KR101645558B1 - Method for Operating OTP by using Medium Authentication - Google Patents

Abstract

The present invention relates to a method of operating an OTP, using media authentication, and in a method executed by a server, a method of operating a user's cellular phone in which a specific program is installed, And storing the program information in a designated storage medium. The method of claim 1, further comprising the steps of: when the program of the user's mobile phone is activated, communicating with a program driven by the mobile phone, The method comprising: performing a procedure for authenticating the mobile phone with the medium owned by the user; when authenticating the mobile phone driving the program to the medium owned by the user, Information of the user's cellular phone corresponding to the authenticated medium Wherein the medium information includes at least one of a unique ID that is uniquely assigned uniquely after the program is installed in the user's cellular phone to authenticate the mobile phone in which the program is installed, Value.

Ottype

Description

[0001] The present invention relates to a method for operating an OTP using medium authentication,

1 is a diagram illustrating a configuration of a mobile phone function having a function of generating an OTP for authenticating mobile phone settlement according to an embodiment of the present invention.

2 is a diagram illustrating a mobile phone OTP system configuration for authenticating mobile phone settlement according to an embodiment of the present invention.

3 is a diagram illustrating an OTP media registration process according to an embodiment of the present invention.

4 is a diagram illustrating an OTP generation process according to an embodiment of the present invention.

5 is a diagram illustrating an OTP authentication process according to an embodiment of the present invention.

6 is a diagram illustrating a configuration of an OTP-based mobile phone payment processing system according to an embodiment of the present invention.

7 is a diagram illustrating an OTP-based mobile phone settlement process according to an embodiment of the present invention.

8 is a diagram illustrating an OTP-based mobile phone settlement process according to another embodiment of the present invention.

DESCRIPTION OF THE EMBODIMENTS

100: mobile phone 105: control unit

110: Screen output unit 115: Sound processing unit

120: key input unit 125: battery

130: wireless communication unit 135: USIM

140: USIM reader unit 145: memory unit

150: user authentication unit 155: authentication processing unit

160: Receiving unit 165: OTP generating unit

170: OTP output unit

The present invention relates to a method executed by a server, comprising the steps of: confirming media information for authenticating a user's cellular phone that has installed and running a specific program to a medium owned by a user implementing an OTP (One Time Password) And a step of communicating with a program driven by the mobile phone and activating the program through the stored medium information when the program of the user's mobile phone is activated, When the mobile phone that has driven the program is authenticated as the medium owned by the user, generation information to be used for generating the OTP at the user's mobile phone side corresponding to the authenticated medium is checked, and the generation information corresponding to the authenticated medium A procedure for providing the above-identified generated information to the program of the user's mobile phone Wherein the medium information includes an eigen value assigned uniquely and uniquely after the program is installed in the user's cellular phone in order to authenticate the cellular phone in which the program is installed, .

When a user inputs a mobile phone number and subscriber information through a user terminal and then provides the mobile phone number and subscriber information through a user terminal, the mobile phone user authenticates that the subscriber is a valid subscriber of the communication company through the mobile phone number and subscriber information, If the authentication number received through the user terminal is matched with the authentication number transmitted to the user's mobile phone, the approval number is accepted and the payment amount is charged to the next month's communication fee of the user's mobile phone (Application No. 10-2000-0020757).

However, the leakage of personal information occurs in an irregular manner, and the personal information leaked is publicly traded (or disclosed) through the Internet, and the number of lost cell phones is more than 200,000 per month on average In this situation, anyone who acquires or replicates a mobile phone of another person can have his / her mobile phone settlement approved using the leaked personal information.

Particularly, although the mobile phone settlement approval is performed in real time, the settlement of the settlement amount is performed on the average within 45 days after the approval of the payment, in case of damage using the acquired / copied mobile phone and the leaked personal information, The damage is expected to reach astronomical figures.

In order to solve the above-mentioned problems, an object of the present invention is to provide a method executed by a server, in which a user's mobile phone, in which a specific program is installed and operated, The method comprising: a first step of checking media information for authentication and storing the media information in a designated storage medium; and a step of communicating with a program driven by the mobile phone and driving the program through the stored media information A second step of performing a procedure for authenticating the mobile phone in the state of the user with the medium owned by the user, and a step of authenticating the mobile phone driving the program to the medium owned by the user, A third step of confirming generation information to be used for generation, and a step And a fourth step of performing a procedure of providing the generated generation information to a program of a user's cellular phone, wherein the medium information includes at least one of the following: And an eigen value that is uniquely assigned so as not to be duplicated after being installed.

delete

A method of operating an OTP by using a medium authentication according to the present invention is a method executed by a server, comprising the steps of: transmitting a user's cellular phone, in which a specific program is installed, to a user's own medium implementing OTP (One Time Password) The method comprising: a first step of checking media information for authentication and storing the media information in a designated storage medium; and a step of communicating with a program driven by the mobile phone and driving the program through the stored media information A second step of performing a procedure for authenticating the mobile phone in the state of the user with the medium owned by the user, and a step of authenticating the mobile phone driving the program to the medium owned by the user, A third step of confirming generation information to be used for generation, and a step And a fourth step of performing a procedure of providing the generated generation information to a program of a user's cellular phone, wherein the medium information includes at least one of the following: And a unique value that is uniquely allocated so as not to be duplicated after being installed.
In the opportunistic operating method using the medium authentication according to the present invention, the medium information may further include at least one of unique information stored in a memory unit of the cellular phone, and code information provided from an IC chip interfaced with the cellular phone .
In the opportunistic operating method using the medium authentication according to the present invention, the generation information is used as a seed value for dynamically generating N (N > = 2) OTPs on the user's mobile phone side corresponding to the authenticated medium .
The OTP operation method using media authentication according to the present invention is characterized in that the N-digit OTP is dynamically generated through a program of the mobile phone or dynamically generated through an IC chip interfaced with the mobile phone.
A mobile phone payment method using an authentication method according to the present invention is a method for generating OTP medium information including mobile phone specific information registered in an OTP (One Time Password) medium and N (N> = 2) Storing OTP generation information in a storage medium; receiving mobile communication company selection information, user mobile phone number and user resident registration number information from a user terminal requesting mobile phone settlement using OTP, Receiving OTP medium authentication information including cell phone specific information stored in a USIM (or memory) of the mobile phone by connecting a communication channel with the user's cellular phone according to the result; and receiving OTP medium authentication information including OTP medium authentication information (Or verification operation) with the OTP medium authentication information to generate (or output) an OTP of N digits, A step of authenticating the mobile phone with an OTP medium, the server verifying OTP generation information on the OTP medium from the storage medium and transmitting the OTP generation information to the mobile phone, The method comprising the steps of: confirming OTP generation information for the OTP medium from the storage medium at the server by transmitting the N-digit OTP at the server; generating OTP 'of N digits through the OTP generation information at the server; The server verifies the validity of the N-digit OTP by comparing (or verifying) the received N-digit OTP with the generated N-digit OTP 'to approve the mobile phone settlement do.

The mobile phone payment method according to the present invention is characterized in that when the server confirms and transmits the OTP generation information, the mobile phone constructs OTP medium authentication information including mobile phone unique information stored in a USIM (or memory) And generating an OTP of N digits through the received OTP generation information in the mobile phone.

In the mobile phone payment method according to the present invention, the OTP medium authentication information may further include a user password or a user's personal identification number. The server may further include a user password or a user's personal identification number And authenticating the mobile phone with the OTP medium through the OTP medium.

On the other hand, a computer-readable recording medium characterized by recording a program for executing a mobile phone payment method through the above-mentioned notifier authentication.

Meanwhile, the mobile phone payment system using the OTP authentication according to the present invention includes: OTP medium information including mobile phone specific information registered as an OTP (One Time Password) medium; and OTP medium information for generating N (N> = 2) OTP generation information, and mobile communication company selection information, user mobile phone number and user resident registration number information from a user terminal requesting mobile phone settlement using OTP, Information receiving means for receiving OTP medium authentication information including mobile phone specific information stored in a USIM (or memory) of the mobile phone by connecting a user's cellular phone with a communication channel; and means for receiving OTP medium information stored in the storage medium and OTP medium authentication (Or verifying) the information to authenticate the mobile phone as an OTP medium for generating (or outputting) N-digit OTPs An information confirming means for confirming OTP generation information for the OTP medium from the storage medium at the server when the mobile phone is authenticated with the OTP medium, and information for transmitting the confirmed OTP generation information to the cellular phone OTP authentication means for authenticating the validity of the N-digit OTP by generating N-digit OTP 'through the OTP generation information when an N-digit OTP is received from the transmission means, the user terminal or the cellular phone, And a payment processing means for approving the mobile phone settlement in accordance with the OTP validity authentication result of the mobile terminal.

In the mobile phone payment system according to the present invention, the OTP authentication unit checks the OTP generation information for the OTP medium from the storage medium, when receiving an OTP of N digits from the user terminal or the cellular phone (Or verify operation) between the received OTP of the N digits and the generated OTP 'of the N digits so as to authenticate the validity of the OTP of the N digits.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

1 is a diagram illustrating a functional configuration of a mobile phone 100 having a function of generating an OTP for authenticating a settlement of a mobile phone 100 according to an embodiment of the present invention.

1, a mobile phone 100 connected to a mobile communication network and providing data communication generates an OTP (One Time Password) for authenticating the mobile phone 100 through the mobile communication network (N > = 2) number of OTPs from the server of the communication network, and transmits the OTP generation information to the mobile phone 100 through the OTP agent The present invention is not limited to the above-described embodiments, but may be modified and changed without departing from the spirit and scope of the present invention. (For example, a portable Internet terminal) connected to a wireless communication network of a communication standard to generate an OTP for authenticating the settlement of the mobile phone 100 The present invention is not limited to the above-described embodiments, but includes all of the above-described embodiments.

The cellular phone 100 includes an outer body in terms of hardware and a speaker and a microphone, a keypad, a Liquid Crystal Display (LCD), an antenna, and a battery 125 according to an embodiment of the present invention, A modem chip (for example, an MSM series modem chip of Qualcomm of the United States) having a function of a CDMA (Code Division Multiple Access) modem, a CPU / MPU (Central Processing Unit / Micro Processing Unit) A power amplifier that amplifies a transmission signal, a high power amplifier (HPA), an isolator that prevents a high output transmission signal from returning in the opposite direction, a memory device, a memory device, a duplexer filter that separates a transmission signal from an antenna, An RF / IF SAW filter for eliminating the desired out-of-band spurious signal, a frequency upstream circuit for the transmission path, a frequency downconversion circuit for the reception path, a VCTCXO (Voltage A controlled temperature compensated X-tal oscillator, a UHF frequency synthesizer used as a local signal of frequency up-down conversion, and a codec chip for converting an analog voice signal into a digital signal. Are gradually integrated into the modem chip. Various functions for various multimedia services or various additional services are integrated in the modem chip in addition to core components for the mobile communication service.

1, the mobile phone 100 includes a control unit 105 corresponding to the modem chip on a structure corresponding to the components, a screen output unit 110 corresponding to an LCD (Liquid Crystal Display) A sound processing unit 115 corresponding to a microphone / speaker, a key input unit 120 corresponding to a keypad, a wireless communication unit 130 corresponding to an antenna and various RF modules, a memory unit 145 corresponding to a nonvolatile memory, A USIM 135 (Universal Subscriber Identity Module) corresponding to an IC (Integrated Circuit) chip for storing general-purpose subscriber identification information, and a USIM reader 135 for reading / writing information (or data) 140 and a battery 125 for power supply.

The control unit 105 includes a processor and an execution memory including a CPU / MPU provided in the modem chip in hardware, and includes a program routine for providing a function peculiar to the mobile phone 100 from a memory device, (Or an integrated circuit) provided for the bus (BUS) for inputting and outputting data, and an electronic circuit (or an integrated circuit) provided therefor. The memory unit 145 or the memory device A program routine or program data that is loaded and processed through the processor to perform a specific function (and therefore, a recording medium of the cellular phone 100 for the function of generating an OTP for authenticating the settlement of the mobile phone 100) In the control unit 105, a program routine corresponding to the OTP agent recorded in the control unit 105 (Not shown) and one or more system management routines (e.g., a power management routine, a channel (forward / backward) management routine, etc.) , A handoff routine, and the like). The control unit 105 realizes various functional configurations to be implemented in the mobile phone 100. FIG.

According to an embodiment of the present invention, after power is supplied to the cellular phone 100, the operating system routine (not shown), one or more system management routines (not shown), and various system parameters corresponding thereto, The mobile phone 100 may be configured to perform the steps of: loading a system memory including a system setting detailed state, a pilot channel obtaining detailed state, a synchronization channel obtaining detailed state, and a timing conversion detailed state according to a booting procedure, Is set to an operation mode corresponding to "mobile station initialization state ".

After performing the booting procedure, the operating system routine (not shown), one or more system management routines (not shown) and various system variables corresponding thereto are loaded into the execution memory provided in the control unit 105, The mobile phone 100 is set to the operation mode corresponding to the "mobile station call waiting state", "system access state", or "call channel state" ) Procedure.

According to the embodiment of the present invention, it is preferable that the function of generating the OTP is started (or realized) by key input in the operation mode corresponding to the "mobile station call waiting state"

The screen output unit 110 is a functional configuration unit for a screen for confirming operation modes of the mobile phone 100 and corresponding operation states. The screen output unit 110 may include at least one screen output including an LCD provided in the mobile phone 100 And a driver for driving the screen output device. The control unit 105 outputs one or more key data input through the key input unit 120, or outputs the key data input through the key input unit 120 to the mobile phone 100 A function processing screen, and a function processing result screen corresponding to one or more functions (or programs) provided in the mobile phone 100 or one or more contents (for example, characters Content, image content, and multimedia content).

According to the embodiment of the present invention, the screen output unit 110 preferably performs a function of a menu screen corresponding to the function of generating the OTP, a function processing screen, and a screen output means for outputting a function processing result screen .

The sound processing unit 115 is a functional unit for processing input and output of sound in each operation mode of the mobile phone 100. The sound processing unit 115 decodes one or more encoded sound data and outputs the decoded sound data to a speaker And a vocoder and a codec for encoding and encoding a sound signal input through a microphone provided in the mobile phone 100. [

According to the embodiment of the present invention, the sound processing unit 115 decodes sound data corresponding to a ring back tone through the speaker in an operation mode corresponding to the "system access state" among the respective operation modes of the cellular phone 100 Or to encode a voice signal through a microphone in an operation mode corresponding to the "call channel state ", or to decode and output the voice signal through a speaker.

In addition, the sound processing unit 115 may be operable to reproduce one or more sound contents or multimedia contents provided in (or downloaded from) the mobile phone 100 in one or more operation modes including the " It is preferable that the sound data corresponding to the content is decoded and output.

The key input unit 120 may include a key input device having one or more key buttons including a number key, a character key or a function key, Wherein the key input device detects one or more key input signals generated by clicking (or inputting) the key button in the key input device.

According to the present invention, when a key input signal is detected from a key button provided in the key input device in an input mode or one or more operation modes controlled by the control unit 105, the key input unit 120 detects the key (E.g., MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, and MH_KEY_RELEASEEVENT) corresponding to the input signal, and provides the generated key event to the control unit 105. The control unit 105 controls the operation of the mobile phone 100, (For example, from the key table storing (managing) one or more key data corresponding to a specific key event in each input mode or operation mode) in the current input mode or operation mode of the key Reading the key data in the event), or reading a command that executes a function defined by matching with the key event And a gong.

According to an embodiment of the present invention, the key input unit 120 inputs a telephone number in an operation mode corresponding to the "mobile station call waiting state" among the operation modes of the cellular phone 100, , It is preferable to change the operation mode of the cellular phone 100 to the operation mode corresponding to the "system access state ".

The key input unit 120 inputs a function key (e.g., a menu key) in an operation mode corresponding to the "mobile station call standby state" among the operation modes of the mobile phone 100, It is desirable to perform various functions provided.

According to an embodiment of the present invention, the key input unit 120 performs a function of key input means for inputting one or more key data corresponding to the function of generating the OTP.

The wireless communication unit 130 includes a CDMA modem and various RF modules (for example, a duplexer filter, a power amplifier, a high-power amplifier, and the like) for connecting a wireless channel to a base station on a mobile communication network in which the cellular phone 100 operates based on WCDMA. A high frequency amplifier, a high power amplifier (HPA), an isolator, an RF / IF SAW filter, a frequency upstream circuit, a frequency downconversion circuit, a VCTCXO corresponding to a reference clock source, a UHF frequency synthesizer, A slot mode, a power control, or a hand-off operation corresponding to each operation mode of the cellular phone 100 in cooperation with the control unit 105. [ -off) or a call processing procedure.

According to another embodiment of the present invention, if the cellular phone 100 shown in FIG. 1 is a portable Internet terminal, the wireless communication unit 130 may configure a wireless communication function to access a portable Internet based on IEEE 802.16x to provide a portable Internet service It is possible to implement the present invention by modifying various other types of wireless communication configurations for providing wireless data communication in addition to the portable Internet and the present invention is not limited to the configuration of the wireless communication unit 130 I will make it clear.

The USIM reader 140 is a functional unit for exchanging one or more pieces of information (or data or commands) with the USIM 135 mounted or detached from the cellular phone 100 through a standard including ISO / IEC 7816 , And a contact type IC card reader corresponding to the ISO / IEC 7816 standard. The IC card reader reads the one or more pieces of information (or data) from the USIM 135 through an APDU (Application Protocol Data Unit) , Or command) is exchanged.

The USIM 135 mounted on or detached from the mobile phone 100 is an IC chip conforming to the ISO / IEC 7816 standard. In accordance with the ISO / IEC 7816 standard, the USIM 135 includes a power supply VCC, (E.g., commands or data) with the USIM reader unit 140 via contact points such as a reset signal RST, a clock signal CLK, a ground GND, a programming power supply VPP, an input / output An input / output interface for exchanging information with a processor, a processor unit including at least one computing element including a central processing unit (CPU), a micro processing unit (MPU), and a coprocessor, (E.g., ROM) among the memory devices, and a memory including at least one memory device including a random access memory (RAM), an electrically erasable programmable read only memory (EEPROM), and a flash memory (FM) To manage internal resources of the IC card. When a power is supplied from the USIM reader 140 through a power supply (VCC) contact point of the input / output interface, the COS stored in the memory is loaded into the execution memory And controls the overall operation of the USIM 135 and controls the operation of the USIM 135 through APDU (Application Protocol Data Unit) based on the clock frequency (e.g., 3.57 MHz or 4.9 MHz) of the clock signal (CLK) And controls exchange of information or data between the USIM reader unit 140.

According to the present invention, it is preferable that the memory of the USIM 135 is provided with an OTP applet including various information and a program code necessary for generating the OTP in the cellular phone 100, (Not shown) for storing a data set corresponding to information or data read out or used by a processor provided in the processor unit 130 and a command set provided by the COS and a USIM 135 (For example, a Java applet in the case of a Javacard) used by a processor included in the mobile phone 100. The COS instruction set and the instruction set of the COS A processing unit corresponding to an application including an instruction calling code that operates and an execution code that is processed by the processor unit In particular, the processing unit reads out a command provided from a processor provided in the cellular phone 100 via the input / output interface through the APDU, and transmits the command, which is stored in the storage unit, Information or data, and provides the result or the read information or data to the processor provided in the mobile phone 100 via the input / output interface through the APDU.

According to the embodiment of the present invention, the USIM 135 may be provided with a function of generating the N (N> = 2) OTPs. In this case, (N > = 2) number of OTPs through the OTP generation information provided through the mobile phone 100 after the user authentication through the user password or the user personal identification number input through the mobile phone 100, And the program code for generating the OTP by checking / determining the value and the dynamic seed value, and substituting the determined one or more fixed seed values and the dynamic seed value into the set OTP algorithm.

According to an embodiment of the present invention, the storage unit of the OTP applet may store (or encrypt and store) a user password or a user personal identification number for user authentication for generating the OTP in the cellular phone 100 In this case, when the user password or the user's personal identification number is transmitted from the cellular phone 100, the processing unit of the OTP applet transmits the transmitted user password or the user's personal identification number and the user stored in the storage unit, (Or verifying) a password or a user's personal identification number to process user authentication for generating the OTP in the cellular phone 100 via the user's password or a user's personal identification number, (100).

According to an embodiment of the present invention, the storage unit of the OTP applet includes at least one mobile phone 100 (100) registered in a server on the communication network, for authenticating that the mobile phone 100 is an OTP medium having an OTP agent capable of generating the OTP The unique information of the cellular phone 100 may include unique information stored in a fixed storage area of the USIM 135 memory and IC chip information in addition to the storage of the OTP applet, .

The unique information of the cellular phone 100 provided in the USIM 135 may include a mobile identification number (MIN), a serial number (ESN), a subscriber identification number, An IC chip serial number constituting the International Mobile Equipment Identity (IMEI), a Mobile Station International ISDN Number (MSISDN), and the USIM 135, or an OTP agent capable of generating the OTP (E.g., a non-duplicated code value) or a USIM 135 identifier that is registered to authenticate that the OTP medium is an OTP medium having a unique OTP medium identifier (e.g.

According to an embodiment of the present invention, the memory of the USIM 135 is divided into a subscriber information area having a fixed memory address and an application area having a directory file (EFdir) structure, the application area being based on ISO / IEC 10202 The memory includes a protection area in which secret information such as a chip serial number (CSN) is stored, a COS control area, a user application area, a read / write access area, an application program area, and a FAT (File Allocation Table) management area, and the OTP applet is stored in a designated storage area other than the protection area and the COS control area.

According to the ISO / IEC 7816 standard, an application area of the memory includes one master file (MF) corresponding to a root file, and function information for one or more storage information under the master file (DF) corresponding to each ICC storage information, and actual information or data for a smart card service disposed under the dedicated file are included The OTP applet includes a file structure including the above-described file structure.

The memory unit 145 is a generic name of a nonvolatile memory corresponding to a storage medium for storing one or more pieces of information (or data) in the cellular phone 100 and a recording medium for recording a program code corresponding to one or more program routines A read only memory (ROM) corresponding to the read only memory, a flash memory (FM) and an electrically erasable and programmable read only memory (EEPROM) capable of reading / writing.

According to the embodiment of the present invention, the memory unit 145 may encrypt and store a user password or a user's personal identification number for user authentication for generating the OTP in the cellular phone 100. [

According to the embodiment of the present invention, the memory unit 145 may include one or more mobile phones 100 registered in a server on the communication network to authenticate that the mobile phone 100 is an OTP medium having an OTP agent capable of generating the OTP, It is desirable to store unique information.

The unique information of the cellular phone 100 provided in the memory unit 145 includes a phone number (Mobile Identification Number) (MIN) stored in a predetermined system area of the memory unit 145 provided in the cellular phone 100, The mobile phone 100 includes at least one of an ESN, a subscriber identification number, and an International Mobile Equipment Identity (IMEI), or a separate (registered) mobile phone 100 registered to authenticate that the mobile phone 100 is an OTP medium having an OTP agent capable of generating the OTP OTP medium identifier (e.g., a non-redundant code value).

Referring to FIG. 1, the mobile phone 100 is provided with a user authentication unit 150 for processing user authentication for generating an OTP for authenticating payment of the mobile phone 100.

A dedicated key button for requesting to generate an OTP for authenticating the settlement of the mobile phone 100 is inputted through the key input means provided in the mobile phone 100 or is requested to generate the OTP through a predetermined menu selection (Or OTP agent driving command) is received through the mobile communication network, the user authentication unit 150 transmits a user password or a user personal identification number for user authentication through the screen output unit 110 And outputs a user authentication interface for inputting, and upon inputting a user password or a user personal identification number through the user authentication interface, processes the user authentication for generating OTP of the number of the user through the input user password or the user personal identification number .

If the user authentication function for generating the OTP is provided to the USIM 135 according to an embodiment of the present invention, the user authentication unit 150 may access the USIM 135 via the USIM reader 140, Or transmits the user's personal identification number to the USIM 135. The PIN authentication function provided to the USIM 135 or the user authentication performed on the user password or the user's personal identification number processed by the processing unit included in the OTP applet And confirms whether the user validity of generating the OTP in the cellular phone 100 is authenticated by reading the user authentication result.

If the user authentication function for generating the OTP is provided in the memory unit 145 according to another embodiment of the present invention, when the user password or the user personal identification number is input, Decrypts the user password or the user's personal identification number encrypted and stored in the memory unit 145 according to a predetermined decryption procedure, compares the inputted user's password or the user's personal identification number with the decrypted user's password or the user's personal identification number (Or verification operation) to process the user authentication for generating the OTP in the cellular phone 100 through the user password or the user's personal identification number.

Referring to FIG. 1, the mobile phone 100 includes an OTP (Personal Handyphone System) 100 for authenticating the cellular phone 100 through the mobile communication network to generate an OTP for authenticating payment of the mobile phone 100, And an authentication processing unit (155) for authenticating that the agent is an OTP medium.

If the user authentication unit 150 determines that the user authentication for generating the OTP in the cellular phone 100 is valid, the authentication processing unit 155 is provided in the USIM 135 / memory unit 145 OTP medium authentication information including the unique information of the mobile phone 100 and providing an OTP agent for authenticating the mobile phone 100 settlement by configuring the OTP medium authentication information including the unique information of the mobile phone 100, To a server on a communication network that authenticates the medium.

According to an embodiment of the present invention, the OTP medium authentication information includes the unique identification information of the mobile phone 100 and is encrypted by a secure communication session established between the mobile phone 100 and the server.

According to another embodiment of the present invention, the OTP medium authentication information includes the user's password or the user's personal identification number and the verified phone-specific information, The user password or the user's personal identification number and the phone-specific information are concatenated (or combined) in accordance with a predetermined method to configure the OTP medium authentication information, It is possible that the code value generated by substituting the user's password or the user's personal identification number and the unique information of the cellular phone 100 into the predetermined code generation algorithm can be determined as the OTP medium authentication information and the user's password or the user's personal identification number The OTP media authentication information is configured through the unique information of the mobile phone 100, Are not limited.

For example, the authentication processing unit 155 generates a media verifier by hashing one or more pieces of information of the user password, the user's personal identification number, and the mobile phone 100-specific information by a one-way hash function, And can generate the OTP medium authentication information by concatenating the user ID, the user password, or the user's personal identification number with the phone-specific information.

Alternatively, the authentication processing unit 155 hashashes the user password or the user's personal identification number through a one-way hash function, and the hashed user's password or user's personal identification number, at least one random number value, ) Unique identification information (or unique information of the mobile phone 100 hashed by the one-way hash function) to generate a media verifier, and generates the media verifier and at least one of the generated user verifier and the user's personal identification number The random number information, and the cellular phone 100 specific information.

According to another embodiment of the present invention, the OTP media authentication information can be generated by the processing unit of the OTP applet included in the USIM 135 through any of the above-described various methods.

If the USIM 135 has the unique information of the cellular phone 100 and the processing unit of the OTP applet generates the OTP medium authentication information, the processing unit of the OTP applet includes the unique information of the cellular phone 100 OTP medium authentication information, or generates the OTP medium authentication information through the user password or user's personal identification number provided to the USIM 135 and the phone-specific information provided by the USIM 135 by the user authentication unit 150, It is also possible to transmit the generated OTP medium authentication information to the authentication processing unit 155. It is also possible to encrypt the OTP medium authentication information in the USIM 135 according to the intention of a person skilled in the art.

Alternatively, when the processor unit of the OTP applet generates the OTP medium authentication information in the memory unit 145, the authentication processor 155 acquires the unique information of the mobile phone 100 The processing unit of the OTP applet generates OTP medium authentication information including the unique information of the mobile phone 100 or the user authentication unit 150 transmits the OTP medium authentication information to the USIM 135 It is possible to generate the OTP media authentication information through the provided user password or the user's personal identification number and the unique information of the mobile phone 100 and to transmit the generated OTP media authentication information to the authentication processing unit 155, The USIM 135 may encrypt the OTP medium authentication information.

When the OTP medium authentication information including the unique information of the mobile phone 100 is generated, the authentication processing unit 155 authenticates the mobile phone 100 as an OTP medium having an OTP agent for authenticating the settlement of the mobile phone 100 And transmits the generated OTP medium authentication information to the server on the communication network through the wireless communication unit 130 according to a set secure communication session established with the server on the communication network. (Decrypts) the OTP medium authentication information, authenticates the cellular phone 100-specific information included in the received OTP medium authentication information and the cellular phone 100, (Or verification operation) of the mobile phone 100 registered to authenticate with the OTP medium having the OTP agent for the mobile phone 100, A characterized in that the authentication by the media provided with the OTP OTP agent for authentication.

If the OTP media authentication information further includes a user password or a user's personal identification number and the server on the communication network has a user authentication function through the user's password or a user's personal identification number or the user's password or user's personal identification number When the server on the communication network uses the OTP generation information as a condition to provide the OTP generation information to the mobile phone 100, the server on the communication network transmits a user password or a user personal identification number included in the OTP medium authentication information, (Or verification calculation) of the registered user password or the user's personal identification number in association with the unique information to confirm the validity of processing the user authentication or providing the OTP generation information to the cellular phone 100 desirable.

When the server on the communication network authenticates the cellular phone 100 with an OTP medium having an OTP agent for authenticating the cellular phone 100 (or authenticates the cellular phone 100 with the provided OTP medium, The server on the communication network confirms the OTP generation information (i.e., information including one or more fixed seed values and parameters for generating an OTP) associated with the cell phone 100 specific information, And transmits the OTP generation information to the mobile phone 100 through the mobile communication network. The OTP generation information is encrypted by a secure communication session established between the mobile phone 100 and a server on the communication network, And transmitted.

Referring to FIG. 1, the mobile phone 100 is provided with a receiving unit 160 for receiving OTP generation information for generating the OTP through the mobile communication network.

When the server on the communication network confirms the OTP generation information by authenticating the OTP medium having the OTP agent that generates the OTP for authenticating the cellular phone 100, The receiving unit 160 receives the OTP generation information through the wireless communication unit 130. If the OTP generation information is encrypted, the receiving unit 160 decodes the OTP generation information according to a predetermined decoding procedure.

Here, the OTP generation information may be generated according to a predetermined OTP generation algorithm (for example, an algorithm for generating a code value of predetermined digits through one or more seed values) and an OTP generation method in an OTP agent provided in the mobile phone 100 One or more fixed seed values used to generate N (N > = 2) OTPs, and a parameter for determining the dynamic seed value.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP generation information includes a seed fixed to be substituted into the time-synchronized OTP generation algorithm, And synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronized OTP.

Alternatively, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation information includes a seed fixed to be substituted into the challenge-response OTP generation algorithm, and the parameters of the OTP generation information include the challenge- Generating a random number corresponding to the dynamic seed value of the response-based OTP, or generating a random number for receiving a random number through the mobile communication network.

Referring to FIG. 1, when the OTP generation information for generating the OTP is received based on the user authentication result or the OTP medium authentication result, the mobile phone 100 generates one or more And an OTP generation unit 165 for identifying / determining a fixed seed value and a dynamic seed value, and substituting the determined one or more fixed seed values and the dynamic seed value into a predetermined OTP generation algorithm to generate an OTP .

If the user authentication unit 150 determines that the user authentication is valid or if the authentication processing unit 155 determines that the OTP medium authentication is valid, the OTP generation unit 165 generates the received OTP Determining one or more fixed seed values included in the information, determining one or more dynamic seed values based on the parameters included in the OTP generation information, generating one or more fixed seed values and dynamic seed values determined / Algorithm to generate OTPs with N (N> = 2) digits.

1, the mobile phone 100 includes an OTP output unit 170 for outputting the generated OTP through the screen output unit 110 when the OTP is generated through the OTP generation unit 165, The OTP output unit 170 transmits the generated OTP to the mobile phone 100 via the short distance communication unit. In this case, To the terminal (or device) located in the near vicinity.

When the OTP is generated, the OTP output unit 170 outputs the generated OTP to a predetermined area on the screen of the mobile phone 100 in association with the screen output unit 110. [

According to an embodiment of the present invention, the OTP output unit 170 outputs an OTP output screen on the screen of the mobile phone 100 in cooperation with the screen output unit 110, It is preferable to output OTP.

According to another embodiment of the present invention, the OTP output unit 170 outputs (or assigns) an OTP output area to the screen area currently output on the screen of the mobile phone 100 in connection with the screen output unit 110, And output the generated OTP to the OTP output area.

If the cellular phone 100 is equipped with a local communication unit (e.g., Bluetooth, infrared communication, RFID communication, RF communication, etc.), the OTP output unit 170 transmits the generated It is possible to output the OTP to the terminal (or apparatus) located close to the cellular phone 100.

According to another embodiment of the present invention, when the generated OTP is transmitted from the cellular phone 100 to a server that is provided on the communication network and authenticates the OTP, the OTP output unit 170 transmits the generated OTP to the wireless communication unit 130, (For example, an encryption / decryption-based communication channel) for transmitting the OTP to a server for authenticating the OTP through a secure communication channel, and authenticates the OTP through the secure communication channel It is possible to directly transmit the generated OTP to the server, and thus the present invention is not limited thereto.

2 is a diagram illustrating a cellular phone 200 OTP system configuration for authenticating a settlement of a mobile phone 200 according to an embodiment of the present invention.

In more detail, FIG. 2 stores OTP medium authentication information corresponding to a cellular phone 200 registered as an OTP medium for authenticating payment of the mobile phone 200 and OTP generation information in a storage medium 265, The mobile phone 200 provides an OTP agent corresponding to the configuration of the mobile phone 200 shown in FIG. 1 (when the mobile phone 200 is provided with an OTP agent) The mobile phone 200 receives the OTP medium authentication information from the mobile phone 200 and authenticates the mobile phone 200 with the OTP medium. When the mobile phone 200 is authenticated as the OTP medium, The OTP generation information corresponding to the mobile phone 200 is obtained from the mobile phone 200 and is provided to the mobile phone 200 so that an OTP of N digits for authenticating the mobile phone 200 is generated OTP operating system The present invention can be applied to a variety of OTP system configurations of the mobile phone 200 by referring to and / or modifying the FIG. 2 by those skilled in the art. It is to be understood that the present invention is not limited to the embodiment (s), but it is to be understood that the invention may be practiced otherwise than as specifically described herein, The technical characteristics thereof are not limited.

Referring to FIG. 2, the mobile phone 200 OTP system includes a mobile phone 200 having the OTP agent configuration shown in FIG. 1, an OTP authentication requesting OTP authentication to a user having the mobile phone 200, The request server 215 and the OTP medium authentication information corresponding to the mobile phone 200 registered as the OTP medium and the OTP generation information are stored in the storage medium 265, When the mobile phone 200 is used as an OTP medium after providing the OTP agent corresponding to the mobile phone 200 shown in the figure (when the mobile phone 200 is provided with the OTP agent) And authenticates the mobile phone 200 as an OTP medium. When the mobile phone 200 is authenticated as an OTP medium, the mobile phone 200 receives the OTP medium authentication information from the storage medium 265, OTP generation information, And an OTP operating system for processing the mobile phone 200 to generate N-digit OTPs for authenticating payment of the mobile phone 200. In accordance with the intention of a person skilled in the art, 200, and an OTP server 220 for authenticating the OTP of N digits generated by the mobile phone 200. The OTP server 220 may be an OTP server.

According to the present invention, in the OTP operating system, each means constituting the OTP operating system is implemented in the form of a single integrated server, or each means (or a combination of two or more means) constituting the OTP operating system, A part of the means constituting the OTP operating system is implemented in the form of a server, and a part of the means is constituted by the OTP server 220, the OTP authentication requesting server 215, Or each of the means constituting the OTP operating system may be implemented as a component of one or more servers of the communication company server 210 provided in the mobile communication network to which the mobile phone 200 is connected, The request server 215, and the communication company server 210. In the case where the OTP operating system is implemented, And bayida put out to clarify SHALL not limited to the invention by the server type and implementation location and number.

The mobile phone 200 is registered as an OTP medium for authenticating the settlement of the mobile phone 200, and thus the mobile phone 200 is provided with an OTP agent corresponding to the configuration of the mobile phone 200 shown in FIG. 1 A dedicated key button for requesting to generate an OTP is input through a key input unit provided in the mobile phone 200 or an OTP is requested to be generated through a predetermined menu selection or an OTP Generates OTP medium authentication information for requesting the mobile phone 200 to authenticate with the OTP medium, and transmits the OTP medium authentication information to the OTP operating system after the user authentication by receiving the generation command (or the OTP agent driving command) When the mobile phone 200 is authenticated as an OTP medium, the mobile phone 200 receives the OTP generation information from the OTP operating system, Configuring the OTP generation information for generating the N-digit OTP through, and wherein the generating, the output OTP of N digits via the OTP generation information.

The OTP authentication request server 215 is a general term for a server requesting authentication of a user, payment settlement, or financial transaction through an OTP generated by the mobile phone 200, A shopping mall server or a contents providing server or a home shopping server for processing authentication of payment through an OTP generated by the mobile phone 200, a web server 200 for authenticating a financial transaction through an OTP The present invention is not limited to the OTP authentication request server 215 and the OTP authentication request method.

The user terminal 205 is a general term of a communication terminal to which the user having the mobile phone 200 accesses the OTP authentication request server 215 via a communication network and includes a key input means, (E.g., mobile phone 200, portable Internet terminal, etc.) connected to a wireless communication network, a bi-directional communication function, A digital TV, an IP-TV, a household terminal connected to a home network, and the like.

According to the embodiment of the present invention, the user terminal 205 and the mobile phone 200 may be the same apparatus, and thus the present invention is not limited thereto.

The OTP server 220 receives an N-digit OTP generated by the mobile phone 200 through a communication network, generates an OTP 'that matches the OTP, compares (or verifies) the OTP with OTP' The OTP server 220 is a general term for a server that processes OTP authentication for authenticating payment of the mobile phone 200. The function of authenticating the OTP by the OTP server 220 may be provided in the OTP operating system, It is not limited.

Referring to FIG. 2, the OTP operating system receives OTP medium information (OTP information) including unique information of a mobile phone 200 corresponding to the mobile phone 200 and customer information from an OTP registration terminal registering the mobile phone 200 as an OTP medium Generates (or allocates) OTP generation information to be included in OTP generation information for generating N-digit OTP in the mobile phone 200 to authenticate payment of the mobile phone 200, And an OTP medium registration means 225 for storing the generated information in a storage medium 265. The OTP medium registration means 225 registers the generated information in the storage medium 265. When the mobile phone 200 registers with the OTP medium, When the OTP agent having the configuration shown in FIG. 1 is not provided, the mobile phone processing means 230 for providing the OTP agent program code corresponding to the configuration shown in FIG. 1 to the mobile phone 200 And the like.

Here, the OTP registration terminal is a collective term for a terminal device requesting to register the mobile phone 200 as an OTP medium. The OTP registration terminal includes a user terminal 205, an OTP registration authority (e.g., (E.g., a national institution terminal, an OTP authentication request server 215, an operator terminal, a credit card company terminal, a financial institution terminal, a securities company terminal, etc.) .

The OTP registration terminal inputs (or confirms) the OTP medium information including the mobile phone 200 specific information corresponding to the mobile phone 200 and the customer information in order to register the mobile phone 200 as the OTP medium, The OTP medium registration means 225 receives the OTP medium information through the communication network.

The mobile phone 200 unique information included in the OTP medium information includes a mobile identification number (MIN), a serial number (ESN), a subscriber identification number , An International Mobile Equipment Identity (IMEI), or a separate OTP medium identifier registered to authenticate that the mobile phone 200 is an OTP medium with an OTP agent capable of generating the N-digit OTP , Non-overlapping code values).

Alternatively, the mobile phone 200-specific information may include a mobile identification number (MIN), a serial number (ESN), a subscriber identification number, an IMEI (OTP) in which the mobile phone 200 includes the OTP agent capable of generating the OTP of the N digits. It is preferable to include a separate OTP medium identifier (e.g., a non-duplicated code value) or a USIM identifier registered to authenticate the OTP medium.

According to an embodiment of the present invention, the OTP medium information may further include a user password or a user personal identification number designated by the user, and the user password or the user personal identification number may be stored in the OTP medium, Is used for authenticating the validity of the user having the mobile terminal 200 or used as a validation condition for providing the OTP generation information to the mobile phone 200. [

The customer information preferably includes a resident registration number corresponding to the name (or user) of the mobile phone 200 to be used as the OTP medium. The customer information may include a name, an address, a contact name It is preferable to further include the same personal information.

If the financial transaction is included in the authentication target using the mobile phone 200 as the OTP medium, the customer information may further include financial information (e.g., account number, bank, etc.) of the customer corresponding to the customer information desirable.

Or card transaction is included in an object authenticated using the mobile phone 200 as an OTP medium, the customer information may further include card information (e.g., card number, card company, etc.) of the customer corresponding to the customer information desirable.

According to the intention of a person skilled in the art practicing the present invention and the field of using the mobile phone 200 as an OTP medium, the customer information may include various information (for example, an object authenticated by using the mobile phone 200 as an OTP medium, And if so, the customer account information for the game, etc.), and the present invention is not limited thereto.

When the OTP medium information is received, the OTP medium registration unit 225 provides the client information and the mobile phone 200 specific information to the communication company server 210, ) As an OTP medium is valid.

When the validity of the OTP medium information is received or the validity of using the mobile phone 200 as the OTP medium is authenticated, the OTP medium registration means 225 registers the OTP media information in the mobile phone 200 200 generates (or allocates) OTP generation information for generating N-digit OTPs.

Herein, the OTP generation information may include at least one of a fixed seed value and a dynamic seed value for generating an OTP of N digits by the OTP agent held in the OTP operating system, Parameter. ≪ / RTI >

When the OTP medium information is received from the OTP registration terminal and the OTP generation information is generated (or allocated), the OTP medium registration unit 225 associates the OTP medium information with the OTP generation information, 265).

When the mobile phone 200 does not have an OTP agent corresponding to the configuration of the mobile phone 200 shown in FIG. 1 when the mobile phone 200 is registered as the OTP medium by the OTP medium registration unit 225 , It is preferable that the mobile phone processing means 230 provides the OTP agent program code corresponding to the configuration shown in FIG. 1 to the mobile phone 200 and records the OTP agent program code on the recording medium provided in the mobile phone 200.

Referring to FIG. 2, the OTP operating system includes information receiving means 235 for receiving OTP medium authentication information requesting authentication of the mobile phone 200 from the mobile phone 200 via the mobile communication network with the OTP medium, And media authentication means 240 for comparing (or verifying) the OTP medium authentication information with OTP medium information stored in the storage medium 265 and authenticating the mobile phone 200 as an OTP medium (Or verification operation) between the user password or the user's personal identification number and the user's password or the user's personal identification number stored in the storage medium 265 when the user's password or the user's personal identification number is received from the mobile phone 200, (260) for authenticating user validity of the mobile phone (200) used as the OTP medium Is recommended.

According to an embodiment of the present invention, a dedicated key button for requesting to generate an OTP is input through a key input unit provided in the mobile phone 200, or a request is made to generate an OTP through a predetermined menu selection, 200 extracts (or extracts) the mobile phone 200-specific information from the USIM / memory and constructs OTP medium authentication information including the mobile phone 200-specific information and transmits the OTP medium authentication information through the mobile communication network. The means 235 receives the OTP medium authentication information including the unique information of the mobile phone 200 through the mobile communication network.

According to another embodiment of the present invention, the information receiving means 235 constructs (or extracts from the database) an OTP generation command (or an OTP agent driving command) for driving the OTP agent included in the mobile phone 200 The mobile phone 200 transmits the OTP generation command (or an OTP agent driving command) to the mobile phone 200 through the mobile communication network, and the OTP generation command (or the OTP agent driving command) (Or extracts) unique information of the mobile phone 200 from the USIM / memory unit in the mobile phone 200 and configures OTP medium authentication information including the unique information of the mobile phone 200, The information receiving means 235 receives the OTP medium authentication information including the unique information of the mobile phone 200 through the mobile communication network .

According to an embodiment of the present invention, the OTP medium authentication information may further include a user password or a user's personal identification number, and thus the present invention is not limited thereto.

According to another embodiment of the present invention, when the mobile phone 200-specific information included in the OTP medium authentication information is a phone number assigned to the mobile phone 200, the mobile phone 200- The present invention is not limited to this, and can be confirmed through the sender information about the mobile phone 200 without being directly included.

When the OTP medium authentication information is received from the mobile phone 200, the medium authentication unit 240 receives OTP media authentication information from the storage medium 265, (Or verification operation) between the configuration information included in the OTP medium authentication information and the configuration information included in the OTP medium information, and transmits the configuration information included in the OTP medium authentication information as a result of the comparison (Or matched) with the configuration information included in the OTP medium information stored in the storage medium 265, or when a predicted result is obtained through a verification operation, the mobile phone transmitting the OTP medium authentication information 200) is authenticated by the OTP media registration means (225) as a valid mobile phone (200) registered as an OTP medium.

When the OTP medium authentication information includes the user password or the user's personal identification number or receives the user's password or the user's personal identification number from the cellular phone 200 via a separate channel, (Or verification operation) between the user password or the user's personal identification number and the user's password or the user's personal identification number included in the OTP medium information stored in the storage medium 265, Or if the user's personal identification number matches (or matches) the user's password or the user's personal identification number stored in the storage medium 265, or if the predicted result is obtained through the verification operation, Authenticates the user as a normal valid user of the mobile phone 200 registered with the OTP medium, It characterized in that the process to be validated for providing group OTP generated information to the mobile phone 200 OK.

Referring to FIG. 2, when the mobile phone 200 transmitting the OTP medium authentication information is authenticated as a valid OTP medium, the OTP operating system receives OTP medium information corresponding to the OTP medium authentication information from the storage medium 265 And an information transmission means 245 for transmitting the confirmed OTP generation information to the mobile phone 200 through the mobile communication network. do.

When the mobile phone 200 that has transmitted the OTP medium authentication information is authenticated as a valid OTP medium and the validity of providing the OTP generation information to the mobile phone 200 or the validity of the user of the mobile phone 200 is further authenticated The information confirmation means 255 may check the OTP generation information associated with the mobile phone 200 specific information corresponding to the OTP medium authentication information from the storage medium 265, And confirms the OTP generation information associated with the identification number.

When the OTP generation information is confirmed, the information transmission means 245 transmits the OTP generation information to the mobile phone 200 through a communication channel connected to the mobile phone 200 through the mobile communication network .

Referring to FIG. 2, the OTP operating system receives N-digit OTPs generated by an OTP agent provided in the mobile phone 200 through a communication network, and transmits OTPs, which are associated with the mobile phone 200- OTP authentication means for verifying the generation information, generating N-digit OTP 'through the OTP generation information, and verifying whether the received OTP is valid by comparing (or verifying) the N-digit OTP with OTP' The OTP authentication unit 250 may be implemented in a separate OTP server 220, and the present invention may include all the methods that can be inferred. This is clearly made clear.

When the OTP is input and transmitted through the OTP input interface displayed on the user terminal 205, the OTP authentication unit 250 or the OTP server 220 generates an OTP And receives the OTP from the user terminal 205 through a communication network. When the OTP is encrypted and transmitted, the OTP is decrypted according to a predetermined decryption method.

Alternatively, when the N-digit OTP is generated, the mobile phone 200 can transmit the generated OTP through the mobile communication network. The OTP authentication unit 250 or the OTP server 220 can transmit the generated OTP through the mobile communication network And receives the OTP from the mobile phone 200 through the OTP. When the OTP is encrypted and transmitted, the OTP is decrypted according to a predetermined decryption method.

When the OTP is received, the OTP authentication unit 250 or the OTP server 220 confirms OTP generation information associated with the unique information of the mobile phone 200 that generated the OTP from the storage medium 265, Determining one or more fixed seed values for generating the OTP 'from the generated OTP generation information, determining one or more dynamic seed values through the parameters included in the OTP generation information, The seed value and the dynamic seed value are substituted into the predetermined OTP generation algorithm to generate an N-digit OTP '.

When the N-digit OTP 'is generated, the OTP authentication unit 250 or the OTP server 220 compares (or verifies) the received OTP' with the received OTP ' ) Process OTP authentication to authenticate payment.

If the OTP authentication unit 250 or the OTP server 220 obtains a result predicted through the verification operation, the OTP authentication unit 250 or the OTP server 220 determines whether the OTP and OTP ' And transmits the OTP authentication result to at least one of the OTP authentication request server 215, the user terminal 205, and the mobile phone 200 that requires the OTP authentication result .

On the other hand, if the OTP and OTP 'do not match (or match) with each other or the predicted result is not obtained through the verification operation, the OTP authentication unit 250 or the OTP server 220 transmits ) Of the OTP authentication request server 215, the user terminal 205, and the mobile phone 200 that require the result of the OTP authentication, And provides it as an authentication result receiving means.

3 is a diagram illustrating an OTP media registration process according to an embodiment of the present invention.

More specifically, FIG. 3 illustrates a process of registering a user's mobile phone 200 as an OTP medium on the mobile phone 200 OTP system shown in FIG. 2 for authenticating the mobile phone 200 settlement. Those skilled in the art will be able to refer to and / or modify Figure 3 to derive various implementations of the OTP media registration process (e.g., omitting some of the steps or changing the order) However, the present invention includes all of the above-mentioned embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Hereinafter, in FIG. 3, the OTP operating system shown in FIG. 2 is referred to as a "server" for the sake of convenience.

Referring to FIG. 3, when an OTP registration terminal accesses a server through a communication network and requests registration of the user's mobile phone 200 as an OTP medium (300), the server registers the user information of the user, The OTP registration terminal provides an OTP media registration interface 300 for inputting / registering OTP media information including mobile phone 200 specific information corresponding to the mobile phone 200 of the OTP registration terminal, And inputs and configures the OTP medium information including the unique information of the mobile phone 200 and the customer information to the server (310).

The server receives OTP medium information including the unique information of the mobile phone 200 and the customer information from the OTP registration terminal and stores the unique information of the mobile phone 200 and the customer information in the communication terminal 200 corresponding to the unique information of the mobile phone 200 Server 210 and verifies the validity of using the mobile phone 200 corresponding to the mobile phone 200 specific information as the OTP medium (315).

If the validity of using the mobile phone 200 as an OTP medium is not confirmed at step 320, the server provides OTP medium error information to the OTP registration terminal at step 325 and transmits the mobile phone 200 as an OTP medium The registration process is terminated.

If the validity of using the mobile phone 200 as an OTP medium is confirmed 320, the server generates (or assigns) OTP generation information for generating OTP of N digits in the mobile phone 200 to the OTP medium, (330), and stores the OTP medium information and the OTP generation information in association with each other on the storage medium (265) (335).

Then, the server checks whether the OTP agent corresponding to the configuration of the mobile phone 200 shown in FIG. 1 is provided in the mobile phone 200 corresponding to the unique information of the mobile phone 200 (340).

According to an embodiment of the present invention, the server transmits OTP agent information (for example, OTP agent version information, OTP issuer information, OTP usage location information, OTP agent information, (Not shown) or an OTP server 220 or a communication company server 210 that stores the OTP agent in the mobile phone 200 in association with the OTP agent.

If the OTP agent is not installed in the mobile phone 200 at operation 345, the server can operate in a platform (or an operating system) included in the mobile phone 200, The mobile phone 200 provides the corresponding OTP agent program code to the mobile phone 200. The mobile phone 200 transmits the OTP agent program code to the recording medium (e.g., a program area of the USIM / memory) The code is recorded (355).

4 is a diagram illustrating an OTP generation process according to an embodiment of the present invention.

4 is a flowchart illustrating an operation of the OTP operating system 200 shown in FIG. 2 in the mobile phone 200 shown in FIG. 1 after the user's mobile phone 200 is registered as an OTP medium through the process shown in FIG. (N > = 2) digits OTP in association with the OTP generation process. Referring to FIG. 4, the OTP generation process may be performed by a person skilled in the art. It will be appreciated that various implementations of the process (e.g., omitting some of the steps or changing the order) may be inferred, but the present invention encompasses all such contemplated embodiments, The technical features thereof are not limited by the implementation method alone.

Hereinafter, in FIG. 4, the OTP operating system shown in FIG. 2 is referred to as a "server" for the sake of convenience.

Referring to FIG. 4, after the user's mobile phone 200 is registered as an OTP medium through the process shown in FIG. 3, the mobile phone 200 transmits a key for authenticating the mobile phone 200 An OTP generation command (or an OTP agent activation command) is generated through the mobile communication network, or a dedicated key button for requesting to generate an OTP of N digits is input, The OTP agent corresponding to the configuration of the mobile phone 200 shown in FIG. 1 is requested to request the user authentication for using the mobile phone 200 as the OTP medium (400), and a user password or a user personal identification The user authentication is processed through the number (405).

If the user authentication is not validated (410), the mobile phone 200 outputs the user authentication error information (420) and ends the OTP generation process for authenticating the mobile phone 200 settlement.

If the user authentication is validated (410), the mobile phone 200 configures the OTP medium authentication information including the mobile phone 200 specific information corresponding to the mobile phone 200 (step 415) After connecting the communication channel, the OTP medium authentication information is transmitted to the server through the communication channel (420).

The server receives the OTP medium authentication information through the communication channel, reads the mobile phone 200-specific information included in the received OTP medium authentication information, and authenticates the mobile phone 200 as an OTP medium (430) .

According to an embodiment of the present invention, the server verifies OTP medium information including configuration information matched with the configuration information included in the OTP medium authentication information from the storage medium 265, and stores the OTP medium authentication information in the OTP medium authentication information (Or verification operation) between the configuration information included in the OTP medium authentication information and the configuration information included in the OTP medium authentication information and the OTP medium authentication information stored in the storage medium 265, When the configuration information included in the information is matched (or matched) or a result predicted through the verification operation is derived, the mobile phone 200 that has transmitted the OTP medium authentication information is managed by the OTP medium registration unit 225 It is preferable to authenticate with a valid mobile phone 200 registered as an OTP medium.

If the mobile phone 200 is not authenticated as a valid OTP medium at step 435, the server transmits OTP medium error information to the mobile phone 200 at step 440 and generates OTP information for authenticating the mobile phone 200 The process ends.

On the other hand, if the mobile phone 200 is authenticated as a valid OTP medium (435), the server checks OTP generation information associated with the OTP medium information including the unique information of the mobile phone 200 from the storage medium 265 ), The server transmits the confirmed OTP generation information to the mobile phone 200 through a communication channel 450. In response, the mobile phone 200 generates one or more fixed seed values and dynamic And generates and outputs an OTP of N digits by inputting the determined one or more fixed seed values and the dynamic seed value into the predetermined OTP generation algorithm (455).

5 is a diagram illustrating an OTP authentication process according to an embodiment of the present invention.

5 shows an example of a case where N (N > = 2) generated by the mobile phone 200 shown in FIG. 1 through the communication network in the OTP operating system shown in FIG. ) Number of OTPs, and compares (or verifies) the received N-number of OTPs with the OTP 'to authenticate the OTP validity. Those skilled in the art will appreciate that various implementations of the OTP authentication process (e.g., omitting some of the steps or changing the order) may be implemented by referring to and / or modifying FIG. 5, However, the present invention includes all of the above-mentioned embodiments, and the technical features of the present invention are not limited by the method shown in FIG.

Hereinafter, in FIG. 5, the OTP operating system shown in FIG. 2 is referred to as a "server" for convenience.

Referring to FIG. 5, after the N-digit OTP is generated / outputted by the mobile phone 200 shown in FIG. 1 through the process shown in FIG. 4, 205 received from the mobile phone 200 shown in FIG. 1 or receives (500) the generated N-digit OTP from the mobile phone 200 shown in FIG. 1, 265 to OTP generation information corresponding to the OTP medium in which the N-digit OTP is generated (505).

When the N-digit OTP is received from the user terminal 205 according to an embodiment of the present invention, the mobile phone 200-specific information corresponding to the OTP medium is transmitted to the OTP authentication request before the N-digit OTP is received It is preferably provided to the server in the process, or to the server together with the N-digit OTP.

When the N-digit OTP is received from the user terminal 205 according to another embodiment of the present invention, the mobile phone 200 unique information corresponding to the OTP medium is transmitted from the caller information corresponding to the mobile phone 200 Or is provided to the server along with the N-digit OTP.

Thereafter, the server checks one or more fixed seed values for generating the N-digit OTP 'from the OTP generation information, determines one or more dynamic seed values based on the parameters included in the OTP generation information, / ≫ OTP 'is generated by substituting the determined one or more fixed seed values and the dynamic seed value into the predetermined OTP generation algorithm (510).

If the N-digit OTP 'is generated (515), the server compares (or verifies) the received N-digit OTP with OTP' to check the validity of the OTP for authenticating the settlement of the mobile phone 200 (520).

According to the embodiment of the present invention, when the OTP and the OTP 'match (or match) with each other as a result of the comparison between the OTP and the OTP', or when the predicted result is obtained through the verification operation, It is deemed that the validity of the OTP for authenticating the payment has been confirmed.

If the OTP validity is not confirmed at step 525, the server transmits an OTP authentication result corresponding to the OTP validity error to the OTP authentication result receiving means (e.g., the OTP authentication request server 215, the user terminal 205, (E. G., One or more of the mobile stations 200).

On the other hand, if the validity of the OTP is confirmed (525), the server transmits an OTP authentication result corresponding to the OTP validation confirmation to the OTP authentication result receiving means (e.g., the OTP authentication request server 215, the user terminal 205, 200) (535).

FIG. 6 is a diagram illustrating a configuration of an OTP-based handset 600 settlement processing system according to an embodiment of the present invention.

6 shows a configuration of a payment processing system of a mobile phone 600 having the OTP operating system shown in FIG. 2. The mobile terminal 600 is connected to a user terminal 605 connected to a web site for a micropayment, The mobile phone 600 shown in FIG. 1 and the mobile phone 600 shown in FIG. 2 through an interface including a user interface for inputting an OTP among the interfaces at the user terminal 605 Upon receipt of the OTP generated by the OTP operating system in operation, the OTP is received from the user terminal 605, and after verifying the validity of the OTP, the mobile terminal 600 ). As a person skilled in the art to which the present invention pertains, reference is made to FIG. 6 and / or FIG. The present invention can be applied to various embodiments of the OTP-based mobile phone 600 settlement processing system (for example, some of the constituent parts may be omitted, or subdivided or combined). However, And the technical features thereof are not limited only by the method shown in FIG.

For example, the payment processing system for the mobile phone 600 shown in FIG. 6 can be applied to a system for processing a payment using the payment means of a customer, except that the payment amount is added to the communication fee of the user mobile phone 600 And it is a matter of course that the present invention includes all payment processing systems that can be analogized as described above.

6, the payment processing system of the mobile phone 600 includes a user terminal 605 used by a user who accesses a website for a micropayment, and a user terminal 605 held by the user, And a user mobile phone 600 having a mobile phone 600 configuration. The user terminal 605 sells tangible / intangible goods to the user through the user terminal 605, One or more OTP authentication request servers 615 for operating a web site for a micropayment to settle a payment through a mobile phone 600 payment means charged to a mobile communication terminal 600 and a user terminal 605, (600) for processing a micropayment of an OTP-based mobile phone (600) in connection with a mobile phone (600), and a communication company server (610) on a mobile communication network to which the user mobile phone (600) is connected And the payment system of the mobile phone 600 may be realized in the form of an authentication server (or a relay server) connected to the OTP authentication request server 615 and the communication company server 610, Or may be implemented in the form of an internal component or in the form of an internal component of the service provider server 610. It should be apparent that the present invention is not limited thereto.

The user terminal 605 includes at least one personal computer and a notebook having a browser capable of accessing an OTP authentication request server 615 that operates the micro-settlement target website, and the OTP authentication request server 615, Or one or more interfaces for payment of a mobile phone 600 from a payment system of a mobile phone 600 and outputs one or more information for payment of the mobile phone 600 through a user interface included in the interface, To the request server 615 or the mobile phone 600 settlement system.

According to an embodiment of the present invention, the user terminal 605 selects a mobile communication company corresponding to the user mobile phone 600 from the OTP authentication request server 615 or the payment system of the mobile phone 600, And a payment interface for inputting the user's resident registration number to the screen output means, and transmits the mobile communication company selection information corresponding to the user's mobile phone 600 to the payment interface of the mobile phone 600 through the key input means, The OTP authentication request server 615 or the cellular phone 600 settlement system after inputting the user cell phone number 600 and the user's resident registration number information to the OTP authentication request server 615 or the cellular phone 600 settlement system, An OTP input interface (not shown) for inputting an OTP generated in conjunction with the cellular phone 600 shown in FIG. 1 and the OTP operating system shown in FIG. And outputs the generated OTP to the screen output means. The OTP generated by linking the mobile phone 600 shown in FIG. 1 and the OTP operating system shown in FIG. 2 to the OTP input interface is inputted through the key input means To the OTP authentication request server 615 or the mobile phone 600 settlement system.

According to another embodiment of the present invention, the user terminal 605 receives mobile communication company selection information corresponding to the user mobile phone 600 from the OTP authentication request server 615 or the mobile phone 600 billing system, 600) number, a user's resident registration number information, and a mobile phone 600 billing interface for inputting the OTP generated by linking the mobile phone 600 and the OTP operating system shown in FIG. 2 to the screen output means The mobile phone 600 selection information, the user's mobile phone number 600 and the user's resident registration number information through the key input means and the mobile phone 600 shown in FIG. 1 and the OTP And transmits the OTP generated by the operating system to the OTP authentication request server 615 or the payment system of the mobile phone 600, do.

The OTP authentication request server 615 may be a mobile phone that sells tangible / intangible goods to the user through the user terminal 605 and imposes a payment amount on the sold goods on the communication charges of the user mobile phone 600 600), and when the user terminal (605) selects the payment means for the mobile phone (600) as the payment means for the payment amount, the mobile terminal The billing interface of the mobile phone 600 is provided to the user terminal 605 or the billing interface of the mobile phone 600 is provided to the user terminal 605 through the billing system of the mobile phone 600 .

The user mobile phone 600 is a mobile phone 600 possessed by a user who purchases the type / intangible goods sold by the OTP authentication request server 615 and transmits a communication fee charged to the user mobile phone 600 A function of outputting the generated OTP (for example, a screen output or a function of outputting the generated OTP to a nearby location such as Bluetooth, Wi-Fi, RF communication, etc.) And outputting it to the user terminal 605 through a communication means).

According to the present invention, the user terminal 605 is an example of a first terminal that a user connects to a server through a communication network and purchases tangible / intangible goods to be sold in the server, It is possible to carry out various modifications according to the type and characteristics of the communication network and the server.

According to the present invention, the user mobile phone 600 is an embodiment of a second terminal equipped with an OTP agent for authenticating payment validity for a purchase price of goods purchased through the first terminal, The terminal may include all communication terminals except for the first terminal.

For example, if the server connected to the first terminal is a home shopping server, the first terminal may include a user's IPTV, and the second terminal may include a wired phone / VoIP phone provided near the IPTV can do.

Alternatively, if the server to which the first terminal is connected is an ARS server, the first terminal may include a user's wired telephone / mobile phone 600 / VoIP phone, and the second terminal may include the first terminal If the first terminal is a cellular phone 600, the second terminal may be connected to a landline telephone / VoIP terminal, and the second terminal may be connected to another voice call terminal (for example, if the first terminal is a landline phone, Phone, and if the first terminal is a VoIP phone, the second terminal may include a landline phone / mobile phone 600).

That is, it is to be appreciated that the user terminal 605 of the present invention is not limited to the above-described wired terminal, and that the user cell phone 600 of the present invention is not limited to the cellular phone 600. [

The communication company server 610 is a collective term for a mobile communication company server provided on a mobile communication network to which the user mobile phone 600 is connected and which interfaces with the mobile phone 600. In the mobile phone 600 billing system, (Or data) requested to be provided to the user mobile phone 600 through the mobile communication system (e.g., an exchange, a base station, etc.) according to a predetermined communication protocol, a data exchange server, (WAP) server.

According to the embodiment of the present invention, the communication company server 610 has a function of authenticating a user by inquiring a subscriber D / B (not shown) through the user's mobile phone number 600 and user's resident registration number information, Or the OTP agent provided to the user's mobile phone 600 through a predetermined OTP server 620. In this case,

According to an embodiment of the present invention, when the OTP agent is provided to the user mobile phone 600 or the OTP agent is provided to the user mobile phone 600, the communication company server 610 may correspond to the user mobile phone 600 And the OTP agent information corresponding to the OTP agent included in the user's mobile phone 600 are stored in association with each other.

Here, the OTP agent information may include at least one of version information of an OTP agent, an OTP generation algorithm, and an OTP generation method in the user's mobile phone 600 corresponding to the mobile phone 600 number.

Here, the OTP generation algorithm and the OTP generation method can use different algorithms and generation methods for respective OTP agents, and thus the present invention is not limited thereto.

Referring to FIG. 6 according to an embodiment of the present invention, the mobile phone 600 billing system includes a user terminal 605 connected to the web site for a micropayment, a mobile communication company selection corresponding to the user mobile phone 600, An interface providing means 635 for providing a billing interface for a mobile phone 600 for inputting a number of a user's mobile phone 600 and a user's resident registration number; An information receiving means 640 for receiving corresponding mobile communication company selection information, a user mobile phone 600 number and user resident registration number information, and a communication server 610 corresponding to the received mobile communication company selection information, And transmits the user's resident registration number information corresponding to the user's mobile phone number 600 and the resident registration number confirmation result through the communication company server 610 And a user authentication means (645) for authenticating the user by receiving and reading the user authentication result. The interface providing means (635) is provided with the user terminal (605) And an OTP input interface for inputting an OTP generated by the OTP agent is provided.

Referring to FIG. 6 according to another embodiment of the present invention, the payment system of the mobile phone 600 includes a user terminal 605 connected to the web site for a micropayment, And an interface for providing a mobile phone 600 billing interface for inputting a user's resident registration number and a mobile phone 600 shown in FIG. 1 and an OTP generated in conjunction with the OTP operating system shown in FIG. 2 An information receiving means 640 for receiving mobile communication company selection information corresponding to the user's mobile phone 600 through the payment interface of the mobile phone 600 and a user's mobile phone number 600 and user's resident registration number information and OTP, And transmits the user's mobile phone number 600 and user's resident registration number information to the communication company server 610 corresponding to the received mobile communication company selection information, And a user authentication means 645 for receiving and reading the user authentication result corresponding to the number of the user's cell phone 600 and the result of checking the user's resident registration number through the gentleman's server 610 and authenticating the user.

According to the present invention, each means constituting the billing system of the mobile phone 600 may be implemented as a separate server for each means, or in the form of a predetermined authentication server (or relay server) including the means, Two or more means may be combined to form a separate server, or the means may be implemented in the form of a component in the OTP authentication request server 615, or the means may be implemented in the form of a component in the carrier server 610, Or some of the means may be implemented as components in the OTP authentication request server 615 and the rest may be implemented as components in the communication company server 610 or some of the means may be implemented as components in the OTP authentication request server 615 And a part of the other is implemented as a component in the communication company server 610 and the other part is implemented as a separate server, Group bayida put out to clarify SHALL not limited by the embodiment to which the present invention to implement a mobile phone 600, settlement systems.

According to an embodiment of the present invention, the user accesses the OTP authentication request server 615 to purchase the type / intangible goods, and transmits the payment amount corresponding to the purchase price for the goods to the user's mobile phone 600, The interface providing means 635 may directly or indirectly transmit the information to the user terminal 605 via the communication network to which the user terminal 605 is connected, A mobile phone 600 settlement interface for relaying the OTP authentication request server 615 and selecting a mobile communication company corresponding to the user mobile phone 600 and inputting the user mobile phone 600 number and user's resident registration number to the user terminal 605, Is provided.

When the interface providing unit 635 provides the payment interface of the mobile phone 600 to the user terminal 605, the information receiving unit 640 receives the payment interface of the mobile phone 600 from the user terminal 605 And a communication session for receiving the mobile communication company selection information corresponding to the user mobile phone 600 and the user mobile phone 600 number and the user's resident registration number information.

According to an embodiment of the present invention, the interface providing means 635 connects a communication channel with the user terminal 605, and provides the charging interface of the mobile phone 600 to the user terminal 605 through the communication channel The information receiving means 640 confirms the user terminal 605 information (for example, IP address) from the communication channel provided to the user terminal 605 through the payment interface of the mobile phone 600, (For example, the user terminal 605) for receiving the mobile communication company selection information corresponding to the user mobile phone 600 and the user mobile phone 600 number and the user's resident registration number information from the user terminal 605 based on the channel, A memory area allocated to receive the mobile communication company selection information, the user's mobile phone number 600 and user's resident registration number information, ) It is preferred to connect.

When the interface providing means 635 provides the payment interface of the mobile phone 600 to the user terminal 605 via the OTP authentication request server 615 according to another embodiment of the present invention, 640 receives the user terminal 605 information (for example, IP address) from the OTP authentication request server 615 and receives the information from the user terminal 605, (E.g., to receive the mobile operator selection information and the user mobile phone 600 number and user resident registration number information from the user terminal 605) for receiving the selection information, the user mobile phone 600 number and the user's resident registration number information A memory area and a communication thread code).

Here, the communication session encrypts and receives the mobile communication company selection information corresponding to the user mobile phone 600, the user mobile phone 600 number and the user's resident registration number information, Selection information, and a secure communication session for decrypting the user cell phone number 600 and the user's resident registration number information.

When the communication session is established with the user terminal 605, the information receiving means 640 receives from the user terminal 605 the mobile communication company selection information corresponding to the user's mobile phone 600, ) Number and user resident registration number information.

When the mobile communication company selection information corresponding to the user mobile phone 600, the user mobile phone number 600 and the user's resident registration number information are received from the user terminal 605, the user authentication means 645 corresponds to the mobile communication company selection information And transmits the user's cell phone number and user's resident registration number information to the communication company server 610 of the communication company server 610 through the subscriber D / The user authentication means 645 receives and reads the user authentication result and authenticates the user who requested the micropayment of the mobile phone 600. [

When the user authentication is confirmed, the OTP interface providing unit 635 performs an OTP input interface for inputting an OTP generated by the OTP agent provided in the user's mobile phone 600 to the user terminal 605 .

According to the embodiment of the present invention, the OTP interface provision unit 635 directly or indirectly relays the OTP authentication request server 615 to the user terminal 605 through the communication network to which the user terminal 605 is connected It is preferable that the user terminal 605 processes the OTP input interface to be provided.

If the OTP input interface is provided to the user terminal 605 by the OTP interface providing means 635, the OTP receiving means may receive the OTP input via the OTP input interface from the user terminal 605 And may be omitted when a communication session with the user terminal 605 is connected.

When the OTP interface providing unit 635 connects a communication channel with the user terminal 605 according to an embodiment of the present invention and provides the OTP input interface to the user terminal 605 through the communication channel , The OTP receiving means checks the user terminal 605 information (e.g., IP address) from the communication channel provided with the OTP input interface to the user terminal 605, (E.g., a memory area and a communication thread code allocated to receive the OTP from the user terminal 605) for receiving the OTP from the OTP 605. [

According to another embodiment of the present invention, when the OTP interface providing unit 635 provides the OTP input interface to the user terminal 605 through the OTP authentication request server 615, (E.g., the user terminal 605) for receiving the OTP from the user terminal 605 based on the received user terminal 605 information (e.g., IP address) from the authentication requesting server 615, ) To the memory area and the communication thread (Thread) code allocated to receive the OTP).

Here, the communication session preferably comprises a secure communication session for encrypting and receiving the OTP and decrypting the encrypted OTP.

According to another embodiment of the present invention, the user accesses the OTP authentication request server 615 to purchase the type / intangible goods, and transmits a payment amount corresponding to the purchase price for the goods to the user's mobile phone 600 The interface providing means 635 may directly transmit the data to the user terminal 605 through the communication network to which the user terminal 605 is connected, Or the OTP authentication requesting server 615 to transmit the selection of the mobile communication company corresponding to the user's mobile phone 600 to the user terminal 605 and the user's mobile phone number and user's resident registration number corresponding to the user's mobile phone 600, 600) and a mobile phone 600 billing interface for inputting an OTP generated by the OTP operating system shown in FIG. 2, The information receiving means 640 receives the mobile communication company selection information corresponding to the user's mobile phone 600, the user's mobile phone number 600, the user's resident registration number information and the OTP through the payment interface of the mobile phone 600, 645 transmits the user's mobile phone number 600 and user's resident registration number information to the communication company server 610 corresponding to the received mobile communication company selection information and transmits the user's mobile phone 600 number and user's resident registration number And authenticates the user by receiving and reading the user authentication result corresponding to the confirmation result.

Referring to FIG. 6, the mobile phone 600 payment system inputs OTP generated by the mobile phone 600 shown in FIG. 1 and the OTP operating system shown in FIG. 2 to the user terminal 605 An OTP for authenticating the settlement of the mobile phone 600 is generated in cooperation with the mobile phone 600 shown in FIG. 1, and the generated OTP is outputted through the user's mobile phone 600 And OTP operating means 625 for receiving the generated OTP from the user terminal 605 (or the mobile phone 600) and verifying the validity of the received OTP .

In FIG. 6, the OTP operating unit 625 shows the OTP operating system shown in FIG. 2 as an internal component of the payment system of the mobile phone 600, OTP operating system configuration.

Referring to FIG. 6, the payment system of the mobile phone 600 processes the payment amount through the communication fee charged to the mobile phone 600 when the payment validity is authenticated by the OTP operating unit 625 It is preferable to further comprise a settlement processing means 650.

According to the embodiment of the present invention, the payment processing unit 650 confirms the payment amount to be charged to the communication rate of the user's mobile phone 600 from the OTP authentication request server 615, It is preferable to inquire the settlement limit for the number of the user's cell phone 600 and to approve the settlement through the communication fee charged to the cell phone 600 by comparing the settlement amount with the settlement limit.

According to another embodiment of the present invention, the payment processing means 650 can store and manage the number of the user's mobile phone 600 and the corresponding payment limit information through a separate database. In this case, The processing means 650 inquires the settlement limit for the number of the user's cell phone 600 through the database, compares the settlement amount with the settlement limit, and approves the payment through the communication fee charged to the cell phone 600 It is possible to do.

If payment using the communication fee charged to the mobile phone 600 is approved, the payment processing unit 650 charges the communication fee for the user mobile phone 600 through the communication company server 610 And transmits the settlement approval information for the settlement amount to the OTP authentication request server 615.

FIG. 7 is a diagram illustrating a process of payment for an OTP-based mobile phone 600 according to an embodiment of the present invention.

In more detail, FIG. 7 shows a user terminal 605 connected to a website for a micropayment to be provided with an interface for inputting a mobile communication company selection corresponding to the user mobile phone 600 and a user mobile phone 600 number and a user's resident registration number And receives the mobile communication company selection information corresponding to the user mobile phone 600, the user mobile phone number 600 and the user's resident registration number information from the user terminal 605 via the interface, When the user authentication is confirmed through the server 610, the user terminal 605 inputs an OTP input for inputting the OTP generated in association with the mobile phone 600 shown in FIG. 1 and the OTP operating system shown in FIG. After the interface is provided, the OTP is generated / authenticated through the processes shown in FIGS. 4 to 5, and the OTP authentication result The mobile phone 600 using the OTP verification information will be described in detail with reference to FIG. 7, if it is a person skilled in the art. It is to be understood that the invention may be practiced otherwise than as specifically described herein, but it will be appreciated that the invention may be practiced otherwise than as specifically described herein, And the technical features thereof are not limited only by the illustrated method.

Hereinafter, in FIG. 7, the mobile phone 600 payment system shown in FIG. 6 is referred to as a "server" for convenience, and the OTP authentication request server 615 shown in FIG. 2 or 6 is referred to as a " .

Referring to FIG. 7, a user connects to the web server to purchase a tangible / intangible product, and a payment amount corresponding to a purchase price for the goods is paid through a communication fee charged to the user's mobile phone 600 If the mobile terminal 600 selects the payment means 700, the server relays the web server directly to the user terminal 605 through the communication network to which the user terminal 605 is connected, (705) to provide a mobile communication company selection corresponding to the user mobile phone (600) and a payment interface for a mobile phone (600) for inputting a user mobile phone number and a user's resident registration number, (710) whether the mobile communication company selection information input via the payment interface of the mobile phone 600, the user's mobile phone number 600 and the user's resident registration number information are received.

If the mobile communication company selection information, the user's mobile phone number 600 and the user's resident registration number information are received from the user terminal 605 in operation 715, the server transmits the selected mobile communication company selection information, (600) number and user's resident registration number information to request the user authentication, and the communication company server 610 configures the user authentication result for the user's mobile phone number 600 and the user's resident registration number information through the subscriber D / B, The mobile terminal 600 receives and reads the user authentication result, and authenticates the user who requested the micropayment of the mobile phone 600 (step 720).

If the user is not authenticated 725, the server generates a user authentication error and transmits it to the user terminal 605 (or the user mobile phone 600) and the web server 730.

On the other hand, if the user is authenticated (725), the server transmits an OTP for authentication of the mobile phone 600 in connection with the mobile phone 600 shown in FIG. 1 through the process shown in FIGS. And receives the OTP from the user terminal 605 (or the mobile phone 600) to authenticate the validity of the OTP for payment of the mobile phone 600 (step 735).

If the validity of the OTP for payment of the mobile phone 600 is not authenticated 740, the server generates payment error information and transmits the payment error information to the user terminal (or the user mobile phone 600) and the web server 745 .

If the validity of the OTP for payment of the mobile phone 600 is confirmed at step 740, the server generates the payment validation result and transmits it to the user terminal (or the user mobile phone 600) and the web server (step 750) , And accepts payment approval through the communication fee of the user mobile phone 600 in response to the payment validity result (755).

According to the embodiment of the present invention, the server confirms the payment amount to be charged to the communication rate of the user's mobile phone 600 from the web server, It is preferable to display the payment limit and compare the payment amount with the payment limit to approve payment through the communication fee charged to the mobile phone 600. [

FIG. 8 is a diagram illustrating a process of payment for an OTP-based mobile phone 600 according to another embodiment of the present invention.

8 is a diagram illustrating a user terminal 605 connected to a web site for a small amount of payment, which includes a mobile communication company selection corresponding to the user mobile phone 600, a user mobile phone 600 number and a user's resident registration number, The OTP generation unit 600 processes the received OTP to provide an interface for inputting the OTP generated by the OTP operating system shown in FIG. 2, and generates / authenticates the OTP through the process shown in FIGS. 4 to 5 And processes the settlement of the mobile phone 600 according to the OTP authentication result. If a person skilled in the art is familiar with the present invention, referring to and / or modifying FIG. 8, the OTP verification information (For example, some steps may be omitted or a procedure may be changed) may be inferred from the present invention, It is made, including any exemplary way in which the inference, to which the technical feature that is not limited to the exemplary method shown in the figure 8.

Hereinafter, in FIG. 8, the mobile phone 600 payment system shown in FIG. 6 is referred to as a "server" for convenience, and the OTP authentication request server 615 shown in FIG. 2 or 6 is referred to as a " .

Referring to FIG. 8, a user connects to the web server to purchase a type / intangible goods, and a payment amount corresponding to the purchase price for the goods is paid through communication charges imposed on the user's mobile phone 600 When the mobile phone 600 payment means is selected 800, the server relays the web server to the user terminal 605 through the communication network to which the user terminal 605 is connected, A user mobile phone 600 number, a user's resident registration number, and the mobile phone 600 shown in FIG. 1 and the OTP operating system shown in FIG. 2 in association with the selection of the mobile communication company corresponding to the user mobile phone 600 (805) to provide a payment interface for a mobile phone (600) for inputting an OTP, and then, through the process shown in FIGS. 4 to 5, in association with the mobile phone (600) An OTP for authenticating payment of the mobile phone 600 is generated and processed to be output to the user mobile phone 600 and the OTP is received from the user terminal 605 (or the mobile phone 600) Gt; 810 < / RTI >

If the validity of the OTP for payment of the mobile phone 600 is not authenticated 815, the server generates payment error information and transmits it to the user terminal (or the user mobile phone 600) and the web server 820.

If the validity of the OTP for payment of the mobile phone 600 is authenticated 815, the server generates the payment validation result and transmits it to the user terminal (or the user mobile phone 600) and the web server 825, (830) a payment approval through the communication fee of the user's mobile phone 600 in response to the payment validity result.

According to the embodiment of the present invention, the server confirms the payment amount to be charged to the communication rate of the user's mobile phone 600 from the web server, It is preferable to display the payment limit and compare the payment amount with the payment limit to approve payment through the communication fee charged to the mobile phone 600. [

According to the present invention, when an OTP is generated without approving the mobile phone settlement using the OTP but storing information necessary for generating the OTP in a USIM (Universal Subscriber Identity Module) or a memory area of the mobile phone provided in the user's mobile phone Each mobile phone authenticates that the mobile phone is a valid OTP medium, and authenticates that the mobile phone user is a valid user, thereby preventing unauthorized mobile phone settlement from being approved by using the mobile phone and personal information of the other mobile.

It is another object of the present invention to provide an OTP generation apparatus and a mobile phone in which OTP generation information is provided to a mobile phone in a server on a communication network according to a result of authentication of the OTP medium, There is an advantage in that an N-digit OTP for mobile phone settlement is generated and output only by a cellular phone registered as a valid OTP medium.

Claims (6)

In a method executed by a server, A first step of checking the media information for authenticating the user's mobile phone as a user's own media implementing the OTP (One Time Password) of the specified authentication procedure and storing the user information in a designated storage medium; A second step of communicating with a program driven by the mobile phone when the user mobile phone is running a program and performing a procedure for authenticating the mobile phone in a state in which the program is driven through the stored medium information to the medium owned by the user; A third step of authenticating generation information to be used for generating an OTP at the user's mobile phone side corresponding to the authenticated medium when authenticating the mobile phone driving the program to the medium owned by the user; And And a fourth step of providing the generated generation information to a program of a user's mobile phone corresponding to the authenticated medium, Wherein the medium information includes an eigenvalue that is uniquely assigned uniquely after the program is installed in the user's cellular phone in order to authenticate a cellular phone in which the program is installed and operated. Way. The information recording medium according to claim 1, Unique information stored in a memory unit of the mobile phone, And code information provided from an IC chip that is interfaced with the mobile phone. The information processing apparatus according to claim 1, Wherein the seed value is used as a seed value for dynamically generating N (N > = 2) OTPs on the user's mobile phone side corresponding to the authenticated medium. 4. The apparatus of claim 3, wherein the N-digit OTP comprises: Dynamically generated through the program of the mobile phone, or Wherein the mobile terminal is dynamically generated through an IC chip interfaced with the mobile phone. delete delete

Images