service server 30,
Check whether or not the ID (ID) and password (Password) of the user authentication information matches the ID (ID) and password (Password) of the server connection terminal 12 previously stored in the database (DB: 31) The phone authentication bypass hacking blocking system, characterized in that the first phone authentication process if the match.
The method of claim 11, wherein the service server 30,
In order to perform the second telephone authentication process, it is determined whether to provide a service according to the result of the first telephone authentication performed by the telephone authentication server 41, and through the Internet network 20 Telephone authentication bypass hacking blocking system, characterized in that performed on the premise that the server authentication terminal / server login complete message sent to the server connection terminal (12).

Images