KR101615686B1 - Method for Providing Mobile OTP based on Location - Google Patents

Abstract

The present invention relates to a method for providing a location-based mobile object, the method being implemented in a wireless terminal having a program for generating an OTP (One Time Password), the method comprising the steps of: And authenticates the location of the wireless terminal corresponding to the location information through the location authentication information stored in the designated storage medium to perform an authentication procedure for confirming the validity of OTP generation, And generates a seed value for at least one of seeds for OTP generation, and dynamically generates an OTP using the seed for OTP generation.

Location, base, otipi

Description

[0001] The present invention relates to a location-based mobile service providing method,

1 is a diagram illustrating a wireless terminal function configuration having a function of generating an OTP using location information of a wireless terminal according to an embodiment of the present invention.

2 is a diagram illustrating a configuration of a wireless OTP system according to an embodiment of the present invention.

3 is a diagram illustrating an OTP media registration process according to an embodiment of the present invention.

4 is a diagram illustrating an OTP generation process according to the first embodiment of the present invention.

5 is a diagram illustrating an OTP generation process according to a second embodiment of the present invention.

6 is a diagram illustrating an OTP generation process according to a third embodiment of the present invention.

7 is a diagram illustrating an OTP generation process according to a fourth embodiment of the present invention.

DESCRIPTION OF THE EMBODIMENTS

100: wireless terminal 105:

110: Screen output unit 115: Sound processing unit

120: key input unit 125: position positioning unit

130: Battery 135:

140: USIM 145: USIM reader unit

150: memory unit 155: authentication unit

160: authentication processing unit 165:

170: Information configuration unit 175: OTP generation unit

180: OTP output unit

The present invention provides a method executed by a wireless terminal having a program for generating an OTP (One Time Password), comprising the steps of: confirming position information of a position of the wireless terminal using a position locator provided in the wireless terminal; An authentication procedure for authenticating the location of the wireless terminal corresponding to the location information through the location authentication information stored in the designated storage medium and confirming the validity of the OTP generation is performed, The present invention relates to a method for providing a location-based mobile service that forms at least one seed value and dynamically generates an OTP using a seed for generating the OTP.

As non-face-to-face transactions are activated by the development of information and communication technology, non-face traders must certify that the connected user is a valid trader through the communication network and prepare for accidents that may occur.

In the non-face-to-face transaction, the most common method for authenticating a user connected through a communication network is authentication using ID / PW. However, due to the problem that the ID / PW is easily exposed, And is used to identify a trader rather than to be used as a transaction.

As a non-face transaction authentication method more advanced than the method using the ID / PW, an authentication method using a public certificate is used. When a medium (for example, a computer) on which the public certificate is recorded is hacked or a keyboard hacking program When the non-face-to-face transaction is processed through the installed terminal, the authorized certificate also has a problem that it can not provide reliable non-face-to-face transaction authentication.

One-time password (OTP) is used as a method for solving the problem of the above-mentioned public certificate. The OTP is a fixed seed that is exchanged / shared by a trading partner in a non-contact manner when the one or more fixed seed values and a fixed seed value dynamically determined at the time of generating the secret are determined and determined at the time of non- Value and a dynamic seed value are substituted into a predetermined code generation algorithm (for example, a hash function) to generate a usable OTP, exchange and authenticate the generated OTP, and reuse the same OTP even if the OTP is exposed It is used as an authentication means that is safer to hacking than other authentication means.

In order to generate the OTP as described above, the user has to carry a portable device called OTP generator. In recent years, the OTP generator has been implemented in an OTP generation program (for example, an OTP generation algorithm A program code and a seed value) are installed and used as an OTP generator.

However, in the conventional mobile phone OTP generator, an OTP generator in the form of a portable device is implemented as a program code on a mobile phone, and the OTP generation program installed in the mobile phone OTP generator is copied (for example, ), Or when the mobile phone OTP generator replicates a mobile phone in which the OTP generation program is installed, the mobile phone OTP generator is no longer reliable.

Also, when wireless non-face-to-face transaction such as wireless settlement / banking is used through a mobile phone used as the mobile phone OTP generator, the mobile phone is used as a transaction medium for the non-face-to-face transaction, In this case, the wireless non-face-to-face transaction as described above may not satisfy the two-factor authentication condition that the transaction medium and the authentication medium must be separated into different media in the non-face-to-face transaction through OTP authentication It has a problem.

In order to solve the above problems, an object of the present invention is to provide a method for performing a method in a wireless terminal having a program for generating an OTP (One Time Password), the method comprising: And authenticates the location of the wireless terminal corresponding to the location information through the location authentication information stored in the designated storage medium to perform an authentication procedure for confirming the validity of OTP generation, And a seed for generating an OTP using the position of the OTP, and dynamically generating an OTP using the seed for generating the OTP.

delete

A method of providing a location based mobile object according to the present invention is a method executed in a wireless terminal having a program for generating an OTP (One Time Password), the method comprising: And a second step of authenticating the location of the wireless terminal corresponding to the location information through the location authentication information stored in the designated storage medium and performing an authentication procedure for confirming the validity of OTP generation, And a fourth step of dynamically generating an OTP by using a seed for OTP generation, and a third step of constructing at least one seed value among the seeds for OTP generation using the position of the wireless terminal .
In the method for providing location-based mobile orthophysy according to the present invention, the location of the wireless terminal includes at least one of a position determined by receiving a radio frequency signal from a plurality of base stations, and a position positioned using GPS .
In the method of providing location-based mobile authentication according to the present invention, the method further comprises registering and storing the location authentication information.
In the method of providing location-based mobile opportuniies according to the present invention, the OTP generation validity is confirmed through a program for generating an OTP in the wireless terminal or through a server communicating with the wireless terminal .
The method comprising: transmitting a predetermined OTP medium information for OTP medium authentication to a server authenticating a wireless terminal having the program as an OTP medium for generating an OTP; And receiving a result of authenticating the wireless terminal on which the program is executed based on the OTP medium information with the OTP medium.
In the method of providing a location-based mobile object according to the present invention, the third step may include: identifying a unique position value that uniquely identifies a specific location area to which a location coordinate corresponding to the location information of the wireless terminal belongs; And constructing at least one seed value for OTP generation using the position value.
In the method for providing location based mobile object according to the present invention, the position value may include address information on the administrative area, a location code assigned to the address on the administrative area, a coordinate value and a landmark located within a predetermined distance A position code assigned to the landmark, information identifying a position area set on the designated position coordinate system, and a position code assigned to the position area.
A method of providing location-based wireless notifications according to the present invention includes storing wireless terminal unique information, wireless terminal location information, and server-side OTP generation information in a storage medium in association with each other, The method includes receiving OTP generated through OTP generation information including position information as a seed value, checking the unique information of the wireless terminal that generated the OTP, and transmitting, from the storage medium, And generating OTP generation information including a seed value included in the server-side OTP generation information and a seed value corresponding to the wireless terminal position information, and transmitting the OTP generation information through the OTP generation information, And verifying the received OTP validity by comparing (or verifying) the received OTP with the generated OTP ' Characterized in that where the lure.

Meanwhile, a method of providing location-based wireless notifications according to the present invention includes storing wireless terminal specific information and wireless terminal location information in a storage medium in association with OTP generation information including a seed value, Receiving the OTP generated through the OTP generation information including the wireless terminal location information obtained through the OTP generation process as seed value, checking the wireless terminal unique information that generated the OTP, Authenticating the received OTP validity by comparing the received OTP with the generated OTP 'by checking the associated OTP generation information, generating OTP' through the OTP generation information, And the like.

Meanwhile, the method for providing location-based wireless notifications according to the present invention includes: acquiring wireless terminal location information corresponding to the location of the wireless terminal to locate the wireless terminal when generating a One Time Password (OTP) Configuring OTP generation information including wireless terminal location information as a seed value, and generating and outputting an OTP using at least one fixed seed value included in the OTP generation information and a dynamic seed value dynamically determined The method comprising the steps of:

A method for providing location-based wireless notifications according to the present invention includes the steps of storing location authentication information including location information for generating an OTP in a storage area of a wireless terminal, and when the location information of the wireless terminal is acquired, And verifying the validity of OTP generation by comparing (or verifying) the location authentication information with the location authentication information.

The method of providing location-based wireless notifi according to the present invention includes the steps of: confirming location information of a wireless terminal that has generated the OTP when the OTP is received; checking wireless terminal location information The method comprising the steps of:

In the method of providing location-based wireless notifications according to the present invention, the step of verifying the location information of the wireless terminal that generated the OTP may include receiving the wireless terminal location information from the wireless terminal that generated the OTP, When the OTP is inputted and transmitted through the user terminal, the communication address information of the user terminal is transmitted to the communication company server connected to the user terminal Or if the user terminal to which the OTP is input is a terminal-an affiliate terminal or a financial terminal managed by the terminal management entity, the user terminal information To the terminal management entity, and transmits the location of the user terminal, As shown in FIG.

The method of providing location-based wireless notifications according to the present invention may further include processing the wireless terminal location information by hashing the wireless terminal location information into a seed value data structure of the OTP generation information.

In the method of providing location-based wireless notifications according to the present invention, the wireless terminal location information may include coordinate values including a longitude value at which the wireless terminal is located and a latitude value, , Landmark information, and a location code.

In the method of providing location-based wireless notifications according to the present invention, the wireless terminal location information is included as a dynamic seed value of the OTP generation information dynamically determined according to the location of the wireless terminal.

In the method for providing location-based wireless notifications according to the present invention, the OTP generation information includes wireless terminal specific information as a fixed seed value.

The OTP generation information may be generated by combining server-side OTP generation information including a parameter for determining one or more fixed seed values and a dynamic seed value and the wireless terminal location information .

The OTP generation information may be generated by combining terminal-side OTP generation information including a parameter for determining one or more fixed seed values and a dynamic seed value, and the wireless terminal location information .

On the other hand, a computer-readable recording medium having recorded thereon a program for executing the above-described location-based wireless notifie providing method.

Meanwhile, the wireless terminal according to the present invention includes: a position locator for obtaining wireless terminal position information corresponding to the wireless terminal position to position the wireless terminal when generating a One Time Password (OTP) at the wireless terminal; An OTP generation unit that generates OTP by using an information component that configures OTP generation information including wireless terminal location information as a seed value and a dynamic seed value that is dynamically determined by one or more fixed seed values included in the OTP generation information; And a plurality of second electrodes.

Meanwhile, the location-based wireless notifie providing system according to the present invention includes a storage medium for storing wireless terminal unique information, wireless terminal location information, and server-side OTP generation information in association with each other, An information receiving means for receiving an OTP generated through OTP generation information including location information as a seed value; and a radio communication means for verifying the radio terminal unique information that generated the OTP, Information generating means for generating OTP generation information including a seed value included in the server-side OTP generation information and a seed value corresponding to the wireless terminal position information; (Or verification operation) between the received OTP and the generated OTP 'to verify the received OTP validity It is characterized by having formed the OTP authentication means.

Meanwhile, the location-based wireless notifie providing system according to the present invention comprises: a storage medium for storing and storing OTP generation information including wireless terminal specific information and wireless terminal location information as a seed value; An OTP generation unit configured to receive the OTP generated through the OTP generation information including the wireless terminal location information of the wireless terminal as seed values; (Or verification operation) between the received OTP and the generated OTP ', thereby authenticating the received OTP validity, by comparing the received OTP with the generated OTP' And an OTP authentication means.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

1 is a diagram illustrating a functional configuration of a wireless terminal 100 having a function of generating an OTP using location information of a wireless terminal 100 according to an embodiment of the present invention.

1 is a block diagram illustrating an exemplary configuration of a wireless terminal 100 having an OTP agent and a positioning function of a wireless terminal 100 according to an embodiment of the present invention. Time password, it is possible to have a person skilled in the art to which the present invention pertains, by referring to and / or modifying the figure 1, It is possible to deduce an operation method having a function of generating an OTP by using the location information of the mobile terminal 100 in a terminal (e.g., a portable Internet terminal), and the present invention includes all the above- And the technical features thereof are not limited only by the method shown in FIG.

1, when a mobile phone connected to a mobile communication network is provided with the positioning function of the mobile terminal 100 and an OTP agent, an OTP of N digits is generated using the position information of the mobile terminal 100 in the mobile phone The technical features of the present invention will be described.

The wireless terminal 100 according to an embodiment of the present invention includes an outer body in terms of hardware and a speaker and a microphone, a keypad, a liquid crystal display (LCD), an antenna, and a battery 130 A modem chip (for example, an MSM series modem chip of Qualcomm of the United States) that incorporates functions such as a CDMA (Code Division Multiple Access) modem, a CPU / MPU (Central Processing Unit / Micro Processing Unit) , A memory device, a duplexer filter that separates the transmit and receive signals from one antenna, a power amplifier that amplifies the transmit signal, a high power amplifier (HPA), an isolator that prevents reverse transmission of high- An RF / IF SAW filter for eliminating the desired out-of-band spurious signal, a frequency upstream circuit for the transmission path, a frequency downconversion circuit for the reception path, a VCTCXO (Vol a UHF frequency synthesizer used as a local signal of frequency up / down conversion, and a codec chip for converting an analog voice signal into a digital signal. Elements are gradually integrated into the modem chip. Various functions for various multimedia services or various additional services are integrated in the modem chip in addition to core components for the mobile communication service.

1, the wireless terminal 100 includes a control unit 105 corresponding to the modem chip on a structure corresponding to the component, a screen output unit 110 corresponding to a LCD (Liquid Crystal Display) A sound processing unit 115 corresponding to the microphone / speaker, a key input unit 120 corresponding to the keypad, a wireless communication unit 135 corresponding to the antenna and various RF modules, and a memory unit (not shown) corresponding to the nonvolatile memory A Universal Subscriber Identity Module 140 corresponding to an integrated circuit (IC) chip for storing universal subscriber identification information, a USIM reader 140 for reading / writing information (or data) And a battery 130 for power supply. The USIM 140 and the USIM reader 145 may be omitted according to the intention of those skilled in the art.

According to the present invention, the wireless terminal 100 includes a wireless terminal 100 including a coordinate value (or a position value) corresponding to the position of the wireless terminal 100 in order to position the wireless terminal 100, And a position locating section (125) for constituting information.

The control unit 105 includes a processor including a CPU / MPU provided in the modem chip and an execution memory, and includes a program routine for providing a function peculiar to the wireless terminal 100 from a memory device, (Or an integrated circuit) provided for the bus (BUS) for inputting and outputting program data, and the memory (150) or the memory device (or chipset) A program routine or program data that is loaded into the wireless terminal 100 and processed through the processor to perform a specific function (thus, the location of the wireless terminal 100 to generate the OTP using the location information of the wireless terminal 100) The program code constructing unit corresponding to the OTP agent recorded on the recording medium is provided in the control unit 105 for convenience (Not shown) and one or more system management routines (e.g., power management routines, channel (forward / backward) management routines, power management routines, And a handoff routine (not shown). The control unit 105 realizes various functional configurations to be implemented in the wireless terminal 100. FIG.

According to an embodiment of the present invention, after power is supplied to the wireless terminal 100, the operating system routine (not shown), one or more system management routines (not shown) and various system variables corresponding thereto are transmitted to the controller 105 ), The wireless terminal 100 can determine the system setting detailed state, the pilot channel obtaining detailed state, the synchronous channel obtaining detailed state, and the timing conversion detailed state according to the booting procedure, Quot; mobile station initialization state ", which is included.

After performing the booting procedure, the operating system routine (not shown), one or more system management routines (not shown) and various system variables corresponding thereto are loaded into the execution memory provided in the control unit 105, The wireless terminal 100 is set to the operation mode corresponding to the "mobile station call waiting state ", the" system access state ", or the " Processing) procedure.

According to the embodiment of the present invention, it is preferable that the function of generating the OTP is started (or realized) by key input in the operation mode corresponding to the "mobile station call waiting state"

The screen output unit 110 is a function configuration unit for a screen for checking operation modes of the wireless terminal 100 and corresponding operation states of the wireless terminal 100. The screen output unit 110 includes one or more LCDs And a driver for driving the screen output device. The control unit 105 may output one or more key data input through the key input unit 120 in association with the control unit 105, A function processing screen and a function processing result screen corresponding to one or more functions (or programs) provided in the terminal 100 or outputting one or more contents (or downloaded) provided in the wireless terminal 100 (E.g., text content, image content, and multimedia content).

According to the embodiment of the present invention, the screen output unit 110 preferably performs a function of a menu screen corresponding to the function of generating the OTP, a function processing screen, and a screen output means for outputting a function processing result screen .

The sound processing unit 115 processes a sound input and output in each operation mode of the wireless terminal 100. The sound processing unit 115 decodes one or more encoded sound data, And a vocoder and a codec for encoding and outputting a sound signal input through a microphone provided in the wireless terminal 100 or a speaker.

According to the embodiment of the present invention, the sound processing unit 115 may generate sound data corresponding to a ringback tone through the speaker in an operation mode corresponding to the "system access state" among the operation modes of the wireless terminal 100 It is preferable to decode and output the voice signal, or to encode and input the voice signal through the microphone in the operation mode corresponding to the "call channel state ", or to decode and output the voice signal through the speaker.

In addition, the sound processing unit 115 may reproduce one or more sound contents or multimedia contents provided in (or downloaded from) the mobile terminal 100 in one or more operation modes including the " It is preferable that the sound data corresponding to the content is decoded and output.

The key input unit 120 may include a key input device having one or more key buttons including a number key, a character key or a function key, Wherein the key input device detects one or more key input signals generated by clicking (or inputting) the key button in the key input device.

According to the present invention, when a key input signal is detected from a key button provided in the key input device in an input mode or one or more operation modes controlled by the control unit 105, the key input unit 120 detects the key (E.g., MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, and MH_KEY_RELEASEEVENT) corresponding to the input signal, and provides the generated key event to the control unit 105. The control unit 105 controls the wireless terminal 100 (For example, from a key table storing (managing) one or more key data corresponding to a specific key event in each input mode or operation mode) in a current input mode or an operation mode of the key input device Reading the key data in the key event), or reading an instruction that executes a function defined by matching with the key event It characterized.

According to an embodiment of the present invention, the key input unit 120 inputs a telephone number in an operation mode corresponding to the "mobile station call waiting state" among the operation modes of the wireless terminal 100, It is preferable to change the operation mode of the wireless terminal 100 to the operation mode corresponding to the "system access state ".

The key input unit 120 inputs a function key (e.g., a menu key) in an operation mode corresponding to the "mobile station call standby state" among the operation modes of the wireless terminal 100, It is preferable to execute various functions provided in the mobile terminal.

According to an embodiment of the present invention, the key input unit 120 performs a function of key input means for inputting one or more key data corresponding to the function of generating the OTP.

The wireless communication unit 135 includes a CDMA modem and various RF modules (e.g., a duplexer filter, a power amplifier, a high power amplifier (HPA), an isolator ), An RF / IF SAW filter, a frequency up conversion circuit, a frequency down conversion circuit, a VCTCXO corresponding to a reference clock source, a UHF frequency synthesizer, etc.) and an antenna and a driver for driving the antenna. A Slot Mode, a Power Control, a Handoff, or a Call Processing procedure corresponding to each operation mode of the wireless terminal 100 .

According to another embodiment of the present invention, if the wireless terminal 100 shown in FIG. 1 is a portable Internet terminal, the wireless communication unit 135 may access a portable Internet based on IEEE 802.16x and configure a wireless communication function And it is possible to implement the present invention by modifying various other types of wireless communication configurations for providing wireless data communication in addition to the portable Internet. It is clear that it is not.

The USIM reader 145 is a functional component for exchanging one or more pieces of information (or data or commands) with the USIM 140 mounted or detached from the wireless terminal 100 through a standard including ISO / IEC 7816. [ The IC card reader includes a contact type IC card reader corresponding to the ISO / IEC 7816 standard. The IC card reader reads one or more pieces of information (or data) from the USIM 140 through an APDU (Application Protocol Data Unit) Data, or command) is exchanged.

The USIM 140 mounted on or detached from the wireless terminal 100 is an IC chip conforming to the ISO / IEC 7816 standard. Referring to the ISO / IEC 7816 standard, the USIM 140 includes a power supply (VCC) (E.g., commands or data) with the USIM reader unit 145 through contact points such as a reset signal RST, a clock signal CLK, a ground GND, a programming power supply VPP, an input / output An input / output interface for exchanging information with a processor, a processor unit including at least one computing element including a central processing unit (CPU), a micro processing unit (MPU), and a coprocessor, (E.g., ROM) among the memory devices, and a memory including at least one memory device including a random access memory (RAM), an electrically erasable programmable read only memory (EEPROM), and a flash memory (FM) Management of IC card internal resources When a power is supplied from the USIM reader 145 through the power supply (VCC) contact point of the input / output interface, the COS stored in the memory is stored in the execution memory (USIM 140) through an APDU (Application Protocol Data Unit) based on a clock frequency (e.g., 3.57 MHz or 4.9 MHz) of the clock signal (CLK) And the USIM reader unit 145. [0050] FIG.

According to the present invention, it is preferable that the memory of the USIM 140 is provided with an OTP applet including various information and a program code necessary for generating the OTP in the wireless terminal 100, A storage unit (not shown) for storing a data set corresponding to information or data read out or used by a processor provided in the processor 100, and a USIM (not shown) by a computation function of the processor unit and a command set provided by the COS 140), and executes a program routine (for example, a Java applet in the case of a Javacard) used by a processor included in the wireless terminal 100, Processing corresponding to an application including an instruction calling code that interacts with the set and an execution code that is processed by the processor unit (Not shown). In particular, the processing unit reads an instruction provided from a processor included in the wireless terminal 100 via the input / output interface through the APDU, and stores the command in the storage unit on the basis of the read command And provides the result or the read information or data to the processor included in the wireless terminal 100 through the input / output interface through the APDU.

According to an embodiment of the present invention, it is preferable that the storage unit of the OTP applet stores terminal-side OTP generation information for generating the N (N > = 2) OTPs in the wireless terminal 100, The terminal side OTP generation information may be omitted.

The terminal side OTP generation information includes a parameter for determining a fixed seed value dynamic seed value for generating N (N > = 2) OTPs in the OTP agent included in the wireless terminal 100 The dynamic seed value determined by the fixed seed value and the parameter is substituted into the predetermined OTP generation algorithm and the OTP generation method to generate N-digit OTP.

For example, if the OTP is generated in a time-synchronized manner, the terminal-side OTP generation information includes at least one fixed seed value to be substituted into the time-synchronized OTP generation algorithm, and a parameter for determining a dynamic seed value , And a synchronization time setting value for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP).

Alternatively, if the OTP is generated in a challenge-response manner, the terminal-side OTP generation information includes at least one fixed seed value to be substituted into the challenge-response OTP generation algorithm and a parameter for determining a dynamic seed value A random number generation value for generating a random number of a challenge-response, or random number reception information for receiving a random number).

According to an embodiment of the present invention, the terminal-side OTP generation information may be stored in the storage unit of the OTP applet in association with the OTP agent included in the user wireless terminal 100 (encrypted storage is possible).

According to an embodiment of the present invention, the USIM 140 may have a function of generating the N (N> = 2) OTPs, and the OTP generation information for generating the N-digit OTP The processing unit of the OTP applet may include at least one fixed seed value for generating the N-digit OTP through the OTP generation information provided through the wireless terminal 100, And a program code for generating the OTP by inputting the determined one or more fixed seed values and the dynamic seed value into the set OTP algorithm.

When a location for generating an N-digit OTP using the wireless terminal 100 as an OTP medium is previously registered according to an embodiment of the present invention, the storage unit of the OTP applet includes a wireless terminal (Or encrypts and stores) location authentication information corresponding to the location of the wireless terminal 100. In this case, the processing unit of the OTP applet transmits the location information of the wireless terminal 100 actually positioned from the wireless terminal 100 (Or verifies) the location information of the positioned wireless terminal 100 with the location authentication information stored in the storage unit and generates an OTP using the location information of the wireless terminal 100 in the wireless terminal 100 And respond to the wireless terminal 100 with the result of the validity authentication.

When the location information of the wireless terminal 100 is compared with the location authentication information and the OTP generation validity is authenticated, the location authentication information preferably includes an information configuration to be compared with the location information of the wireless terminal 100, When the location information and the location authentication information of the wireless terminal 100 are verified and verified to authenticate the OTP generation, the location authentication information is calculated with the location information of the wireless terminal 100, Value. ≪ / RTI >

According to an embodiment of the present invention, the memory of the USIM 140 is divided into a subscriber information area having a fixed memory address and an application area having a directory file (EFdir) structure. The application area is based on ISO / IEC 10202 The memory includes a protection area in which secret information such as a chip serial number (CSN) is stored, a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the OTP applet is stored in a designated storage area other than the protection area and the COS control area.

According to the ISO / IEC 7816 standard, an application area of the memory includes one master file (MF) corresponding to a root file, and function information for one or more storage information under the master file (DF) corresponding to each ICC storage information, and actual information or data for a smart card service disposed under the dedicated file are included The OTP applet includes a file structure including the above-described file structure.

The memory unit 150 includes a storage medium for storing one or more pieces of information (or data) in the wireless terminal 100, and a generic name of a nonvolatile memory corresponding to a recording medium for recording a program code corresponding to one or more program routines A read only memory (ROM) corresponding to the read-only memory, a flash memory (FM) capable of reading / writing, and an EEPROM (Electrically Erasable and Programmable Read Only Memory) .

According to the embodiment of the present invention, the memory unit 150 can encrypt and store the terminal side OTP generation information for generating the N (N> = 2) OTPs in the wireless terminal 100 , The terminal side OTP generation information may be omitted according to the method. However, when the terminal side OTP generation information is stored in the memory unit 150, the terminal side OTP generation information is preferably encrypted and stored in the memory unit 150.

The terminal side OTP generation information includes a parameter for determining a fixed seed value dynamic seed value for generating N (N > = 2) OTPs in the OTP agent included in the wireless terminal 100 The dynamic seed value determined by the fixed seed value and the parameter is substituted into the predetermined OTP generation algorithm and the OTP generation method to generate N-digit OTP.

For example, if the OTP is generated in a time-synchronized manner, the terminal-side OTP generation information includes at least one fixed seed value to be substituted into the time-synchronized OTP generation algorithm, and a parameter for determining a dynamic seed value , And a synchronization time setting value for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP).

Alternatively, if the OTP is generated in a challenge-response manner, the terminal-side OTP generation information includes at least one fixed seed value to be substituted into the challenge-response OTP generation algorithm and a parameter for determining a dynamic seed value A random number generation value for generating a random number of a challenge-response, or random number reception information for receiving a random number).

When the location for generating the N-digit OTP using the wireless terminal 100 as the OTP medium is previously registered according to the embodiment of the present invention, the memory unit 150 stores the location of the wireless terminal 100 to generate the N-digit OTP In this case, if the position information of the wireless terminal 100 is acquired through the positioning function of the wireless terminal 100, the wireless terminal 100 may transmit the location authentication information to the wireless terminal 100, The mobile terminal 100 compares (or verifies) the location information of the positioned wireless terminal 100 with the stored location authentication information and generates an OTP using the location information of the wireless terminal 100 in the wireless terminal 100 And respond to the wireless terminal 100 with the result of the validity authentication.

The position locating unit 125 locates the position of the wireless terminal 100 and transmits position information of the wireless terminal 100 including coordinate values (or position values) corresponding to the position of the wireless terminal 100 .

According to an embodiment of the present invention, the position locating unit 125 reads a satellite signal received from a GPS (Global Positioning System) satellite to locate the position of the wireless terminal 100, Or a position value) of the wireless terminal 100. [0034] FIG.

The coordinate value of the wireless terminal 100 is preferably a position of the wireless terminal 100 on the GPS position coordinate system with respect to the position of the wireless terminal 100 positioned using the GPS and includes a longitude value and a latitude value Do.

The location value of the wireless terminal 100 may include address information indicating the location of the wireless terminal 100 positioned using the GPS as an address on the administrative area, a location of the wireless terminal 100, Landmark information including a landmark name (e.g., " Seoul City Hall ") or landmark code (e.g., a code value assigned to Seoul City Hall), a location code of the wireless terminal 100 When the wireless terminal 100 coordinate value is included in a rectangular area including a (longitude 1, latitude 1) and (longitude 2, latitude 2) on the GPS position coordinate system, (Code value assigned to the (100) coordinate value).

According to the embodiment of the present invention, in order to configure the device position value of the wireless terminal 100, the memory unit 150 stores the address information (the coordinate value) matching the longitude value and the latitude value (E.g., home address information, company address information, merchant address information), landmark information, and a location code (e.g., home location code, company location code, and merchant location code).

According to another embodiment of the present invention, the position locating unit 125 may be a terrestrial wireless system (for example, a wireless communication system, a wireless communication system, a wireless communication system, etc.) (For example, a method of tracking the position of the wireless terminal 100 in a triangulation manner through a time difference of a frequency signal) or a cell ID method (e.g., a method of detecting a position of a wireless base station 100 (Or a position value) of the wireless terminal 100 positioned through the position of the wireless terminal 100 (for example, a method of tracking the position of the wireless terminal 100) It is desirable to construct the information.

Here, the coordinate value of the wireless terminal 100 is a position of the wireless terminal 100 on the position coordinate system with respect to the position of the wireless terminal 100 positioned through the terrestrial system or the cell ID system, including the longitude value and the latitude value .

The location value of the wireless terminal 100 may include address information indicating the location of the wireless terminal 100 positioned using the terrestrial system or the cell ID system as an address on the administrative area, Landmark information including a landmark name (e.g., " Seoul City Hall ") or a landmark code (e.g., a code value assigned to Seoul City Hall) located within the wireless terminal 100, (For example, the coordinate value of the wireless terminal 100 is in a position coordinate system (longitude 1, latitude 1), a location code And a code value assigned to a coordinate value of the wireless terminal 100 when the wireless terminal 100 is included in a rectangular area including a longitude 2 and a latitude 2).

According to the embodiment of the present invention, in order to configure the device position value of the wireless terminal 100, the memory unit 150 stores the address information (the coordinate value) matching the longitude value and the latitude value (E.g., home address information, company address information, merchant address information), landmark information, and a location code (e.g., home location code, company location code, and merchant location code).

1, when the location information of the wireless terminal 100 is obtained through the location location determination unit 125, the wireless terminal 100 stores the location information of the wireless terminal 100 in the memory 150, (Or verifies) the location authentication information stored in the wireless terminal 100 to authenticate the validity of generating the OTP based on the location information of the wireless terminal 100 or transmit the location information of the wireless terminal 100 to the USIM 140 And an authentication unit (155) for processing the location information of the wireless terminal (100) so that the validity of generating the OTP is authenticated.

When the position information of the wireless terminal 100 is acquired through the position locator 125, the authentication unit 155 transmits the acquired location information of the wireless terminal 100 to the USIM 140 / Or a data structure that can process the location authentication information stored in the USIM 140 / memory unit 150 and a predetermined verification operation (note that the acquired wireless And may be omitted if the data structure of the location information of the terminal 100 includes a data structure capable of being compared (or verified) with the location authentication information.

When the location information is included in the memory unit 150 according to an embodiment of the present invention, the authentication unit 155 compares the obtained location information of the wireless terminal 100 with the stored location authentication information Or verifies whether the predicted result is derived by processing the obtained verification information on the location information of the wireless terminal 100 and the stored location authentication information and outputs the result to the OTP As shown in FIG.

When the location authentication information is provided to the USIM 140 according to another embodiment of the present invention, the authentication unit 155 transmits the location information of the acquired wireless terminal 100 to the USIM 140 The USIM 140 compares the transmitted location information of the wireless terminal 100 with the stored location authentication information and confirms whether the location information matches the stored location information of the wireless terminal 100, (Or verification operation) result by verifying whether the predicted result is derived by processing a predetermined verification operation on the information, and then verifying the validity of generating the OTP through the location information of the wireless terminal 100 .

According to another embodiment of the present invention, the location authentication information for generating the OTP can be stored and maintained in a server on the communication network. In this case, (Or verification operation) result of the acquired position information of the wireless terminal 100 and the position authentication information stored and held in the server from the server, It is possible to authenticate the validity of generating the OTP through the location information of the terminal 100.

According to another embodiment of the present invention, the USIM 140 / memory unit 150 stores a password (or a personal identification number) registered by a user and inputs a password (or a personal identification number) The authentication unit 155 authenticates the input password (or personal identification number) to authenticate the validity of generating the OTP based on the location information of the wireless terminal 100, or transmits the location information of the wireless terminal 100 It is possible to further include the password (or the personal identification number) in the authentication used, and thus the present invention is not limited thereto.

1, the wireless terminal 100 includes an authentication processing unit 160 for authenticating that the wireless terminal 100 is an OTP medium having the positioning function of the wireless terminal 100 and the OTP agent through the wireless communication network The authentication processing unit 160 may be omitted according to the intention of a person skilled in the art or the authentication unit 155 may authenticate the validity of generating the OTP through the location information of the wireless terminal 100 It is possible to perform a function of extending to a communication network.

The authentication processing unit 160 identifies the unique information of the wireless terminal 100 provided in the USIM 140 and the memory 150 and configures the OTP media authentication information including the unique information of the wireless terminal 100 It is preferable that the wireless terminal 100 is transmitted to a server on a communication network that authenticates the OTP medium, and the OTP medium authentication information is encrypted and transmitted in a decryptable encryption method by the server.

The unique information of the MS 100 provided in the USIM 140 includes a mobile identification number (MIN), a serial number (ESN), a subscriber identification number , An International Mobile Equipment Identity (IMEI), a Mobile Station International ISDN Number (MSISDN), and an IC chip serial number constituting the USIM 140, or the wireless terminal 100 may include one or more (E.g., a non-duplicated code value) or a USIM 140 identifier registered to authenticate that the OTP medium is an OTP medium having an OTP agent.

Alternatively, the unique information of the mobile terminal 100 included in the memory unit 150 may include a mobile identification number (MIN) stored in a predetermined system area of the memory unit 150 provided in the mobile terminal 100, (OTP) that is capable of generating the OTP, or may include at least one of a serial number (ESN), a subscriber identification number, and an International Mobile Equipment Identity (IMEI) (E.g., a non-redundant code value).

According to an embodiment of the present invention, the OTP medium authentication information may further include location information of the wireless terminal 100 in addition to the unique information of the wireless terminal 100. To this end, And stores and maintains location authentication information to be compared (or verified) with the location information of the wireless terminal 100 in the DB. When the location information of the wireless terminal 100 is received, The mobile terminal 100 compares the received location authentication information with the stored location authentication information to verify that the location information matches the location information, or performs a predetermined verification operation on the received location information of the mobile terminal 100 and the stored location authentication information, And a function of transmitting the result of the comparison (or verification operation) to the wireless terminal 100.

Referring to FIG. 1, the wireless terminal 100 includes an information configuration unit (not shown) that configures OTP generation information including the location information of the wireless terminal 100 as a seed value for generating N (N> = 2) (170) for receiving the generated OTP generation information, determining and determining one or more fixed seed values and a dynamic seed value for generating the N-digit OTP from the constructed OTP generation information, and comparing the determined one or more fixed seed values and the dynamic seed value And an OTP generation unit 175 for generating an OTP by substituting the OTP generation algorithm into a predetermined OTP generation algorithm. When the OTP generation information is stored in the USIM 140 / memory, the USIM 140 / The OTP generation unit 170 may further include an information confirmation unit 165 for confirming the terminal side OTP generation information from the memory unit 150. The information configuration unit 170 generates the OTP generation information from the terminal side OTP generation information, To combine location information N (N> = 2) is characterized in that the configuration information for generating the OTP OTP generation of digits.

If the validity of generating the OTP through the location information of the wireless terminal 100 is authenticated by the authentication unit 155 (or the authentication processing unit 160) And if the location information of the wireless terminal 100 does not match the data structure for generating the OTP of the N digits, the location information of the wireless terminal 100 And converting the information into a data structure for generating the N-digit OTP. If the location information of the wireless terminal 100 obtained through the location locator 125 is composed of the data structure for generating the N-digit OTP or the location information of the wireless terminal 100 obtained through the location locator 125 100) position information, it is not necessary to convert the data structure of the location information of the wireless terminal 100, so that the present invention is not limited thereto.

According to an embodiment of the present invention, the location information of the wireless terminal 100 is hashed through a hash function that hashes a series of text / binary data into a seed value data structure constituting the OTP generation information, It is preferable that the data structure is converted into a data structure for generating the OTP of the number of digits.

The information constructing unit 170 is configured to generate OTP generation information for generating N-digit OTPs by including the location information of the wireless terminal 100 as a dynamic seed value for generating the N-digit OTP .

According to the embodiment of the present invention, the information constructing unit 170 includes the unique ID of the wireless terminal 100 stored in the USIM 140 / memory unit 150 as a fixed seed value of the OTP generation information, It is preferable to configure OTP generation information for generating OTP of the number of digits.

If the N-digit OTP is a time-synchronized OTP, the information configuration unit 170 determines a time value (or a time value for a specific time interval) identified from a timer included in the wireless terminal 100 And construct OTP generation information for generating the N-digit OTP by including the determined time value as the dynamic seed value of the OTP generation information.

Alternatively, if the OTP of the N digits is an OTP of the challenge-synchronization type, the information construction unit 170 generates a predetermined random number value and transmits / exchanges with the server, or receives / It is preferable that OTP generation information for generating the OTP of N digits is formed by including the random number value as the dynamic seed value of the OTP generation information.

If the terminal side OTP generation information is stored in the USIM 140 / memory, the information verification unit 165 confirms the terminal side OTP generation information from the USIM 140 / memory unit 150, The OTP generation unit 170 processes the position information of the wireless terminal 100 as a dynamic seed value for generating the OTP of N digits and then combines the confirmed OTP generation information and the location information of the wireless terminal 100 It is preferable to construct OTP generation information for generating OTP of N digits.

When the OTP generation information including the location information of the wireless terminal 100 as the dynamic seed value for generating the N-digit OTP is configured by the information construction unit 170, the OTP generation unit 175 generates Determining one or more fixed seed values included in the OTP generation information, determining one or more dynamic seed values based on the parameters included in the OTP generation information, setting the determined one or more fixed seed values and the dynamic seed value OTP generation algorithm to generate OTPs with N (N > = 2) digits. Here, the number of digits of N for the OTP may be fixed or dynamically changed every time OTP is generated, so that the present invention is not limited thereto.

Referring to FIG. 1, when the N-digit OTP is generated through the OTP generation unit 175, the wireless terminal 100 outputs an OTP output through the screen output unit 110 When the wireless terminal 100 is equipped with a local communication unit (not shown), the OTP output unit 180 transmits the generated OTP To the terminal (or device) located close to the wireless terminal 100.

When the OTP is generated, the OTP output unit 180 outputs the generated OTP to a predetermined area on the screen of the wireless terminal 100 in cooperation with the screen output unit 110.

According to one embodiment of the present invention, the OTP output unit 180 outputs an OTP output screen on the screen of the wireless terminal 100 in association with the screen output unit 110, OTP < / RTI >

According to another embodiment of the present invention, the OTP output unit 180 outputs (or assigns) an OTP output area to the screen area currently output on the screen of the mobile station 100, in association with the screen output unit 110 ), And outputs the generated OTP to the OTP output area.

If the wireless terminal 100 is equipped with local communication means (e.g., Bluetooth, infrared communication, RFID communication, RF communication, etc.), the OTP output unit 180 generates It is possible to output the OTP to the terminal (or device) located close to the wireless terminal 100.

According to another embodiment of the present invention, in the case where the wireless terminal 100 transmits the generated OTP to a server that is provided on the communication network and authenticates the OTP, the OTP output unit 180 transmits the generated OTP to the wireless communication unit 135 (For example, an encryption / decryption-based communication channel) for transmitting the OTP to a server authenticating the OTP through a secure communication channel, It is possible to directly transmit the generated OTP to the server, and thus the present invention is not limited thereto.

2 is a diagram illustrating the configuration of a wireless OTP system according to an embodiment of the present invention.

2 illustrates an OTP agent for generating an OTP of N digits using the location information of the wireless terminal 200 by the wireless terminal 200 having the positioning function of the wireless terminal 200, The terminal 200 is provided with the function configuration of the mobile terminal 200 shown in FIG. 1, and then the mobile terminal 200 authenticates the N-digit OTP generated using the location information of the mobile terminal 200 It should be understood by those skilled in the art that reference is made to and / or modified by reference to FIG. 2 to illustrate various implementations of the wireless OTP system configuration (e.g., some configurations It is to be understood that the invention may be practiced otherwise than as specifically described herein, but it will be understood that the invention encompasses all such contemplated embodiments, Its technical characteristics are not limited.

Referring to FIG. 2, the wireless OTP system includes a wireless terminal 200 having the functional configuration shown in FIG. 1, an OTP authentication request server 200 for requesting OTP authentication to a user having the wireless terminal 200, And OTP medium information corresponding to the wireless terminal 200 registered with the OTP medium and having the same functional configuration as that of FIG. 1 and storing the OTP medium information and the server-side OTP generation information in the storage medium 260, The wireless terminal 200 provides an OTP agent corresponding to the functional configuration of the wireless terminal 200 shown in FIG. 1 (if the OTP agent is provided in the wireless terminal 200) And an OTP operating system for receiving and authenticating N-digit OTPs generated by the mobile terminal 200 using the location information of the mobile terminal 200 when using the terminal 200 as an OTP medium, , According to the intention of a person skilled in the art Achieved by further comprising: a wireless terminal user terminals by the user using the possession of 200 205 and a separate OTP server 220 to authenticate the OTP of the N number of digits generated by the mobile terminal 200.

According to the present invention, in the OTP operating system, each means constituting the OTP operating system is implemented in the form of a single integrated server, or each means (or a combination of two or more means) constituting the OTP operating system, A part of the means constituting the OTP operating system is implemented in the form of a server, and a part of the means is implemented in the OTP server 220, the OTP authentication request server 215, Each of the means constituting the OTP operating system may be implemented as a component of one or more servers of the communication company server 210 provided in the wireless communication network to which the wireless terminal 200 is connected, An OTP authentication request server 215, and a communication company server 210. The OTP operation system is implemented Expression bayida put out clearly that the invention is not limited by the type of server and SHALL implementation location and number.

The wireless terminal 200 may be a wireless terminal 200 that is registered with an OTP medium that generates N-digit OTP using the location information of the wireless terminal 200 among the wireless terminals 200 having the positioning function of the wireless terminal 200 As the communication terminal apparatus, by operating the OTP agent shown in FIG. 1 by receiving an OTP generation request through a key input unit, an OTP generation request by a predetermined menu selection, or an OTP generation command through a wireless communication network, After generating the OTP generation validity, OTP generation information including the location information of the wireless terminal 200 is generated to generate and output N-digit OTP.

The OTP authentication request server 215 is a generic name of servers that request to authenticate a user, payment settlement, and financial transaction through an OTP generated by the wireless terminal 200. The OTP authentication request server 215 includes an OTP A shopping mall server or a content providing server or a home shopping server for processing payment authentication through an OTP generated by the wireless terminal 200, an OTP generated by the wireless terminal 200, The present invention is not limited to the above-described OTP authentication request server 215 and the OTP authentication request method.

The user terminal 205 is a generic name of a communication terminal to which the user having the wireless terminal 200 accesses the OTP authentication request server 215 via a communication network. The user terminal 205 includes a key input unit, a screen output unit, (E.g., a wireless terminal 200, a portable Internet terminal, etc.) connected to a wireless communication network, a bi-directional communication terminal A digital TV having functions, an IP-TV, a household terminal connected to a home network, and the like.

According to the method of the present invention, the user terminal 205 and the wireless terminal 200 may be the same apparatus, and thus the present invention is not limited thereto.

The OTP server 220 receives N-digit OTPs generated by the wireless terminal 200 through a communication network, generates an OTP 'that matches the OTP, compares the OTP with OTP' ) To process the OTP authentication. The function of authenticating the OTP by the OTP server 220 may be provided in the OTP operating system, so that the present invention is not limited thereto.

Referring to FIG. 2, the OTP operating system includes a wireless terminal 200 having a positioning function of the wireless terminal 200, an OTP medium 210 for generating N-digit OTPs using the location information of the wireless terminal 200, And OTP media registration means 225 for registering OTP generation information for generating OTP 'for authenticating N-digit OTPs generated by the wireless terminal 200 and storing the OTP generation information in the storage medium 260 An OTP agent for generating an OTP of N digits using the location information of the wireless terminal 200 is provided to the wireless terminal 200 registered as the OTP medium, And OTP generation information to be transmitted to the wireless terminal 200. The wireless terminal processing unit 230 generates OTP generation information to be transmitted to the wireless terminal 200. FIG.

The OTP media registration means 225 may provide the OTP registration information to the wireless terminal 200. The OTP registration means 225 provides the OTP registration information to the wireless terminal 200, And stores the location information of the mobile terminal 200 in the OTP registration terminal (or the customer terminal used by the customer). The OTP registration information is stored in the storage medium 260, The OTP media registration means 225 further stores the location information of the mobile terminal 200 in the OTP medium information and stores it in the storage medium 260. [

The OTP registration terminal is a general term of a terminal device requesting to register the wireless terminal 200 as an OTP medium and includes a user terminal 205 used for the user, an OTP registration authority (For example, a national institution terminal, an OTP authentication request server 215, an operator terminal, a credit card terminal, a financial institution terminal, a securities company terminal, and the like) included in the server 215 operating agency, card company, .

The unique information of the mobile terminal 200 included in the OTP medium information includes at least one of a mobile identification number (MIN), a serial number (ESN) stored in a predetermined system area of the memory unit of the mobile terminal 200, An identification number, and an International Mobile Equipment Identity (IMEI), or a separate OTP medium registered to authenticate that the wireless terminal 200 is an OTP medium having an OTP agent capable of generating the N-digit OTP And an identifier (e.g., a code value that is not duplicated).

Alternatively, the unique information of the mobile terminal 200 may include a mobile identification number (MIN), a serial number (ESN), a subscriber identification number, an IMEI (International Mobile Equipment Identity), an MSISDN (Mobile Station International ISDN Number), and an IC chip constituting the USIM, or the wireless terminal 200 may include an OTP (For example, a non-duplicated code value) or a USIM identifier registered to authenticate that the agent is an OTP medium equipped with the agent.

The customer information preferably includes a resident registration number corresponding to a name (or a user) of the wireless terminal 200 to be used as the OTP medium. It is preferable that the customer information includes a name, an address, a contact name And the like.

If the financial transaction is included in the authentication target using the wireless terminal 200 as the OTP medium, the customer information may further include financial information (e.g., account number, bank, etc.) of the customer corresponding to the customer information .

Or card transaction is included in the authentication target using the wireless terminal 200 as the OTP medium, the customer information may further include card information (e.g., card number, card company, etc.) of the customer corresponding to the customer information .

According to the intention of a person skilled in the art practicing the present invention and the field of using the wireless terminal 200 as an OTP medium, the customer information may include various information (for example, an object to be authenticated using the wireless terminal 200 as an OTP medium) And authentication information, the client account information for the game, and the like), and thus the present invention is not limited thereto.

The location information of the wireless terminal 200 may include location information for the user of the wireless terminal 200 to use the wireless terminal 200 as an OTP medium to generate an OTP of N digits, The location information 200 may include a plurality of pieces of location information corresponding to the number of locations for generating the OTP.

The position information of the wireless terminal 200 may be a coordinate value (or a coordinate value) that can be compared (or verified) with the wireless terminal 200 position information obtained by the positioning of the wireless terminal 200 Position value).

When the OTP medium information is received, the OTP media registration unit 225 provides the client information and the unique information of the wireless terminal 200 to the communication company server 210 to which the wireless terminal 200 is connected, It is preferable to authenticate whether or not the use of the wireless terminal 200 as an OTP medium through the server 210 is valid.

If the validity of the OTP medium information is received or the validity of using the wireless terminal 200 as the OTP medium is authenticated, the OTP medium registration means 225 registers the wireless terminal 200 on the basis of the OTP medium information, Side OTP generation information for authenticating the N-digit number of OTPs generated using the location information of the mobile station 200. [

Here, the server-side OTP generation information includes information for generating an OTP 'of N digits to be compared (or verified) with the N-digit OTP generated by the wireless terminal 200, The above-mentioned fixed seed value and the parameter for determining the dynamic seed value.

When the location information of the wireless terminal 200 is used as the dynamic seed value for generating the N-digit OTP, the server-side OTP generation information includes the location information of the wireless terminal 200 in the N Position information setting information of the mobile station 200 for determining the dynamic seed value for generating the OTP of the number of digits. According to the method of the present invention, the location information setting information of the wireless terminal 200 can be implemented in the form of a program code constituting the location checking unit 245 of the OTP operating system. In this case, The location information setting information of the wireless terminal 200 is omitted.

According to an embodiment of the present invention, the location information of the wireless terminal 200 is identical to the dynamic seed value determined through the location information of the wireless terminal 200 obtained by the actual location of the wireless terminal 200 And information for confirming the location information of the mobile terminal 200 for determining the dynamic seed value. The location information setting function of the wireless terminal 200 as described above is a function of setting location information of the wireless terminal 200 by referring to the location information of the wireless terminal 200, Or the program code constituting the positioning means 245 can be implemented in the form of a program code in the configuration of the position information setting information of the wireless terminal 200 and the function of checking the position information of the wireless terminal 200 Do.

When the wireless terminal 200 transmits OTP medium authentication information including location information of the wireless terminal 200 located at the wireless terminal 200 for OTP medium authentication according to an embodiment of the present invention, The location information setting information of the terminal 200 may include information for setting location information of the wireless terminal 200 included in the OTP medium authentication information to be the location information of the wireless terminal 200, Preferably, the location information setting function of the wireless terminal 200 is implemented in the program code constituting the location determination means 245. [

The location information of the wireless terminal 200 may be transmitted to the wireless terminal 200 through the wireless communication network when the location information of the wireless terminal 200 located in the wireless terminal 200 is transmitted through the wireless communication network according to another embodiment of the present invention. And the location information setting function of the wireless terminal 200 may be implemented in the program code of the location determination unit 245. [ .

According to another embodiment of the present invention, when the N-digit OTP is input and transmitted from the user terminal 205, the location information of the wireless terminal 200 is transmitted to the user terminal The location information setting function of the wireless terminal 200 may include information for setting the location information of the wireless terminal 200 to be confirmed based on the location information 205 of the wireless terminal 200, It is preferable to be implemented in the constituent program code.

For example, when the user terminal 205 is a terminal device connected to a communication network, the location information of the mobile terminal 200 may include a communication company (e.g., an Internet service provider) providing a communication network to the user terminal 205 The location information of the mobile terminal 200 including the location value corresponding to one of the address information, the landmark information, and the location code corresponding to the IP address of the user terminal 205 is checked to determine the dynamic seed value And the like.

Alternatively, when the user terminal 205 is a terminal device managed by a terminal management entity such as a merchant terminal or a financial terminal, the location information of the mobile terminal 200 may be transmitted to the user Information for determining the dynamic seed value by checking the position information of the mobile terminal 200 including the position value corresponding to the address information, the landmark information, and the position code corresponding to the terminal information corresponding to the terminal 205 And the like.

According to another embodiment of the present invention, the location information setting information of the wireless terminal 200 may include a dynamic seed value determined through location information of the wireless terminal 200 positioned in a terrestrial system or a cell ID system, The method for determining the dynamic seed value through the location information of the wireless terminal 200 may include a method of determining the dynamic seed value based on the location information of the wireless terminal 200, The same applies to the OTP agent and / or the terminal side OTP generation information provided in the terminal 200.

For example, when the location information of the mobile terminal 200 obtained by the actual location of the mobile terminal 200 includes a coordinate value, the location information of the mobile terminal 200 is transmitted to the mobile terminal 200 ) Is included in the specific coordinate area, the dynamic seed value is determined not by the coordinate value obtained by the positional determination but by the coordinate information corresponding to the coordinate area, and the dynamic seed value is determined And the like.

Alternatively, if the location information of the wireless terminal 200 obtained by the actual location of the wireless terminal 200 includes the coordinate value, the location information of the wireless terminal 200 may be stored in the location information of the wireless terminal 200 It is preferable to include information for allowing the dynamic seed value to be included only in a specific coordinate unit out of the degrees, minutes and seconds of the coordinate value obtained by the positional positioning to be included in determination of the dynamic seed value, .

If the wireless terminal 200 uses the unique information of the wireless terminal 200 provided in the USIM / memory unit as it is or changes the data structure of the unique information of the wireless terminal 200 to generate the N-digit OTP When used as a fixed seed value, the server side OTP generation information preferably includes a fixed seed value corresponding to the unique information of the wireless terminal 200 as a fixed seed value for generating the N-digit OTP '.

According to the embodiment of the present invention, the server-side OTP generation information preferably includes a fixed seed value generated based on the unique information of the mobile station 200 and / or the customer information included in the OTP medium information, The generated fixed seed value is preferably included in the terminal-side OTP generation information to be provided to the wireless terminal 200.

If the N-digit OTP is generated in a time-synchronized manner, the server-side OTP generation information includes synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP .

Or if the N-digit OTP is generated in a challenge-response manner, the server-side OTP generation information may generate a random number corresponding to the dynamic seed value of the challenge-response OTP, or receive a random number through the wireless communication network And a random number generation value for generating a random number.

When the server-side OTP generation information is generated (or allocated), the OTP media registration unit 225 configures terminal-side OTP generation information to be matched with the server-side OTP generation information. Information included in the wireless terminal 200 or can be determined dynamically in the OTP agent provided to the wireless terminal 200 without any additional information, The present invention is not limited thereto.

The OTP medium registration unit 225 stores the OTP medium information and the server side OTP generation information in the storage medium 260 so that the wireless terminal 200 can access the wireless terminal 200 using the location information of the wireless terminal 200 Register as an OTP medium that generates OTP of N digits.

If the location information of the wireless terminal 200 is received from the OTP registration terminal, the OTP media registration means 225 may include the location information of the wireless terminal 200 in the OTP medium information, .

If the wireless terminal 200 does not have an OTP agent corresponding to the configuration of the wireless terminal 200 shown in FIG. 1, the wireless terminal processing unit 230 transmits the OTP agent to the wireless terminal 200 ) And provides the OTP agent program code corresponding to the configuration shown in FIG. 1 to the wireless terminal 200 through the communication channel, so that the wireless terminal 200 The OTP agent program code may be omitted from providing the OTP agent program code to the wireless terminal 200 if the OTP agent is installed in the wireless terminal 200. [

When the terminal side OTP generation information is configured by the OTP media registration means 225, the wireless terminal processing means 230 transmits the OTP generation information to the wireless terminal 200 corresponding to the unique information of the wireless terminal 200 through the wireless communication network Side OTP generation information to the wireless terminal 200 through the communication channel to be recorded in a USIM / memory unit provided in the wireless terminal 200, and the terminal-side OTP Generation information is not configured or the OTP is generated through the wireless terminal 200 unique information of the wireless terminal 200 and the location information of the wireless terminal 200 without the terminal side OTP generation information at the wireless terminal 200 , It may be omitted from providing the terminal side OTP generation information to the wireless terminal 200. [

According to an embodiment of the present invention, the wireless terminal processing unit 230 provides the OTP agent program code and terminal-side OTP generation information to the wireless terminal 200 through a separate communication channel, It is possible to provide the wireless terminal 200 with package data including a code and terminal side OTP generation information.

The wireless terminal processing means 230 may be a wireless terminal 200 that compares (or verifies) the wireless terminal 200 position information with the wireless terminal 200 corresponding to the unique information of the wireless terminal 200 through a wireless communication network, It is preferable to provide the location authentication information corresponding to the location information of the terminal 200 and process the location authentication information to be recorded in the USIM / memory unit provided in the wireless terminal 200. [

When the location information of the wireless terminal 200 is compared with the location authentication information and the OTP generation validity is authenticated, the location authentication information preferably includes an information configuration to be compared with the location information of the wireless terminal 200, When the location information and the location authentication information of the wireless terminal 200 are verified to verify the OTP generation validity, the location authentication information is calculated with the location information of the wireless terminal 200, Value. ≪ / RTI >

Referring to FIG. 2, the OTP operating system receives OTP medium authentication information from the wireless terminal 200 through a wireless communication network, compares OTP medium authentication information with OTP medium information stored in the storage medium 260 (Or verification operation) to authenticate the wireless terminal 200 as an OTP medium.

When the wireless terminal 200 transmits the OTP medium authentication information, the medium authentication unit 235 receives the OTP medium authentication information, and receives configuration information included in the OTP medium authentication information from the storage medium 260 (Or verification operation) between the configuration information included in the OTP medium authentication information and the configuration information included in the OTP medium information, and performs the comparison (or verification operation) with the configuration information included in the OTP medium authentication information, If the configuration information included in the OTP medium authentication information matches (or matches) the configuration information included in the OTP medium information stored in the storage medium 260, or if a result predicted through the verification operation is derived, The wireless terminal 200 that has transmitted the OTP media authentication information is authenticated by the OTP media registration means 225 to the valid wireless terminal 200 registered as the OTP medium.

According to the embodiment of the present invention, the OTP medium authentication information includes the unique information of the wireless terminal 200 provided in the USIM / memory unit of the wireless terminal 200. In this case, the medium authentication unit 235 (Or verify operation) between the unique information of the mobile terminal 200 included in the OTP medium authentication information and the unique information of the mobile terminal 200 included in the OTP medium information stored in the storage medium 260, ) As an OTP medium.

The OTP medium authentication information may further include location information of the wireless terminal 200. When the location information of the wireless terminal 200 is stored in the storage medium 260, (Or verifies) the location information of the mobile terminal 200 included in the OTP medium authentication information with the location information of the mobile terminal 200 included in the OTP medium information stored in the storage medium 260, 200) as an OTP medium.

Referring to FIG. 2, the OTP operating system receives N-digit OTPs generated by using the location information of the mobile terminal 200 in an OTP agent provided in the wireless terminal 200 through a communication network, (240) for confirming the unique information of the wireless terminal (200) that has generated the OTP; location confirmation means (245) for confirming the location information of the wireless terminal (200) An information checking means 255 for checking OTP generation information for generating N-digit OTP 'to be compared (or verified) with an OTP of N digits; an OTP generation means 255 for generating N-digit OTP' And OTP authentication means (250) for comparing (or verifying) the N-number of OTP's with OTP 'to verify that the received OTP is valid. The information receiving means (240) The verification means 255 and the OTP authentication means 250 may be implemented as separate The OTP can be implemented in a server 220, and the present invention is put out to clarify the bayida yirueojim including all possible embodiments how the inference.

When the OTP is input and transmitted through the OTP input interface displayed on the user terminal 205, the information receiving means 240 transmits the OTP to the user terminal 205 via the communication network, The user terminal 205 receives the OTP from the user terminal 205. In this case, the user terminal 205 may receive the unique information of the wireless terminal 200 that generated the N-digit OTP, And the information receiving means 240 receives the unique information of the mobile terminal 200 from the user terminal 205 or receives the OTP medium information from the OTP medium information based on the customer information, It is desirable to confirm the unique information of the wireless terminal 200 that has generated the OTP of the wireless terminal 200.

Alternatively, the wireless terminal 200 can generate the OTP of the N digits and then transmit the generated OTP through the wireless communication network. In this case, the information receiving means 240 may receive the OTP through the wireless communication network, The mobile terminal 200 receives the OTP from the terminal 200. The mobile terminal 200 reads the communication protocol defined in the wireless communication network and confirms the unique information of the wireless terminal 200, (200) unique information.

According to the method of the present invention, when the OTP is encrypted and transmitted, the information receiving unit 240 decodes the OTP according to a predetermined decoding method.

The location confirmation means 245 is characterized by confirming the location information of the mobile terminal 200 used for generating the N-digit OTP in the mobile terminal 200.

When the OTP medium authentication information including the location information of the wireless terminal 200 that has generated the N digits OTP is received by the medium authentication unit 235 according to an embodiment of the present invention, The location information of the mobile terminal 200 included in the OTP medium authentication information.

When transmitting the position information of the wireless terminal 200 obtained by the positioning of the wireless terminal 200 in the wireless terminal 200 having generated the N digits OTP according to another embodiment of the present invention, (245) receives the location information of the wireless terminal (200) from the wireless terminal (200).

For example, when the N-digit OTP is received from the user terminal 205, the location determination unit 245 checks the unique information of the wireless terminal 200 that generated the N-digit OTP, It is preferable to receive the location information of the mobile station 200 from the mobile station 200 through the unique information of the mobile station 200.

Alternatively, when the N number of OTPs are received from the wireless terminal 200, the location checking unit 245 may receive the N-digit OTP and the unique information of the mobile terminal 200 together, It is preferable to receive the location information of the wireless terminal 200 before / after receiving the OTP.

According to another embodiment of the present invention, the location determination unit 245 confirms the location information of the mobile station 200 using the information of the user terminal 205 receiving and transmitting the N-digit OTP.

For example, when the user terminal 205 is a terminal device connected to a communication network, the location checking means 245 confirms the IP address of the user terminal 205 and provides a communication network to the user terminal 205 It is preferable to confirm the location information of the wireless terminal 200 including the location value corresponding to one of the address information, the landmark information, and the location code corresponding to the IP address in cooperation with a communication company (for example, an Internet service provider) Do.

Alternatively, if the user terminal 205 is a terminal device managed by a terminal management entity such as an affiliate terminal or a financial terminal, the location confirmation means 245 may transmit terminal information corresponding to the user terminal 205 And confirms the location information of the mobile terminal 200 including the location value corresponding to one of the address information, the landmark information, and the location code corresponding to the terminal information in association with the terminal management organization.

According to another embodiment of the present invention, the position checking means 245 may check position information of the mobile terminal 200 positioned in a terrestrial or cell ID system in a positioning server provided in a wireless communication network, (The same seed value is determined so as to determine the same dynamic seed value as the dynamic seed value determined from the position information of the mobile terminal 200 positioned in the mobile terminal 200, It may be omitted when the location information of the mobile terminal 200 is confirmed).

The information checking means 255 confirms the server side OTP generation information associated with the unique information of the wireless terminal 200 from the storage medium 260.

According to an embodiment of the present invention, the server-side OTP generation information is identical to the OTP generation information including the location information of the wireless terminal 200 to generate N-digit OTP in the wireless terminal 200 The information confirming means 255 may determine the seed value and the dynamic seed value based on the seed value and the dynamic seed value of the wireless terminal 200 matched with the confirmed location information of the wireless terminal 200 from the storage medium 260, The server side OTP generation information including the location information is confirmed as OTP generation information for generating OTP 'of N digits.

If the location information is not provided by the location confirmation means 245 or the location information of the wireless terminal 200 is not confirmed through the location determination means 245, Side OTP generation information including the location information of the wireless terminal 200 as OTP generation information for generating the N-digit OTP '. In this case, It is possible to generate a plurality of OTP's through a plurality of OTP generation information and to certify which one of the generated OTP's is matched with the N-digit OTP.

If the server side OTP generation information does not include the location information of the wireless terminal 200 according to another embodiment of the present invention, OTP generation for generating an OTP of N digits by combining the server side OTP generation information and the location information of the wireless terminal 200 by checking the location information of the wireless terminal 200 matched with the location information of the wireless terminal 200 When the position information of the wireless terminal 200 does not match the data structure for generating the N-digit OTP ', the information checking unit 255 may transmit the position information of the wireless terminal 200 It is desirable to convert the data structure to generate an OTP of N digits.

If the location information is not provided by the location confirmation means 245 or the location information of the wireless terminal 200 is not confirmed through the location determination means 245, And a plurality of OTP generation information for generating OTP 'of N digits by combining the server side OTP generation information and the plurality of location information of the wireless terminal 200 In this case, the OTP authentication unit 250 generates a plurality of OTP's through the plurality of identified OTP generation information, and determines whether any one of the generated OTPs matches the N-digit OTP It is possible to do.

When the OTP generation information for generating the N-digit OTP 'is confirmed / configured, the OTP authentication unit 250 identifies one or more fixed seed values for generating the OTP' from the OTP generation information, Determines one or more dynamic seed values through the parameters included in the generation information, and substitutes the determined one or more fixed seed values and dynamic seed values into the predetermined OTP generation algorithm to generate OTP 'of N digits.

When the N-digit OTP 'is generated, the OTP authentication unit 250 compares (or verifies) the received N-digit OTP' with the generated OTP 'to authenticate the OTP validity.

If the OTP and OTP 'match (or match) as a result of the comparison, or if a result predicted through a verification operation is derived, the OTP authentication unit 250 processes the OTP validity as authenticated, And provides the validity authentication result to at least one of the OTP authentication request receiving server 215, the user terminal 205, and the wireless terminal 200 that requires the OTP authentication result.

On the other hand, if the OTP and OTP 'do not match (or match) as a result of the comparison, or if the predicted result is not obtained through the verification operation, the OTP authentication unit 250 determines that the OTP validity is not authenticated And provides the OTP validity authentication result to at least one of the OTP authentication request receiving server 215, the user terminal 205, and the wireless terminal 200 that requires the OTP authentication result.

3 is a diagram illustrating an OTP media registration process according to an embodiment of the present invention.

In more detail, FIG. 3 shows a process of registering a user's wireless terminal 200 as an OTP medium on the wireless OTP system shown in FIG. 2, and a person skilled in the art , It is possible to refer to and / or modify the FIG. 3 to derive various implementations of the OTP media registration process (e.g., omitting some steps or changing the order) All the methods of implementation are included, and the technical features thereof are not limited only by the method shown in FIG.

Hereinafter, in FIG. 3, the OTP operating system shown in FIG. 2 is referred to as a "server" for the sake of convenience.

Referring to FIG. 3, when an OTP registration terminal accesses a server through a communication network and requests registration of the user's wireless terminal 200 as an OTP medium (300), the server registers the user information of the user, The OTP registration terminal provides an OTP media registration interface 300 for inputting / registering OTP media information including the unique information of the mobile terminal 200 corresponding to the user's wireless terminal 200, OTP medium information including the unique information of the wireless terminal 200 and the customer information through the registration interface, and transmits the OTP medium information to the server (310).

According to the embodiment of the present invention, when designating a location to generate an N-digit OTP using the wireless terminal 200 as an OTP medium, the OTP registration terminal may determine the location of one or more wireless terminals 200 It is desirable to transfer more information.

The server receives the OTP medium information including the unique information of the wireless terminal 200 and the customer information from the OTP registration terminal and stores the unique information and the customer information of the wireless terminal 200 in the unique information of the wireless terminal 200 It is provided to the corresponding communication company server 210 and the validity of using the wireless terminal 200 corresponding to the unique information of the wireless terminal 200 as the OTP medium is confirmed (315).

If the validity of using the wireless terminal 200 as an OTP medium is not confirmed at step 320, the server provides OTP medium error information to the OTP registration terminal at step 325, The process of registering with the medium is terminated.

On the other hand, if the validity of using the wireless terminal 200 as an OTP medium is confirmed (320), the server generates (using the location information of the wireless terminal 200) in the wireless terminal 200 based on the OTP medium information (Or assigns) the server side OTP generation information for authenticating the N-digit OTP, and stores the OTP medium information and the server side OTP generation information in the storage medium 260 (step 335).

If the location information of one or more wireless terminals 200 to generate the OTP is received from the OTP registration terminal, the server stores the location information of the wireless terminal 200 in the OTP medium information, .

When providing the terminal side OTP generation information to the wireless terminal 200 according to an embodiment of the present invention, the server preferably configures terminal side OTP generation information matching with the server side OTP generation information, Side OTP generation information can be dynamically determined in the OTP agent provided to the wireless terminal 200 without information or including information based on the wireless terminal 200, And the present invention is not limited thereto.

Then, the server checks whether the OTP agent corresponding to the configuration of the wireless terminal 200 shown in FIG. 1 is provided to the wireless terminal 200 corresponding to the unique information of the wireless terminal 200 (340).

According to the embodiment of the present invention, the server transmits OTP agent information (for example, OTP agent version information, OTP issuer information, OTP use location information, OTP agent information, (Not shown) or an OTP server 220 or a communication company server 210 that stores the OTP agent in the wireless terminal 200 in association with the OTP agent.

If the OTP agent is not installed in the wireless terminal 200, the server is operable in a platform (or an operating system) included in the wireless terminal 200, and the wireless terminal 200 shown in FIG. Side OTP generation information to the wireless terminal 200 when the terminal-side OTP generation information matching the server-side OTP generation information is configured, 200), the wireless terminal 200 records the OTP agent in a recording medium (for example, a program area of a USIM / memory) provided in the wireless terminal 200, Information to the OTP agent and stores the information in the USIM / memory unit of the wireless terminal 200 (360).

On the other hand, if the OTP agent is installed in the wireless terminal 200 (345), the server may not provide the OTP agent program code to the wireless terminal 200, Side OTP generation information to the wireless terminal 200 (350), the wireless terminal 200 transmits the terminal-side OTP generation information to the wireless terminal 200 (E.g., a program area of the USIM / memory unit) and stores the program in the USIM / memory unit of the wireless terminal 200 (360).

4 is a diagram illustrating an OTP generation process according to the first embodiment of the present invention.

4 illustrates a process of generating N-digit OTP using the location information of the wireless terminal 200 in the wireless terminal 200 shown in FIG. 1. Referring to FIG. 4, Those skilled in the art will be able to refer to and / or modify this FIG. 4 to infer various implementations of the OTP generation process (e.g., omitting some of the steps or changing the order) The present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

For example, in FIG. 4, for convenience, the wireless terminal 200 transmits OTP medium authentication information including the location information of the wireless terminal 200 and the unique information of the wireless terminal 200 to the OTP operating system shown in FIG. 2 The process of OTP medium authentication for the wireless terminal 200 is illustrated and described, but the present invention is not limited thereto, and the OTP medium authentication process may be omitted.

Hereinafter, in FIG. 4, the OTP operating system shown in FIG. 2 is referred to as a "server" for the sake of convenience.

Referring to FIG. 4, the wireless terminal 200 receives a dedicated key button for requesting to generate an N-digit OTP through key input means, or requests to generate the N-digit OTP through a predetermined menu selection Or when an OTP generation command (or an OTP agent driving command) is received through the mobile communication network, the OTP agent corresponding to the configuration of the wireless terminal 200 shown in FIG. 1 is driven to transmit the wireless terminal 200 The user authentication is requested 400 for use as the OTP medium, and the user authentication is processed through the password (or the personal identification number) (405).

If the user authentication is not processed (410), the wireless terminal (200) outputs user authentication error information (415) and ends the OTP generation process.

If the user authentication is processed (410), the wireless terminal 200 obtains the location information of the wireless terminal 200 through the positioning function of the wireless terminal 200 (420).

If the location information of the mobile station 200 is obtained through the positioning function of the mobile station 200, the mobile station 200 transmits the location information of the mobile station 200, (430), and transmits the OTP medium authentication information to the server (435) to authenticate the wireless terminal (200) as an OTP medium.

If the wireless terminal 200 is not authenticated as an OTP medium (440), the wireless terminal 200 outputs OTP medium error information (445) and ends the OTP generation process.

If the wireless terminal 200 is authenticated as the OTP medium 440, the wireless terminal 200 includes the location information of the wireless terminal 200 as a dynamic seed value for generating the N-digit OTP, OTP generation information for generating the OTP of the mobile communication terminal (450).

According to the embodiment of the present invention, when terminal-side OTP generation information is not stored in the USIM / memory unit, the server transmits the unique information of the wireless terminal 200 stored in the USIM / memory unit to the OTP generation information It is preferable to construct OTP generation information for generating the N-digit OTP.

If the OTP of the N digits is a time-synchronized OTP, the wireless terminal 200 determines a time value (or a time value for a specific time interval) confirmed from a timer included in the wireless terminal 200 , And configures the OTP generation information for generating the N-digit OTP by including the determined time value as the dynamic seed value of the OTP generation information.

Alternatively, if the OTP of the N digits is the challenge-synchronization type OTP, the wireless terminal 200 generates a predetermined random number and transmits / exchanges it with the server or receives / exchanges the random number value generated by the server It is preferable to configure the OTP generation information for generating the N-digit OTP by including the random number as the dynamic seed value of the OTP generation information.

If the terminal side OTP generation information is stored in the USIM / memory, the wireless terminal 200 confirms terminal side OTP generation information from the USIM / memory unit, and the wireless terminal 200 transmits the OTP generation information to the wireless terminal 200, OTP generation for generating N-digit OTP by combining the identified terminal-side OTP generation information and the location information of the wireless terminal 200 after processing the location information into a dynamic seed value for generating the N-digit OTP It is desirable to construct the information.

If the OTP generation information including the location information of the wireless terminal 200 as the dynamic seed value is configured 455, the wireless terminal 200 confirms one or more fixed seed values included in the configured OTP generation information, Determines one or more dynamic seed values through the parameters included in the OTP generation information, and generates and outputs N-digit OTP by substituting the determined one or more fixed seed values and the dynamic seed value into the predetermined OTP generation algorithm (460).

5 is a diagram illustrating an OTP generation process according to a second embodiment of the present invention.

5 illustrates a process of generating N-digit OTPs using the location information of the mobile terminal 200 in the mobile terminal 200 shown in FIG. 1. Specifically, the mobile terminal 200 (Or verification operation) with the location information of the wireless terminal 200 in the USIM / memory unit of the wireless terminal 200, the OTP generation validity using the location information of the wireless terminal 200 through the location authentication information The method comprising the steps of:

Those skilled in the art will be able to refer to and / or modify the FIG. 5 to understand the various ways of implementing the OTP generation process (e.g., omitting some steps or changing the order) However, the present invention includes all of the above-mentioned embodiments, and the technical features of the present invention are not limited by the method shown in FIG.

For example, FIG. 5 illustrates a process of comparing (or verifying) the location information of the wireless terminal 200 obtained through the location determination with the location authentication information stored in the USIM / memory unit to confirm the validity of OTP generation The user authentication process using the user's password (or personal identification number) is omitted for convenience, but the present invention is not limited thereto, and the user authentication process may be further provided.

5, for convenience, the wireless terminal 200 transmits OTP medium authentication information including the location information of the wireless terminal 200 and the unique information of the wireless terminal 200 to the OTP operating system shown in FIG. 2 The process of OTP medium authentication for the wireless terminal 200 is illustrated and described, but the present invention is not limited thereto, and the OTP medium authentication process may be omitted.

Hereinafter, in FIG. 5, the OTP operating system shown in FIG. 2 is referred to as a "server" for convenience.

Referring to FIG. 5, the wireless terminal 200 receives a dedicated key button for requesting to generate an N-digit OTP through key input means, or requests to generate the N-digit OTP through a predetermined menu selection Or when an OTP generation command (or an OTP agent driving command) is received through the mobile communication network, the OTP agent corresponding to the configuration of the mobile terminal 200 shown in FIG. 1 is driven to position the mobile terminal 200 The location information of the wireless terminal 200 is obtained (500).

If the location information of the wireless terminal 200 is acquired through the positioning function of the wireless terminal 200 in step 505, the wireless terminal 200 transmits the acquired location information of the wireless terminal 200 to the USIM / (Or verification operation) with the location authentication information provided in the wireless terminal 200 and confirms the validity of the OTP for generating N-digit OTP through the OTP generation information including the location information of the wireless terminal 200 (510).

If the OTP validity is not confirmed (515), the wireless terminal 200 outputs OTP generation validity error information (520) and ends the OTP generation process.

If the validity of the OTP is confirmed 515, the wireless terminal 200 constructs OTP medium authentication information including the location information of the wireless terminal 200 and the unique information of the wireless terminal 200 (525) (530) to transmit the OTP medium authentication information to the wireless terminal 200 to authenticate the wireless terminal 200 as an OTP medium.

If the wireless terminal 200 is not authenticated as the OTP medium (535), the wireless terminal 200 outputs the OTP medium error information (540) and ends the OTP generation process.

If the wireless terminal 200 is authenticated as an OTP medium (535), the wireless terminal 200 includes the location information of the wireless terminal 200 as a dynamic seed value for generating the N-digit OTP, OTP generation information for generating an OTP of OTP (545).

According to the embodiment of the present invention, when terminal-side OTP generation information is not stored in the USIM / memory unit, the server transmits the unique information of the wireless terminal 200 stored in the USIM / memory unit to the OTP generation information It is preferable to construct OTP generation information for generating the N-digit OTP.

If the N-digit OTP is a time-synchronized OTP, the wireless terminal 200 determines a time value (or a time value for a specific time interval) identified from a timer included in the wireless terminal 200 And construct OTP generation information for generating the N-digit OTP by including the determined time value as the dynamic seed value of the OTP generation information.

Alternatively, if the OTP of the N digits is the challenge-synchronization type OTP, the wireless terminal 200 generates a predetermined random number and transmits / exchanges it with the server or receives / exchanges the random number value generated by the server It is preferable to configure the OTP generation information for generating the N-digit OTP by including the random number as the dynamic seed value of the OTP generation information.

If the terminal side OTP generation information is stored in the USIM / memory, the wireless terminal 200 confirms terminal side OTP generation information from the USIM / memory unit, and the wireless terminal 200 transmits the OTP generation information to the wireless terminal 200, OTP generation for generating N-digit OTP by combining the identified terminal-side OTP generation information and the location information of the wireless terminal 200 after processing the location information into a dynamic seed value for generating the N-digit OTP It is desirable to construct the information.

If the OTP generation information including the location information of the wireless terminal 200 as a dynamic seed value is configured 550, the wireless terminal 200 confirms one or more fixed seed values included in the configured OTP generation information, Determines one or more dynamic seed values through the parameters included in the OTP generation information, and generates and outputs N-digit OTP by substituting the determined one or more fixed seed values and the dynamic seed value into the predetermined OTP generation algorithm (555).

6 is a diagram illustrating an OTP generation process according to a third embodiment of the present invention.

6 illustrates a process of generating N-digit OTP using the location information of the mobile station 200 in the mobile terminal 200 shown in FIG. 1. Specifically, the mobile terminal 200 (Or verification operation) with the location information of the wireless terminal 200 in the USIM / memory unit of the wireless terminal 200, the OTP generation validity using the location information of the wireless terminal 200 through the location authentication information The method comprising the steps of:

Those skilled in the art will appreciate that various implementations of the OTP generation process (e.g., omitting some steps or changing the order) may be implemented by referring to and / or modifying FIG. 6, However, the present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

For example, FIG. 6 includes a step of comparing (or verifying) the position information of the mobile terminal 200 obtained through the positional determination and the position authentication information stored in the USIM / memory unit to confirm the validity of the OTP generation The user authentication process using the user's password (or personal identification number) is omitted for convenience, but the present invention is not limited thereto, and the user authentication process may be further provided.

Hereinafter, in FIG. 6, the OTP operating system shown in FIG. 2 is referred to as a "server" for convenience.

Referring to FIG. 6, the wireless terminal 200 receives a dedicated key button for requesting to generate an N-digit OTP through key input means, or requests to generate the N-digit OTP through a predetermined menu selection Or when an OTP generation command (or an OTP agent driving command) is received through the mobile communication network, the OTP agent corresponding to the configuration of the mobile terminal 200 shown in FIG. 1 is driven to position the mobile terminal 200 The location information of the wireless terminal 200 is obtained (600).

If the location information of the wireless terminal 200 is acquired through the positioning function of the wireless terminal 200 in step 605, the wireless terminal 200 transmits the acquired location information of the wireless terminal 200 to the USIM / (Or verify operation) with the location authentication information included in the wireless terminal 200, and verifies the validity of the OTP that generates the N-digit OTP through the OTP generation information including the location information of the wireless terminal 200 (610).

If the OTP validity is not confirmed (615), the wireless terminal 200 outputs OTP generation validity error information (620), and ends the OTP generation process.

On the other hand, if the OTP validity is confirmed (615), the wireless terminal 200 includes the location information of the wireless terminal 200 as a dynamic seed value for generating the N-digit OTP, OTP generation information is configured (625).

According to the embodiment of the present invention, when terminal-side OTP generation information is not stored in the USIM / memory unit, the server transmits the unique information of the wireless terminal 200 stored in the USIM / memory unit to the OTP generation information It is preferable to construct OTP generation information for generating the N-digit OTP.

If the OTP of the N digits is a time-synchronized OTP, the wireless terminal 200 determines a time value (or a time value for a specific time interval) confirmed from a timer included in the wireless terminal 200 , And configures the OTP generation information for generating the N-digit OTP by including the determined time value as the dynamic seed value of the OTP generation information.

Alternatively, if the OTP of the N digits is the challenge-synchronization type OTP, the wireless terminal 200 generates a predetermined random number and transmits / exchanges it with the server or receives / exchanges the random number value generated by the server It is preferable to configure the OTP generation information for generating the N-digit OTP by including the random number as the dynamic seed value of the OTP generation information.

If the terminal side OTP generation information is stored in the USIM / memory, the wireless terminal 200 confirms terminal side OTP generation information from the USIM / memory unit, and the wireless terminal 200 transmits the OTP generation information to the wireless terminal 200, OTP generation for generating N-digit OTP by combining the identified terminal-side OTP generation information and the location information of the wireless terminal 200 after processing the location information into a dynamic seed value for generating the N-digit OTP It is desirable to construct the information.

If the OTP generation information including the location information of the wireless terminal 200 as the dynamic seed value is configured 630, the wireless terminal 200 checks one or more fixed seed values included in the configured OTP generation information, Determines one or more dynamic seed values through the parameters included in the OTP generation information, and generates and outputs N-digit OTP by substituting the determined one or more fixed seed values and the dynamic seed value into the predetermined OTP generation algorithm (635).

7 is a diagram illustrating an OTP generation process according to a fourth embodiment of the present invention.

7 shows a process of generating N-digit OTPs using the location information of the mobile station 200 in the mobile terminal 200 shown in FIG. 1. In the description of the present invention, Those skilled in the art will be able to refer to and / or modify this FIG. 7 to infer various implementations of the OTP generation process (e.g., omitting some steps or changing the order) The present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Hereinafter, in FIG. 7, the OTP operating system shown in FIG. 2 is referred to as a "server" for the sake of convenience.

Referring to FIG. 7, the wireless terminal 200 receives a dedicated key button for requesting to generate an N-digit OTP through key input means, or requests to generate the N-digit OTP through a predetermined menu selection (Or an OTP agent driving command) is received through the mobile communication network, the OTP agent corresponding to the configuration of the mobile terminal 200 shown in FIG. 1 is driven to transmit the mobile terminal 200 to the OTP The user authentication is requested (700), and the user authentication is processed through the password (or the personal identification number) (705).

If the user authentication is not processed (710), the wireless terminal 200 outputs user authentication error information (715) and ends the OTP generation process.

If the user authentication is performed (710), the wireless terminal 200 obtains the location information of the wireless terminal 200 through the positioning function of the wireless terminal 200 (720).

If the location information of the wireless terminal 200 is obtained through the positioning function of the wireless terminal 200 in step 725, the wireless terminal 200 generates location information of the wireless terminal 200 using the N-digit OTP And generates OTP generation information for generating N-digit OTP (730).

According to the embodiment of the present invention, when terminal-side OTP generation information is not stored in the USIM / memory unit, the server transmits the unique information of the wireless terminal 200 stored in the USIM / memory unit to the OTP generation information It is preferable to construct OTP generation information for generating the N-digit OTP.

If the OTP of the N digits is a time-synchronized OTP, the wireless terminal 200 determines a time value (or a time value for a specific time interval) confirmed from a timer included in the wireless terminal 200 , And configures the OTP generation information for generating the N-digit OTP by including the determined time value as the dynamic seed value of the OTP generation information.

Alternatively, if the OTP of the N digits is the challenge-synchronization type OTP, the wireless terminal 200 generates a predetermined random number and transmits / exchanges it with the server or receives / exchanges the random number value generated by the server It is preferable to configure the OTP generation information for generating the N-digit OTP by including the random number as the dynamic seed value of the OTP generation information.

If the terminal side OTP generation information is stored in the USIM / memory, the wireless terminal 200 confirms terminal side OTP generation information from the USIM / memory unit, and the wireless terminal 200 transmits the OTP generation information to the wireless terminal 200, OTP generation for generating N-digit OTP by combining the identified terminal-side OTP generation information and the location information of the wireless terminal 200 after processing the location information into a dynamic seed value for generating the N-digit OTP It is desirable to construct the information.

If the OTP generation information including the location information of the wireless terminal 200 as a dynamic seed value is configured 735, the wireless terminal 200 confirms at least one fixed seed value included in the configured OTP generation information, Determines one or more dynamic seed values through the parameters included in the OTP generation information, and generates and outputs N-digit OTP by substituting the determined one or more fixed seed values and the dynamic seed value into the predetermined OTP generation algorithm (740).

8 is a diagram illustrating an OTP authentication process according to an embodiment of the present invention.

8 is a flowchart illustrating an operation of the OTP operating system shown in FIG. 2, in which N (N) generated by the wireless terminal 200 shown in FIG. 1 through the process shown in FIGS. > = 2) number of digits of the OTP to match with the OTP, and compares (or verifies) the received OTP of the N digits with the OTP 'to verify the validity of the OTP Those skilled in the art will be able to refer and / or modify FIG. 8 to illustrate various implementations of the OTP authentication process (e.g., some steps may be omitted, However, the present invention includes all of the above-mentioned embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Hereinafter, in FIG. 8, the OTP operating system shown in FIG. 2 is referred to as a "server" for the sake of convenience.

Referring to FIG. 8, after the N-digit OTP is generated / outputted by the wireless terminal 200 shown in FIG. 1 through the process shown in FIGS. 4 to 7, 1, receives the N-digit OTP inputted through the OTP input interface outputted to the user terminal 205, or receives the generated N-digit OTP from the wireless terminal 200 shown in FIG. 1, The mobile terminal 200 checks the location information of the mobile terminal 200 related to the mobile terminal 200 and confirms the location information of the mobile terminal 200 from the storage medium 260, Side OTP generation information (805).

When the OTP medium authentication information including the location information of the wireless terminal 200 generating the N-digit OTP is received according to an embodiment of the present invention, the server transmits the OTP medium authentication information including the location information of the wireless terminal 200 ) Check the location information.

When transmitting the position information of the wireless terminal 200 obtained by the positioning of the wireless terminal 200 in the wireless terminal 200 having generated the N digits OTP according to another embodiment of the present invention, And receives the location information of the mobile terminal 200 from the mobile terminal 200.

For example, when the N-digit OTP is received from the user terminal 205, the server confirms the unique information of the wireless terminal 200 that generated the N-digit OTP, The location information of the mobile terminal 200 is received from the mobile terminal 200 through the mobile terminal 200.

Alternatively, when the N-digit OTP is received from the wireless terminal 200, the server receives the N-digit OTP and the unique information of the mobile terminal 200 together, or before receiving the N-digit OTP It is preferable to receive the location information of the wireless terminal 200 after the wireless terminal 200 receives the location information.

According to another embodiment of the present invention, the server confirms the location information of the mobile terminal 200 using the information of the user terminal 205 receiving and transmitting the N-digit OTP.

For example, when the user terminal 205 is a terminal device connected to a communication network, the server confirms the IP address of the user terminal 205, It is preferable to confirm the location information of the wireless terminal 200 including the location value corresponding to one of the address information, the landmark information, and the location code corresponding to the IP address.

Alternatively, if the user terminal 205 is a terminal device managed by a specific terminal management entity such as a merchant terminal or a financial terminal, the server confirms the terminal information corresponding to the user terminal 205, It is preferable to confirm the location information of the mobile terminal 200 including the location value corresponding to one of the address information, the landmark information, and the location code corresponding to the terminal information in association with the organization.

According to another embodiment of the present invention, the server confirms the location information of the mobile terminal 200 positioned in the terrestrial or cell ID system in the positioning server provided in the wireless communication network, (To determine the same seed value) so that the dynamic seed value equal to the dynamic seed value determined from the position information of the mobile terminal 200 positioned at the mobile terminal 200 positioned at the mobile terminal 200 is determined, It can be omitted if the location information is confirmed).

Then, the server combines (or links) the location information of the wireless terminal 200 and the OTP generation information of the server to check / configure the OTP generation information including the location information of the wireless terminal 200 as the dynamic seed value 810).

If the server side OTP generation information includes the location information of the wireless terminal 200 as a dynamic seed value according to the embodiment of the present invention, the server generates the server side OTP generation information by generating the N-digit OTP ' It is preferable to confirm with the OTP generation information.

Thereafter, the server checks one or more fixed seed values for generating the N-digit OTP 'from the OTP generation information, determines one or more dynamic seed values based on the parameters included in the OTP generation information, / OTP 'of N digits is generated by substituting the determined one or more fixed seed values and the dynamic seed value into the predetermined OTP generation algorithm (815).

If the N-digit OTP 'is generated (820), the server compares (or verifies) the received N-digit OTP with OTP' to check the OTP validity (825).

According to the embodiment of the present invention, when the OTP and the OTP 'are matched (or matched) as a result of the comparison between the OTP and the OTP', or when the predicted result is obtained through the verification operation, .

If the OTP validity is not confirmed 830, the server transmits an OTP authentication result corresponding to the OTP validity error to the OTP authentication result receiving means (e.g., the OTP authentication request server 215, the user terminal 205, (Including one or more of terminal 200).

On the other hand, if the validity of the OTP is confirmed (830), the server transmits the OTP authentication result corresponding to the OTP validation confirmation to the OTP authentication result receiving means (e.g., the OTP authentication request server 215, the user terminal 205, (Including one or more of terminal 200).

According to the present invention, when generating an OTP in a wireless terminal having a positioning function, the wireless terminal generates OTP by using wireless terminal location information obtained through the location positioning function as a seed value of the OTP, When the wireless terminal generates the OTP at the pre-registered OTP use position after confirming the position of the wireless terminal that generated the OTP at the OTP authentication at the server authenticating the OTP, By using the same seed value to authenticate the OTP, the advantage of preventing the wireless terminal from being stolen / hijacked and maliciously used by a third party at an arbitrary place, and the advantage of two-factor authentication Authentication limit.

Claims (16)

1. A method executed in a wireless terminal having a program for generating an OTP (One Time Password) A first step of confirming location information of a location of the wireless terminal using a location locator provided in the wireless terminal; A second step of authenticating the location of the wireless terminal corresponding to the location information through the location authentication information stored in the designated storage medium and performing an authentication procedure for confirming the validity of OTP generation; A third step of constructing at least one seed value among the seeds for OTP generation using the position of the wireless terminal; And And a fourth step of dynamically generating an OTP using the seed for generating the OTP. The wireless terminal of claim 1, Receiving a radio frequency signal from a plurality of base stations, And at least one of the locations located using GPS. ≪ Desc / Clms Page number 20 > The method according to claim 1, Further comprising registering and storing the location authentication information. ≪ Desc / Clms Page number 22 > 2. The method of claim 1, Is confirmed by a program for generating an OTP at the wireless terminal, or Wherein the mobile terminal is authenticated through a server communicating with the wireless terminal. The method according to claim 1, Transmitting predetermined OTP medium information for authenticating an OTP medium to a server authenticating a wireless terminal having the program as an OTP medium for generating an OTP; And And receiving a result of authenticating the wireless terminal on which the program is executed based on the OTP medium information with the OTP medium from the server. 2. The method according to claim 1, Identifying a unique location value that uniquely identifies a particular location area to which the location coordinates corresponding to the location information of the wireless terminal belong; And And constructing at least one seed value for OTP generation using the location value. ≪ Desc / Clms Page number 21 > 7. The method of claim 6, Address information on the administrative district, A location code assigned to an address on the administrative area, Information for identifying a landmark located within a predetermined distance and a coordinate value, A position code assigned to the landmark, Information for identifying the position area set on the designated position coordinate system, And a location code assigned to the location area. ≪ Desc / Clms Page number 19 > delete delete delete delete delete delete delete delete delete

Images