KR101915881B1 - Authentication method and authentication system for providing screen sports service - Google Patents

Abstract

The present invention provides an authentication method for providing a service and an authentication system for providing a service. An authentication method for providing a service according to the present invention includes the steps of: requesting an authentication code from an authentication unit by a service providing unit according to a request from a user; generating the authentication code according to the request by the authentication unit and transmitting the authentication code to the service providing unit Displaying the transmitted authentication code to the user, inputting the displayed authentication code to the authentication terminal, and transmitting, by the authentication terminal, identification information based on the authentication code to the authentication unit, , The authentication unit performing authentication for the user based on the transmitted identification information, and notifying the service provider of whether or not the authentication has been approved, and a step for notifying the user And providing a predetermined service.

Description

TECHNICAL FIELD [0001] The present invention relates to an authentication method for providing a screen sports service and an authentication system for providing screen sports service.

The present invention relates to an authentication method for providing a service and an authentication system for providing the service, and more particularly, to an authentication system for providing a service that does not need to store an ID or a password and is capable of reliably blocking user's personal information leakage An authentication method, and an authentication system for providing a service.

In recent information society, it is required to certify individuals in various fields. In particular, there is a growing need for authentication for users in a system that provides a predetermined service to a user. For example, a user who uses a portal service such as Naver, Gmail, or the like visits an Internet site of the service and inputs his / her ID and password to complete the authentication of the user himself / herself, Various services such as e-mail can be used.

The most common way to authenticate a user is to enter the user's ID and password. However, in the authentication method using the ID and the password, the ID and the password are leaked to another person through hacking or the like, and the personal information can be abused. In addition, in recent years, it is common that a single user uses a plurality of sites. Once an ID and a password are leaked, a large amount of damage may occur all at once in a plurality of sites to which the user is subscribed. Of course, although the user can set the ID and password for each of the plurality of sites differently, it is practically impossible to accurately memorize the ID and password of each of the plurality of sites.

Therefore, it is necessary to develop an authentication system that does not need to be memorized directly by the user, and does not have to be leaked to another person at the same time. Particularly, recently, simulating devices capable of enjoying sports games without using the 3D stereoscopic image and computer simulating technology have been developed. In such simulating devices for sports games, there is a strong need for user authentication Is required. For example, in the case of screen golf for golf, since the golf is not a group game but an individual record game, it is necessary to store the record of the user's play and to refer to the user every time he needs it. In order to do this, the identity of each user who is playing a screen golf must be confirmed, so user authentication is highly required.

SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances and provides an authentication method for providing a service that does not need to remember an ID and a password, .

According to an aspect of the present invention, there is provided an authentication method for providing a service, the method including: requesting an authentication code from an authentication unit by a service providing unit according to a request from a user; And transmitting the generated authentication code to the service providing unit, wherein the service providing unit displays the transmitted authentication code to the user, the step of the user inputting the displayed authentication code into the authentication terminal, And transmitting the identification information based on the code to the authentication unit. The authentication unit performs authentication for the user based on the transmitted identification information, notifies the service provider of whether or not the authentication is approved, Providing a predetermined service to the user when the additional authentication is approved All.

Wherein the identification information includes an identifier for the authentication terminal, and the authentication unit identifies the user from the identifier in performing the authentication for the user, Extracts the user information for the identified user from the database storing the information about the service provider, and provides the extracted user information to the service provider in the step of notifying the service provider of the authentication approval.

Further, in the step of the user inputting the displayed authentication code into the authentication terminal, the user inputs the authentication code using the voice, and the identification information further includes voice information of the user used in inputting the authentication code, The authentication unit identifies the user from the identifier and extracts the voice information of the identified user from the voice database in which the voice information of the user is stored in the step of performing authentication for the user, Information is compared with the voice information of the user inputted when the authentication code is input, and the presence or absence of the identity of the user is determined.

Alternatively, in the step of the user inputting the displayed authentication code into the authentication terminal, the user further inputs his or her sign, and the identification information further includes the sign information of the user further input at the time of inputting the authentication code Wherein the authenticating unit identifies a user from the identifier and extracts sign information of the identified user from the sign database in which the sign information of the user is stored in the step of authenticating the user, The extracted sign information is compared with the sign information of the additional input user when the authentication code is input to determine whether the user is identical or not.

In the authentication method for providing the service, when the user inputs a displayed authentication code into the authentication terminal, a plurality of users input the same authentication code into their respective authentication terminals. Here, the service provided to the user is screen golf, and the service providing unit displays a screen of the screen golf to the user when the authentication is approved, and displays a window for each of the plurality of users on the screen do.

Meanwhile, an authentication system for providing a service according to an exemplary embodiment of the present invention includes a service providing unit for providing a predetermined service to a user and an authentication unit for performing authentication for the user. Here, the authentication of the user may include: requesting an authentication code from the service providing unit to the authentication unit according to a request from the user; generating the authentication code according to the request by the authentication unit and transmitting the authentication code to the service providing unit; A step in which the service providing unit displays the transmitted authentication code, a step of the user inputting the displayed authentication code into the authentication terminal, the step of transmitting identification information based on the authentication code in the authentication terminal to the authentication unit, And authenticating the user based on the identification information transmitted by the authentication unit.

According to the authentication method for providing a service and the authentication system for providing a service of the present invention, it is not necessary to memorize an ID and a password, and at the same time, it is possible to reliably block the leakage of personal information of a user.

1 is a schematic configuration diagram of an authentication system for providing a service according to a first embodiment of the present invention.
2A to 2G are diagrams showing a process of authentication in the system of FIG.
3A is a diagram showing a specific structure as an example of the service providing unit of FIG.
FIG. 3B is a view showing a screen displayed on the screen of FIG. 3A.
4 is a schematic configuration diagram of an authentication system for providing a service according to a second embodiment of the present invention.
5 is a schematic configuration diagram of an authentication system for providing a service according to the third embodiment of the present invention.

Hereinafter, the present invention will be described in detail with reference to examples. The objects, features and advantages of the present invention will be easily understood by the following embodiments. The present invention is not limited to the embodiments described herein, but may be embodied in other forms. The embodiments disclosed herein are provided so that the disclosure may be thorough and complete, and that those skilled in the art will be able to convey the spirit of the invention to those skilled in the art. Therefore, the present invention should not be limited by the following examples.

Although the terms first, second, etc. are used herein to describe various elements, the elements should not be limited by such terms. These terms are only used to distinguish the elements from each other. In addition, when an element is referred to as being on another element, it may be directly formed on the other element, or a third element may be interposed therebetween.

The sizes of the elements in the figures, or the relative sizes between the elements, may be exaggerated somewhat for a clearer understanding of the present invention. In addition, the shape of the elements shown in the drawings may be somewhat modified by variations in the manufacturing process or the like. Accordingly, the embodiments disclosed herein should not be construed as limited to the shapes shown in the drawings unless specifically stated, and should be understood to include some modifications.

1 is a schematic configuration diagram of an authentication system for providing a service according to a first embodiment of the present invention.

Referring to FIG. 1, an authentication system 100 for providing a service includes an authentication unit 110 and a service provider 120. In addition, the authentication terminal 130 is required during authentication, and this can use a mobile device such as a mobile phone held by the user himself / herself. The authentication unit 110 may include a user database 111 that performs authentication for a user before providing a desired service and stores information necessary for authentication. The service providing unit 120 receives the login request from the user, provides the user with the necessary information for authentication, and provides the desired service after the authentication is completed. The service providing unit 120 may include a login terminal 121 to receive a login request from a user. The authentication unit 110 and the service provider 120 may each include an Internet server, and the server and the authentication terminal 130 may be connected to each other by wired / wireless communication so that data can be transmitted and received. For example, the server in the service providing unit 120 forms a user authentication session with the login terminal 121 and provides a service. The server includes a game server, an online banking server, an online shopping mall server, And the like. On the other hand, the service providing unit 120 may provide a service for playing virtual indoor sports such as screen golf, screen baseball, etc., which have become popular recently.

Hereinafter, a concrete procedure of authentication according to a login request of a user by the authentication unit 110, the service provider 120, and the authentication terminal 130 will be described with reference to FIGS. 2A to 2G.

Referring to FIGS. 1 and 2A, a user who desires to receive a predetermined service displays an intention to login to the service providing unit 120. This is done through the login terminal 121, for example, by clicking the 'login' button or the like displayed on the screen of the login terminal 121. The authentication process is started according to the login request of the user, and the service provider 120 requests the authentication unit 110 for the authentication code.

1 and 2B, the authentication unit 110 includes an authentication code generation unit capable of generating an authentication code, and generates an authentication code according to a request from the service providing unit 120. [ The authentication code may be any randomly formed code, preferably a text code, for example a series of numbers and / or letters.

Referring to FIGS. 1 and 2C, after the authentication code is generated, the authentication unit 110 transmits the generated authentication code to the service provider 120. Also, the service providing unit 120 displays the received authentication code to the user. The authentication code may be displayed on the login terminal 121 of the service providing unit 120. [

1 and 2D, a user who has confirmed the authentication code displayed on the service providing unit 120 inputs the authentication code to the authentication terminal 130. [ Here, the authentication terminal 130 may be a user's own mobile phone. In order to use his / her mobile phone in the authentication process, an authentication related application must be installed in the mobile phone. The authentication code composed of text can be easily input using a keypad or the like. Recently, smartphones have become popular, so there is no particular difficulty in inputting text such as numbers or letters.

Referring to FIG. 1 and FIG. 2E, identification information of a user is transmitted from the authentication terminal 130 to the authentication unit 110. The identification information is formed based on the authentication code, and then transmitted to the authentication unit 110. [ The identification information may be the same as the authentication code or modified based on the authentication code, and preferably includes an identifier for the authentication terminal 130 in the authentication code. The identifier for the authentication terminal 130 means an identifier for distinguishing from the other terminals. For example, the identifier may be a unique value assigned to the terminal, such as a serial number of the authentication terminal 130. Or a Universal Subscriber Identity Module (USIM) card number or a mobile communication telephone number in the case of a mobile phone or a smart phone.

1 and 2F, the authentication unit 110 performs authentication based on the identification information. In performing the authentication for the user, the authentication unit 110 checks whether the authentication code included in the identification information is valid. The authentication unit 110 also uses the information stored in the user database 111 to identify the user from the identifier included in the identification information. The user database 111 stores the identifier information of the authentication terminal 130 and also stores personal information of the user matching with the identifier information of the authentication terminal 130. [ Here, the information of the individual user may include an individual's name, an ID, information (e.g., a resident's number or an Ipin) that can identify the user, and the like. Also, information related to the service provided by the authentication system 100 may be included. For example, if the service provided is a screen golf service, the personal record that the user achieves while playing the screen golf may also be stored in the user database 111 . The information stored in the user database 111 may be input and stored when the user first establishes an account related to the service.

Referring to FIG. 1 and FIG. 2G, the authentication unit 110 performs authentication and notifies the service provider 120 of the authentication approval according to the result. When the authentication is approved, the service providing unit 120 provides the predetermined service to the user. If the authentication is not approved, the service providing unit 120 notifies the login terminal 121 that the authentication is not approved Inform the user. If the authentication fails due to a simple error such as a mistake in inputting the authentication code, the user can be notified and the user can be guided to try the re-authentication.

As described above, according to the authentication method of the present invention, the authentication code generated by the service provider and the identification information of the user's own mobile device are used instead of the widely used ID and password method. In the case of an ID and a password system, there is a fear that the information is leaked to the outside. If the user has a plurality of IDs and passwords, there is a problem that it is difficult to accurately memorize them individually. However, It is very convenient because the user does not need to remember his or her ID or password.

Further, in the present invention, the identification of individual users can be performed through the user's own mobile phone. Therefore, when a plurality of users simultaneously desire to receive a service (for example, a plurality of users simultaneously play screen golf , It is not necessary to generate a separate authentication code for each user for login to the plurality of users (of course, it is also possible to generate a separate authentication code for each user). Therefore, a plurality of users can input the same authentication code through their mobile phones, respectively, so that they can be authenticated together almost simultaneously.

Various services may be provided in the service providing unit 120, specifically, a case where screen golf is provided will be described as an example.

FIG. 3A is a diagram showing a specific structure as an example of the service providing unit of FIG. 1, and FIG. 3B is a diagram showing a screen displayed on the screen of FIG.

Referring to FIG. 3A, a screen golf is provided in a room 10 of a certain space. A screen 11 on which a golf image is displayed is provided on the inner front surface of the room 10 and a slope part 12 is provided on the floor adjacent to the screen 11 so that the user can retrieve the golf ball struck by the screen 11. [ Is formed. Control of the overall operation for screen golf, such as tracking the ball trajectory each time the user strikes and providing an appropriate image accordingly, is performed at the controller 13. In the rear of the slope part 12, there is provided a playground 14 provided for the user to play golf, and a batting part 15 is formed in which a user hits the golf ball and plays the game. A mat 16 is laid on the plate 15 and a hit golf ball is recovered through the slope 12 in the playground 17 at a position where the mat 16 is provided, The ball feeder 17 is installed in a state of being embedded. The ball feeder 17 is provided with an automatic tee 18 in a structure capable of moving up and down, and provides golf balls one by one on the mat 16 for the progress of the game.

Referring to FIG. 3B, windows 11a, 11b, and 11c of a user who is currently provided with a golf course screen may be displayed on the screen 11. When there are a plurality of users using the service, windows 11a, 11b, and 11c for the respective users are displayed on the screen 11, respectively.

As described above, according to the present invention, a plurality of users can log in together with the same authentication code. In this case, it is determined that users authenticated with the same authentication code play together in the same room 10, All the windows 11a, 11b, and 11c for these users are displayed. In the windows 11a, 11b, and 11c, personal information (ID and name, etc.) capable of identifying a user, a past record of the user, a current play situation, and the like can be displayed.

3A and 3B show an example of a service providing unit 120 capable of providing screen golf services, and the service providing unit 120 is not limited to the structure shown in the drawings. In addition, although the service providing unit 120 has been described generally as including most of the components involved in providing screen golf through FIGS. 3A and 3B, it is also possible to narrow down the range of the service providing unit 120 You can see. For example, in the present invention, the main role of the service provider 120 is to contact the authentication unit 110 to confirm whether the authentication is completed, and to allow the screen golf service to be provided accordingly, The controller 13 can be regarded as a main configuration. Accordingly, the range of the service providing unit 120 can be reduced to only the controller 13, and the equipment provided in the remaining room can be regarded as an auxiliary facility.

4 is a schematic configuration diagram of an authentication system for providing a service according to a second embodiment of the present invention.

Referring to FIG. 4, an authentication system 200 for providing a service includes an authentication unit 210 and a service providing unit 220, and requires an authentication terminal 230 during authentication. The service providing unit 220 includes a login terminal 221 and the authentication unit 210 includes a user database 211. The present embodiment differs from the first embodiment in the configuration of the user database 211. [

The detailed description of the points that are the same as those of the first embodiment will be omitted and the user database 211 of the present embodiment further includes a user's voice database as information on the user. The user's voice database stores voice information of a user who can identify the user by voice of the user. The voice information can be input and stored when the user first establishes an account related to the service.

The difference between the first embodiment and the authentication process is that when the user inputs an authentication code to the authentication terminal 230 (the user's own mobile phone can be used) during the authentication process, It is a point. Since the authentication code is input by voice, the authentication code in this embodiment is preferably a text code composed of numbers and / or letters. After the user inputs the authentication code by voice, the identification information including the authentication code is transmitted to the authentication unit 210. [ The identification information includes an authentication code, an identifier for the authentication terminal 230, and voice information of the user. The voice information of the user can be obtained when the user inputs the authentication code by voice. However, even if the authentication code is not input by voice, the user may be allowed to separately pronounce the standard text to obtain the user's voice information.

The authentication unit 210 performs authentication using the identification information. The difference from the first embodiment is that a verification step of identifying the user by adding the user's voice information included in the identification information with the information stored in the voice database is added. Alternatively, the user may be identified by using the voice information. Therefore, the user identification step using the identifier of the authentication terminal 230 may be omitted (in this case, the identification information sent to the authentication unit 210) 230) may be excluded).

 In the first embodiment, when a person attempts to log in using an account of another person by hijacking a mobile phone of another person, it can not be blocked. However, in this embodiment, since the user uses his or her own voice information, You can block up to one.

5 is a schematic configuration diagram of an authentication system for providing a service according to the third embodiment of the present invention.

Referring to FIG. 5, an authentication system 300 for providing a service includes an authentication unit 310 and a service provider 320, and requires an authentication terminal 330 during authentication. The service providing unit 320 includes a login terminal 321 and the authentication unit 310 includes a user database 311. The present embodiment differs from the first and second embodiments in the configuration of the user database 311. [

The details of the points that are the same as those of the first and second embodiments will be omitted, and the differences will be described. The user database 311 of the present embodiment further includes a user's sign database as information about the user . Sign information of a user who can identify a user such as sign or signature of a user is stored in the sign database of the user. The sign information may be input and stored when a user first opens an account related to the service.

The difference in the authentication process between the first and second embodiments is that the user inputs the authentication code to the authentication terminal 330 (the user's own mobile phone can be used) and also inputs his or her signature in the authentication process will be. Since the recent mobile device is applied with the touch screen method, if the mobile device is used as the authentication terminal 330, it is possible to easily input the sign of the user by using the finger. When the user inputs a sign with the authentication code, the identification information is transmitted to the authentication unit 310. [ The identification information includes an authentication code, an identifier for the authentication terminal 330, and sign information of the user.

The authentication unit 310 performs authentication using the identification information. The difference from the first and second embodiments is that a verification step of identifying a user by adding signature information of the user included in the identification information to information stored in the sign database is added. Alternatively, the user identification step using the identifier of the authentication terminal 330 may be omitted (in this case, the identification information sent to the authentication unit 310) 330) may be excluded).

As in the second embodiment, in this embodiment, since the user's own signature is used, it is possible to prevent the user from attempting to log in using the account of another person by stealing the mobile phone of another person.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, will be. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

100, 200, 300: Authentication system for service provision
110, 210, and 310:
111, 211, 311: user database
120, 220, 320: service provisioning
121, 221, 321: Login terminal
130, 230, 330: authentication terminal

Claims (7)

Requesting an authentication code from an authentication unit by a service providing unit according to a request from a user;
The authentication unit generates an authentication code according to the request and transmits the authentication code to the service providing unit;
Displaying the transmitted authentication code to the user;
The user inputting the displayed authentication code into the authentication terminal;
Transmitting identification information based on the authentication code to the authentication unit in the authentication terminal;
Performing authentication for the user on the basis of the identification information transmitted by the authentication unit and notifying the service providing unit of the authentication approval; And
And providing the predetermined service to the user when the service providing unit is approved for authentication
Including,
The service provided to the user is screen sport,
When the user inputs the displayed authentication code into the authentication terminal, when a plurality of users play the screen sport together, the plurality of users input the same authentication code into their respective authentication terminals
Authentication method for providing screen sports service. The method according to claim 1,
Wherein the identification information includes an identifier for the authentication terminal,
Wherein,
The method comprising the steps of identifying a user from the identifier, extracting user information for the identified user from a database storing information about the user,
And providing the extracted user information to the service providing unit in the step of notifying the service providing unit of the authentication approval. 3. The method of claim 2,
The user inputs the authentication code using the voice and the identification information further includes the voice information of the user used in inputting the authentication code,
Wherein the authentication unit identifies a user from the identifier and extracts the voice information of the identified user from the voice database in which voice information of the user is stored in the step of performing authentication for the user, And comparing the voice information with voice information of the user input when the authentication code is input to determine whether or not the user is identical. 3. The method of claim 2,
The user further inputs his or her sign in the step of inputting the displayed authentication code to the authentication terminal, and the identification information further includes the sign information of the user further input when the authentication code is inputted,
Wherein the authentication unit identifies a user from the identifier and extracts sign information of the identified user from the sign database in which the sign information of the user is stored in the step of authenticating the user, And comparing the sign information with signature information of a user who has been input when the authentication code is input to determine whether the user is identical or not. delete 5. The method according to any one of claims 1 to 4,
The service provided to the user is screen golf,
When a plurality of users play the screen golf together,
Wherein the service providing unit displays a screen of a screen golf to a plurality of users and displays a window for each of the plurality of users on the screen when the authentication is approved. A service providing unit for providing a predetermined service to a user; And
And an authentication unit for performing authentication with respect to the user,
The authentication for the user may include:
Requesting an authentication code from the service providing unit to the authentication unit according to a request from a user;
The authentication unit generates an authentication code according to the request and transmits the authentication code to the service providing unit;
Displaying the transmitted authentication code by the service providing unit;
The user inputting the displayed authentication code into the authentication terminal;
Transmitting identification information based on the authentication code to the authentication unit in the authentication terminal; And
Wherein the authentication unit performs authentication for the user based on the transmitted identification information
Including,
The service provided to the user is screen sport,
When the user inputs the displayed authentication code into the authentication terminal, when a plurality of users play the screen sport together, the plurality of users input the same authentication code into their respective authentication terminals
An authentication system for providing screen sports services.

Images