KR101503421B1 - The system which supports a user authentication process - Google Patents

Abstract

The present invention relates to a user authentication support system. The present invention includes a computing module which receives a user authentication event generation message; a computing module which determines whether a user matches the said person; and a computing module which, upon determining the user-to-person match, can extract a mobile device connection virtual number by user or an automatic response connection number by user, and transmit the information to a user authentication support server.

Description

[0001] The present invention relates to a user authentication support system,

[0001] The present invention relates to a system for supporting a user authentication procedure, and more particularly, to a system for supporting a user authentication procedure, (For example, a virtual number having a 0505 station number or the like) or an automatic response connection number (for example, a telephone number connected to the answering machine or the like), and in addition to the user's own private information, (E.g., all or part of the user's name, all of the user's date of birth, etc.), information (such as characters, symbols, numbers, letters / numbers, letters / symbols, numbers / symbols, letters / numbers / A part of the user's mobile phone number, all or part of the user's mobile phone number, etc.), a series of user authentication procedures can be normally performed, Various risks due to distribution (for example, if the WS operating server is hacked and the mobile device number is illegally circulated, there is a risk that it may suffer various physical / mental damages, a frequent sales / (Such as the risk of suffering various physical / psychological damages resulting from the transmission of characters), as well as various problems caused by indiscreet input / distribution of personal information (e.g., delayed / delayed information input time, A problem of realistic convenience such as the occurrence or non-occurrence of a problem, a serious danger that a user's private information can be leaked to the outside, etc.).

2. Description of the Related Art [0002] Recently, with the rapid development of electric / electronic / communication technology, various types of web services (e.g., shopping mall web services, financial related webs, etc.) utilizing wired / wireless on- Service, game web service, messaging web service, social network forming web service, cultural contents providing web service, etc.) are being developed and implemented in a short period of time. It is showing.

For example, Japanese Patent Application Laid-Open No. 10-2004-99641 (titled: Mobile Game System and Mobile Game Execution Method) (published on Dec. 2, 2004), Korean Patent Publication No. 10-2013-9360 A method of providing a smart banking service, and a bank server) (2013.10.2, published on January 23, 2013) An example of Web service-related back-up techniques according to this conventional technique is disclosed in more detail.

On the other hand, under such a conventional system, as shown in Fig. 1, a WS operation server 4 operating a WS (Web-site) is provided with a user authentication support server 2), a user information device 1 (for example, a computer, a notebook, a smart phone, a tablet PC, a wireless game machine, a wireless notebook, Service, game web service, messaging web service, social network forming web service, cultural contents providing web service, etc.).

When a series of user authentication times come on the side of the WS operation server 4 under the enforcement of the web service, the user authentication support server 2 (for example, a credit information management company server, a mobile communication company server, a financial institution server, (Or a professional communication procedure through a closed network), and generates an authentication window W based on the series of user authentication library module calling procedures (or a professional communication procedure through a closed network) W) through the user authentication process. For reference, an example of a user authentication procedure according to such a conventional technique is disclosed in detail in Korean Patent Laid-Open No. 10-2010-9150 (entitled " Payment system using mobile phone and method thereof " .

On the other hand, various kinds of personal information (for example, name information, date of birth, gender, etc.) are stored in various information input items included in the authentication window W on the user side, The WS operation server 4 transmits the user private information to the user authentication support server 2 to request the user authentication process to proceed, Correspondingly, the user authentication support server 2 proceeds with a series of user authentication procedures utilizing the user authentication database and, based on the result, for example, the user name, the user's date of birth, the user's gender, Code, and the like, and transmits the generated user authentication result information to the WS operating server 4 side.

The WS operation server 4 receiving / receiving the user authentication result information will later read the user authentication result information, confirm / authenticate the user's identity, and perform a series of web service procedures .

Under this conventional system, as described above, when the user authentication support server 2 is requested to proceed from the WS operation server 4 side, a series of user authentication procedures utilizing the user authentication database is performed And generates user authentication result information including, for example, a user name, a user's date of birth, a user's gender, a user's mobile phone number, and an authentication result code, and then transmits the generated user authentication result information to the WS operating server 4 .

Of course, under this situation, the WS operating server 4 may store the details included in the user authentication result information, for example, the mobile device number (mobile phone number) in its own information storage database and transmit it to various uses (for example, .

However, when the WS operating server 4 stores the mobile device number included in the user authentication result information or further uses it for various purposes, the user can not control the indiscreet distribution of the self information at all, (For example, a risk that the WS operation server 4 may suffer various physical / mental damages due to an unauthorized distribution of a mobile device number due to a hacking accident, a frequent business operation by the WS operation server 4 Such as the risk of suffering various physical / mental damages when the call / text is transmitted, etc.).

Of course, if the user changes the mobile device number (for example, the mobile phone number), it may be somewhat out of the danger. However, due to various circumstances, it is very difficult to change the mobile device number, As a result, the user will be forced to take serious damage due to the unjust exposure of his mobile number.

On the other hand, as described above, in a series of user authentication phases, various types of personal information (e.g., name information, birth date information, gender information, mobile phone number information, Mobile communication company information, etc.). Of course, in the collective inputting phase of all such private information, not only a problem of realistic convenience such as a delay or delay in the entire information input time on the user side, or the occurrence of a typo, And even the serious danger that may be leaked.

As a result, under these various bad conditions, the user side is forced to take a very passive posture in using the web service, despite the convenience of the web service. As a result, the web service operating entity The authentication service provider, etc.) can not help but suffer the damage of the entire web service market.

Korean Patent Laid-Open No. 10-2004-99641 (Title: Mobile Game System and Mobile Game Execution Method) Korean Patent Laid-Open No. 10-2013-9360 (titled: Movie recommendation service providing method and system) (published on January 23, 2013) Korean Patent Laid-Open No. 10-2013-108049 (Name: Method of providing simplified smart banking service and bank server) (Published on October 2, 2013) Korean Patent Laid-Open No. 10-2010-9150 (Title: Payment System Using Mobile Phones and Method Thereof) (published on January 21, 2010)

Accordingly, an object of the present invention is to provide a method and system for transmitting a user authentication event occurrence message corresponding to a service request user previously set from a user authentication support server side in a communication pipeline of a WS operation server, a user information device, (For example, letters, symbols, numbers, letters / numbers, letters / symbols, numbers / symbols) included in the user authentication event occurrence message , Specific information for authentication (e.g., all or part of the user's name, all or part of the user's date of birth, all or part of the user's mobile phone number, etc.) User private information (user name information, user's date of birth, user gender information, user's mobile phone number information, user's mobile carrier's information A computation module capable of judging whether the user matches the user's identity, < < computation module > extracting the user's private information previously stored if the user's identity is determined, (For example, a virtual number having a 0505 station number) or a user-specific automatic response connection number (for example, a telephone number connected to the automatic answering device), extracts extracted user private information, Or a computer module capable of transmitting the generated authentication result essential information to the user authentication support server in a systematic manner after generating the authentication result essential information including the automatic response connection number and the like, In the user authentication result information provided to the server side, the mobile device connection virtual number (e.g., a virtual number having the 0505 station number (For example, a character, a symbol, a number, etc.) in place of all of the private information of the user. In addition, (E.g., all or part of the user's name, all or part of the user's date of birth, all or part of the user's mobile phone number, etc.) ), A series of user authentication procedures can be normally performed. Thus, various risks (for example, the WS operation server is hacked accidentally and the mobile device number is illegally circulated) due to the indiscreet distribution of the mobile device number , The risk of suffering various physical / mental damages resulting therefrom, the frequent sales calls / letters transmitted by the WS operating server, (For example, delay in information input time, delay in inputting information, occurrence of typos, etc.), as well as various problems caused by indiscreet input / distribution of personal information , A serious danger that a user's valuable personal information may be leaked to the outside, etc.).

Other objects of the present invention will become more apparent from the following detailed description and the accompanying drawings.

In order to accomplish the above object, the present invention provides a method and system for communicating with a user authentication support server supporting a user authentication process by a WS operation server operating a web site (WS) A user authentication event occurrence message reception module for receiving the user authentication event occurrence message when a user authentication event occurrence message corresponding to the set service request user is transmitted; A user authentication processing module for comparing the information included in the user authentication event occurrence message with user authentication information stored in advance to determine whether the user matches the user's identity; If it is determined by the user authentication processing module that the user's identity is identical to the user's identity, the mobile terminal extracts the previously stored user private information, extracts the previously stored mobile device connection virtual number or automatic response connection number, An authentication result essential information module that generates authentication result essential information including user private information, a mobile device connection virtual number, or an automatic response connection number, and transmits the generated authentication result essential information to the user authentication support server, And a user authentication support system.

At this time, in the user authentication support system of the present invention, the user authentication event occurrence message is read and authentication specific information / partial private information for extracting authentication specific information and some private information included in the user authentication event occurrence message The user authentication processing module further includes authentication specific information and some private information extracted by the authentication specific information / partial private information extraction module and authentication specific information and user private information, And judges whether or not the user matches with the user.

In the present invention, when a user authentication event generation message corresponding to a service application user previously set from the user authentication support server side is transmitted in the communication pipeline of the WS operation server, the user information device, the user authentication support server, (For example, letters, symbols, numbers, letters / numbers, letters / symbols, numbers / symbols, letters / numbers (For example, all or part of the user's name, all or part of the user's date of birth, all or part of the user's mobile phone number, etc.) and the user's private information User name information, user's date of birth, user gender information, user's mobile phone number information, user's mobile carrier information, etc.) A computer module capable of judging whether or not the user matches the user's identity, < < a user module extracting user historical information that is stored when the user's identity is determined, (E.g., a virtual number having a 0505 station number) or an automatic response connection number for each user (for example, a telephone number connected to the automatic answering device), extracts the extracted user private information, the mobile device connection virtual number, A computer module capable of transmitting the generated authentication result essential information to the user authentication support server and the like are systematically arranged and provided in the implementation environment of the present invention, In the user authentication result information provided to the WS operating server side, instead of the existing mobile device number, a mobile device connection virtual number (e.g., 0505) (For example, a telephone number connected to the automatic answering device, etc.) may be included in the mobile telephone. As a result, on the user side, various risks due to unintentional circulation of the mobile number If the server is hacked and the mobile device number is illegally circulated, it may cause various physical / mental damages, and if frequent business calls / letters are sent by WS server, various physical / The risk of suffering psychological damage, etc.) can be easily avoided.

Particularly, in the present invention, in place of all of the private information of the user, the user can use the authentication specific information (e.g., letters, symbols, numbers, letters / numbers, letters / symbols, numbers / symbols, letters / numbers / symbols, Arrangement, etc.) and some private information (e.g., all or part of the user's name, all or part of the user's date of birth, all or part of the user's mobile phone number) Under the circumstances, on the user side, various problems arising from indiscreet input / distribution of the private information (for example, a problem of realistic convenience such as delayed / delayed information input time, occurrence of typo, A serious danger that may be leaked, etc.) can be easily avoided.

1 is an exemplary diagram conceptually showing a user authentication procedure according to a conventional technique;
2 is an exemplary diagram conceptually showing a user authentication procedure according to the present invention.
3 is an exemplary view conceptually showing a detailed configuration of a user authentication support system according to the present invention.
FIG. 4 is a conceptual diagram illustrating a detailed function execution procedure of the user authentication support system according to the present invention; FIG.

Hereinafter, a user authentication support system according to the present invention will be described in more detail with reference to the accompanying drawings.

2, on the side of the WS operating server 4 that operates the WS, the user authentication support server 2, the user information device (hereinafter, referred to as " (E.g., a shopping mall web service, a financial related web service, a game web service, a messaging service, or the like) while communicating with the mobile terminal 1 (e.g., a computer, a notebook, a smart phone, a tablet PC, Web service, social networking web service, cultural contents providing web service, etc.).

When a series of user authentication times come on the side of the WS operation server 4 under the enforcement of the web service, the user authentication support server 2 (for example, a credit information management company server, a mobile communication company server, a financial institution server, (Or a professional communication procedure through a closed network), and generates an authentication window W based on the series of user authentication library module calling procedures (or a professional communication procedure through a closed network) W) through the user authentication process.

At this time, on the WS operating entity side, various kinds of information (for example, URL information, WS personality information (category), server IP, authentication use purpose, etc.) related to the WS operating server 4, ID information, membership subscription information, WS operation instruction information, etc.) to the user of the user authentication support server 2, and based on this, the user authentication library module is issued in advance, so that a series of The web service procedure (user authentication procedure) can be conducted normally without any problem.

2, in the user authentication result information, a mobile device connection virtual number (for example, a virtual number having a 0505 station number or the like) or a mobile number And an automatic response connection number (for example, a telephone number connected to the answering machine, etc.).

Of course, the reason why the user authentication result information may show a large change in the history is as follows. In the present invention, unlike the conventional authentication result essential information that is the basis of the user authentication result information (i.e., (E.g., a virtual number having a station number of 0505) or an automatic response connection number (e.g., a telephone number connected to the answering machine, etc.).

2, the authentication window W takes a completely different format from the conventional authentication window W shown in FIG. 1 and stores authentication specific information (for example, characters, (E.g., all or part of the user's name, all of the user's date of birth, etc.), and the like, / Part, user's mobile phone number all / part, etc.).

Of course, the reason why the authentication window W employed in the present invention can include such a changed item is that, unlike the conventional user authentication procedure using all the private information of the user as described later, (E.g., all or part of the user's name, the date of birth of the user, the date of birth of the user, the date of birth of the user, etc.) All / partial, all or part of the user's mobile phone number, etc.).

3, the user authentication support system 100 according to the present invention includes a user authentication support server 2 via an interface module 101, a wired / wireless on-line network 3, An operation information storage module 102, an authentication specific information storage module 103, a user private information storage module 104, a mobile device parameter storage module 105, a user authentication event An authentication result information receiving module 106, an authentication specific information / partial private information extraction module 107, a user authentication processing module 108, an authentication result essential information processing module 109, And the authentication specific information update / deletion processing module 111 are arranged in a tightly combined configuration. (Of course, the user authentication support system 100 of the present invention may include a user authentication support server 2 ≪ RTI ID = 0.0 > You can also take it).

At this time, when the user authentication process is performed by the WS operation server 4, the user authentication support server module 2 provides the user authentication library module to the WS operation server 4 side, The user authentication support server 2 supports the user authentication process by the operation server 4. In this situation, the user who is in the process of authentication through the WS operation server 4 receives the user authentication support service of the present invention In the case where it is determined that the user is a service application user who has applied for the service (of course, in order to facilitate such a determination process, in the present invention, information related to the service application user is provided to the user authentication support server 2 in advance, The authentication support server 2 inquires of the system 100 of the present invention whether or not it is used), and a corresponding user authentication event occurrence message It is provided to the system 100 of the invention.

In this situation, the operation information storage module 102 side can provide various operation information required for the user authentication support service inherent to the present invention, for example, registration information of the user authentication support server 2, registration information of the user information device 1, Image / graphic / link / image / setting information for generating various messages, resource status information of the system 100, information on the status of the user in the system 100, Component information necessary for the computation process of each computation module, program information for forming / maintaining a communication / session, and the like within the information storage area of its own (as a matter of course, Depending on the situation of the system 100, the item or range can be flexibly added / deleted or changed).

4, on the authentication specific information storage module 103 side, authentication specific information (for example, characters, symbols, numbers, letters / numbers, letters / symbols, numbers / symbols , A character / number / symbol, an image, an image arrangement, etc.) in its own information storage area, thereby assisting the user authentication support service according to the present invention to proceed normally without any problem do.

In addition, the user private information storage module 104 is capable of storing personal information of each user (for example, user name information, user's date of birth, user's gender information, user's mobile phone number information, user's mobile communication company information, So that a series of user authentication support services according to the present invention can be performed normally without any problem (see FIG. 4).

In this case, the personal information of each user can be confirmed through information collected at the time of opening a mobile phone in a mobile communication company, information collected at a financial institution by a financial institution, and information concentrated in a credit information management company through each financial institution (Of course, the collection path of each of these users' personal information can take various forms depending on the situation).

In addition, the mobile device interface number storage module 105 has a mobile device connection virtual number (for example, a virtual number having a station number 0505) pre-assigned to each user (service application user) (For example, a telephone number to be connected to the answering machine) stored in the information storage area of its own in a stable manner so that a series of user authentication support services according to the present invention can proceed normally without any problem (See FIG. 4).

The user authentication event occurrence message receiving module 103 communicates with the user authentication support server 2 via the interface module 101 and the wired / wireless on-line network 3 , And checks whether or not a user authentication event occurrence message has been transmitted from the user authentication support server 2 (see Fig. 4).

In this case, the user authentication event occurrence message includes, for example, the URL history / category details of the WS operation server 4 in the authentication attempt, the authentication specification information (for example, (E.g., all or part of the user's name, all or part of the user's date of birth, part of the user's date of birth, etc.) The user's mobile phone number, all or part of the user's mobile phone number, the authentication attempt time history of the WS operation server 4 in the authentication attempt, and the authentication attempt information of the WS operation server 4.

At this time, when it is confirmed that the user authentication event occurrence message is transmitted from the user authentication support server 2 side, the user authentication event occurrence message reception module 106 side accepts it and then proceeds to a series of information storage routines, By storing / managing the completed user authentication event occurrence message in its own information storage area, a series of subsequent procedures according to the present invention are assured to proceed normally without any problem (refer to FIG. 4).

In this way, when the user authentication event occurrence message is received, the authentication specific information / partial private information extraction module 107 side communicates with the authentication event occurrence message reception module 106, thereby acquiring, The user authentication event occurrence message is read and then a series of information extraction routines are carried out so that each information contained in the user authentication event occurrence message (e.g., the URL history / category details of the WS operation server 4 in the authentication attempt, The authentication attempt time information of the WS operation server 4 in the authentication attempt, the authentication attempt information of the WS operation server 4, (For example, characters, symbols, numbers, letters / numbers, letters / symbols, numbers / symbols, etc.) inputted from the authentication window (For example, all or part of the user's name, all or part of the user's date of birth, all or part of the user's mobile phone number, etc.) (See FIG. 4).

(For example, a character, a symbol, a number, a character / a number, etc.) inputted from the user in the authentication window W from the information included in the user authentication event occurrence message through the above- (For example, all or part of the user's name, all or part of the user's date of birth, all or part of the user's mobile phone number, and / or a part of the user's mobile phone number) Etc.) is extracted, the user authentication processing module 108 communicates with the authentication specific information / some private information extraction module and proceeds to read the authentication specific information / some private information extraction module, and the authentication specific information storage module 103 ), The user private information storage module 104, and the like, and stores authentication specific information, user private information (for example, user name information, user's date of birth, It will proceed to read the sex information, the user mobile phone number information, user carrier information, etc.), and the like (see Fig. 4).

When the reading of each piece of information is completed, the user authentication processing module 108 advances a series of information comparison routines to determine whether or not the pieces of information match each other, User) of the user.

Under this procedure, for example, when the user selects the character / number combination with the authentication specific information <SD232SDFF> inputted through the authentication window W and the authentication corresponding to the user in the authentication specific information storage module 103 <SD232SDFF> is stored as the specific information of the user private information storage module 104 and some private information inputted by the user through the authentication window W is <mobile phone number part: 01X-34XX-4XX0> 0107] In the case where <mobile phone number: 010-3411-4440> is stored as user private information matched to the user, the user authentication processing module 108 confirms that the pieces of information match each other, (If, of course, the pieces of information are inconsistent, the user authentication processing module 108 side judges that the authentication of the user is failed for the current user).

As another example, if the authentication specific information inputted by the user through the authentication window W is an image arrangement such as < - - - - - - > &gt; And some private information inputted by the user through the authentication window W is <birth date part: 7XX32X>, and the user private information storage module 104 stores < <Date of birth: 710321> is stored as the user private information matching the user in the user authentication processing module 108, the user authentication processing module 108 confirms that the pieces of information match each other, (Of course, even in this case, when each piece of information is inconsistent, the user authentication processing module 108 side judges that the authentication of the identity of the current user has failed).

When the authentication of the user identity is completed through the above-described procedure, the authentication result essential information processing module 109 side communicates with the user authentication processing module 108, for example, (E.g., user name information, user's date of birth, user's gender information, etc.) stored in the information storage area of the user, , User's mobile phone number information, user's mobile carrier's information, etc.), and communicates with the mobile device's interface number storage module 104, (E.g., a virtual number having a station number of 0505) &gt; &lt; a user (service application user) (For example, a telephone number to be connected to the automatic answering device) &gt; and the like (refer to FIG. 4).

In this way, the user's personal information (e.g., user name information, user's date of birth, user's gender information, user's mobile phone number information, user's mobile carrier's information, (E.g., a virtual number having a 0505 station number), an automatic response connection number given beforehand to a user (a service application user) (e.g., a telephone number connected to the answering machine, etc.) The necessary information processing module 109 advances a series of information generation routines to generate user-specific information (e.g., user name information, user's date of birth, user's gender information, user's mobile phone number information, user's mobile carrier's information, (E.g., a virtual number having a station number of 0505) &quot;, a &quot; user &quot; (For example, a telephone number connected to the answering machine, etc.) preliminarily given to the applicant (for example, the applicant) and the authentication result code reflecting the authentication result code, etc. Reference).

When the authentication result essential information is generated through the above-described procedure, the authentication result essential information generating module communicates with the user authentication support server 2 via the interface module 101, the online wireless network 3, And transmits the generated authentication result essential information to the user authentication support server 2 side. As a result, as shown in FIG. 2, the user authentication support server 2 can easily obtain the authentication result essential information And transmits / provides the generated user authentication result information to the WS operating server 4 side. As a result, the WS operation server (or the WS operating server 4) receiving / receiving the user authentication result information 4) side can read the user authentication result information, confirm / authenticate the user's identity, and proceed with a series of web service procedures according to the result.

Of course, in the system of the present invention, in the user authentication result information, a mobile device connection virtual number (e.g., a virtual number having a 0505 station number) or an automatic response connection number (e.g., 2), the WS operating server 4 (or a management entity that manages the WS operating server 4) transmits a mobile device connection virtual number (e.g., 0505 station number) to the WS operating server 4 (For example, a virtual number or the like) or an automatic response connection number (for example, a telephone number connected to the automatic answering device) is stored in an information storage database, and even if it is used for various purposes So that it can be easily avoided.

At this time, on the management subject side managing the WS operating server 4, communication is performed via the mobile device connection virtual number (for example, a virtual number having the 0505 station number) included in the user authentication result information and is connected to the virtual number It is possible to make a call with the mobile device on the user side (which may be the same device as the user information device 1 shown in Fig. 2).

In addition, on the management subject side managing the WS operating server 4, communication is performed via an automatic response connection number (for example, a telephone number connected to the automatic response device), and this number is a number is. If you want to talk with the user, you can also listen to an auto-reply message such as visit us at www. Xxx@c.com and leave a note.

As described above, in the present invention, in the communication pipeline of the WS operating server 4, the user information device 1, the user authentication support server 2, etc., the service request user (For example, a character, a symbol, a numeral, a numeric character, or a numeric character) included in the user authentication event occurrence message when the corresponding user authentication event occurrence message corresponding to the user authentication event occurrence message is transmitted, (E.g., all or part of the user's name, all or part of the user's date of birth, all or part of the user's mobile phone number, etc.) (User name information, user's date of birth, user's gender information, user's mobile phone number information, user's mobile communication A computer module capable of judging whether the user matches with the user or not, &lt; &lt; a case where the user matches the user's identity, &quot; the user historical information that has been previously stored is extracted, (For example, a virtual number having a station number 0505) or an automatic response connection number for each user (e.g., a telephone number connected to the automatic answering device, etc.) extracted by the user, A computer module capable of transmitting the generated authentication result essential information to the user authentication support server 2, and the like in a systematic manner after providing the authentication result essential information including the connection virtual number or the automatic response connection number Therefore, under the implementation environment of the present invention, in the user authentication result information provided to the WS operating server 4 side, the mobile device connection virtual number (For example, a virtual number having a station number 0505 or the like) or an automatic response connection number (for example, a telephone number connected to the answering machine or the like). As a result, on the user side, (For example, a risk that the WS operation server 4 may suffer various physical / mental damages due to an unauthorized distribution of a mobile device number due to a hacking accident, a frequent business operation by the WS operation server 4 The risk of suffering various physical / mental damages due to the transmission of the call / character, etc.) can be easily avoided.

Particularly, in the present invention, in place of all of the private information of the user, the user can use the authentication specific information (e.g., letters, symbols, numbers, letters / numbers, letters / symbols, numbers / symbols, letters / numbers / symbols, Arrangement, etc.) and some private information (e.g., all or part of the user's name, all or part of the user's date of birth, all or part of the user's mobile phone number) Under the circumstances, on the user side, various problems arising from indiscreet input / distribution of the private information (for example, a problem of realistic convenience such as delayed / delayed information input time, occurrence of typo, A serious danger that may be leaked, etc.) can be easily avoided.

In addition, in the system 100 of the present invention, a mobile device parameter number update / deletion processing module 110, an authentication specific information update / deletion processing module 111, and the like are additionally arranged in addition to the above-described respective computation modules.

At this time, on the side of the mobile device device number update / deletion processing module 110, communication with the user information device 1 connected to the wired / wireless on-line network 3 is performed and stored from the user information device 1 (See FIG. 4) whether the mobile device ID number update / deletion request message for updating or deleting the mobile device connection virtual number or the automatic response connection number has been transmitted.

At this time, if it is confirmed that the mobile device's device number update / deletion request message is transmitted from the user information device 1, the mobile device's device number update / deletion processing module 110 side reads it and then generates a series of message generation routines Wireless online network 3 to generate a personal identification request message for confirming whether the user is entitled to update or delete the mobile number or the automatic response connection number, To the user information device 1 which is connected to the user information device 1 (see Fig. 4). In this case, the identity verification request message may be modified in various ways depending on the situation, such as a callback message type, an e-mail type, and an ARS message type.

In this way, in the situation where the identity confirmation request message is transmitted, the user identity information (for example, password information for identity verification, question / response information for identity verification, A user identity confirmation image arrangement information, a cell phone related information for identification, a credit card related information for identification, and a certificate related to the identification of the user) are transmitted, the user identification number update / deletion processing module 110 ) Performs a series of legitimacy checking procedures (for example, a process of checking whether the password for identification of the user set by the user matches the password described in the identification information, and confirming the legitimacy of the user, A procedure for checking whether or not the response information for confirmation and the response information described in the identity confirmation information match with each other and confirming the legitimacy, It is checked whether there is a match between the previously set image for identifying the user and the image described in the identification information, and the procedure for confirming the validity of the image, the image arrangement for identifying the user and the image arrangement described in the identification information A procedure for confirming whether or not the card is valid, a procedure for communicating with the server of the mobile communication company to confirm whether or not the information related to the mobile phone for identification is legitimate, and the communication with the credit card company server to check whether the information related to the credit card for identification is legitimate A procedure for confirming the validity of the information related to the authentication certificate for authentication by communicating with the server of the authorized certificate issuing entity, etc.), thereby confirming the validity of the user authentication information (see Fig. 4 Reference).

When the validity of the user-side identification information is confirmed through the above-described procedure, the mobile device's device number update / deletion processing module 110 communicates with the mobile device's device identification number storage module 105, The update / deletion routine is advanced to match the user-side mobile device connection virtual number or the automatic response connection number previously stored in the information storage area of the mobile device parameter number storage module 105 to the mobile device parameter number update / deletion request message (See FIG. 4). As a result, the user can flexibly control / manage information related to himself / herself without any difficulty.

On the other hand, the authentication specific information update / deletion processing module 111 which operates in cooperation with the above-described respective computation modules communicates with the user information device 1 connected to the wired / wireless on-line network 3, It is checked whether or not the authentication specific information update / deletion request message for updating or deleting the previously stored authentication specific information has been transmitted from the information device 1 (see FIG. 4).

At this time, when it is confirmed that the authentication specific information update / deletion request message is transmitted from the user information device 1, the authentication specific information update / deletion processing module 111 side reads the message, and then a series of message generation routines And generates a personal identification confirmation message for confirming whether the user is entitled to update or delete the authentication specific information, and transmits the generated personal identification confirmation message to the user information device (See Fig. 4). Even in this case, the identity verification request message can be modified in various ways depending on the situation, such as a callback message type, an e-mail type, and an ARS message type.

In this way, in the situation where the identity confirmation request message is transmitted, the user identity information (for example, password information for identity verification, question / response information for identity verification, (E.g., image information for identifying the user, image arrangement information for identifying the user, mobile phone related information for identifying the user, credit card related information for identifying the user, information related to the authorized certificate for identifying the user, etc.) is transmitted, 111) performs a series of legitimacy checking procedures (for example, a procedure for checking whether the password for identification of the user set by the user matches the password described in the identification information, and confirming the legitimacy of the user, A process of checking whether or not the response information described in the identity verification response information matches the response information described in the identity verification information and confirming the legitimacy, It is checked whether there is a match between the previously set image for identifying the user and the image described in the identification information, and the procedure for confirming the validity of the image, the image arrangement for identifying the user and the image arrangement described in the identification information A procedure for confirming whether or not the card is valid, a procedure for communicating with the server of the mobile communication company to confirm whether or not the information related to the mobile phone for identification is legitimate, and the communication with the credit card company server to check whether the information related to the credit card for identification is legitimate A procedure for confirming the validity of the information related to the authentication certificate for authentication by communicating with the server of the authorized certificate issuing entity, etc.), thereby confirming the validity of the user authentication information (see Fig. 4 Reference).

When the validity of the user-side identification information is confirmed through the above-described procedure, the authentication specific information update / deletion processing module 111 communicates with the authentication specific information storage module 103, The update / deletion routine is advanced to update or delete the authentication specific information previously stored in the information storage area of the authentication specific information storage module 103 in accordance with the authentication specific information update / deletion request message 4). As a result, even in this case, the user can flexibly control and manage information related to the user without any difficulty.

The present invention is not limited to a specific field, and has a generally useful effect in various fields requiring user authentication.

Although specific embodiments of the present invention have been described and illustrated above, it is to be understood that the present invention may be embodied in many other specific forms without departing from the spirit or essential characteristics thereof.

Such modified embodiments should not be understood individually from the technical idea and viewpoint of the present invention, and such modified embodiments should be included in the appended claims of the present invention.

W: Authentication window 1: User information device 2: User authentication support server
3: wired / wireless online network 4: WS operation server 100: user authentication support system
101: Interface module 102: Operation information storage module
103: Specific information storage module for authentication 104: User private information storage module
105: mobile device parameter storage module
106: User authentication event occurrence message reception module
107: authentication specific information / some private information extraction module
108: User authentication processing module
109: Authentication result essential information processing module
110: User equipment parameter number update / deletion processing module
111: Specific information update / deletion processing module for authentication

Claims (4)

A user authentication server that supports a user authentication process by a WS operation server that operates a Web site (WS: Web-Site), receives user authentication corresponding to a service application user previously set up from the user authentication support server side A user authentication event occurrence message reception module for receiving the user authentication event occurrence message when the event occurrence message is transmitted;
A user authentication processing module for comparing the information included in the user authentication event occurrence message with user authentication information stored in advance to determine whether the user matches the user's identity;
If it is determined by the user authentication processing module that the user's identity is identical to the user's identity, the mobile terminal extracts the previously stored user private information, extracts the previously stored mobile device connection virtual number or automatic response connection number, An authentication result essential information module that generates authentication result essential information including user private information, a mobile device connection virtual number, or an automatic response connection number, and transmits the generated authentication result essential information to the user authentication support server, The user authentication support system comprising: The information processing apparatus according to claim 1, further comprising an authentication specific information / partial private information extraction module that reads the user authentication event occurrence message and extracts authentication specific information and some private information included in the user authentication event occurrence message In addition,
The user authentication processing module side compares authentication specific information and some private information extracted by the authentication specific information / partial private information extraction module with previously stored authentication specific information and user private information, Whether or not the user authentication is successful. 3. The method according to claim 2, further comprising the step of, when an authentication specific information update / deletion request message for updating or deleting the authentication specific information previously stored in the user information device is transmitted, A user authentication request message for confirming whether or not the user is entitled to update or delete the authentication specific information is transmitted and if the user authentication information corresponding to the user authentication request message is transmitted from the user information device And an authentication specific information update / deletion processing module for confirming whether or not the corresponding identification information is legitimate and updating or deleting the previously stored authentication specific information according to the confirmation result, Support system. The method according to claim 1, further comprising: when a mobile device parameter number update / delete request message for updating or deleting the mobile device connection virtual number or the auto response connection number stored in advance from the user information device is transmitted, After reading the update / delete request message, the mobile terminal transmits a personal identification request message for confirming whether the user is entitled to update or delete the mobile number or the automatic response connection number, When the identity verification information corresponding to the request message is transmitted, it is checked whether the identity verification information is valid or not, and the mobile device connection virtual number or the automatic response connection number, which has been stored in advance, is updated or deleted And an apparatus parameter number update / deletion processing module User authentication support system.

Images