KR101587156B1 - Message processing apparatus and user terminal capable of deferentiating between normal message and abnormal message and method thereof - Google Patents

Abstract

In the present invention, a method for distinguishing abnormal messages is provided. A method for distinguishing abnormal messages is a method for distinguishing abnormal messages from a message provider of a plurality of companies, So that the authenticated message can be authenticated by transmitting the authenticated message to the user terminal by including the authentication confirmation information in the corresponding message, So that the user can confirm the message with confidence for the authenticated message, thereby enhancing the image of the company sending the message and reducing the damage caused by illegal messages.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a message processing apparatus, a user terminal, and a method for distinguishing an abnormal message,

The present invention relates to a method of authenticating a message, and more particularly, to a method of distinguishing an abnormal message from a message provider of a plurality of companies, such as a user terminal for notifying, The authentication server 100 may assign the authentication identifier information that can authenticate the corresponding message provider to the various messages sent to the corresponding message provider so as to authenticate the message from the normal message provider and include the authentication confirmation information in the corresponding message To a message processing device, a user terminal, and a method for distinguishing an unauthorized message from an authenticated message in a user terminal by transmitting the message to a user terminal.

In recent years, user terminals such as mobile phones and smart phones have been used as necessities indispensable to modern people, regardless of whether they are male or female. Service providers and handset manufacturers use competitive products or services .

The user terminal may be a multimedia device capable of a phone book, a game, a message, an email, a morning call, an MPEG Layer 3 (MP3), a digital camera, and a wireless Internet service It is developing and providing various services.

On the other hand, among the functions of the user terminal, the message function is often used by the users because it is relatively inexpensive as compared with the voice call.

Such a message may be, for example, a short messaging service (SMS), a multimedia messaging service (MMS), a packet based message, or the like. SMS can say a message that can transmit simple text, and MMS can say a message that can be transmitted by adding a moving picture, a photograph, a music file, etc., away from a simple text message. In addition, a packet-based message is a message transmitted through a packet-switched system using a data network. Like a MMS, a file can be attached to a video, a photograph, a music file, or the like. have.

However, in recent years, many companies have used the above-mentioned messages to publicize, publicize, and advertise corporations, so that the users feel inconvenienced by the reception of a large number of unnecessary messages, Such as spam, such as a gambling advertisement message and an obscene message.

In addition, among the messages transmitted from a message transmission entity of a company or the like to a plurality of user terminals targeted for notification, publicity, and advertisement as described above, illegal information on a financial product of a company stealing the name of the company, providing shopping mall coupons Of spam messages may be included. Such a spam message may be a message of a smearing company who wants to perform smoothing, which is a fraudulent method of installing a malicious code on a user terminal of a smart phone or the like to leak out a micropayment authentication number and personal information, And companies whose names are stolen had a problem that the image of the company was lost.

Korean Patent Registration No. 10-0482538 (registered on Apr. 1, 2005) discloses a technique for a multimedia message service method and system.

Accordingly, in the present invention, as a method for distinguishing abnormal messages, an authentication method capable of authenticating a corresponding message provider to various messages sent from a message provider of a plurality of companies to a user terminal for notification, advertisement, By assigning the identifier information in advance, it is possible to authenticate whether the message is from a normal message provider. For the authenticated message, the authentication message is included in the corresponding message and transmitted to the user terminal. A message processing device, a user terminal, and a method for distinguishing an abnormal message from a message to be distinguished from each other.

The present invention provides a message processing apparatus for distinguishing an abnormal message, comprising: a communication unit for receiving a message requested to be sent from an arbitrary message provider; an authentication unit for extracting authentication identifier information of the message provider and verifying that the message is an authenticated message And a processing unit for generating authentication confirmation information and encrypting the authentication confirmation information with a predetermined encryption algorithm based on the user terminal information and incorporating the encrypted authentication information into the message if the message is confirmed to be an authenticated message.

The processing unit may encrypt the authentication confirmation information using a hash algorithm based on the user terminal information, or may generate an OTP (one time password) value.

In addition, the processing unit may record the authentication confirmation information in a predetermined value defined in the PID field on the format of the message.

In addition, the authentication unit interlocks with the authentication information management server storing all the authentication ID information allocated to the authenticated message provider, and the extracted authentication ID information is present in the authentication ID information allocated to the authenticated message provider Or the like.

In addition, when the URL information is included in the message, the processing unit checks the location of the server connected through the URL, generates information indicating that the message is sent from abroad when the server is located overseas, In the message.

The authentication ID information may be CID (caller ID) information or a series of numeric information pre-allocated for identification of the authenticated message provider.

The processing unit may include the authentication confirmation information in a header or a data area of the message.

According to another aspect of the present invention, there is provided a message processing apparatus for distinguishing abnormal messages, comprising: a communication unit for receiving a message requested to be sent from a message provider; an authentication unit for extracting authentication identifier information of the message provider, And a processing unit for recording a predefined specific value indicating that the message is an authenticated message in a packet identification (PID) field of the message if the message is confirmed to be an authenticated message.

Also, the specific value is a newly defined value for authentication of the message among various values recorded in the PID field, and information on a newly defined value on the PID field is provided to the user terminal in advance .

According to another aspect of the present invention, there is provided a message processing method for distinguishing an abnormal message, comprising: receiving a message requested to be sent from a message provider; extracting authentication identifier information of the message provider to determine whether the message is an authenticated message Generating authentication confirmation information indicating that the message is an authenticated message if the message is an authenticated message; encrypting the authentication confirmation information with a predetermined encryption algorithm based on user terminal information, Into the message.

According to another aspect of the present invention, there is provided a message processing method for distinguishing an abnormal message, comprising: receiving a message requested to be sent from a message provider; extracting authentication identifier information of the message provider to determine whether the message is an authenticated message And recording a predefined specific value indicating that the message is an authenticated message in a packet identification (PID) field of the message if the message is an authenticated message.

According to another aspect of the present invention, there is provided a user terminal for identifying an abnormal message, comprising: a communication unit for receiving a message through a communication network; an authentication unit for extracting authentication confirmation information included in the message and checking whether the message is an authenticated message; When the message is verified as an authenticated message, the message is an authenticated message.

The authentication unit may decrypt the authentication confirmation information using the user terminal information and the encryption algorithm when the authentication confirmation information is encrypted with a predetermined encryption algorithm based on the user terminal information.

Also, the authentication confirmation information may be encrypted with a hash algorithm or generated as an OTP value based on the user terminal information.

The authentication unit may check whether the message is authenticated by checking the specific value when the authentication confirmation information is recorded in the PID field of the message with a predetermined value defined in advance.

In addition, the controller may display information indicating that the message is an authenticated message on a screen, in a character or a picture, or may output a sound.

According to another aspect of the present invention, there is provided a message authentication method for distinguishing an abnormal message, comprising: receiving a message through a communication network; checking whether authentication confirmation information is included in the message; Authenticating whether the message is an authenticated message, and notifying that the message is an authenticated message if the message is an authenticated message.

The authenticating step is a step of decrypting the authentication confirmation information using the user terminal information and the encryption algorithm when the authentication confirmation information is encrypted with a predetermined encryption algorithm based on the user terminal information .

The authenticating step is a step of authenticating whether the message is authenticated by checking the specific value when the authentication confirmation information is recorded in a predetermined value predefined in the PID field of the message.

The present invention relates to a method for distinguishing abnormal messages, which is a method for distinguishing abnormal messages from a message provider of a plurality of companies, for various messages sent to a user terminal for notification, publicity, advertisement, So that the authenticated message can be authenticated by transmitting the authenticated message to the user terminal by including the authentication confirmation information in the corresponding message, So that the user can confirm the message with confidence for the authenticated message.

In addition, the company, which is a message provider that sends an authenticated message, can increase the corporate image through transmission of the authenticated message and distinguish the unauthorized message from the authenticated message. It is advantageous to prevent malicious damage, which is a fraudulent method of leakage of a micropayment authentication number and personal information by installing a malicious code in a user terminal by stealing a normal company.

1 is a configuration diagram of a communication network for message transmission according to an embodiment of the present invention;
2 is a detailed block diagram of a message processing device according to an embodiment of the present invention,
3 is a detailed block diagram of a user terminal according to an embodiment of the present invention.
FIG. 4 to FIG. 6 are exemplary views illustrating the division of authenticated messages in a message content summary window according to an embodiment of the present invention;
FIG. 7 is a flow chart of operation control for message authentication in a message processing apparatus according to an embodiment of the present invention; FIG.
8 is a flowchart of an operation control for separately displaying an authenticated message in a user terminal according to an exemplary embodiment of the present invention.

Hereinafter, the operation principle of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The following terms are defined in consideration of the functions of the present invention, and these may be changed according to the intention of the user, the operator, or the like. Therefore, the definition should be based on the contents throughout this specification.

FIG. 1 illustrates a communication network for message transmission according to an embodiment of the present invention. Referring to FIG.

Hereinafter, operation of each component on a communication network for message transmission will be described in detail with reference to FIG.

First, a message provider 100 refers to a subject sending a message such as an SMS, an MMS message, or a packet based message to a user terminal 112 connected to a wired / wireless communication network including a mobile communication network. In this case, the user terminal 112 may include a mobile communication terminal such as a mobile phone, a smart phone, or a general wired / wireless telephone having a display window for receiving a message. (100) may be, for example, a financial company, a manufacturer, an open market, and the like. A message sent by the message provider (100) may be, for example, It can be a message of content.

The message relay 102 receives a message transmission request to a user terminal 112 as a target from a company such as a financial institution, a manufacturer, or an open market serving as the message provider 100, And provides the generated message to the message processing device 104 such as a VMG (Vertical Multimedia Gateway) on the communication network, so that the message requested by the message provider 100 is transmitted to the corresponding user terminal 112 To be transmitted. That is, the message relay 102 transmits data such as the contents of a message to be transmitted from the message provider 100 and information such as a mobile identification number (MIN) of the target user's user terminal 112 to which the corresponding message is to be transmitted And transmits the message to the message processing device 104. [0041]

The message processing device 104 may be a device such as a VMG and may be configured to translate a message received from the message relay 102 into a format of the message in accordance with the device characteristics of the target user terminal 112 Perform message processing. That is, when receiving the message sent from the message provider 100 through the message relay 102, the message processing device 104 refers to the information about the specification of the user terminal 112 and displays it in the user terminal 112 Based message server (SMSC) 108, a multimedia messaging service center (MMSC) 110, or a packet-based message server for transmitting and receiving a corresponding packet-based message in the case of a packet- (111).

In this case, the message requested to be sent from the message provider 100 to the user terminal 112 may be produced in the form of an MMS message, an SMS message, or a packet-based message, and the message processing device 104 may, for example, The MMS message can be converted into a message format corresponding to the version of the corresponding user terminal 112 in consideration of the MMS version of the target user terminal 112 to receive the corresponding MMS message. In the case where only the SMS message can be received, . ≪ / RTI >

Meanwhile, among the messages transmitted to the user terminals 112 of the plurality of target users from the message transmission entity of the enterprise as described above, the messages of the users of the smart phone and the like through the spam messages such as the guidance of the financial product, A malicious code may be installed in the terminal 112 to include a message of a smearing company attempting to smear the fraudulent method of spilling out a micropayment authentication number and personal information, As described above, there is a problem in that a company that has been stolen may lose its corporate image.

Accordingly, the message processing device 104 has an authentication module for authenticating whether it is a normal message sent from a normal company, authenticates whether it is a message from a normally authenticated message provider 100, To the user terminal 112 so that the user terminal 112 can distinguish the authenticated message from the unauthorized message such as the illegal message of the smearing company.

At this time, in authenticating the message from the authenticated message provider 100, for example, the message processing device 104 extracts the authentication ID information and transmits the authentication ID information to the authentication information management server The authentication information management server 106 transmits the request to the authentication information management server 106 to check whether it is pre-assigned authentication identifier information, and performs the authentication by receiving the inspection result from the authentication information management server 106. At this time, the authentication identifier information is information set to identify the company to a company sending a normal message, and may be CID (caller ID) information, for example. The authentication information management server 106 for managing such authentication identifier information may be, for example, a CID (Caller ID) management server.

In other words, the message processing device 104 notifies the message provider 100, which has been selected as a normal company in advance, to a message transmitted to the target user terminal 112 from the corresponding company according to the embodiment of the present invention, And transmits identification information to the message to be authenticated, and then, authenticating the authenticated message to include the authentication confirmation information in the corresponding message, To the SMSC 108, the MMSC 110, or the packet-based message server 111 depending on the type of the message.

A message such as an SMS message, an MMS message, or a packet based message to which the authentication confirmation information is added is transmitted to the SMSC 108, the MMSC 110 or the packet-based message server 111 and then transmitted to the SMSC 108, the MMSC 110 or the packet-based message server 111 to the corresponding user terminal 112 over the communication network.

Then, the user terminal 112 confirms whether the received message includes the authentication confirmation information. If the authentication confirmation information is included, the user terminal 112 confirms that the received message contains the authentication confirmation information. The user can easily confirm the authenticated message by displaying it or outputting it by sound or the like.

2 shows a detailed block configuration of a message processing apparatus 104 according to an embodiment of the present invention and includes a communication unit 200, a memory unit 202, a control unit 204, an authentication unit 206, a processing unit 208), and the like.

Hereinafter, operation of each component of the message authentication apparatus 104 of the present invention will be described in detail with reference to FIG.

First, the communication unit 200 transmits and receives data to and from the message relay 102, the SMSC 108, the MMSC 110, and the packet-based message server 111, and transmits the SMS, MMS, Based message or the like, and transmits a processed message to the SMSC 108, the MMSC 110, or the packet-based message server 111 according to the present invention.

The memory unit 202 stores an operation control program for the overall operation of the message processing apparatus 104. The control unit 204 controls the overall operation of the message processing apparatus 104 according to the operation control program stored in the memory unit 202. [ And controls the operation.

The authenticator 206 is a module for authenticating a message from a legitimate message provider 100 selected in advance according to an embodiment of the present invention. The authenticator 206 authenticates the message provider 100 included in the message received from the message relay 102 Extracts the identifier information, checks whether the authentication identifier information of the message provider 100 is included in the authentication identifier information previously allocated for authentication, and determines whether the received message is a message sent from the authenticated message provider 100 Can be authenticated.

At this time, in authenticating the message provider 100, the authentication unit 206 extracts the authentication ID information and transmits the authentication ID information previously allocated to a normal enterprise or the like to the managed authentication information management server 106, It is possible to request authentication information from the authentication information management server 106 and perform authentication by receiving the inspection result from the authentication information management server 106. [ In addition, the authentication unit 206 may include a pre-assigned authentication ID information in its own database (DB), and may perform self-checking of the authentication ID information without interlocking with the authentication information management server 106. [

The processing unit 208 generates the authentication confirmation information for authenticating the normal message provider 100 from the authentication unit 206 and verifying that the message is an authenticated message sent from the authenticated message provider 100, The authentication confirmation information thus generated is processed so as to be included in the message sent from the message provider 100.

At this time, the processing unit 208 can generate the above-described authentication confirmation information in various ways. Hereinafter, the operation of generating the authentication confirmation information in the processing unit 208 will be described in more detail.

First, in the simplest method, the processing unit 208 generates simple unencrypted information, such as true or false, for the message sent from the authenticated message provider 100, Or to a certain area of the data area. In this case, the user terminal 112 such as a mobile communication terminal can check whether the message is an authenticated message simply by reading the corresponding authentication confirmation information in the promised area in the message, even if the user terminal 112 does not have a separate encryption / decryption algorithm.

Next, the processing unit 208 transmits the authentication confirmation information to the user terminal information of the target user terminal 112 to which the message is to be sent, that is, for example, MIN (Mobile Identification Number) The encrypted authentication confirmation information can be added to a header of the message or a certain area of the data area. At this time, the above encryption algorithm can be a hash algorithm, for example. In this case, the user terminal 112 extracts the encrypted authentication confirmation information from the promised area on the message, and encrypts the encrypted authentication information using the same encryption algorithm and the user terminal information such as MIN information used when the authentication confirmation information is encrypted Decrypts and reads the authentication confirmation information.

Next, the processing unit 208 may transmit the above-described authentication confirmation information in a message with an OTP (one time password) value. Such an OTP value is a value generated by inputting user terminal information such as a transmission time of a message and a MIN as a parameter, and can be added to a header of the message or a certain area of the data area. In this case, the user terminal 112 implements an OTP terminal function to generate an OTP value, and then compares the generated OTP value with the OTP value included in the message to confirm that the received message is an authenticated message in the case of the same OTP value .

At this time, the user terminal 112 may have the same OTP generator as that used to generate the OTP value in the message processing device 104, and when the authentication confirmation information is transmitted with the OTP value together with the message, ), The OTP value is generated by inputting the message transmission time and the user terminal information, which are the same parameters used as the input values of the OTP generator, and the generated OTP value and the OTP value included in the message can be compared.

Next, the processing unit 208 may generate the above-described authentication confirmation information in a PID (Packet Identification) field on the message format by recording a new defined value to indicate whether the message is authenticated.

The PID field is a field that is recorded with various predetermined values according to the characteristics of the message and is used to perform an operation corresponding to the value recorded in the corresponding PID field in the user terminal 112. In the processing unit 208, A new specific value for message authentication can be defined in the PID field in which various defined values are recorded and transmitted together with the message to be used for message authentication. At this time, the information about the newly defined specific value on the PID field may be provided in advance to the user terminal 112.

In this case, the user terminal 112 can check whether the received message is authenticated by checking the value recorded in the PID field of the received message.

Meanwhile, the message provided from the message provider 100 may include URL (uniform resource locator) information. In this case, the processing unit 208 checks whether the location of the server connected through the URL is domestic or overseas. If the server is overseas, the processing unit 208 generates additional information indicating that the message is sent from abroad, . That is, even if the message is authenticated, it is possible that the message is an illegal message when the location of the server connected through the URL is overseas. Therefore, the processing unit 208 informs that the location of the server connected to the URL is overseas , So that the user can be aware of an authenticated message.

FIG. 3 shows a detailed block configuration of a mobile communication terminal of a user terminal 112 according to an embodiment of the present invention. Hereinafter, the operation of each block of the mobile communication terminal will be described in detail with reference to FIG.

First, the key input unit 300 may include a plurality of numeric keys and function keys for requesting various operations of the mobile communication terminal. When the user presses a predetermined key, corresponding key data is generated and output to the control unit 306 do. The key input unit 300 has a character arrangement difference by manufacturer and country. In addition, the key input unit 300 may be displayed in a touch screen format on the display unit 304 whenever necessary in place of a physical keypad in a smart phone or a tablet PC have.

The audio unit 310 modulates a voice signal inputted through a microphone (MIC) into a radio signal under the control of the control unit 306, demodulates the received radio signal, and transmits the demodulated radio signal as a voice signal to the speaker SPK. The audio unit 310 may further include a codec for processing a voice signal with various voice qualities set by the control unit 306 during a voice call.

The communication unit 308 receives a message sent from the message provider 100 via the communication network. At this time, the above-mentioned message may be a message generated by a request of a company such as a financial provider, a manufacturer, or an open market, which is a message provider 100, and a message including a notice related to the corporation, .

The display unit 304 displays various kinds of information of the mobile communication terminal under the control of the control unit 306 and receives and displays key data generated by the key input unit 300 and various information signals of the control unit 306. In addition, according to the embodiment of the present invention, information indicating that the authenticated message is an authenticated message can be displayed with a picture or character such as a predetermined authentication mark, a company logo, or the like.

The authentication unit 312 checks whether authentication confirmation information is attached to a message such as an SMS, an MMS or a packet based message received from the communication unit 308. If the authentication confirmation information is attached, the authentication unit 312 extracts the authentication confirmation information, Whether the received message is an authenticated message.

In this case, if the authentication information is not encrypted, the authentication unit 312 reads the corresponding authentication information from the previously promised area of the message, Message. ≪ / RTI >

That is, in the message processing device 104, the message transmitted from the authenticated message provider 100 may be generated as simple unchecked confirmation information such as true or false, It can be added to a certain area of the data area. In this case, the authentication unit 312 can check whether the message is an authenticated message simply by reading the corresponding authentication confirmation information in the promised area in the message, even if the authentication unit 312 does not have a separate encryption / decryption algorithm.

Next, the authentication unit 312 extracts the encrypted authentication confirmation information from the prearranged area on the message when the above authentication confirmation information is encrypted with a predetermined encryption algorithm such as a hash algorithm, and when the authentication confirmation information is encrypted The encryption is decrypted by using the same encryption algorithm and the user terminal information such as MIN information used and the authentication confirmation information is confirmed. At this time, it can be assumed that the user terminal 112 and the message processing device 104 have the same encryption algorithm in advance.

When the authentication confirmation information is received as an OTP value together with the message, the authentication unit 312 determines whether the message transmission time, which is the same parameter used as the input value of the OTP generator in the message processing apparatus 104, OTP value is generated using the MIN information as the input value. The authentication unit 312 can check whether the received message is an authenticated message if the OTP value generated in the user terminal 112 having the OTP terminal function is the same as the OTP value included in the message.

If the authentication information is recorded as a newly defined specific value to indicate whether the message is authenticated in the PID field on the message format, the authentication unit 312 determines whether the value recorded in the corresponding PID field indicates authentication of the message It is possible to check whether or not the received message is an authenticated message.

In this case, the PID field is recorded in various predetermined values according to the characteristics of the message, and is a field for allowing the user terminal 112 to perform an operation corresponding to the value recorded in the corresponding PID field, A specific value indicating whether a message is authenticated for message authentication according to an exemplary embodiment of the present invention is defined and information on the message is authenticated beforehand to the user terminal 112 and a specific value indicating whether to authenticate the message is entered in the PID field And transmitted.

Accordingly, the authentication unit 312 can check whether the received message is authenticated by checking the value recorded in the PID field of the received message.

The control unit 306 controls the overall operation of the mobile communication terminal according to the operation program stored in the memory unit 302. [ The above operation program connects the display unit 304 and the key input unit 300 and controls the input / output of data, as well as a basic operating system necessary for the operation of the mobile communication terminal, Software that is pre-programmed at the time of manufacturing to operate an application or the like.

When a message transmitted from a plurality of message providers 100 is received according to an exemplary embodiment of the present invention, the authentication unit 312 may be controlled to check the authentication information of the corresponding message. If the message is an authenticated message, The user can confirm whether the currently received message is an authenticated message by displaying the received message in a variety of ways.

At this time, the control unit 306 may display a logo, an authentication mark, an authentication character or the like of the corresponding company set in the message content summary window in the case of an SMS message when an authenticated message is received or a message content summary window in case of an MMS message, It is also possible to display a message such as "authentication message" with a popup message, or to display an authentication mark and a popup message at the same time.

In the case of a packet-based message, a corresponding message is displayed on a screen such as a dialog box of a packet-based message, and a corresponding company logo indicating that the message is an authenticated message, Or an authentication character or the like may be displayed. In addition, when the reception of the packet-based message is set to be displayed as a pop-up message, notification of the reception of the packet-based message is notified by a pop-up message, and at the same time, a corporate logo, an authentication mark or an authentication character may be displayed together with a pop- have.

FIG. 4 illustrates that the predetermined company logo 400 is displayed only for the authenticated message in the message content summary window. FIG. 5 illustrates an authentication mark 450 that is set only for the authenticated message in the message content summary window. As shown in Fig.

FIG. 6 illustrates that a predetermined text 500 such as "authentication message" is displayed together with a predetermined company logo 400 and an authentication letter indicating that the authenticated message is displayed on the authenticated message.

As described above, the control unit 306 displays the authentication confirmation message in various ways for enhancing the user's perception, so that the user can easily distinguish the authenticated and unauthenticated messages, It is possible to prevent spam from being doubted and not being confirmed.

FIG. 7 shows a flow of operation control for message authentication in the message processing apparatus 104 according to the embodiment of the present invention. Hereinafter, a detailed description will be given with reference to FIGS. 1 to 7. FIG.

First, the message processing device 104 may receive a variety of messages from a number of companies, such as financial providers, manufacturers, open markets, etc., which may be message providers 100, to a target user terminal 112 S700).

The user terminal 112 may include a mobile communication terminal such as a mobile phone, a smart phone, or a general wired / wireless telephone having a display window for receiving a message. In the embodiment of the present invention, A mobile communication terminal such as a mobile phone or a smart phone will be described as an example.

Then, the message processing device 104 extracts the authentication identifier information of the message provider 100 from the received message (S702). In this case, the authentication identifier information is information set to identify a company to a company sending a normal message, and may be, for example, CID (caller ID) information or a series of numeric information.

When the authentication identifier information is extracted as described above, the message processing device 104 checks the extracted authentication identifier information and authenticates whether the message provider 100 is a normal message provider (S704).

That is, for example, the message processing device 104 compares the authentication identifier information extracted from the received message with the entire authentication identifier information registered in advance in the authentication information management server 106 or the like, and if matching authentication identifier information exists, Authenticate the message provider 100 that sent the message as a normal message provider.

If the message provider 100 sending the message through the checking of the authentication identifier information is not determined to be the authenticated message provider 100 in step S706, the message processing device 104 transmits authentication confirmation information And transmits the message to the corresponding user terminal 112 through the SMSC 108, the MMSC 110, or the packet-based message server 111 in step S712.

Alternatively, when the message provider 100 that has sent the message through the checking of the authentication identifier information is determined to be the authenticated message provider 100 (S706), the message processing device 104 transmits an authenticated message provider Which is a secure message sent from the mobile terminal 100 (S708).

At this time, the message processing device 104 can generate the above-described authentication confirmation information in various ways.

First, in the simplest method, the message processing device 104 generates a non-encrypted simple confirmation information, such as true or false, for the message sent from the authenticated message provider 100, It can be added to a certain predetermined area of the data area.

Next, in order to secure the authentication confirmation information, the message processing device 104 encrypts the authentication confirmation information with a predetermined encryption algorithm using the user terminal information such as the MIN information of the target user terminal 112 to which the message is to be sent The encrypted authentication confirmation information may be added to a header of the message or a certain area of the data area. In this case, the encryption algorithm may be a hash algorithm, for example, and when the encryption is performed using the encryption algorithm, the same encryption algorithm may be provided in advance to the user terminal 112 as well.

Next, the message processing device 104 can transmit the above-described authentication confirmation information with the OTP value included in the message. Such an OTP value is a value generated by inputting user terminal information such as a transmission time of a message and MIN, and may be added to a header of a message or a certain area of a data area. In this case, the user terminal 112 implements the OTP terminal function to generate an OTP value, compares the OTP value with the OTP value included in the message, and confirm that the received message is an authenticated message when the OTP value is the same.

Next, the message processing device 104 may generate the above-described authentication confirmation information as a newly defined specific value to indicate whether to authenticate the message in the PID (Packet Identification) field on the message format.

The PID field is a field in which the user terminal 112 records various predetermined values according to the characteristics of the message and performs an operation corresponding to the value recorded in the corresponding PID field. In the message processing device 104, A new specific value for message authentication can be defined in the PID field in which various defined values are recorded and transmitted together with the message to be used for message authentication. At this time, the information about the newly defined specific value on the PID field may be provided in advance to the user terminal 112.

In this case, the user terminal 112 can check whether the received message is authenticated by checking the value recorded in the PID field of the received message.

Next, the message processing device 104 processes the message so that the generated authentication confirmation information is included in the message sent by the message provider 100 (S710), and then transmits the message including the authentication confirmation information to the message processing device 100 To the SMSC 108, the MMSC 110 or the packet-based message server 111 in step S712 so that the message provider 100 can transmit the message to the user terminal 112 that requested the transmission.

FIG. 8 illustrates an operation control flow for separately displaying an authenticated message in the user terminal 112 according to an embodiment of the present invention. Below. Will be described in detail with reference to Figs. 1 to 6 and Fig. Hereinafter, the operation of the user terminal in a mobile communication terminal such as a mobile phone or a smart phone will be described for convenience of explanation, but the same can be applied to other types of user terminals capable of receiving and displaying a message.

First, the user terminal 112 receives a message sent from a plurality of companies such as a financial institution, a manufacturer, and an open market that can be a message provider 100 through a communication network (S800) Information is included and extracts the authentication confirmation information (S802).

Then, the user terminal 112 analyzes the authentication confirmation information to check whether the authentication confirmation information is encrypted (S804).

At this time, if the authentication confirmation information is not encrypted, the user terminal 112 may read the authentication confirmation information in a predetermined area of the message and confirm whether the message is an authenticated message (S810).

If the authentication confirmation information is not encrypted as described above, for example, the message processing device 104 may generate a simple authentication confirmation information, such as true or false, Or may be added to a certain area of the data area. Alternatively, the message processing device 104 may be configured to replace the message authentication with a predetermined value defined in the PID (Packet Identification) field of the message format.

Therefore, the user terminal 112 reads the corresponding authentication confirmation information from the prearranged area in the message and confirms whether or not the authentication is authenticated. Also, the user terminal 112 checks whether a predefined specific value is recorded in the PID field You can check if you are authenticated.

However, if the authentication confirmation information is encrypted (S806), the user terminal 112 decrypts the encryption of the authentication confirmation information (S808) and confirms the authentication confirmation information (S810).

In the case where the authentication confirmation information is encrypted as described above, for example, in order to secure the authentication confirmation information in the message processing device 104, the authentication confirmation information may be transmitted to the user terminal information of the target user terminal 112 For example, by using a predetermined encryption algorithm such as a hash algorithm using MIN (Mobile Identification Number) information or the like, and then adding the encrypted authentication confirmation information to a header of the message or a certain area of the data area .

Alternatively, the message processing device 104 may include authentication confirmation information in an OTP value message. The OTP value is a value generated by inputting user terminal information such as a transmission time of a message and a MIN, and may be included in a header of the message or a certain area of the data area.

Accordingly, when the authentication confirmation information is encrypted with an encryption algorithm such as a hash algorithm, the user terminal 112 extracts the encrypted authentication confirmation information from the previously promised area on the message, and the authentication confirmation information is encrypted And decrypts the encrypted data using the user terminal information such as the same encryption algorithm and MIN information used at the time of authentication, and confirms the authentication confirmation information.

When the authentication confirmation information is transmitted as the OTP value, the user terminal 112 generates the OTP value by implementing the OTP terminal function, and then compares the OTP value with the OTP value included in the message, and if the received OTP value is the same OTP value, Message.

At this time, the user terminal 112 may have the same OTP generator as that used to generate the OTP value in the message processing device 104, and when the authentication confirmation information is transmitted with the OTP value together with the message, ), The OTP value is generated by inputting the message transmission time and the user terminal information, which are the same parameters used as the input values of the OTP generator, and then the generated OTP value can be compared with the OTP value included in the message.

The authentication confirmation information that is checked through the above authentication process may be information on whether the corresponding message is an authenticated message, for example, true or false, true means authenticated message, false means authentication Which means that the message is not transmitted.

Accordingly, the user terminal 112 checks the authentication confirmation information to check whether the corresponding message is an authenticated message (S812). If the authenticated message is not the authenticated message, the user terminal 112 performs the same processing as the normal case.

However, in the case of an authenticated message, the user terminal 112 notifies the reception of the message and displays the message as an enterprise logo, an authentication mark, an authentication character or the like indicating that the message is an authentication message on the message reception screen of the user terminal 112 , Or outputting a sound (S714) so that the user can check whether the currently received message is an authenticated message.

4, 5, or 6, when the user terminal 112 receives an authenticated message, for example, the user terminal 112 displays a company logo 400, an authentication mark 450, The authentication message 450 may be displayed in the form of an authentication character 500 or a sound or may be displayed simultaneously with the authentication character 450 in the popup message.

Accordingly, among the messages such as SMS, MMS message, or packet based message received by the user terminal 112, messages authenticated as secure are displayed on the user terminal 112 in various ways, By making it easy to distinguish the message, it is possible to prevent the authenticated message from doubtfully checking the spam.

As described above, in the present invention, as a method of distinguishing abnormal messages, a message provider of a plurality of companies is authenticated with respect to various messages sent to a user terminal for notification, advertisement, advertisement, etc. And transmits the authenticated message to the user terminal by transmitting the authenticated message including the authentication confirmation information to the user terminal so that the authenticated message is transmitted to the user terminal. By allowing the user to distinguish the unauthorized message from the unauthorized message, the user can confirm the message with confidence, so that the image of the company that sent the message can be increased, and the damage caused by the illegal message .

While the invention has been shown and described with reference to certain preferred embodiments thereof, it will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the invention. Accordingly, the scope of the invention should not be limited by the described embodiments but should be defined by the appended claims.

As a method of distinguishing abnormal messages, there is a method of distinguishing abnormal messages from a message provider of a plurality of companies by using authentication identifier information capable of authenticating a corresponding message provider for various messages sent to a user terminal for notification, By allowing the authenticated message in the user terminal to be distinguished from the unauthorized message, the user can check the message with confidence for the authenticated message and reduce the smsing damage caused by the illegal message , And a communication system.

100: message provider 102: message relay
104: message processing device 106: authentication information management server
108: SMSC 110: MMSC
111: Packet-based message server 112: User terminal

Claims (19)

A communication unit for receiving a message requested to be sent from an arbitrary message provider;
An authentication unit for extracting identification information of the message provider from the message and verifying that the message is an authenticated message through verification with a previously stored authentication ID information DB;
Generating authentication confirmation information indicating that the message is an authenticated message, encrypting the authentication confirmation information with a predetermined encryption algorithm based on the user terminal information, and incorporating the encrypted authentication information into the message when the message is confirmed as an authenticated message,
And a message processing device. The method according to claim 1,
Wherein,
Wherein the authentication confirmation information is encrypted with a hash algorithm based on the user terminal information or is generated as an OTP (one time password) value. The method according to claim 1,
Wherein,
And records the authentication confirmation information in a predetermined value predefined in the PID field on the format of the message. The method according to claim 1,
Wherein,
And checks whether the extracted identification information exists in the authentication identifier information allocated to the authenticated message provider through interworking with the authentication information management server storing all the authentication identifier information allocated to the authenticated message provider Message processing device. The method according to claim 1,
Wherein,
When the URL is included in the message, confirms the location of the server connected through the URL, and when the location of the server is overseas, information indicating that the message is sent from abroad is generated and included in the message A message processing device. The method according to claim 1,
Wherein,
(CID) information or a series of numeric information pre-allocated for identification of the authenticated message provider. The method according to claim 1,
Wherein,
And the authentication confirmation information is included in a header or a data area of the message. delete The method of claim 3,
The specific value may be,
Wherein a value newly defined for authentication of the message among various values recorded in the PID field is provided to a user terminal in advance. A message processing method in a message processing apparatus including a communication unit, an authentication unit, and a processing unit,
Receiving a message requested to be sent from an arbitrary message provider in the communication unit;
Extracting identification information of the message provider from the message in the authentication unit and checking whether the message is an authenticated message through verification with a previously stored authentication ID information DB;
Generating authentication confirmation information indicating that the message is an authenticated message when the processing unit determines that the message is an authenticated message;
Encrypting the authentication confirmation information with a predetermined encryption algorithm based on the user terminal information in the processing unit and including the encrypted authentication information in the message
≪ / RTI >
delete A communication unit for receiving a message via a communication network;
If the message included in the message is an authenticated message, extracting authentication confirmation information to check whether the message is an authenticated message, and if the authentication confirmation information is encrypted with a predetermined encryption algorithm based on user terminal information, An authentication unit for decrypting the authentication confirmation information using the terminal information and the encryption algorithm;
When the message is checked to be an authenticated message,
Lt; / RTI > delete 13. The method of claim 12,
Wherein the authentication confirmation information includes:
Wherein the hash algorithm is encrypted or generated as an OTP value based on the user terminal information. 13. The method of claim 12,
Wherein,
And checks whether the message is authenticated by checking the specific value if the authentication confirmation information is recorded in a predetermined value predefined in the PID field of the message. 13. The method of claim 12,
Wherein,
Wherein the information indicating that the message is an authenticated message is displayed on a screen on a screen or in a picture or is outputted as a sound. A message processing method in a user terminal including a communication unit, an authentication unit, and a control unit,
Receiving a message from the communication unit through a communication network;
Checking whether the message includes authentication confirmation information indicating that the message is an authenticated message;
Decrypting the authentication confirmation information using the user terminal information and the encryption algorithm if the authentication confirmation information is encrypted with a predetermined encryption algorithm based on user terminal information;
Extracting the authentication confirmation information from the authentication unit and authenticating whether the message is an authenticated message,
When the control unit determines that the message is an authenticated message,
≪ / RTI > delete 18. The method of claim 17,
Wherein the authenticating comprises:
And authenticating whether the message is authenticated by checking the specific value when the authentication confirmation information is recorded in a PID field of the message with a predetermined value defined in advance.

Images