KR101416817B1 - Apparatus and method for e-wallet services using a two-factor authentication - Google Patents

Abstract

The present invention encrypts the first authentication information (the password of the user) with the public key of the electronic wallet management server by first encrypting it and the second authentication information generated by the electronic wallet management server with a method that can not be decoded, The present invention relates to an electronic wallet system and method in which authentication is enhanced through two-step authentication of first authentication information and second authentication information, and to an electronic wallet system in which authentication of a portable terminal is enhanced without using a security element To receive.

Description

FIELD OF THE INVENTION [0001] The present invention relates to an electronic wallet system and method for double wallet authentication for electronic wallet service,

The present invention relates to a user authentication method for providing an electronic wallet service using a portable terminal in an electronic wallet system, and more particularly, to a user authentication method for providing an electronic wallet service using a mobile terminal, The present invention relates to an electronic wallet system and a method thereof.

[0002] Recently, a payment means replacing spot money has been widely used. This has enabled the creation of an environment that enables electronic commerce such as the Internet, the spread of cash dispensers with various functions, the spread of mobile communication terminals, and financial transactions using the same.

An example is electronic money, which is widely used on the Internet to replace spot money. However, when real money is traded such as in-kind money and electronic money, card settlement, micropayment using mobile phone charge, and account transfer are used. Especially, in the case of the transfer of the account, it is possible to use it easily by using devices such as ATM, mobile phone and internet without visiting the bank like in the past. Such card settlement, micropayment, and account transfer are becoming more and more popular as online shops and online services on the Internet become more active.

The payment process using these various methods first requires authentication of a legitimate user. Especially, a user who does not have a cash or a credit card separately for the authentication method using a mobile phone usually carries his / her mobile phone usually. Therefore, And does not generate a situation in which authentication can not be performed.

Meanwhile, the 3G mobile communication technology standardization organization (3GPP) has introduced the IMS (IP Multimedia Subsystem), and the user equipment (UE) Terminal) can realize various IMS applications through an IMS access network, while at the same time IMS access reduces the complexity of the service and effectively blocks different access networks or authentication mechanisms in the service, It provides a rich service.

When the UE accesses the IMS, the IMS Core Network must authenticate to the identity of the UE. In authentication for a user identity in IMS access, an IMS authentication and key agreement (AKA) authentication mechanism is generally used for a terminal using a card, and a SIM (Subscriber Identity Module), a Universal Subscriber Identity Module (USIM) Or an IMS Subscriber Identity Module (ISIM).

However, when a secure element (SE) such as SIM / USIM / ISIM is not used, there is a difficulty in user authentication and a problem that security may be vulnerable to authentication occurs.

An apparatus, system, apparatus, method and recording medium for providing an electronic wallet service using a universal user authentication module card have been proposed in Korean Patent Publication No. 2007-0065863 as an example of a technique for authenticating a conventional portable terminal. By providing the electronic wallet device and the system using the USIM and the external communication interface in the prior art, the user can safely carry personal authentication and financial information, and can safely carry out the inquiry and payment , Transfer, payment, and the like have been disclosed. However, the prior art is also a technology for authenticating using the security element USIM.

Accordingly, there is a need for an enhanced authentication technique using a portable terminal so that an electronic wallet service can be provided in a portable terminal without using a secure element (SE).

Korean Published Patent Application No. 2007-0065863 (Published Jun. 2007,

SUMMARY OF THE INVENTION It is an object of the present invention to provide an electronic wallet system and method for dual authentication for electronic wallet service.

Specifically, the present invention aims at providing an electronic wallet system and a method for authenticating a user through dual authentication in order to enhance user authentication in a portable terminal without using a secure element (SE).

Further, according to the present invention, the first authentication information (user's password) generated by the portable terminal is registered with the second authentication information generated by the electronic wallet management server so that both the first authentication information and the second authentication information are authenticated It is an object of the present invention to provide an electronic wallet system and a method thereof for verifying and authenticating success.

In addition, the present invention can secure the first authentication information (the password of the user) by encrypting it with the public key of the electronic wallet management server, and encoding the second authentication information generated by the electronic wallet management server in such a manner that decoding is not possible The present invention aims to provide an electronic wallet system and method in which authentication is enhanced through two-step authentication of first authentication information and second authentication information.

According to an aspect of the present invention, there is provided a portable terminal of an electronic wallet system for dual authentication, comprising: a communication unit for communicating with an electronic wallet management server; An authentication information registration request unit for providing first authentication information and terminal identification information to the electronic wallet management server and receiving and storing second authentication information from the electronic wallet management server; An encryption unit encrypting the first authentication information with a public key to generate encrypted first authentication information; An encoding unit configured to encode the second authentication information using a random value and a current time to generate encoded second authentication information; And an authentication requesting unit for transmitting to the electronic wallet management server an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and the encoded time information .

At this time, the first authentication information may be a user password input by a user.

At this time, the authentication information registration request unit may encrypt the first authentication information with the public key of the electronic wallet management server to generate the encrypted first authentication information, and transmit the encrypted first authentication information and the terminal identification information And transmits the disposable password to the electronic wallet management server to authenticate the terminal identification information when receiving the one time password (OTP) from the electronic wallet management server, And can receive the second authentication information from the management server.

At this time, the authentication information registration request unit may receive the public key of the electronic wallet management server from the electronic wallet management server before generating the encrypted first authentication information.

At this time, the authentication information registration request unit may store the received second authentication information by encrypting the received second authentication information with the first authentication information.

At this time, the encoding unit may extract the second authentication information by decoding the stored second authentication information using the first authentication information before generating the encoded second authentication information.

In this case, the encoding used in the encoding unit can not decode the encoded second authentication information into the second authentication information using the random value and the encoded time information.

According to another aspect of the present invention, an electronic wallet management server of an electronic wallet system for dual authentication includes a communication unit for communicating with a portable terminal; An authentication information registration processing unit for generating second authentication information and transmitting the second authentication information to the portable terminal when receiving the first authentication information and the terminal identification information from the portable terminal; An authentication request receiving unit receiving an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and the encoded time information from the portable terminal; A decryption unit for decrypting the encrypted first authentication information with the secret key of the electronic wallet management server and extracting the first authentication information upon receiving the authentication request message; An encoding unit, upon receiving the authentication request message, generating an encoded second authentication information by encoding using the random value and the encoded time information, the generated second authentication information; And a second authentication step of comparing the extracted first authentication information with the stored first authentication information to perform first authentication, comparing the received second authentication information with the encoded second authentication information to determine whether they are the same, And an authentication processing unit.

At this time, the authentication information registration processing unit decrypts the encrypted first authentication information with the private key of the electronic wallet management server through the decryption unit upon receiving the encrypted first authentication information and the terminal identification information from the portable terminal, Extracting the first authentication information, storing the extracted first authentication information, generating a one time password (OTP) and transmitting the one-time password to the portable terminal corresponding to the terminal identification information, When the one-time password is received, the terminal authentication information is compared with the one-time password transmitted. If authentication of the terminal identification information is successful, second authentication information is generated using secure random (Random) As shown in FIG.

In this case, the encoding used in the encoding unit can not decode the encoded second authentication information into the second authentication information using the random value and the encoded time information.

A method for dual authentication in a portable terminal of an electronic wallet system according to another embodiment of the present invention includes providing first authentication information and terminal identification information to an electronic wallet management server and receiving second authentication information from the electronic wallet management server An authentication information registration step of storing the authentication information; Encrypting the first authentication information with a public key to generate encrypted first authentication information; Encoding the second authentication information using a random value and a current time to generate encoded second authentication information; And transmitting to the electronic wallet management server an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and encoded time information.

The authentication information registration step may include encrypting the first authentication information with the public key of the electronic wallet management server to generate the encrypted first authentication information. Transmitting the encrypted first authentication information and the terminal identification information to the electronic wallet management server; Receiving a One Time Password (OTP) from the electronic wallet management server; Transmitting the one-time password to the electronic wallet management server to authenticate the terminal identification information; And receiving second authentication information from the electronic wallet management server.

A method for dual authentication in an electronic wallet management server of an electronic wallet system according to another embodiment of the present invention is a method for authenticating an electronic wallet in a portable terminal by generating second authentication information when receiving first authentication information and terminal identification information from a portable terminal An authentication information registration step of transmitting the authentication information; Receiving an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information and the random value, and encoded time information from the portable terminal; Extracting the first authentication information by decrypting the encrypted first authentication information with the secret key of the electronic wallet management server; Comparing the extracted first authentication information with the stored first authentication information to perform first authentication; Generating second authentication information encoded by encoding using the random value and the encoded time information, the generated second authentication information; Comparing the encoded second authentication information with the encoded second authentication information to perform secondary authentication; And authenticating as a legitimate user if both the primary authentication and the secondary authentication are passed.

The authentication information registration step may include receiving encrypted first authentication information and the terminal identification information from the portable terminal; Extracting the first authentication information by decrypting the encrypted first authentication information with the secret key of the electronic wallet management server, and storing the extracted first authentication information; Generating a one-time password (OTP) and transmitting the one-time password to the portable terminal corresponding to the terminal identification information; Receiving the one-time password from the portable terminal, authenticating the terminal identification information in comparison with the one-time password transmitted; If authentication of the terminal identification information is successful, generating second authentication information using Secure Random (Random); And transmitting the second authentication information to the portable terminal.

The present invention encrypts the first authentication information (the password of the user) with the public key of the electronic wallet management server by first encrypting it and the second authentication information generated by the electronic wallet management server with a method that can not be decoded, The present invention relates to an electronic wallet system in which authentication is enhanced through two-step authentication including first authentication information and second authentication information, and a method for receiving the electronic wallet service through enhanced authentication in a portable terminal without a security element .

1 is a diagram illustrating a configuration of a portable terminal of an electronic wallet system for dual authentication according to an embodiment of the present invention.
2 is a diagram illustrating a configuration of an electronic wallet management server of an electronic wallet system for dual authentication according to an embodiment of the present invention.
FIG. 3 is a flowchart illustrating a process of distributing keys before double authentication in an electronic wallet system according to an embodiment of the present invention.
FIG. 4 is a flowchart illustrating a process of registering authentication information for dual authentication in an electronic wallet system according to an embodiment of the present invention.
5 is a flowchart illustrating a double authentication process in an electronic wallet system according to an embodiment of the present invention.
6 is a flowchart illustrating a double authentication process in a mobile terminal of an electronic wallet system according to an embodiment of the present invention.
7 is a flowchart illustrating a process of registering authentication information in a mobile terminal of an electronic wallet system according to an embodiment of the present invention.
8 is a flowchart illustrating a double authentication process in the electronic wallet management server of the electronic wallet system according to an embodiment of the present invention.
9 is a flowchart illustrating a process of registering authentication information in an electronic wallet management server of an electronic wallet system according to an embodiment of the present invention.

Other objects and features of the present invention will become apparent from the following description of embodiments with reference to the accompanying drawings.

Preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

However, the present invention is not limited to or limited by the embodiments. Like reference symbols in the drawings denote like elements.

Hereinafter, an electronic wallet system and method for dual authentication for an electronic wallet service according to an embodiment of the present invention will be described in detail with reference to FIGS. 1 to 9 attached hereto.

1 is a diagram illustrating a configuration of a portable terminal of an electronic wallet system for dual authentication according to an embodiment of the present invention.

1, a portable terminal 100 of an electronic wallet system includes a control unit 110, an authentication information registration request unit 112, an encryption unit 114, an encoding unit 116, an authentication request unit 118, A storage unit 120, an input unit 140, and a storage unit 130. [

The communication unit 120 communicates with the electronic wallet management server 200 to receive the electronic wallet service, and transmits and receives the authentication information and the electronic wallet service data.

The storage unit 130 stores an operating system, an application program, and storage data (telephone number, SMS message, compressed image file, moving image, etc.) for controlling the overall operation of the portable terminal 100. Also, the storage unit 130 stores a public key of the electronic wallet management server 200 and second authentication information generated by the electronic wallet management server 200 according to the present invention.

The input unit 140 receives an input of a user of the portable terminal 100 and provides the input to the control unit 110. In particular, the input unit 130 may receive a PIN (Personal Identification Number), which is the first authentication information, from the user. The input unit 130 may include various input devices. For example, the input unit 130 includes numeric keys 0 through 9, character keys, navigation keys, and a plurality of function keys. The input unit 130 includes a keypad (not shown) for providing key input data corresponding to a key pressed by the user to the control unit 110 a key pad, or a touch screen including a touch sensor for detecting a touch position of a display screen as an input.

The authentication information registration request unit 112 provides the first authentication information and the terminal identification information to the electronic wallet management server 200 and receives and stores the second authentication information from the electronic wallet management server 200. [ At this time, the terminal identification information may be one of MSISDN (Mobile Station International ISDN Number), TMSI (Temporary Mobile Subscriber Identity), MIN (Mobile Identification Number) and IMEI (International Monbile Equiment Identity).

More specifically, the authentication information registration request unit 112 receives the public key of the electronic wallet management server 200 from the electronic wallet management server 200 and transmits the first authentication information to the electronic wallet management server 200 And transmits the encrypted first authentication information and the terminal identification information to the electronic wallet management server 200. The electronic wallet management server 200 receives the one time password (OTP) from the electronic wallet management server 200, Password to the electronic wallet management server 200, authenticates the terminal identification information, receives the second authentication information from the electronic wallet management server 200, and stores the received second authentication information in the storage unit 130. [ In this case, the first authentication information may be a user password input through the input unit 130. When storing the second authentication information, the authentication information registration request unit 112 may store the encrypted second authentication information by encrypting the first authentication information with the first authentication information.

The encryption unit 114 encrypts the first authentication information with the public key of the electronic wallet management server 200 in order to register the first authentication information in the electronic wallet management server 200 to generate the encrypted first authentication information.

The encoding unit 116 encodes the second authentication information using the random value and the current time to generate encoded second authentication information. At this time, the encoding used in the encoding unit 114 is characterized in that it is not possible to decode the second authentication information encoded using the random value and the encoded time information into the second authentication information again.

If the second authentication information stored in the storage unit 130 is encrypted before generating the encoded second authentication information, the encrypted second authentication information is decrypted using the first authentication information to extract the second authentication information ≪ / RTI >

The authentication request unit 118 transmits an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and the encoded time information to the electronic wallet management server 200, Lt; / RTI >

The control unit 110 may control the overall operation of the portable terminal 100. [ The control unit 110 may perform functions of the authentication information registration request unit 112, the encryption unit 114, the encoding unit 116, and the authentication request unit 118. The control unit 110, the authentication information registration request unit 112, the encryption unit 114, the encoding unit 116, and the authentication request unit 118 are distinguished from each other in order to distinguish the respective functions. The control unit 110 includes at least one processor configured to perform the functions of the authentication information registration request unit 112, the encryption unit 114, the encoding unit 116 and the authentication request unit 118, respectively . The control unit 110 includes at least one processor configured to perform a function of each of the functions of the authentication information registration request unit 112, the encryption unit 114, the encoding unit 116 and the authentication request unit 118, . ≪ / RTI >

2 is a diagram illustrating a configuration of an electronic wallet management server of an electronic wallet system for dual authentication according to an embodiment of the present invention.

2, the electronic wallet management server 200 of the electronic wallet system includes a control unit 210, a key generation unit 211, an authentication information registration processing unit 212, an authentication request reception unit 213 decryption unit 214, An encoding unit 215, an authentication processing unit 216, a communication unit 220, and a storage unit 230.

The communication unit 220 transmits and receives authentication information and electronic wallet service data by communicating with the portable terminal 100 to provide an electronic wallet service.

The storage unit 230 stores an operating system, an application program, and the like for controlling the overall operation of the electronic wallet management server 200. Also, the storage unit 230 stores the first authentication information received from the portable terminal 100 and the generated second authentication information according to the present invention. At this time, the first authentication information and the second authentication information stored in the storage unit 230 may be stored in the storage unit 230 in the electronic wallet management server 200, but may be separately stored in the database and managed.

The key generation unit 211 generates a public key to be provided to the portable terminal 100 and a private key to be used in decrypting the data encrypted with the public key. The generated secret key is stored in the storage unit 230 or the HSM (Hardware Security Module).

Upon receiving the first authentication information and the terminal identification information from the portable terminal 100, the authentication information registration processing unit 212 generates second authentication information and transmits the second authentication information to the portable terminal 100. [

The authentication information registration processing unit 212 receives the encrypted first authentication information and the terminal identification information from the portable terminal 100 and encrypts the encrypted first authentication information and the terminal identification information using the secret key of the electronic wallet management server 200 via the decryption unit 214. [ And extracts the first authentication information, stores the extracted first authentication information in the storage unit 230, generates a one time password (OTP), and generates a one-time password (OTP) When receiving the one-time password from the portable terminal 100, authenticates the terminal identification information in comparison with the transmitted one-time password. If authentication of the terminal identification information is successful, the secure random number is transmitted to the portable terminal 100, And transmits the generated second authentication information to the portable terminal 100. At this time, Secure Random is a method that can be proved as a cryptographically difficult difficulty to estimate a random number to be generated from previously generated random numbers with a certain random number value.

The authentication request receiving unit 213 receives the authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and the encoded time information from the portable terminal 100. [

Upon receiving the authentication request message from the portable terminal 100, the decryption unit 214 decrypts the encrypted first authentication information with the secret key of the electronic wallet management server 200, and extracts the first authentication information.

Upon receiving the authentication request message, the encoding unit 215 encodes the generated second authentication information using the random value and the encoded time information to generate encoded second authentication information. The encoding used in the encoding unit can not decode the second authentication information encoded using the random value and the encoded time information into the second authentication information again.

The authentication processing unit 216 compares the extracted first authentication information with the stored first authentication information to perform primary authentication, compares the received second authentication information with the generated encoded second authentication information to determine whether they are the same, Authentication. The authentication processing unit 216 authenticates a legitimate user only when both the primary authentication and the secondary authentication are passed.

The control unit 210 can control the overall operation of the electronic wallet management server 200. [ The control unit 210 performs functions of the key generating unit 211, the authentication information registration processing unit 212, the authentication request receiving unit 213, the decryption unit 214, the encoding unit 215, and the authentication processing unit 216 . The control unit 210, the key generating unit 211, the authentication information registration processing unit 212, the authentication request receiving unit 213, the decryption unit 214, the encoding unit 215 and the authentication processing unit 216 are shown separately This is to explain the functions separately. Accordingly, the control unit 210 performs functions of the key generation unit 211, the authentication information registration processing unit 212, the authentication request reception unit 213, the decryption unit 214, the encoding unit 215, and the authentication processing unit 216 And may comprise at least one processor configured. The control unit 210 may include a function of the key generation unit 211, the authentication information registration processing unit 212, the authentication request reception unit 213 decryption unit 214, the encoding unit 215 and the authentication processing unit 216 And at least one processor configured to perform the method.

Hereinafter, a method for dual authentication for the electronic wallet service in the electronic wallet system according to the present invention will be described with reference to the drawings.

FIG. 3 is a flowchart illustrating a process of distributing keys before double authentication in an electronic wallet system according to an embodiment of the present invention.

3, the electronic wallet server 200 generates a secret key to be used when decrypting the public key and the data encrypted with the public key to be provided to the portable terminal 100 (S310) Key is stored (S320).

The electronic wallet server 200 receives the public key from the portable terminal 100 in step S330 and transmits the public key to the portable terminal 100 in step S340.

The portable terminal 100 stores the received public key from the electronic wallet server 200 (S350).

FIG. 4 is a flowchart illustrating a process of registering authentication information for dual authentication in an electronic wallet system according to an embodiment of the present invention.

4, the portable terminal 100 receives and registers first authentication information (a user password (PIN)) from a user (S410), encrypts the first authentication information with the public key of the electronic wallet server 200 And generates encrypted first authentication information (S412)

Then, the portable terminal 100 transmits the encrypted first authentication information and the terminal identification information to the electronic wallet management server 200 to request registration of the authentication information (S414).

When the electronic wallet server 200 receives a request for registration of authentication information (S414), it generates a one time password (OTP) (S416) To the terminal 100 (S418). At this time, the electronic wallet server 200 may transmit a one-time password using a short message service (SMS).

When the portable terminal 100 receives the one-time password (S418), the portable terminal 100 transmits the received one-time password to the electronic wallet management server 200 to authenticate the terminal identification information (S420). At this time, the one-time password to be transmitted to the electronic wallet management server 200 may be information inputted through the input of the user or may be the received one-time password.

When the electronic wallet management server 200 receives the one-time password from the portable terminal 100 (S420), it compares the one-time password with the transmitted one-time password to authenticate the terminal identification information (S422).

If the one-time password authentication is successful as a result of the comparison in step S422, the electronic wallet management server 200 generates second authentication information using Secure Random (S424).

Then, the electronic wallet management server 200 transmits the 2 authentication information to the portable terminal 100 (S426).

When the portable terminal 100 receives the second authentication information from the electronic wallet management server 200 (S426), the portable terminal 100 encrypts the received second authentication information with the first authentication information (S428) (S430).

5 is a flowchart illustrating a double authentication process in an electronic wallet system according to an embodiment of the present invention.

5, when the portable terminal 100 receives the first authentication information from the user (S510), the portable terminal 100 encrypts the first authentication information with the public key of the electronic wallet management server 200 to generate the encrypted first authentication information (S512).

Then, the portable terminal 100 decrypts the encrypted second authentication information into the first authentication information and extracts the second authentication information (S514).

Then, the mobile terminal 100 generates the second authentication information by encoding the second authentication information using the random value and the current time (S516). At this time, the encoding used is characterized in that the second authentication information encoded using the random value and the encoded time information can not be decoded into the second authentication information again.

Then, the mobile terminal 100 generates an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and the encoded time information (S518). Then, the portable terminal 100 transmits an authentication request message to the electronic wallet management server 200 (S520).

When the electronic wallet management server 200 receives the authentication request message from the portable terminal 100 in step S522, the electronic wallet management server 200 decrypts the encrypted first authentication information included in the authentication request message with the secret key of the electronic wallet management server 200 1 authentication information (S524).

Then, the electronic wallet management server 200 compares the extracted first authentication information with the stored first authentication information to perform primary authentication (S526).

If the first authentication is successful in step S526, the electronic wallet management server 200 generates the second authentication information by encoding the generated second authentication information using the random value and the encoded time information (S526).

Then, the electronic wallet management server 200 compares the received encoded second authentication information with the generated encoded second authentication information to make a second authentication (S528).

If both the primary authentication and the secondary authentication are completed, the electronic wallet management server 200 authenticates the user as a legitimate user and transmits an authentication result message to the portable terminal 100 indicating that the authentication is successful (S530).

In the embodiment of the present invention, the second authentication information is authenticated after the first authentication information is authenticated. However, the order of authenticating the first authentication information and the second authentication information may be changed or performed at the same time.

6 is a flowchart illustrating a double authentication process in a mobile terminal of an electronic wallet system according to an embodiment of the present invention.

6, the portable terminal 100 provides the first authentication information and the terminal identification information to the electronic wallet management server 200, receives and stores the second authentication information from the electronic wallet management server 200, (S610). The detailed description of step S610 will be described later with reference to FIG.

Then, the portable terminal 100 encrypts the first authentication information using the public key to generate the encrypted first authentication information (S620.).

Then, the portable terminal 100 generates the second authentication information by encoding the second authentication information using the random value and the current time (S630).

If the second authentication information to be encoded is encrypted prior to encoding the second authentication information in step S630, the encrypted second authentication information is decrypted using the first authentication information to extract the second authentication information, And encodes it using the second authentication information.

In this case, the encoding used in step S630 can not decode the second authentication information encoded using the random value and the encoded time information into the second authentication information again.

In step S640, the portable terminal 100 generates an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and the encoded time information.

Then, the portable terminal 100 transmits an authentication request message to the electronic wallet management server 200 (S650).

7 is a flowchart illustrating a process of registering authentication information in a mobile terminal of an electronic wallet system according to an embodiment of the present invention.

Referring to FIG. 7, the portable terminal 100 receives and stores the public key of the electronic wallet management server 200 from the electronic wallet management server 200 (S710).

When receiving the first authentication information (user password) from the user (S712), the portable terminal 100 encrypts the first authentication information with the public key of the electronic wallet management server 200 to generate the encrypted first authentication information (S714). The first authentication information may be a user password input by the user's input, or may be predetermined information.

Then, the portable terminal 100 transmits the encrypted first authentication information and the terminal identification information to the electronic wallet management server 200 (S716).

When receiving the one-time password (OTP) from the electronic wallet management server 200 (S718), the portable terminal 100 transmits the received one-time password to the electronic wallet management server 200, (S720). At this time, the portable terminal 100 can receive the one-time password by SMS (short message service).

When receiving the second authentication information from the electronic wallet management server 200 (S722), the portable terminal 100 encrypts and stores the received second authentication information as the first authentication information (S724).

8 is a flowchart illustrating a double authentication process in the electronic wallet management server of the electronic wallet system according to an embodiment of the present invention.

8, when the first authentication information and the terminal identification information are received from the portable terminal 100, the electronic wallet management server 200 generates second authentication information and transmits the authentication information registered to the portable terminal 100 (S810).

The electronic wallet management server 200 receives the authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and the encoded time information from the portable terminal 100 (S820).

Upon receipt of the authentication request message in step S810, the electronic wallet management server 200 decrypts the encrypted first authentication information with the secret key of the electronic wallet management server 200 and extracts the first authentication information (S830).

Then, the electronic wallet management server 200 compares the extracted first authentication information with the stored first authentication information and performs primary authentication (S840).

Then, the electronic wallet management server 200 generates second authentication information by encoding the generated second authentication information using the random value and the encoded time information (S850). At this time, the encoding used in step S850 is characterized in that the second authentication information encoded using the random value and the encoded time information can not be decoded as the second authentication information again.

Then, the electronic wallet management server 200 compares the received encoded second authentication information with the generated encoded second authentication information to perform secondary authentication (S860).

Then, if the electronic wallet management server 200 passes both the primary authentication and the secondary authentication, it authenticates as a legitimate user (S870).

9 is a flowchart illustrating a process of registering authentication information in an electronic wallet management server of an electronic wallet system according to an embodiment of the present invention.

9, when the electronic wallet management server 200 receives the encrypted first authentication information and the terminal identification information from the portable terminal 100 (S910), the electronic wallet management server 200 receives the encrypted first authentication information and the terminal identification information 1 authentication information and extracts the first authentication information (S912).

Then, the electronic wallet management server 200 stores the extracted first authentication information (S914), generates a one-time password (OTP) and transmits it to the portable terminal 100 corresponding to the terminal identification information S916).

When receiving the one-time password from the portable terminal 100 (S918), the electronic wallet management server 200 compares the one-time password with the transmitted one-time password (S920).

If the one-time password authentication is successful as a result of the comparison in step S920, the electronic wallet management server 200 generates second authentication information using Secure Random (S922).

Then, the electronic wallet management server 200 transmits 2 authentication information to the portable terminal 100 (S924).

In the electronic wallet system according to an embodiment of the present invention, the double authentication method for the electronic wallet service can be implemented in the form of a program command that can be executed through various computer means and recorded in a computer readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

As described above, the present invention has been described with reference to particular embodiments, such as specific elements, and specific embodiments and drawings. However, it should be understood that the present invention is not limited to the above- And various modifications and changes may be made thereto by those skilled in the art to which the present invention pertains.

Accordingly, the spirit of the present invention should not be construed as being limited to the embodiments described, and all of the equivalents or equivalents of the claims, as well as the following claims, belong to the scope of the present invention .

Claims (20)

A communication unit for communicating with the electronic wallet management server;
An authentication information registration request unit for providing first authentication information and terminal identification information to the electronic wallet management server and receiving and storing second authentication information from the electronic wallet management server;
An encryption unit encrypting the first authentication information with a public key to generate encrypted first authentication information;
An encoding unit configured to encode the second authentication information using a random value and a current time to generate encoded second authentication information; And
And an authentication requesting unit for transmitting an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and encoded time information to the electronic wallet management server,
The authentication information registration request unit,
Encrypts the first authentication information with the public key of the electronic wallet management server, transmits the encrypted first authentication information together with the terminal identification information to the electronic wallet management server,
When receiving the one-time password (OTP) from the electronic wallet management server, transmits the one-time password to the electronic wallet management server to authenticate the terminal identification information,
Receiving second authentication information from the electronic wallet management server
Electronic wallet system for double authentication. The method according to claim 1,
Wherein the first authentication information includes:
And is a user password input by a user's input
Electronic wallet system for double authentication. delete The method according to claim 1,
The authentication information registration request unit,
Before generating the encrypted first authentication information, receiving the public key of the electronic wallet management server from the electronic wallet management server
Electronic wallet system for double authentication. The method according to claim 1,
The authentication information registration request unit,
Encrypts the received second authentication information with the first authentication information, and stores the encrypted second authentication information
Electronic wallet system for double authentication. 6. The method of claim 5,
The encoding unit may include:
Before generating the encoded second authentication information,
Decrypts the stored second authentication information using the first authentication information, and extracts the second authentication information
Electronic wallet system for double authentication. The method according to claim 1,
The encoding used in the encoding unit may include:
And can not decode the encoded second authentication information into the second authentication information using the random value and the encoded time information.
Electronic wallet system for double authentication. A communication unit for communicating with the portable terminal;
An authentication information registration processing unit for generating second authentication information and transmitting the second authentication information to the portable terminal when receiving the first authentication information and the terminal identification information from the portable terminal;
An authentication request receiving unit receiving an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and the encoded time information from the portable terminal;
A decryption unit for decrypting the encrypted first authentication information with the secret key of the electronic wallet management server and extracting the first authentication information upon receiving the authentication request message;
An encoding unit, upon receiving the authentication request message, generating an encoded second authentication information by encoding using the random value and the encoded time information, the generated second authentication information; And
The extracted first authentication information is compared with the stored first authentication information to perform first authentication, and second authentication is performed by comparing whether the received second authentication information is identical to the encoded second authentication information And an authentication processing unit,
The authentication information registration processing unit,
Upon receipt of the encrypted first authentication information and the terminal identification information from the portable terminal, decrypts the encrypted first authentication information with the secret key of the electronic wallet management server through the decryption unit to extract the first authentication information, Storing the first authentication information,
And generates a one-time password (OTP) to transmit to the portable terminal corresponding to the terminal identification information. When the one-time password is received from the portable terminal, the terminal identification information is compared with the one- and,
If authentication of the terminal identification information is successful, second authentication information is generated using Secure Random (Random) and transmitted to the portable terminal
Electronic wallet management server for double authentication. delete 9. The method of claim 8,
The encoding used in the encoding unit may include:
And can not decode the encoded second authentication information into the second authentication information using the random value and the encoded time information.
Electronic wallet management server for double authentication. An authentication information registration step of providing first authentication information and terminal identification information to an electronic wallet management server and receiving and storing second authentication information from the electronic wallet management server;
Encrypting the first authentication information with a public key to generate encrypted first authentication information;
Encoding the second authentication information using a random value and a current time to generate encoded second authentication information; And
And transmitting to the electronic wallet management server an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and encoded time information,
The authentication information registration step includes:
Encrypting the first authentication information with the public key of the electronic wallet management server and transmitting the encrypted authentication information together with the terminal identification information to the electronic wallet management server;
Receiving a One Time Password (OTP) from the electronic wallet management server;
Transmitting the one-time password to the electronic wallet management server to authenticate the terminal identification information; And
And receiving second authentication information from the electronic wallet management server
A method of dual authentication in an electronic wallet system. 12. The method of claim 11,
Wherein the first authentication information includes:
And is a user password input by a user's input
A method for double authentication in a portable terminal of an electronic wallet system. delete 12. The method of claim 11,
Before the step of generating the encrypted first authentication information,
Further comprising receiving a public key of the electronic wallet management server from the electronic wallet management server
A method of dual authentication in an electronic wallet system. 12. The method of claim 11,
And encrypting and storing the received second authentication information with the first authentication information
A method of dual authentication in an electronic wallet system. 16. The method of claim 15,
Before the step of generating the encoded second authentication information,
And decrypting the stored second authentication information using the first authentication information to extract the second authentication information
A method of dual authentication in an electronic wallet system. An authentication information registration step of generating second authentication information and transmitting the second authentication information to the portable terminal when receiving the first authentication information and the terminal identification information from the portable terminal;
Receiving an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information and the random value, and encoded time information from the portable terminal;
Extracting the first authentication information by decrypting the encrypted first authentication information with the secret key of the electronic wallet management server;
Comparing the extracted first authentication information with the stored first authentication information to perform first authentication;
Generating second authentication information encoded by encoding using the random value and the encoded time information, the generated second authentication information;
Comparing the encoded second authentication information with the encoded second authentication information to perform secondary authentication; And
And authenticating as a legitimate user if the primary authentication and the secondary authentication are both passed,
The authentication information registration step includes:
Receiving encrypted first authentication information and the terminal identification information from the portable terminal;
Extracting the first authentication information by decrypting the encrypted first authentication information with the secret key of the electronic wallet management server, and storing the extracted first authentication information;
Generating a one-time password (OTP) and transmitting the one-time password to the portable terminal corresponding to the terminal identification information;
Receiving the one-time password from the portable terminal, authenticating the terminal identification information in comparison with the one-time password transmitted;
If authentication of the terminal identification information is successful, generating second authentication information using Secure Random (Random); And
And transmitting the second authentication information to the portable terminal
How to double authenticate with the electronic wallet management server. delete An authentication information registration step of providing first authentication information and terminal identification information to an electronic wallet management server and receiving and storing second authentication information from the electronic wallet management server;
Encrypting the first authentication information with a public key to generate encrypted first authentication information;
Encoding the second authentication information using a random value and a current time to generate encoded second authentication information; And
And transmitting to the electronic wallet management server an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information, the random value, and encoded time information,
The authentication information registration step includes:
Encrypting the first authentication information with the public key of the electronic wallet management server and transmitting the encrypted authentication information together with the terminal identification information to the electronic wallet management server;
Receiving a One Time Password (OTP) from the electronic wallet management server;
Transmitting the one-time password to the electronic wallet management server to authenticate the terminal identification information; And
And receiving the second authentication information from the electronic wallet management server, wherein the program is recorded in the computer-readable recording medium. An authentication information registration step of generating second authentication information and transmitting the second authentication information to the portable terminal when receiving the first authentication information and the terminal identification information from the portable terminal;
Receiving an authentication request message including the terminal identification information, the encrypted first authentication information, the encoded second authentication information and the random value, and encoded time information from the portable terminal;
Extracting the first authentication information by decrypting the encrypted first authentication information with the secret key of the electronic wallet management server;
Comparing the extracted first authentication information with the stored first authentication information to perform first authentication;
Generating second authentication information encoded by encoding using the random value and the encoded time information, the generated second authentication information;
Comparing the encoded second authentication information with the encoded second authentication information to perform secondary authentication; And
And authenticating as a legitimate user if the primary authentication and the secondary authentication are both passed,
The authentication information registration step includes:
Receiving encrypted first authentication information and the terminal identification information from the portable terminal;
Extracting the first authentication information by decrypting the encrypted first authentication information with the secret key of the electronic wallet management server, and storing the extracted first authentication information;
Generating a one-time password (OTP) and transmitting the one-time password to the portable terminal corresponding to the terminal identification information;
Receiving the one-time password from the portable terminal, authenticating the terminal identification information in comparison with the one-time password transmitted;
If authentication of the terminal identification information is successful, generating second authentication information using Secure Random (Random); And
And transmitting the second authentication information to the portable terminal. A computer-readable recording medium having recorded thereon a program for executing a method comprising:

Images