KR101493590B1 - User authentication system and providing method thereof - Google Patents

Abstract

When the user confirms that the user is a legitimate user who is authorized to use a predetermined service (e.g., online payment) using his / her mobile phone number (i.e., authenticates himself / herself) A system and method for enabling an identity verification system to be verified as a legitimate system is disclosed.
According to an aspect of the present invention, there is provided a method for providing a personal authentication system, comprising the steps of: receiving a personal authentication request including a mobile phone number of a mobile terminal of a user input by a user terminal through a wired / wireless communication network; Wherein the personal authentication system comprises a step of transmitting the system identification information to the user terminal so that predetermined system identification information is output to the user terminal, and the personal authentication system uses the mobile phone number included in the user authentication request And the system identification information is output to the mobile terminal, wherein the authentication system further comprises: an authentication server for authenticating the user who has requested the authentication of the user through the user terminal through the mobile communication network, Receiving the confirmation information, The system, the method provides identity authentication system of one by the use of the personal identification information received comprises performing an identity authentication on the user, is provided.

Description

[0001] The present invention relates to a user authentication system and a method for providing the same,

The present invention relates to a personal authentication system and a method for providing the same, and more particularly, to a personal authentication system and a method for providing the authentication service using a mobile phone number of a user, (I. E., Authentication of the user), and to enable the user to verify that the authentication system in which the user is requesting authentication is a legitimate system.

In addition, the present invention relates to a system and method for enhancing security of user information by allowing user information used for authentication to be received through two channels.

Recently, wired / wireless communication network has been developed and various online services such as online commerce and internet banking have been provided as computers and internet have been spread to each household. Because of the nature of these services, it is very important that they authenticate themselves to ensure that the user has the right to use the service.

Conventionally, a method of authenticating a legitimate user by using a password or a secret key registered in advance has been mainly used. However, this method is a method in which a member is registered using the personal information of a user obtained through an illegal route, Problems that can be obtained or a problem that ID and password can be hacked through packet sniffing, keystroke interceptor or phishing, which are relatively widely spread on the network.

Therefore, in order to secure better security, a self-authentication method using a mobile terminal (for example, a mobile phone) has appeared. However, since most users have mobile phones of their own names, It is a method to confirm that the user who wants to use the service is himself. Currently, a method of authenticating a user by using a mobile phone is a method of authenticating a user by using a predetermined authentication information (e.g., password and / or personal information) for authenticating the user on the web, When a telephone number is input, a specific authentication key composed of characters is transmitted to the user's mobile phone through a mobile communication network, and then the user inputs the authentication key again from the user on the web, This verifies that the mobile phone occupant is currently using the service.

Meanwhile, recently, phishing techniques have become more sophisticated and phishing techniques such as smishing using SMS have appeared. Smsing sends a text message to move to illegal sites, so that when a mobile phone user accesses a website, it can extract personal information or inject a Trojan horse to control a mobile phone capable of using the Internet. For example, It is a method of phishing such as clicking the character which pretended to be the received event or installing the app, and the user will be allowed to use the personal information of the mobile phone without knowing it and to approve the micropayment.

However, even in the case of the above-described conventional authentication method using a mobile phone, it may be vulnerable to a financial fraud technique such as smsing in that a text message is used. In addition, since the conventional personal authentication method using the mobile phone assumes that the personal information of the user is transmitted to the authentication server through the Internet, the personal information is easily exposed by the hacking method such as packet sniffing.

Japanese Patent Application Laid-Open No. 10-2011-0046989 Patent Registration No. 10-0780475

SUMMARY OF THE INVENTION Accordingly, the present invention has been made to solve the above-mentioned problems occurring in the prior art, and it is an object of the present invention to provide a method and apparatus for verifying whether a user attempting authentication of a user via a mobile phone is a legitimate authentication authority And a method thereof.

It is another object of the present invention to provide a personal authentication system and method that can transmit personal information used for authenticating a user himself / herself to a certification authority side in a more secure manner.

According to an aspect of the present invention, there is provided a method for providing a personal authentication system, comprising the steps of: (a) receiving a personal authentication request including a mobile phone number of a mobile terminal of a user input by a user terminal through a wired / wireless communication network (B) transmitting, by the user authentication system, the system identification information to the user terminal so that predetermined system identification information is output to the user terminal; (c) The system identification information is output to the mobile terminal by using the mobile phone number included in the system identification information, and (d) (E) receiving identity verification information for the user requesting authentication of the user through the terminal; and (e) And the identity authentication system performs identity authentication for the user using the received identity verification information.

In one embodiment, the system identification information is a calling number of the authentication system, and the step (c) includes the steps of: (c-1) connecting the telephone call to the mobile terminal with the calling number Wherein the step (d) comprises: when the telephone call is connected, the personal authentication system receives the identification information for the user through the connected telephone call Step < / RTI >

In one embodiment, the method further comprises: if the telephone call is not connected in the step (c-1), the authentication system transmits a callback message to the mobile terminal using the mobile telephone number Outputting the calling number to the mobile terminal, and connecting the telephone call from the mobile terminal to the authentication system using the transmitted callback message.

In one embodiment, the authentication request further includes first part information, which is a part of predetermined authentication information for authentication of the user, and the identification information includes a second part of the second authentication information, And part information, and in the step (e), the authentication system of the user may perform authentication of the user using the authentication information.

In one embodiment, the first part information includes name, sex, mobile phone number, and communication company information, and the second part information may include a date of birth.

In one embodiment, the authentication information is composed of at least one unit item, the first part information includes a part of division items that are any one of the unit items, and the second part information includes at least one of the division information And the step (e) may further include restoring the partition information based on the first part information and the second part information.

In one embodiment, the method for providing an authentication system further comprises the step of randomly dividing predetermined authentication information for authenticating the user into first part information and second part information, wherein (a ) Includes the step of requesting the user terminal to input the mobile phone number and the first part information, and the mobile phone number and the first part information input by the user terminal Wherein the step (d) comprises the steps of: requesting the mobile terminal to input the second part information by using the mobile phone number; and transmitting the second part information to the mobile terminal via the wired / wireless communication network And receiving the identification information including the second part information from the mobile terminal, wherein the step (e) The authentication system may include a step of performing identity authentication on the user by using the person authentication information.

In one embodiment, the authentication request further includes predetermined check information, and the step (c) includes the steps of: determining whether the check information corresponds to the mobile phone number, and if so, And outputting the system identification information to the mobile terminal using a telephone number.

According to an aspect of the present invention, there is provided a method for providing a personal authentication system, the personal authentication system comprising: a personal authentication request including a mobile phone number and system identification information of a mobile terminal of a user input by the user terminal, Wherein the first authentication system is configured to cause the mobile terminal to output the system identification information included in the first authentication request using the mobile telephone number included in the first authentication request, The method comprising the steps of: receiving identity verification information for the user requesting authentication of the user through the user terminal from the mobile terminal through which the system identification information is output from the mobile terminal through the mobile communication network; Performing authentication of the user with respect to the user The authentication method comprising the steps of:

According to an aspect of the present invention, there is provided a method for providing a personal authentication system, the personal authentication system including a mobile phone number of a mobile terminal of a user input by a user terminal, and a predetermined authentication information for authenticating the user A step of connecting the telephone call to the mobile terminal using the mobile telephone number included in the received authentication request; The method comprising the steps of: when the telephone call is connected, the personal authentication system requesting input of the remaining part of the personal authentication information through the connected telephone call; and the personal authentication system further comprises: And performing authentication of the user with the information using the information A method of providing a personal authentication system is provided.

According to an aspect of the present invention, there is provided a computer-readable recording medium recording a program for performing the above-described method.

According to an aspect of the present invention, there is provided an authentication system comprising a processor, a memory storing a program, the program being executable by the processor, An authentication system is provided.

According to an aspect of the present invention, there is provided an authentication system for a user, comprising: a request receiving module for receiving a user authentication request including a mobile phone number of a mobile terminal of a user input by the user terminal through a wired / wireless communication network; A system information transmitting module for transmitting the system identification information to the user terminal so that predetermined system identification information is output to the user terminal, a system information transmitting module for transmitting the system identification information to the mobile terminal, A personal information module for receiving personal identification information for the user requesting authentication of the user through the user terminal through the mobile communication network from the mobile terminal for outputting the system identification information, And using the identification information, There is provided a personal authentication system including an authentication module for performing authentication of the user with respect to the user.

According to an aspect of the present invention, there is provided a mobile terminal including a request receiving module for receiving a user authentication request including a mobile phone number and system identification information of a mobile terminal of a user input by a user terminal through a wired / wireless communication network, A system information output module for outputting the system identification information included in the user authentication request to the mobile terminal using the mobile phone number, a system information output module for outputting the system identification information included in the user authentication request from the mobile terminal, And an authentication module that performs authentication of the user using the personal information module that receives the identification information for the user who requested the authentication of the user and the received identification information of the user.

According to an aspect of the present invention, a user authentication request including a mobile phone number of a mobile terminal of a user input by a user terminal and a part of predetermined authentication information for authentication of the user is received through a wired / wireless communication network A request receiving module for receiving a request for authentication of the user, a phone call to the mobile terminal using the mobile phone number included in the received authentication request, and a request for inputting a remaining part of the user authentication information through the connected phone call And an authentication module that performs authentication of the user using the user authentication information received through the user terminal and the mobile terminal.

In addition, according to the embodiment of the present invention, since the personal information for the user authentication is not transmitted through one channel but transmitted through different channels (for example, the Internet and mobile communication network) There is an effect that can be increased.

Further, each time the user is authenticated, the information required through the two channels is changed every time, thereby enhancing the security.

Also, it is possible to provide a technical idea that allows a party requesting authentication information about a user via a mobile communication network to check whether the authentication authority is a legitimate authentication authority. That is, according to an embodiment of the present invention, the user is notified of the identification information of the organization that will request the authentication information through the mobile communication network, so that the user requests the authentication information without providing the identification information It is possible to block the child.

BRIEF DESCRIPTION OF THE DRAWINGS A brief description of each drawing is provided to more fully understand the drawings recited in the description of the invention.
FIG. 1 is a conceptual illustration of a personal authentication system according to an embodiment of the present invention.
2 is a block diagram for explaining a schematic configuration of a personal authentication system according to an embodiment of the present invention.
3 is a diagram for explaining a flow of a method for providing a personal authentication system according to an embodiment of the present invention.
4 is a diagram illustrating an example of a user authentication request UI provided to a user to implement a method for providing a personal authentication system according to an embodiment of the present invention.
5 is a diagram illustrating an example of a UI for outputting system identification information to a user terminal in order to implement a method of providing a personal authentication system according to an embodiment of the present invention.
6 is a diagram illustrating an example of system identification information output to a mobile terminal of a user in a method of providing a personal authentication system according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention is capable of various modifications and various embodiments, and specific embodiments are illustrated in the drawings and described in detail in the detailed description. It is to be understood, however, that the invention is not to be limited to the specific embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise.

In this specification, the terms "comprises" or "having" and the like refer to the presence of stated features, integers, steps, operations, elements, components, or combinations thereof, But do not preclude the presence or addition of features, numbers, steps, operations, components, parts, or combinations thereof.

Also, in this specification, when any one element 'transmits' data to another element, the element may transmit the data directly to the other element, or may be transmitted through at least one other element And may transmit the data to the other component. Conversely, when one element 'directly transmits' data to another element, it means that the data is transmitted to the other element without passing through another element in the element.

Hereinafter, the present invention will be described in detail with reference to the embodiments of the present invention with reference to the accompanying drawings. Like reference symbols in the drawings denote like elements.

FIG. 1 is a conceptual illustration of a personal authentication system according to an embodiment of the present invention.

Referring to FIG. 1, a predetermined authentication system 100 may be provided to implement a method for providing an authentication system according to an exemplary embodiment of the present invention.

The identity authentication system 100 can receive the authentication request from the user terminal 210. [ According to an embodiment, the user terminal 210 transmits a user authentication request for a user using the user terminal 210 to the user authentication system 100 together with an online payment request or on the premise of an online payment request .

The user terminal 210 may be used to include any type of data processing device (e.g., laptop, desktop, mobile terminal, set-top box, etc.) capable of requesting authentication to the identity authentication system 100 have.

The identity authentication system 100 can be any type of data processing system (e.g., a predetermined website, page, interactive broadcast server, etc.) that the terminal 210 can access and can receive an authentication request .

In one embodiment, a predetermined merchant system (not shown) may exist between the user terminal 210 and the user authentication system 100, and the user authentication system 100 may request the user authentication request from the merchant system . That is, the merchant system can receive the authentication request together with the payment request through the terminal 210 of the user, and can transmit the authentication request to the authentication system 100 of the user.

The authentication request may be performed through a predetermined wired / wireless data communication network, i.e., a first communication channel (e.g., Internet, as shown in FIG. 1). Then, the user can input his / her mobile phone number (e.g., a mobile phone number, a USIM number, etc.) through his / her terminal 210. The mobile phone number may be a phone number of the mobile terminal 220 owned by the user requesting authentication.

The user authentication request may include a mobile phone number of the mobile terminal 220 of the user input by the user terminal 210. That is, the user can input his or her mobile phone number (mobile phone number, USIM number, etc.) while requesting authentication of the user through his / her terminal 210. The mobile phone number may be the phone number of the mobile terminal 220 used by the user requesting authentication.

According to an embodiment, the user may further input user identification information (e.g., ID, name, date of birth, etc.) that has been previously registered through the terminal 210. [ At this time, the user identification information may be used as part of the authentication information used for authentication of the user, which will be described later.

According to an embodiment, the user identification information may be used as predetermined check information. Since the mobile phone number may be information that has already been disclosed to a large number of people, it may be necessary to repeatedly input the information (for example, a password) necessary for the authentication of the user after requesting the authentication using the mobile phone number. Therefore, when the requestor is to be identified by the mobile telephone number, which is the information disclosed in this manner, the predetermined check information can be further used to improve the stability. Therefore, the mobile phone number and the check information may be included in the authentication request. When the identity authentication request is received, the identity authentication system 100 can determine whether the mobile phone number and the check information correspond to each other. Only when it is determined that they correspond to each other, the remaining authentication process can be performed as will be described later. To this end, the mobile phone number and check information corresponding to the mobile phone number may be stored in the authentication system 100. As a result, according to the present embodiment, such check information can be received together with the mobile telephone number and used as information for the primary authentication. As a result of the first authentication using the check information and the second authentication after the first authentication using the check information, the authentication of the user is performed as described later, whereby the stability of the service can be remarkably increased. In addition, when the identity verification request is received from the same mobile telephone number, the identity authentication system 100 rejects the request or performs an additional authentication process when changing the check information for the same mobile telephone number within a predetermined time, .

Meanwhile, the identity authentication system 100 may perform a predetermined process for identity authentication using the mobile phone number of the mobile terminal 220 received according to the technical idea of the present invention. To this end, the identity authentication system 100 requests the mobile terminal 220 of the user to use predetermined identification information (for example, personal information or a password) to be used for identity authentication using the mobile phone number . And may receive the identity verification information from the mobile terminal 220. At this time, the identity authentication system 100 may request information required for authentication through a second communication channel (for example, a mobile communication network as shown in FIG. 1) different from the first communication channel.

In one embodiment, the identity authentication system 100 may include a predetermined ARS (Auto Responses System) to connect a phone call with the mobile terminal 220, And can receive the identity verification information through the ARS. According to an embodiment, the identity authentication system 100 may implement the technical idea of the present invention by being connected to a predetermined ARS and controlling the ARS.

That is, in one embodiment, the identity authentication system 100 can perform an ARS call to the mobile terminal 220 corresponding to the mobile phone number, and when an ARS call, that is, a phone call is connected, Can be requested. For example, the identity authentication system 100 may extract a mobile phone number included in the received authentication request and output the extracted mobile phone number to a predetermined ARS. Then, the ARS may connect a wireless call to the mobile terminal 220. In other words, a call can be made. Then, the ARS can request information required for authentication of the user from the mobile terminal 220. When the user inputs information in response to the request, the identity authentication system 100 receives the information input from the ARS system and can perform identity authentication.

As described above, when the information necessary for the authentication of the user is inputted through the telephone call as in the above-described embodiment of the present invention, it is not necessary to install a predetermined IC chip or other software for the user authentication in the mobile terminal 220 . Therefore, a conventional service such as a 2G phone or the like can be utilized.

However, not all of the embodiments of the present invention receive personal identification information from the mobile terminal 220 via a telephone call, and the authentication system 100 according to an exemplary embodiment of the present invention may receive the personal identification information from the mobile terminal 220 through various methods. You can get confirmation information. For example, the identity authentication system 100 may receive identity verification information through SMS, and may receive identity verification information through a dedicated application installed in the mobile terminal 220.

Meanwhile, the mobile terminal 220 may be a computing device including a mobile phone, a smart phone, a tablet PC, and a PDA (Personal Digital Assistant), and may be a wireless computing device including a handheld device having a wireless connection function, Or may be a processing device coupled to a wireless modem.

According to an embodiment of the present invention, the identity authentication system 100 may provide a technical idea for authenticating the user to the user before receiving the identity verification information required for the authentication through the mobile terminal 220. That is, according to one embodiment of the present invention, the identity authentication system 100 can confirm to the user that the identity authentication system 100 is a proper identity authentication authority.

To this end, in one embodiment, the identity authentication system 100 first causes predetermined system identification information to be output to the user terminal 210, and then inputs identification information required for authentication through the mobile terminal 220 The same system identification information may be output to the mobile terminal 220. [

For example, the identity authentication system 100 may cause the user terminal 210 to output the calling number of the ARS call. Then, when the identity authentication system 100 connects an ARS call to the mobile terminal 220 of the user, the calling number of the ARS call may be output to the mobile terminal 220 of the user. Therefore, the user can confirm that the subject who intends to connect the ARS call to his or her mobile terminal 220 is the identity authentication system 100.

The system identification information is not necessarily the originating number. The identity authentication system 100 may transmit a predetermined notification message (for example, a notification message of a mobile communication company's lettering service) to be output to the mobile terminal 220 when the ARS call is connected through the mobile terminal 220 And display it on the user terminal 210. In this case, the guidance statement may be changed every time.

On the other hand, the system identification information may be set by a user. That is, the user terminal 210 can receive a predetermined character string from the user, and can transmit the character string to the authentication system 100 by including it in the user authentication request. Then, the principal authentication system 100 may output the character string included in the principal authentication request to the mobile terminal 220. Therefore, the identity authentication system 100 allows the user to confirm that the system requesting authentication of the user through the user terminal 210 and the system requesting the identity verification information through the mobile terminal 220 are identical to each other can do.

On the other hand, in the present specification, the whole information used for the authentication of the user who made the authentication request is defined as the authentication information of the user. The authentication information may be composed of only one item, but preferably it may be composed of a plurality of unit items. For example, the authentication information may be a resident registration number of a user, a card number, a password, and a date of birth. In this case, the resident registration number, the card number, the password, and the date of birth may be separate unit items.

Meanwhile, according to an embodiment of the present invention, the identity authentication system 100 may receive at least a part of a plurality of pieces of information required for identity authentication from the mobile terminal 220, ) Can be defined as identity verification information.

Therefore, according to the embodiment of the present invention, some of the authentication information may be included in the identity verification information. In this case, the authentication information other than the identity verification information may be included in the authentication request. For example, in the embodiment where the user's identification number, the card number, the password, and the date of birth are required for authentication, and only the card number and the password are input through the mobile terminal 220, , The card number, the password, and the date of birth become the identity authentication information, and the card number and the password can be the identity confirmation information. At this time, the resident registration number and the date of birth of the user can be inputted through the user terminal 210 when the user authentication is requested.

That is, in one embodiment, the predetermined authentication information for authenticating the user may be divided into two parts (first part and second part), and the first part may be input through the user terminal 210 And the second part can be input through the mobile terminal 220. [ In this case, the identity authentication system 100 may integrate the first part and the second part to restore the authentication information, and perform authentication using the same.

Of course, according to an embodiment, only the user's mobile phone number may be input from the user terminal 210, and all the remaining authentication information may be input through the mobile terminal 220. [

Meanwhile, in one embodiment, the authentication information may include a name, a date of birth, a sex, a mobile phone number, and a communication company information. The second part of the information, which is input through the mobile terminal 220, It is possible. In this case, conventional authentication of the mobile phone can be performed by the technical idea of the present invention. In this embodiment, the identity authentication system 100 receives the name, sex, mobile phone number, and communication company information through the user terminal 210, and receives the date of birth through the mobile terminal 220. In this embodiment, since the date of birth is composed of numbers only, it is possible to easily input information on a wired line (for example, an ARS call) in which a number can be input by DTMF tone.

Alternatively, the authentication information may be information necessary for authentication of a conventional credit card, such as a name, a mobile phone number, a date of birth, a card number, a card password, and a date of birth. At this time, either the card number, the card password, or the date of birth may be information to be input through the second part, that is, the mobile terminal 220. Or only part of any of the card number, the card password, or the date of birth may be the second part.

As described above, the identity authentication system 100 receives authentication information necessary for authentication of the user through two separate channels (i.e., a data communication network such as a wired Internet and a mobile communication network) It is possible to provide a system structure that can maintain security even if leakage occurs. Further, when the authentication information is received via the ARS, there is a high possibility that information is not leaked through an attack in the data communication network, for example, a virus, a worm, or a malicious code.

On the other hand, in the embodiment of the present invention, furthermore, the above-described unit items themselves can be divided into two to further enhance the security.

For example, the authentication system 100 can divide the authentication information (resident registration number, card number, password, date of birth) into the following two parts.

- Part 1: Resident registration number, 8 digits before the card number, 2 digits before the password

- Part 2: Birth date, 8 digits after card number, 2 digits after password

In addition, according to the embodiment of the present invention, the security can be enhanced by dividing the authentication information at random into the first part and the second part whenever the authentication request is made.

That is, even if any one part of the authentication information is leaked from the mobile terminal 220 during the authentication process, since the parts are randomly differentiated at the next authentication, the authentication system 100 The mobile terminal 220 can request information different from the information requested (i.e., the information that has been leaked). Therefore, it is possible to prevent the next authentication of the user from being performed with the leaked information.

Meanwhile, the user authentication system 100 may transmit / receive data necessary for a predetermined authentication process with a predetermined authentication server 300, if necessary. The authentication server 300 may be, for example, an authentication server of a mobile communication company or an authentication server of a credit card company. That is, the identity authentication system 100 transmits the identity authentication information and the mobile phone number, which are input from the user, to the authentication server of the mobile communication company, and confirms that the user is the mobile phone number, (That is, authentication of the owner of the credit card) by confirming whether the user is the name of the credit card by transmitting the authentication information of the user and the card information inputted from the user to the authentication server of the credit card company, Can be performed.

2 is a block diagram for explaining a schematic configuration of a personal authentication system according to an embodiment of the present invention. 2, the authentication system 100 includes a request receiving module 110, a system information transmitting module 120, a system information output module 130, a personal information module 140, and an authentication module 150 ). According to an embodiment of the present invention, some of the above-mentioned components may not necessarily correspond to components necessary for implementation of the present invention. Also, according to an embodiment, It goes without saying that more components may be included. For example, the identity authentication system 100 may include other components included in the identity authentication system 100 (e.g., the request reception module 110, the system information transmission module 120, the system information output module (Not shown) that can control functions and / or resources of the user information module 140, the personal information module 140 and / or the authentication module 150, and the like.

The identity authentication system 100 may include hardware resources and / or software necessary for implementing the technical idea of the present invention, and it means one physical component or one device no. That is, the identity authentication system 100 may mean a logical combination of hardware and / or software provided to implement the technical idea of the present invention. If necessary, The present invention may be embodied as a set of logical structures for realizing the technical idea of the present invention. Also, the identity authentication system 100 may mean a set of configurations separately implemented for each function or role for implementing the technical idea of the present invention. For example, the request receiving module 110, the system information transmitting module 120, the system information output module 130, the personal information module 140, and / or the authentication module 150 may be located in different physical devices Or may be located in the same physical device. Also, depending on the embodiment, the combination of the software and / or hardware constituting each of the type information module 110, the search module 120, and / or the control module 130 may be located in different physical devices, The configurations located in the device may be organically coupled to one another to implement each of the modules.

In this specification, a module may mean a functional and structural combination of hardware for carrying out the technical idea of the present invention and software for driving the hardware. For example, the module may refer to a logical unit of a predetermined code and a hardware resource for executing the predetermined code, and it does not necessarily mean a physically connected code or a kind of hardware But can be easily deduced to the average expert in the field of the present invention.

The request receiving module 110 may receive the authentication request through a wired / wireless communication network (for example, the Internet or the mobile Internet). The request receiving module 110 may receive the authentication request directly from the user terminal 210 or may receive the authentication request through a predetermined merchant server.

As described above, the user authentication request may include a part (first part information) of predetermined authentication information for authentication of the user with the mobile phone number of the mobile terminal 220 of the user . The authentication information may be composed of one or a plurality of unit items, and in an embodiment, the first part information may include only a part of any one of the unit items (partition items). The part of the authentication information that is not included in the first part information (including the remaining part of the division item) is received from the mobile terminal 220 as described above.

Meanwhile, when the user terminal 210 accesses the user authentication system 100, the user authentication system 100 may provide a predetermined user authentication request UI so that the user can request the user authentication. Hereinafter, this will be described with reference to FIG. 4 is a diagram illustrating an example of a user authentication request UI provided to a user to implement a method for providing a personal authentication system according to an embodiment of the present invention.

In the example of FIG. 4, the authentication information may be a first name, a first name, a date of birth, a credit card number, and a password, and the first part included in the authentication request transmitted by the user terminal 210 (First eight digits) and a part of the password (the first two digits) of the credit card number, which is a division item, and the identification information transmitted by the mobile terminal 220 among the identification information The second part included is part of the credit card number (after the 8th digit) and part of the password (the last two digits).

4, the user authentication request UI 10 includes a number input UI 11 for receiving a phone number of a mobile terminal 210 of a user, an authentication information UI for receiving a first part of the user authentication information, . ≪ / RTI > The authentication information UI includes a field for receiving a part (15) of a credit card number and a part (16) of a credit card number, which is a name (13), a date of birth (14)

After the user fills each of the fields, the request receiving module 110 can receive the request for authentication when the user authentication button 17 is selected and the request for authentication is transmitted.

Meanwhile, the system information transmission module 120 may transmit the system identification information to the user terminal 210 so that predetermined system identification information is output to the user terminal 210. The system identification information may be output to the mobile terminal 220 of the user at a later time to allow the user to verify the authentication system 100.

5 is a diagram illustrating an example of a guidance UI including system identification information output by the system information transmission module 120 to the user terminal 210. As shown in FIG. As shown in FIG. 5, the guidance UI 20 may include the name of the principal authentication system and the originating number 21 as system identification information. In other words, the guide UI 21 may include a message informing that the ARS authentication telephone will come from the ABC authentication center (originating number: 070-0101-0707). Further, the guide UI 20 may further include a guide message for the second part of the authentication information (the last 8 digits of the credit card number and the last two digits of the password).

Meanwhile, the system information output module 130 may output the system identification information to the mobile terminal 220 using the mobile phone number included in the authentication request.

In particular, when the system identification information includes a calling number, the system information output module 130 connects the telephone call to the mobile terminal using the mobile telephone number, . In addition, the system information output module 130 may output system identification information (ABC authentication center) other than the calling number together with a predetermined service (e.g., lettering service) provided by a mobile communication company .

On the other hand, there may be cases where a phone call can not be connected depending on the situation of the user. In such cases, it may be inappropriate to repeatedly connect telephone calls. Therefore, even if the user does not receive a telephone call, a technical idea that can perform identity verification is required.

For this, the system information output module 130 may transmit a callback message to the mobile phone number. Then, the user can select the callback message transmitted to the user terminal 210 when the user is in a state of performing the authentication. The callback message may include a telephone number (i.e., a caller ID) of the ARS included in or connected to the identity authentication system 100. Therefore, when the user selects the callback message, the telephone call can be connected to the ARS. Then, the ARS can confirm the incoming phone number, that is, the mobile phone number, and can receive information required for authentication by the ARS. In addition to the calling number, the callback message may further include additional system identification information indicating that the calling party is the identity authentication system 100.

Meanwhile, the system information output module 130 may attempt to connect a telephone call to the mobile telephone number. If the telephone call is not connected, the system information output module 130 may transmit the call back message to the mobile telephone number. However, Authentication may be performed using a callback message.

Referring back to FIG. 2, the personal information module 140 may receive identity verification information for the user who requested the authentication of the user through the user terminal 210 to the mobile terminal 220 through the mobile communication network. As described above, the identity verification information may include a part (second part) of the identity verification information. That is, the personal information module 140 can request the user to input the remaining part (second part) of the user authentication information through the mobile terminal 220, and can receive the information inputted by the user.

The authentication module 150 can perform authentication of the user using the authentication information.

In one embodiment, the authentication module 150 determines whether the personal information of the user registered in advance in the authentication system 100 and the authentication information of the mobile terminal 220 and / The authentication module 150 can perform authentication of the user with respect to the user in cooperation with a separate certification authority according to an embodiment of the present invention. For example, the authentication module 150 may request the authentication of the user while transmitting the authentication information to the mobile communication company system or the credit card company system 300 (e.g., 300). The mobile communication company system or the credit card company system 300 may perform a separate authentication procedure (e.g., official authentication, mobile phone authentication, etc.) for the user.

3 is a diagram for explaining a flow of a method for providing a personal authentication system according to an embodiment of the present invention.

Referring to FIG. 3, if the user wishes to perform a personal authentication procedure to perform shopping or Internet banking using his / her terminal 210, the user can transmit the personal authentication request to the personal authentication system 100 (S100) . Preferably, at least the mobile telephone number (M) is included in the authentication request. According to an embodiment, the first part (A1), which is part of the identity authentication information used for identity authentication, may be further included in the identity authentication request.

The identity authentication system 100 can transmit the system identification information so that predetermined system identification information can be output to the user terminal (S110, S120). The step S110 of transmitting the system identification information by the principal authentication system 100 does not necessarily have to be performed after the step S100 in which the principal authentication system 100 receives the principal authentication request. For example, the system identification information may be provided to the user terminal 210 together with the user authentication request UI described above.

Meanwhile, the identity authentication system 100 performs connection of a telephone call to the mobile terminal 220 using a mobile phone number (for example, a mobile phone number) included in the received authentication request, (S130, S140). Meanwhile, in another embodiment, the identity authentication system 100 may transmit a callback message and allow a user to perform an ARS call.

Meanwhile, the identity authentication system 100 can receive identity verification information through a second communication channel (mobile communication network) (S150). The identity verification information may include a second part (A2) of the identity verification information.

The first part (A1) and the second part (A2) of the received authentication information are combined to restore the authentication information (A) (S160). That is, in one embodiment, the identity authentication system 100 transmits the restored authentication information A to the card issuer system 300, and confirms whether the user corresponding to the card information included in the authentication information is the user (S170). Upon receiving the response to the request, the user authentication can be performed (S180).

On the other hand, according to an embodiment, the identity authentication system 100 may include a processor and a memory for storing a program executed by the processor. The processor may include a single-core CPU or a multi-core CPU. The memory may include high speed random access memory and may include non-volatile memory such as one or more magnetic disk storage devices, flash memory devices, or other non-volatile solid state memory devices. Access to the memory by the processor and other components can be controlled by the memory controller. Here, when the program is executed by a processor, the program may cause the authentication system 100 according to the present embodiment to perform the method of providing the authentication system described above.

Meanwhile, a method of providing a personal authentication system according to an embodiment of the present invention may be implemented as a computer-readable program command and stored in a computer-readable recording medium. The program can also be stored in a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored.

Program instructions to be recorded on a recording medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of software.

Examples of the computer-readable recording medium include magnetic media such as a hard disk, a floppy disk and a magnetic tape, optical media such as CD-ROM and DVD, a floptical disk, And hardware devices that are specially configured to store and execute program instructions such as magneto-optical media and ROM, RAM, flash memory, and the like. The above-mentioned medium may also be a transmission medium such as a light or metal wire, wave guide, etc., including a carrier wave for transmitting a signal designating a program command, a data structure and the like. The computer readable recording medium may also be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner.

Examples of program instructions include machine language code such as those produced by a compiler, as well as devices for processing information electronically using an interpreter or the like, for example, a high-level language code that can be executed by a computer.

The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

It will be understood by those skilled in the art that the foregoing description of the present invention is for illustrative purposes only and that those of ordinary skill in the art can readily understand that various changes and modifications may be made without departing from the spirit or essential characteristics of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

It is intended that the present invention covers the modifications and variations of this invention provided they come within the scope of the appended claims and their equivalents. .

Claims (15)

As an authentication method,
(a) the identity authentication system includes: receiving a user authentication request including a mobile phone number of a mobile terminal of a user input by the user terminal through a wired / wireless communication network;
(b) transmitting the system identification information to the user terminal so that the user authentication system outputs predetermined system identification information to the user terminal;
(c) causing the authentication system to output the system identification information to the mobile terminal using the mobile phone number included in the authentication request;
(d) receiving, by the principal authentication system, identification information about the user who has requested the authentication of the user through the user terminal through the mobile communication network from the mobile terminal to which the system identification information is output; And
(e) performing authentication of the user using the received personal identification information by the authentication system.
The method according to claim 1,
Wherein the system identification information is a calling number of the authentication system,
The step (c)
(c-1) the identity authentication system further comprises the step of connecting the telephone call to the mobile terminal with the origination number and outputting the origination number to the mobile terminal,
The step (d)
And when the phone call is connected, the identity authentication system includes receiving the identity verification information for the user via the connected phone call.
3. The authentication method according to claim 2,
If the phone call is not connected in the step (c-1), the authentication system transmits a callback message to the mobile terminal using the mobile phone number to output the calling number to the mobile terminal; And
And a telephone call is connected from the mobile terminal to the personal authentication system using the transmitted callback message.
The method according to claim 1,
The self-
Further comprising first part information which is a part of predetermined authentication information for authenticating the user,
The identification information may include,
And second part information that is a remaining part of the authentication information,
The step (e)
Wherein the personal authentication system includes a step of performing authentication of the user using the authentication information.
5. The method of claim 4,
The first part information includes a name, a sex, a mobile phone number, and a communication company information,
And the second part information includes a date of birth.
5. The method of claim 4,
Wherein the authentication information is composed of at least one unit item,
Wherein the first part information includes a part of the division items which is any one of the unit items,
Wherein the second part information includes the remaining part of the partition items,
The step (e)
And restoring the segmentation item based on the first part information and the second part information.
The method according to claim 1,
In the authentication method,
Further comprising the step of randomly dividing predetermined authentication information for authenticating the user into first part information and second part information,
The step (a)
Requesting the user authentication system to input the mobile phone number and the first part information to the user terminal; And
Receiving a user authentication request including the mobile phone number and the first part information input by the user terminal through a wired / wireless communication network,
The step (d)
Requesting the mobile terminal to input the second part information using the mobile phone number; And
And receiving the identity verification information including the second part information from the mobile terminal,
The step (e)
Wherein the personal authentication system includes a step of performing authentication of the user using the authentication information.
The method according to claim 1,
The self-
Further comprising predetermined check information previously registered so as to correspond to the mobile telephone number,
The step (c)
Determining whether the check information corresponds to the mobile telephone number; And
And outputting the system identification information to the mobile terminal using the mobile phone number if the determination result is that the mobile phone number is a mobile phone number.
delete As an authentication method,
The authentication system of the present invention includes a step of receiving, through a wired / wireless communication network, an authentication request including a mobile telephone number of a mobile terminal of a user input by the user terminal and a part of predetermined authentication information for authentication of the user;
Connecting the telephone call to the mobile terminal using the mobile telephone number included in the received authentication request;
When the telephone call is connected, the identity authentication system requests an input of the remaining part of the identity authentication information through a connected telephone call; And
Wherein the identity authentication system comprises performing authentication of the user using the user authentication information received through the user terminal and the mobile terminal.
A computer-readable recording medium recording a program for performing the method according to any one of claims 1 to 8 or 10.
As a personal authentication system,
A processor;
A memory storing a program,
Wherein the program causes the principal authentication system to perform the method according to any one of claims 1 to 8 or 10 when executed by the processor.
As a personal authentication system,
A request receiving module for receiving a user authentication request including a mobile phone number of a mobile terminal of a user input by the user terminal through a wired / wireless communication network;
A system information transmission module for transmitting the system identification information to the user terminal so that predetermined system identification information is output to the user terminal in response to the user authentication request;
A system information output module for outputting the system identification information to the mobile terminal using the mobile phone number included in the authentication request;
A personal information module for receiving identity verification information for the user who requested authentication of the user through the user terminal through the mobile communication network from which the system identification information is output; And
And an authentication module that performs authentication of the user using the received identification information.
delete A request receiving module for receiving a personal authentication request including a mobile telephone number of a mobile terminal of a user input by the user terminal and a part of predetermined authentication information for authenticating the user to the user via a wired / wireless communication network;
A personal information module for connecting a telephone call to the mobile terminal using the mobile telephone number included in the received personal authentication request and requesting input of the remaining part of the personal authentication information through a connected telephone call; And
And an authentication module that performs authentication of the user using the user authentication information received through the user terminal and the mobile terminal.

Images