KR102171877B1 - Apparatus and method for authentication, and computer program and recording medium applied to the same - Google Patents

Abstract

The present invention discloses an authentication apparatus and method, and a computer program and recording medium applied thereto. The authentication device according to the present invention encrypts the registration request usage information including the changed usage information and uses the encrypted registration request when the usage information of the user device is changed by the user's input or by factors other than the user's input. A registration request unit that requests registration of information as authentication information, an authentication check unit that receives an authentication check request from a communication network connected to the user device, and a predetermined criterion among all the use information stored in advance depending on whether or not to approve the authentication check request. And an authentication execution unit that extracts specific use information, encrypts the extracted specific use information, and transmits the encrypted authentication use information to the communication network in response to the authentication confirmation request.

Description

Authentication device and method, and computer program and recording medium applied to the same {Apparatus and method for authentication, and computer program and recording medium applied to the same}

The present invention relates to an authentication apparatus and method, and a computer program and a recording medium applied thereto, and more particularly, to an authentication apparatus and method for user authentication, and a computer program and a recording medium applied thereto.

With the development of media and communication, financial services, message services, community services, shopping services, public official civil service, and payment services are provided through communication access, and these services include most services that can be encountered in real life. .

To do this, it is necessary to authenticate a user who uses the service.

In the conventional authentication method, there is a method of entering an ID and password at the login step to access the service, and in services that require more user authentication (e.g., payment service), the accredited certificate method, phone authentication method, text message There are methods for entering the authentication number by sending the authentication number by message and then checking the sent authentication number and entering it.

First, as for the method of inputting an ID and password, a case in which a user's ID and password are exposed to the outside due to the advancement of hacking technology is very frequent, and accordingly, a change of the password is recommended. Due to such recommendations or the user's own will, more and more users frequently change passwords for accessing the service. However, it is not easy for users to memorize all different passwords for each service, and recording them on a memo paper is not appropriate for security reasons. In addition, when changing the password, it is not easy to access and change the login information for all the services used by the user individually, and it is very cumbersome for the user.

In the case of the accredited certificate method, storing the accredited certificate in the user device (e.g., smartphone, PC, etc.) is a security concern, and as an alternative to this, storing the accredited certificate in USB and carrying it separately, but you must also have a USB. You have to bear the inconvenience. In addition, in the case of the accredited certificate method, a password must be entered, and most of the passwords are set differently from the password used for login. Accordingly, the user must also remember the password used for login and the password of the public certificate to be used.

The phone authentication method is an authentication method mainly used in payments such as bank transfer, and in order to additionally verify the user himself during payment authentication, a phone number of the registered user is dialed according to the ARS method, and the user is asked whether or not to approve the payment. This is how you ask. In this case, since it is possible to respond to an incoming phone call using the ARS method by temporarily stealing a user device, it is used as a secondary authentication means rather than using it as a main authentication.

On the other hand, the authentication number input method is used as various simple payment means. For example, if a user uses a PC to use Company A's shopping service and then enters an authentication number when paying for a desired shopping item, the user's own mobile phone number is displayed on the payment screen provided by Company A's shopping service. You can request payment by entering, etc. Thereafter, authentication is processed only when the user himself/herself checks the authentication number provided to the user's mobile phone and enters the verified authentication number in the authentication number input window of the payment screen.

At this time, the user may feel inconvenience of having to check the authentication number displayed on the mobile phone and enter it in the authentication number input window, and the authentication number is also limited to 4 or 6 digits as the user must memo or memorize and enter it. There is a possibility that even if the authentication number is encrypted, it may be exposed by hacking or the like. Due to this concern, the payment limit for simple mobile phone payment according to the authentication number input method is set, and there is a limit to use for payment or remittance of an upward amount. This limitation of the authentication number input method can be an obstacle to the application of the recent Fintech authentication method.

Therefore, there is a need for a method capable of supplementing all of the disadvantages of the prior art authentication method described above.

Republic of Korea Patent Publication No. 10-1350342 (Jan. 6, 2014)

Accordingly, the present invention was created to solve the above problems, and the subject of the present invention is to change screen information displayed on a specific screen of a user device, change use information of a user device, or utilize information that can be combined based on these. By doing so, the present invention relates to an authentication apparatus and method for frequently changing authentication information for automatic user authentication without user setting, and a computer program and a recording medium applied thereto.

The object of the present invention is not limited to the problems mentioned above, and other objects that are not mentioned will be clearly understood by those skilled in the art from the following description.

The authentication device according to the first aspect of the present invention for achieving the above task is a registration request including the changed usage information when the usage information of the user device is changed by a user's input or by factors other than the user's input. Encrypting the usage information and requesting registration of the encrypted registration request Use information as authentication information, a registration requesting unit that receives an authentication confirmation request from the communication network connected to the user device, and the authentication confirmation request in advance according to It includes an authentication execution unit that extracts specific usage information of a predetermined standard from among all the usage information being stored, encrypts the extracted specific usage information, and transmits the encrypted authentication usage information to the communication network in response to the authentication verification request. .

The registration request use information is the same as all parts of the registered authentication information or is the same as a part of the registered authentication information, and the extracted specific use information is the same as all parts of the registered authentication information or the registered authentication May be the same as a piece of information.

If a part is the same between the registration request usage information and the registered authentication information, the same part is periodically or aperiodically changed, and if a part is the same between the extracted specific use information and the registered authentication information, the same Some parts can be changed periodically or aperiodically.

It may further include a selection unit for allowing the user to select at least one of the category and size of the use information for use as the registered authentication information.

The registration request unit and the authentication execution unit may encrypt using a public key encryption method using prime numbers of more than a predetermined number of digits.

The authentication device may be included in the user device or may be connected to the user device.

It may be used for authentication of offline payment through the user device, authentication of online payment through the user device, or authentication of online payment through another user device of the user.

The authentication method according to the second aspect of the present invention for achieving the above task is to request a registration including the changed usage information when the usage information of the user device is changed by a user's input or by factors other than the user's input. Encrypting the usage information and requesting registration of the encrypted registration request usage information as authentication information, receiving an authentication confirmation request from the communication network connected to the user device, and the entire use being stored in advance depending on whether or not the authentication confirmation request is approved And extracting specific usage information of a predetermined standard from the information, encrypting the extracted specific usage information, and transmitting the encrypted authentication usage information to the communication network in response to the authentication verification request.

The authentication method according to the third aspect of the present invention for achieving the above task is to register encrypted in the user device when the usage information of the user device is changed by a user's input or by factors other than the user's input. Receiving an authentication information registration request for the requested use information from a communication network, registering the encrypted registration request use information as authentication information, receiving an authentication request for the user, using encrypted authentication from the user device Receiving information from the communication network, decrypting the received encryption authentication use information, comparing the decrypted authentication use information with registered authentication information, and transmitting and processing the authentication result in response to the received authentication request. Includes steps.

Between the step of receiving the authentication request and the step of receiving the authentication screen information, the step of transmitting an authentication confirmation request for processing the authentication request to the user device may further include.

The computer program according to the fourth aspect of the present invention for achieving the above task is combined with an authentication device, and when the usage information of the user device is changed by a user's input, or by factors other than the user's input, the changed Encrypting the registration request usage information including usage information and requesting registration of the encrypted registration request usage information as authentication information, receiving an authentication confirmation request from the communication network connected to the user device, and whether to approve the authentication confirmation request Execute the step of extracting specific usage information of a predetermined criterion from among all the usage information being stored in advance, encrypting the extracted specific usage information, and transmitting the encrypted authentication usage information to the communication network in response to the authentication confirmation request. It is stored on a recording medium to do so.

When the computer-readable recording medium according to the fifth aspect of the present invention for achieving the above task is executed by the authentication device, the usage information of the user device is changed by the user's input, or by other factors other than the user's input. Encrypting the registration request usage information including the changed usage information, requesting registration of the encrypted registration request usage information as authentication information, receiving an authentication confirmation request from the communication network connected to the user device, and the authentication confirmation request Depending on whether or not to approve, extract specific usage information of a predetermined standard from among all the usage information stored in advance, encrypt the extracted specific usage information, and transmit the encrypted authentication usage information to the communication network in response to the authentication verification request. Includes an instruction to execute the step of.

Accordingly, in the present invention, authentication information for automatically user authentication without user setting is frequently provided by changing screen information displayed on a specific screen of a user device, changing use information of a user device, or using information that can be combined based on these. There is an advantage that it is possible to change.

In addition, in the present invention, when a user wants to authenticate by accessing a specific service, a terminal accessing a specific service makes a minimum input for an authentication request (e.g., one click for authentication request), and It is possible to perform both authentication start or authentication completion based on a reliable level of security by entering the minimum number of inputs (e.g., one click to confirm authentication initiation) through the authentication device. If the specific service to be accessed is an offline payment service, there is no user input for authentication, and it is possible to start or complete authentication based on a reliable level of security only by selecting the user's payment method. have.

In addition, in the present invention, it is possible not only to replace the password used for logging in to a specific service, but also to be used for authentication of offline payment through a user device (eg, mobile phone), or for online payment through a user device (eg, mobile phone). There is an advantage of enabling the provision of an authentication platform that can handle both authentication or authentication of online payments through a user's other user device (eg, PC).

The effects of the present invention are not limited to the effects mentioned above, and other effects that are not mentioned will be clearly understood by those skilled in the art from the description of the claims.

1 is a block diagram showing an authentication device according to an embodiment of the present invention.
2 is a block diagram showing that the authentication device of FIG. 1 is included in a user device.
3 is a block diagram illustrating that the authentication device of FIG. 1 is connected to a user device.
4 is a block diagram illustrating storage details applied to the authentication device of FIG. 1.
5 is an exemplary view showing the storage details of FIG. 4 as an example.
6 is an exemplary view showing an example of the storage history of FIG. 5 in more detail.
7 is an exemplary view showing the storage details of FIG. 4 as another embodiment.
FIG. 8 is an exemplary diagram illustrating an example of the storage details of FIG. 7 in more detail.
9 is an exemplary view showing a service access screen according to an embodiment of the present invention.
10 is an exemplary diagram showing an authentication request message according to an embodiment of the present invention.
11 is a block diagram showing an authentication system according to an embodiment of the present invention.
12 is a block diagram showing an authentication system according to another embodiment of the present invention.
13 is a block diagram showing an authentication system according to another embodiment of the present invention.
14 is a block diagram showing an authentication system according to another embodiment of the present invention.
15 is a block diagram showing an authentication system according to another embodiment of the present invention.
16 is a block diagram showing an authentication system according to another embodiment of the present invention.
17 is a block diagram showing the authentication system of FIG. 16 in more detail.
18 is a block diagram showing an authentication system according to another embodiment of the present invention.
19 is a block diagram showing an authentication device according to another embodiment of the present invention.
20 is an exemplary view showing a screen in which the selection unit of FIG. 19 is executed as an example.
21 is an exemplary view showing an example of registration of authentication information through the authentication device of FIG. 19.
22 is an exemplary view showing another example of registration of authentication information through the authentication device of FIG. 19.
23 is a flow chart showing a process of operating the authentication device of the present invention as an example.
24 is a flow chart showing a process of operating an authentication server according to an embodiment of the present invention.
25 is a flowchart illustrating a process of operating a service server according to an embodiment of the present invention.
26 is a flowchart illustrating a payment service to which the authentication system of the present invention is applied as an example.
27 is a flowchart showing a payment service to which the authentication system of the present invention is applied as another embodiment.
28 is a flowchart illustrating a payment service to which the authentication system of the present invention is applied as another embodiment.
29 is a block diagram showing an authentication device according to another embodiment of the present invention.
30 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied.
31 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.
32 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.
33 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.
34 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.
35 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.

Advantages and features of the present invention, and a method of achieving them will become apparent with reference to the embodiments described below in detail together with the accompanying drawings. However, the present invention will be clarified with reference to the embodiments described below in detail with reference to the accompanying drawings, the advantages and features of the present invention, and a method of achieving them. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in a variety of different forms, and only these embodiments make the disclosure of the present invention complete, and are common knowledge in the technical field to which the present invention pertains. It is provided to completely inform the scope of the invention to those who have, and the invention is only defined by the scope of the claims. The same reference numerals refer to the same components throughout the specification.

Further, the embodiments described in the present specification will be described with reference to sectional views and/or schematic diagrams, which are ideal exemplary diagrams of the present invention. Therefore, the shape of the exemplary diagram may be modified by manufacturing technology and/or tolerance. In addition, in each of the drawings shown in the present invention, each component may be somewhat enlarged or reduced in consideration of convenience of description.

Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

The authentication device of the present invention is not only capable of replacing the password used when logging in to a specific service, but also used for authentication of offline payment through a user device (eg, mobile phone), or online payment through a user device (eg, mobile phone). It includes a platform configuration that can handle both authentication of the user or online payment authentication through another user device (eg, PC).

In addition, the authentication apparatus of the present invention repeatedly changes authentication information for user authentication automatically without user setting, and allows a user to access a specific service through an authentication process without memorizing or memorizing the changed authentication information. .

To this end, the authentication apparatus of the present invention automatically uses authentication information for user authentication without user setting by changing screen information displayed on a specific screen of the user device, changing the usage history of the user device, or using information that can be combined based on these. Can be changed from time to time.

Here, the screen information includes arrangement information for at least one application on a specific screen, notification detail information, background image, or information that can be combined based on these.

The usage history of the user's device is the history of the user's use of the user's device (e.g.: 8:20 AM on July 28, 2015 to 8:35 AM on July 28, 2015, Run A Game, July 28, 2015 8:36 AM) Send Company B's message to'A', view Company C's stock news from 09:02 am to 2015.07.28 9:16 am on July 28, 2015), User device is not used by the user, but as an external factor Includes information that was used (e.g., Company B message received on July 28, 2015 at 8:37 am, Company C's stock application notification details received at 9:01 am on July 28, 2015), or information that can be combined based on these.

For example, in order to register the usage history of the user device as authentication information, and subsequently update the registered authentication information continuously, 5 cases of the last usage history in which the user device was used (e.g., July 28, 2015 8:00 am) Game A runs from 20 to 8:35 am on July 28, 2015 -> Send Company B's message to'A' at 8:36 am on July 28, 2015 -> Company B's message on July 28, 2015 at 8:37 am Receiving -> 2015.07.28.9:01 am C company stock application notification details received -> 2015.07.28 9:02 am to 2015.07.28 9:16 am to extract D company stock news reading) and extract You can register 5 usage details as authentication information or update already registered authentication information. That is, it is difficult to predict at all which menu or which application the user device will be used continuously in the future, and authentication information can be continuously updated.

As another example, not 5 of the total usage history of the user device, but 3 last usage details of a specific usage history (e.g. E company's portal application) can be registered as authentication information or used as information to update the registered authentication information. It is possible. Here, it is also possible to later change a specific usage history (eg, company E's portal application) to another specific usage history (eg, company B's message application).

First, specific details of the authentication apparatus of the present invention performing user authentication based on the change of use information will be described.

1 is a block diagram showing an authentication device according to an embodiment of the present invention.

As shown in Fig. 1, the authentication device 10 encrypts the registration request usage information including the changed usage information when the usage information of the user device is changed by a user's input or by factors other than the user's input. And the registration request unit 11 that requests the registration of the encrypted registration request usage information as authentication information, the authentication verification unit 12 that receives the authentication verification request from the communication network connected to the user device, and whether or not the authentication verification request is approved. An authentication execution unit (13) that extracts specific use information of a predetermined standard from among all the previously stored use information, encrypts the extracted specific use information, and transmits the encrypted authentication use information to the communication network in response to an authentication confirmation request. Includes.

Here, the user device may be any one of a mobile phone such as a smart phone, a PC, or an electronic device that the user normally uses.

In addition, the usage information of the user device refers to a history of using the user device by a user, a history of using the user device as an external factor rather than the user device being used by the user, or information that can be combined based on these.

The registration request unit 11 encrypts the registration request usage information including the changed usage information when the usage information of the user's device is changed by a user's input or by factors other than the user's input, and encrypts the encrypted registration request usage information. As authentication information, it is requested to register in the authentication server. In this case, the registration request includes not only requesting initial registration, but also requesting to update authentication information already registered.

Specifically, it is possible to use only the changed usage information as the registration request usage information, but it is also possible to use as registration request usage information by combining the changed usage information and the existing usage information.

In addition, the registration request usage information may be the same as all parts of the registered authentication information or may be the same as a part of the registered authentication information.

Here, the fact that the registration request usage information and all parts of the registered authentication information are the same means that the registration request usage information is used as it is and registered as authentication information. For example, if the registration request usage information is'ABCDE', the registered authentication information is also'ABCDE'. In this case, each alphabet in'ABCDE' means usage information of a user device.

In addition, the fact that the registration request usage information is the same as a part of the registered authentication information means that only some information matches between the registration request usage information and the authentication information. This is to further prepare for security exposure due to hacking during information transmission. When the registration request usage information is not transmitted all information for registration as authentication information, but only a part of'ABC' is transmitted, the registered authentication information is 'ABCDE' can be registered as the final authentication information by combining the registration request usage information'ABC' received according to the predetermined authentication information registration algorithm and the existing registration details'CD'.

That is, if only'A' is the changed usage information and'BC' is the existing usage information among the registration request usage information'ABC', the authentication server extracts the third and fourth existing usage information'CD' from the recently registered usage details. Accordingly, as described above,'ABCDE' can be finally registered as final authentication information.

The authentication verification unit 12 receives an authentication verification request from a communication network connected to the user device.

For example, when a user uses a shopping service using another user device (eg, a PC), the authentication service of the present invention may be used in the payment step of the shopping service being used. At this time, the user enters a specific number (eg, phone number) of the user device (eg, mobile phone) including the authentication device 10 in the payment step of the shopping service, and then clicks the authentication request, or defaults to the authentication device. When a specific number (e.g., phone number) of the included user device (e.g., mobile phone) is entered, if only the authentication request is clicked, the service server of the shopping service transmits the user's authentication request to the authentication server and authenticates. The server transmits an authentication confirmation request corresponding to the received authentication request to the user device (eg, mobile phone). Thereafter, the user device (eg, a mobile phone) receives the received authentication confirmation request as a message, and outputs the received message to the terminal screen so that the user can check, so that the user can recognize the authentication progress.

In the above example, when the user makes a one-time touch input for authentication approval, the authentication execution unit 13 extracts and extracts specific use information of a predetermined standard from among all the use information previously stored in the storage details of the user device. After encrypting the specific usage information, the encrypted authentication usage information can be transmitted to the authentication server through the communication network in response to the authentication verification request.

As another example, when a user uses a user device (eg, mobile phone) to use a payment service in an offline store, a registration card for payment may be selected from menus of the user device (eg, mobile phone). At this time, the authentication device 10 included in the user device (eg, mobile phone) automatically transmits and processes the authentication request and specific usage information of the user device (eg, mobile phone) to the authentication server according to the selection of the registration card. It is possible. That is, in this case, when the registration card is selected, the authentication device 10 receives an authentication confirmation request from an application for payment in an offline store, and in response to the received authentication confirmation request, as described above, the user checks Without going through the process, an authentication request and specific usage information of the user device (eg, mobile phone) can be encrypted and transmitted to the authentication server.

The communication network referred to in the present invention is a term including both an external network for connecting a user device to a server located outside, and an internal network for communication between the user device and the authentication device 10. In addition, the external network includes a network that changes according to the location of the user device, and the communication network connected to the authentication server when the authentication device 10 requests registration and the communication network connected in the authentication execution step are the same, or It may be different. In addition, a communication network through which the authentication device 10 receives an authentication confirmation request is a communication network to the same effect as above.

The specific use information extracted through the authentication execution unit 13 may be the same as all of the registered authentication information or may be the same as a part of the registered authentication information.

Here, the fact that the extracted specific use information and all parts of the registered authentication information are the same means that the specific use information is extracted the same as the registered authentication information. For example, when the registered authentication information is'ABCDE', the extracted specific usage information is also'ABCDE'.

In addition, the fact that the extracted specific use information is the same as a part of the registered authentication information means that only some information is matched between the extracted specific use information and the authentication information. This is also to further prepare for exposure to the risk of hacking during information transmission. In the case of transmitting only a part of'CDE' instead of transmitting all information for comparing specific usage information with authentication information, registered authentication information is By combining the specific usage information'CDE' transmitted according to the predetermined authentication execution algorithm and the existing registration details'AB', the final specific usage information of the comparison object'ABCDE' can be completed for comparison with the registered authentication information. have.

That is, the specific usage information extracted during the authentication execution process and the registration request usage information during the registration process may be different from each other as described above. Of course, it is also possible to set the specific usage information extracted in the authentication execution process and the registration request usage information in the registration process to be the same.

The registration request unit 11 includes a configuration that detects whether the usage information of the user's device is changed by a user's input or by factors other than the user's input, and there is a change in the usage information through such a detection configuration. Upon request, registration of authentication information is requested based on the changed usage information.

In addition, it is preferable that the authentication information registration request of the registration request unit 11 is automatically executed in that it is executed every time the use information of the user device is changed, and the specific use information extracted and extracted by the authentication execution unit 13 It is preferable that the transmission processing of the usage information is also automatically executed in that it is not easy for the user to manually check the usage information of the user device and then store and input the usage information registered as authentication information.

On the other hand, it is possible to change the authentication information automatically, but if the user wants to artificially change the authentication information more often, whenever he thinks of it, he can also make a call to convey regards to the call terminal of another user, or It is also possible to change the authentication information by changing the usage information such as deleting some of the stored usage information.

The registration request unit 11 may periodically or aperiodically change a part of the same part between the registration request usage information and the registered authentication information, if the part is the same.

For example, the periodic change of the registration request unit 11 combines at least one of date, parking, and time according to pre-programmed logic to specify a part that is mutually identical between the registration request usage information and the registered authentication information. It is possible. As a more specific example, the same day part between the registration request usage information and the registered authentication information as of September 14, 2015 corresponds to the 3rd week of September 2015 based on the parking of the month. From the first to three digits of the authentication information in which the same part of the authentication information is registered may be specified as the same part.

In addition, an example of the aperiodic change of the registration request unit 11 is that the registration request unit 11 changes the same part between the registration request usage information and the registered authentication information based on the update information received from the authentication server. I can.

The authentication execution unit 13 may also periodically or aperiodically change a part of the same part between the specific use information extracted from the total use information and the registered authentication information.

For example, the periodic change of the authentication execution unit 13 specifies a part identical to each other between the extracted usage information and the registered authentication information by combining at least one of the date, parking, and time according to preprogrammed logic. It is possible. As a more specific example, when the same part between the specific usage information extracted on September 14, 2015 and the registered authentication information is divided into even and odd days, 14 days correspond to even days, so between the extracted specific usage information and the registered authentication information It is possible to specify up to two digits from the first letter of the authentication information in which the same part is registered as the same part.

In addition, an example of the aperiodic change of the authentication execution unit 13 is the same part between the specific use information and the registered authentication information extracted based on the up data information received from the authentication server by the authentication execution unit 13 You can change it.

The registration request unit 11 may encrypt the changed use information, and the authentication execution unit 13 may encrypt the extracted specific use information. Here, as the encryption method, at least one or more of various encryption methods having a high security level may be applied.

For example, at least one of the registration request unit 11 and the authentication execution unit 13 may encrypt using a public key encryption method using prime numbers equal to or greater than a predetermined number of digits.

In the public key cryptography method, given two prime numbers (a natural number that cannot be separated by a natural number other than 1 and the number itself), p,q, the product m (=pq) of the two primes can be easily obtained, but some two This method is conceived because it is difficult to know which two primes m is the product of any two primes given the product of a prime number m. That is, in the public key method, a device such as a so-called trapdoor is provided in which anyone can easily enter in one direction but cannot return except for a specific user.

When revealing the product m of two prime numbers, a prime number with two prime numbers p and q having more than 100 digits each can be used. For example, m may be

m=114381625757888867669235779976146612010218296721242362562561842 　　　　935706935245733897830597123563958705058989075147599290026879543541

The two prime factors p,q of m above obtained through the factorization algorithm are as follows.

p=3490529510847650949147849619903898133417764638493387843990820577

q=32769132993266709549961988190834461413177642967992942539798288533

Even if the two prime factors p,q of m are obtained by using the factorization algorithm, it takes time to derive the result value. This requires an absolute computational processing time even if the factorization algorithm is continuously improved.

Therefore, it is preferable that the public key encryption method be encrypted as prime numbers larger than the two prime factors p,q mentioned above. In other words, the public key encryption method requires a minimum amount of time (eg, several days or more) to decrypt even if it is exposed to hacking programs.

The authentication device 10 of the present invention changes the authentication information whenever the usage information of the user device is changed, and if the user device is a mobile phone, for example, the change interval of the authentication information will be different for each user, but at least every few seconds. Or change every few hours as much as possible.

That is, when the usage information of the user's device, which is frequently changed in this way, is encrypted with the above-described public key encryption method, even if it is exposed to hacking and decrypted, at the time the decryption is completed, it is not the authentication information exposed to the hacking, but the new authentication. It will be changed to information. According to this principle, the authentication device 10 of the present invention minimizes user input (for example, no password input), thereby promoting user convenience and providing strong security.

FIG. 2 is a configuration diagram illustrating that the authentication device of FIG. 1 is included in a user device, and FIG. 3 is a configuration diagram illustrating that the authentication device of FIG. 1 is connected to a user device.

As shown in FIG. 2, the authentication device 10-1 may be included in the user device 20. For example, by installing the downloaded authentication program in the user device 20 after the user device 20 downloads the authentication program through an authentication server or other root, the memory of the user device 20 and the operation of at least one processor As a result, it is possible to have an authentication device configuration.

Meanwhile, as shown in FIG. 3, a configuration in which the authentication device 10-2 is connected to the user device 20 is also possible. By configuring the authentication device 10-2 as a separate module, the configured module may be connected to a specific port of the user device 20 to interlock the two devices.

4 is a block diagram illustrating storage details applied to the authentication device of FIG. 1.

As shown in FIG. 4, a plurality of usage information is stored in the storage history 21 of the user device. For example, if classified for each use information, first use information, second use information, third use information, and Nth use information may be included in the user device.

FIG. 5 is an exemplary view showing the storage details of FIG. 4 as an example, and FIG. 6 is an exemplary view showing the storage details of FIG. 5 in more detail.

As shown in FIG. 5, the first usage information, the second usage information, the third usage information, and the Nth usage information may determine an order of information according to a time series order. When the registration request unit 11 requests registration to the authentication server including three usage information as registration request usage information, the first usage information or the third usage information may be used as the registration request usage information according to the time-series order. .

Unlike FIG. 5, the usage information shown in FIG. 6 is arranged in a time series in which the recent usage details are placed below and the past usage details are placed above. The registration request unit (11) is the registration request usage information. ① Usage information on'Sending a message from'B' message to'A', '2015.07.28 8:36 am', which is the last three usage information, '2015.07.28 8 am' You can request registration as authentication information using ② usage information for 37 minutes'B' message from'A' and ③ usage information for '2015.07.28 9:01 am C's stock application ali details reception' .

Thereafter, when the usage information of the user device is added and changed, the registration requesting unit 11 then adds, for example, from '2015.07.28 9:02 am to 2015.07.28' 9:16 am in addition to the above-described usage details. Use information may be added to'Viewing Company D's stock news. At this time, the registration request unit 11 receives the usage information ①'of the registration request usage information from'A' message from'A' at 8:37 a.m. Change the usage information to'View Company D's stock news from 09:02 am on July 28, 2015 to 9:16 am on July 28, 2015’ to the authentication information. Registration can be requested.

FIG. 7 is an exemplary view showing the storage details of FIG. 4 as another embodiment, and FIG. 8 is an exemplary view showing the storage details of FIG. 7 in more detail.

As shown in FIG. 7, the registration request unit 11 may classify usage information of user devices by category, and extract usage information to be included in the registration request usage information from each of the classified groups.

For example, if the registration request usage information is set to 3 usage information, the first usage information of the first group is the usage information of the registration request ① usage information, and the first usage information of the second group is the usage information of the registration request. ② Usage information and the first usage information of the third group can be extracted as ③ usage information of the registration request usage information.

As shown in Fig. 8, the above-described first group may be a'call history', and among the'call history', the most recent call history, '2015.07.28 2:31 pm, calls my wife for 2 minutes Currency' usage information can be extracted as ① usage information of registration request usage information.

The above-described second group may be a'message history', and a request for registration of usage information of'receiving company E message from'me' at 8:03 am on July 28, 2015, which is the most recent message history among'message details'. ② It can be extracted as usage information of usage information.

The third group described above can be'other execution details', and the most recent message among'other execution details', which is from '2015.07.28 9:2 am to 2015.07.28 9:16 am The usage information of'reading news' can be extracted as ③ usage information of the registration request usage information.

9 is an exemplary view showing a service access screen according to an embodiment of the present invention.

A user accesses the service access screen 30 that provides a specific portal service using another user device (eg, a PC), and the user device (eg, mobile phone) with an ID and authentication device installed on the connected service access screen 30 , Enter the specific number (Q) of 20)). Thereafter, when the authentication request (J) is clicked, the authentication request received from the service server providing the specific portal service is retransmitted to the authentication server, and the authentication request received from the user device 20 of the specific number input from the authentication server By sending an authentication confirmation request corresponding to, the user can know whether authentication has started.

In addition, the connected service access screen 30 allows the user to enter a specific number of the user device (eg, mobile phone, 20) with the authentication device 10 installed in the ID part, or the user with the authentication device 10 installed after entering the ID. It is also possible to have a specific number of the device (eg mobile phone, 20) entered by default.

10 is an exemplary diagram showing an authentication request message according to an embodiment of the present invention.

The authentication device 10 of the user device (eg, mobile phone, 20) may receive a message for confirming the authentication request transmitted from the authentication server and output it to the terminal screen. In contrast, the user may select'approve' or'reject' on the message being output on the terminal screen.

When the user selects'approval', the authentication device 10 of the user device (eg, mobile phone, 20) extracts specific use information of a predetermined standard from the total use information of the user device 20, and After the usage information is encrypted, the encrypted authentication usage information can be transmitted to the authentication server in response to the authentication verification request.

11 is a block diagram showing an authentication system according to an embodiment of the present invention.

Referring to FIG. 11, the authentication system is a case where a user uses a service on the web, and an authentication server 40, a service server 50, other user devices (eg, PC, 30), user devices (eg, mobile phones, 20 ) And the authentication device 10 may be included.

For example, when a user accesses the service server 50 that provides a shopping service using another user device (eg, PC, 30), the user wants to use the authentication service of the present invention when performing user authentication in the payment step. You can request an authentication request on the service connection screen. Thereafter, the service server 50 transmits the authentication request of the user request to the authentication server 40, and transmits an authentication confirmation request corresponding to the authentication request received by the authentication server 40 in the authentication request. It is transmitted to the user device 20 through a specific number of 20). Thereafter, when the user inputs approval for the authentication confirmation request message displayed on the terminal screen of the user device 20, the authentication device 10 included in the user device 20 or connected to the user device 20 Specific usage information of the device 20 is extracted, the extracted specific usage information is encrypted, and the encrypted authentication usage information is transmitted to the authentication server 40. Thereafter, the authentication server 40 decrypts the received encrypted authentication use information, and compares the decrypted authentication use information with the authentication information being registered to generate an authentication result. The authentication server 40 provides the generated authentication result to the service server 50.

The service server 50 completes payment through a user authentication step according to the received authentication result.

12 is a block diagram showing an authentication system according to another embodiment of the present invention.

As shown in Fig. 12, the authentication system is a case where a user uses a service on the web, and an authentication server 40, a plurality of service servers, other user devices (eg, PC, 30), user devices (eg, mobile phones) , 20), and may include an authentication device 10. That is, a plurality of service servers authenticate users through the authentication service of the present invention, and other user devices (eg, PC, 30) access any one of the plurality of service servers to perform user authentication. You can request an authentication service.

13 is a block diagram showing an authentication system according to another embodiment of the present invention.

As shown in FIG. 13, the authentication system is a case where a user uses a mobile service, and includes an authentication server 40, a service server 70, a user device (eg, a mobile phone, 20), and an authentication device 10. Can include.

For example, when a user accesses the service server 70 that provides a mobile shopping service using a user device (eg, mobile phone, 20), the authentication service of the present invention is used when user authentication is performed in the payment step. You can request the desired authentication request on the mobile service connection screen. Thereafter, the service server 70 transmits the authentication request of the user request to the authentication server, and transmits an authentication confirmation request corresponding to the authentication request received by the authentication server 40 to the user device 20 received together in the authentication request. It is transmitted to the user device 20 through a specific number. Thereafter, when the user inputs approval for the authentication confirmation request message displayed on the terminal screen of the user device 20, the authentication device 10 included in the user device 20 or connected to the user device 20 Specific usage information of the device 20 is extracted, the extracted specific usage information is encrypted, and the encrypted authentication usage information is transmitted to the authentication server 40. Thereafter, the authentication server 40 decrypts the received encrypted authentication use information, and compares the decrypted authentication use information with the authentication information being registered to generate an authentication result. The authentication server 40 provides the generated authentication result to the service server 70.

The service server 70 completes payment through a user authentication step according to the received authentication result.

Here, in order to block the user from habitually entering approval for the authentication verification request, it is possible to additionally input a password. Here, the password can be configured in a simple form, such as a 4-digit password.

14 is a block diagram showing an authentication system according to another embodiment of the present invention.

As shown in FIG. 14, the authentication system is a case where a user uses a service on a mobile, and includes an authentication server 40, a plurality of service servers, a user device (eg, a mobile phone, 20), and an authentication device 10. Can include. That is, a plurality of service servers authenticate users through the authentication service of the present invention, and the user device (eg, mobile phone, 20) accesses any one of the plurality of service servers to authenticate the present invention. You can request a service.

15 is a block diagram showing an authentication system according to another embodiment of the present invention.

As shown in Fig. 15, by further including an authentication module 91 capable of executing the authentication of the present invention in the service server 90, the authentication service of the present invention can be independently provided without accessing the authentication server 40. Structures that can be provided are also possible.

16 is a configuration diagram illustrating an authentication system according to another embodiment of the present invention, and FIG. 17 is a configuration diagram illustrating the authentication system of FIG. 16 in more detail.

As shown in FIGS. 16 and 17, the authentication service of the present invention enables user authentication even when payment is made through the user device 20 in an offline store.

The user can select any one registration card as a payment method in an offline store on the user device (eg, mobile phone, 20). For example, when the user device (eg, mobile phone, 20) swipes the screen from the bottom of the terminal screen to the top, a registration card is selected and moved to the center of the screen. At this time, the authentication device 10 included in the user device (eg, mobile phone, 20) receives the selection of the registration card as an authentication request command, and transmits the authentication request to the authentication server 40.

Thereafter, the authentication server 40 transmits an authentication confirmation request corresponding to the received authentication request to the user device 20 through a specific number of the user device 20 received together with the authentication request.

The authentication device 10 of the user device 20 outputs the received authentication confirmation request message on the terminal screen so that the user can check whether authentication is initiated.

When the user selects'approval' among'approval' or'reject' displayed in addition to the message, the authentication device 10 of the user device 20 extracts specific usage information of the user device 20, and the extracted use After the information is encrypted, the encrypted authentication usage information is transmitted to the authentication server 40.

Thereafter, the authentication server 40 decrypts the received encrypted authentication use information, compares the decrypted authentication use information with the authentication information being registered to generate an authentication result, and authenticates the generated authentication result by the user device 20 It returns to the device 10.

Upon receiving the authentication result, the authentication device 10 of the user device 20 transmits the authentication completion to the corresponding payment program of the user device 200, and the payment program can use the selected registration card in an offline store. Activated in the state.

18 is a block diagram showing an authentication system according to another embodiment of the present invention.

As shown in FIG. 18, when the user device (eg, mobile phone, 20) swipes the screen from the bottom of the terminal screen to the top, one registration card is selected and moved to the center of the screen. At this time, the authentication device 10 included in the user device (e.g., mobile phone, 20) receives the selection of the registration card as a command for approval for an authentication request and an authentication confirmation request, and the user device ( It is also possible to extract the specific usage information of 20), encrypt the extracted specific usage information, and transmit the encrypted authentication usage information to the authentication server together with the authentication request.

19 is a block diagram showing an authentication device according to another embodiment of the present invention.

As shown in Fig. 19, the authentication device 10-3 includes a registration request unit 10-3-2, an authentication confirmation unit 10-3-3, and an authentication execution unit 10-3-4, It may further include a selection unit (10-3-1).

Here, the selection unit 10-3-1 supports the user to select at least one of the authentication information and the category and size of the usage information for use.

The category of usage information that can be selected by the user is the usage information for registration as authentication information.Call details, specific users among the call details (e.g., users, other users designated by the user), outgoing details or incoming calls among calls It may mean a classification that can be classified, such as details.

In addition, the size of the use information that can be selected by the user means that the use information for registering as authentication information includes three types of use information, such as the first use information to the third use information, or the same as the first use information. It may mean a memory capacity of use information that can be registered as authentication information or by changing the number of use information, such as including only one use information.

20 is an exemplary view showing a screen in which the selection unit of FIG. 19 is executed as an example.

As shown in FIG. 20, the selection unit 10-3-1 may be configured with a selection menu P such as'user selection, application or function selection, viewpoint selection'.

That is, in the selection menu (P), the user selects'wife' from the'user selection' menu, selects'telephone call, message from company B, and message from company E'from'application or function menu', and ' You can select'Outgoing or Incoming' from the'Time Selection Menu'.

When selected in this way, each time a'phone call, a company B message, and a company E message' is'sent or received' from the'wife' targeting the user device 20, the usage information of the user device 20 is changed. It is considered that the authentication information can be registered based on the changed usage information. Therefore, in this case, it can be seen that the user's'wife' acts as a helper to change the authentication information of the user device at any time.

FIG. 21 is an exemplary view showing an example of registration of authentication information through the authentication device of FIG. 19, and FIG. 22 is an exemplary view showing another example of registration of authentication information through the authentication device of FIG. 19.

As shown in FIG. 21, when calling the user's wife'Ga', the user device 20 uses the registration request usage information including the addition of usage information (F1) for making a call to'A'. A request for registration of authentication information is made to the authentication server 40. Thereafter, as the user device 20 receives the response from the authentication server 40, the authentication information registration process may be completed.

In addition, as shown in FIG. 22, the authentication information registration request is made to the authentication server 40 through the registration request usage information including the addition of the usage information F2 received by the text message from the user's wife'A'. Thereafter, as the user device 20 receives the response from the authentication server 40, the authentication information registration process may be completed.

23 is a flow chart showing a process of operating the authentication device of the present invention as an example.

As shown in Fig. 23, the authentication device 10 uses a registration request including the changed usage information when the usage information of the user device 20 is changed by a user's input or by factors other than the user's input. The information is encrypted and the encrypted registration request usage information is requested to be registered to the authentication server 40 as authentication information (S10 to S12).

Thereafter, when a user requests the authentication service of the present invention while using a specific service, the authentication device 10 included in the user device 20 receives an authentication confirmation request to confirm whether the user has initiated authentication. Do (S13).

The authentication confirmation request message received in step S13 is output on the terminal screen of the user device 20, and the authentication process can be continued by the user selecting'approval' from'approve' or'reject' displayed together on the message. (S14).

Thereafter, the authentication device 10 extracts specific use information of a predetermined standard (S15), encrypts the extracted specific use information, and then transmits the encrypted authentication use information to the authentication server 40 (S16 and S17). .

Thereafter, when the authentication function of the user device 20 is terminated, the execution of the above steps is also terminated (S18).

Each step of the authentication process is configured as a computer program stored in the recording medium in combination with the authentication device 10, or a computer-readable recording medium containing instructions for executing each of the above steps when executed by the authentication device 10. It can be configured as

24 is a flow chart showing a process of operating an authentication server according to an embodiment of the present invention.

As shown in FIG. 24, the authentication server 40 may receive a registration request for authentication information based on the changed usage information from the authentication device 10 included in or connected to the user device 20 (S20). In this case, in order to register the authentication information based on the changed usage information in the authentication server 40, the registration process for using the authentication service of the present invention may be performed beforehand. The subscription procedure may be performed in accordance with a normal service subscription procedure.

Then, according to the registration request received in step S20, the authentication information is registered (S21). Here, registration is a concept including initial registration of authentication information or updating authentication information that has already been registered.

Thereafter, when the user requests the authentication service of the present invention while using a specific service, the authentication request received from the service server providing the specific service may be received (S22).

Thereafter, the authentication server 40 transmits an authentication confirmation request for confirming whether or not the user starts authentication to the user device 20 through a specific number received along with the authentication request (S23).

Thereafter, the authentication server 40 receives the specific usage information of the user device 20 from the authentication device 10 of the user device 20 in an encrypted state (S24).

The encrypted authentication usage information received in step S24 is decrypted (S25).

Thereafter, the authentication use information decrypted in step S25 and the registered authentication information are compared (S26).

An authentication result is generated based on the comparison result in step S26 (S27), and the authentication result generated in step S27 is provided to the service server 70, 80 or 90 (S28).

Thereafter, when the authentication service is terminated, execution of the above steps is also terminated (S29).

25 is a flowchart illustrating a process of operating a service server according to an embodiment of the present invention.

As shown in FIG. 25, the service server 50 or 60 executes a specific service such as a payment service in response to another user device (eg, a PC) (S30).

When a specific service executed in step S30 requires user authentication, a guide for this is provided to the user through the service access screen (S31).

After the user receives the service guidance in step S31, a specific number (eg, a phone number) of the user device for user authentication and an authentication request are input to the service access screen (S32).

The service server 50 or 60 provides the authentication request and a specific number received in step S32 to the authentication server (S33).

Thereafter, when the authentication result is received as the execution of the authentication server 40 (S34), the service continues at a later time according to the received authentication result (S35 to S37).

Thereafter, when the user's use of the service is terminated, the execution of the above steps is also terminated (S38).

26 is a flowchart illustrating a payment service to which the authentication system of the present invention is applied as an example.

As shown in Fig. 26, when the authentication device 10 included in the user device 20 is changed by a user's input or when the use information of the user device 20 is changed by a factor other than the user's input ( S40), the registration request usage information including the changed usage information is encrypted and the encrypted registration request usage information is requested to be registered to the authentication server 40 as authentication information (S41).

According to the registration request received in step S41, the authentication server 40 checks the existing subscription details and registers the encrypted registration request usage information as authentication information (S42). Here, registration is a concept including initial registration of authentication information or updating authentication information that has already been registered.

Thereafter, when the user requests the authentication service of the present invention while using a specific web service through another user device (PC, 30) (S45), the authentication server 40 is a service server that provides the specific service. The authentication request and the telephone number received from (50) are received (S46).

Thereafter, the authentication server 40 transmits an authentication confirmation request allowing the user to check whether authentication is initiated to the user device 20 through the phone number received along with the authentication request (S47).

Thereafter, if there is a user approval input for the authentication confirmation request message in the authentication device 10 included in the user device 20 (S48), specific use information of the user device 20 is extracted, and the extracted specific use information After encryption, the encrypted authentication usage information is transmitted to the authentication server 40 (S49).

The authentication server 40 decrypts the received encrypted authentication use information, and generates an authentication result based on a result of comparing the decrypted authentication use information with the registered authentication information (S49-1).

Thereafter, the authentication server 40 provides the authentication result generated in step S49-1 to the service server 50 (S49-2).

Thereafter, the service server 50 provides a service that can be provided after authentication to the other user device (PC, 30) (S49-3).

27 is a flowchart showing a payment service to which the authentication system of the present invention is applied as another embodiment.

As shown in FIG. 27, when the authentication device 10 included in the user device 20 is changed by a user's input or other factors other than the user's input (S50), The registration request usage information including the changed usage information is encrypted and the encrypted registration request usage information is requested to be registered to the authentication server 40 as authentication information (S51).

According to the registration request received in step S51, the authentication server 40 checks the existing subscription details and registers the encrypted registration request usage information as authentication information (S52). Here, registration is a concept including initial registration of authentication information or updating authentication information that has already been registered.

Thereafter, when the user requests the authentication service of the present invention while using a specific mobile service through a user device (eg, mobile phone, 20) (S53 and S54), the authentication server 40 provides the specific service. The authentication request and the telephone number received from the service server 70 are received (S55 and S56).

Thereafter, the authentication server 40 transmits an authentication confirmation request allowing the user to check whether authentication is initiated to the user device 20 through the phone number received along with the authentication request (S57).

Thereafter, if there is a user approval input for the message of the authentication confirmation request received from the authentication device 10 included in the user device 20 (S58), specific usage information of the user device 20 is extracted, and the extracted specific After the usage report is encrypted, the encrypted authentication usage information is transmitted to the authentication server 40 (S59).

The authentication server 40 decrypts the received encrypted authentication use information, and generates an authentication result based on a result of comparing the decrypted authentication use information with the registered authentication information (S59-1).

Thereafter, the authentication server 40 provides the authentication result generated in step S59-1 to the service server 70 (S59-2).

Thereafter, the service server 70 provides a service that can be provided after authentication to a user device (eg, a mobile phone, 20) (S59-3).

28 is a flowchart illustrating a payment service to which the authentication system of the present invention is applied as another embodiment.

As shown in Fig. 28, when the authentication device 10 included in the user device 20 is changed by a user's input or when the use information of the user device 20 is changed by a factor other than the user's input ( S60), the registration request usage information including the changed usage information is encrypted and the encrypted registration request usage information is requested to be registered to the authentication server 40 as authentication information (S61).

According to the registration request received in step S61, the authentication server 40 checks the existing subscription details and registers the encrypted registration request usage information as authentication information (S62). Here, registration is a concept including initial registration of authentication information or updating authentication information that has already been registered.

Thereafter, the user can select any one registration card for payment at the offline store from the user device (eg, mobile phone, 20) (S63).

The authentication device 10 included in the user device 20 receives the registration card selection in step S63 as an authentication request command, and according to the received command, the authentication request to the authentication server 40 and the call of the user device 20 Provide a number (S64).

Thereafter, the authentication server 40 transmits an authentication confirmation request allowing the user to check whether authentication is initiated to the user device 20 through the phone number received along with the authentication request (S65).

Thereafter, if there is a user approval input for the message of the authentication confirmation request received from the authentication device 10 included in the user device 20 (S66), the specific usage information of the user device 20 is extracted, and the extracted specific After the use information is encrypted, the encrypted authentication use information is transmitted to the authentication server 40 (S67).

The authentication server 40 decrypts the received encrypted authentication use information, generates an authentication result based on the result of comparing the decrypted authentication use information and the registered authentication information, and uses the generated authentication result to the user device 10 Provided to (S68).

Thereafter, if the authentication result is normal authentication, the selected registration card is activated in a usable state (S69), and in the state of step S69, the user device 20 is connected to an offline payment terminal in a short distance or a magnetic connection is made to request payment. Do (S69-1).

29 is a block diagram showing an authentication device according to another embodiment of the present invention.

As shown in FIG. 29, the authentication apparatus 100 of the present invention may perform user authentication based on a change in screen information of the user device 200. Specifically, when the screen information displayed on a specific screen of the user device 200 is changed by a user's input or by factors other than the user's input, the authentication device 100 encrypts and encrypts the changed screen information. The registration request unit 110 for requesting registration of the changed screen information as authentication information, the authentication confirmation unit 120 for receiving an authentication confirmation request from the communication network connected to the user device 200, and And an authentication execution unit 130 that extracts screen information displayed on the screen, encrypts the extracted screen information, and transmits the encrypted authentication screen information to the communication network in response to an authentication confirmation request.

In addition, the specific screen of the user device 200 may be a screen mainly used by the user when the user device 200 is used. For example, when the user device 200 is a smartphone, various notification details And a background screen of a smartphone, which is a main operation screen on which several applications are located.

When the screen information for a specific screen of the user device 200 is changed, the registration request unit 110 asks to encrypt the changed screen information and register the encrypted changed screen information as authentication information in an authentication server (not shown). request. Here, the registration request includes not only requesting the initial registration, but also requesting to update the authentication information already registered.

In addition, when the screen information for a specific screen of the user device 200 is changed, encrypting the changed screen information and requesting registration of the encrypted changed screen information as authentication information means screen information for a specific screen of the user device 200 Whenever is changed, it means that the authentication server (not shown) is requested to change the authentication information.

The screen information includes arrangement information for at least one application of a specific screen, notification detail information, background image, or information that can be combined based on these, and information to be included in the screen information may be selected according to the authentication level.

For example, when the authentication level is'upper', such as in financial services, the screen information is included in the arrangement information of at least one application on a specific screen, notification details information, and background image. You can expand the parameters.

On the other hand, when the authentication level is'Medium', such as a search service, the screen information may be included as arrangement information or notification details information for at least one application on a specific screen, and thus the parameter for changing the authentication information may be reduced and set. have.

Preferably, the authentication level for all services accessible through the user device 200 is maintained at the'higher' level.

The registration request unit 110 includes a configuration that detects whether screen information displayed on a specific screen of the user device 200 is changed by a user's input or is changed by a factor other than the user's input, and such a detection configuration When there is a change in screen information through the application, registration of authentication information is requested based on the changed screen information.

In this way, it is possible to automatically change the authentication information, but if the user wants to artificially change the authentication information more often, an arbitrary application icon arranged on a specific screen of the user device 200 is placed whenever the user thinks of it. It is also possible to automatically change the authentication information by changing, frequently deleting unnecessary applications from a specific screen, or intentionally sending a greeting message to other users.

The authentication verification unit 120 receives an authentication verification request from a communication network connected to the user device 200.

For example, when a user uses a shopping service using another user device (eg, PC, not shown), the authentication service of the present invention may be used in the payment step of the shopping service being used. At this time, the user enters a specific number (eg, phone number) of the user device (eg, mobile phone, 200) including the authentication device 100 in the payment step of the shopping service, and then clicks the authentication request or authenticates by default. When a specific number (eg, phone number) of a user device (eg, mobile phone, 200) including the device 100 is entered, if only the authentication request is clicked, the service server (not shown) of the shopping service is authenticated. The user's authentication request is transmitted to a server (not shown), and the authentication server (not shown) transmits an authentication confirmation request corresponding to the received authentication request to the user device (eg, mobile phone, 200). Thereafter, the user device (e.g., mobile phone, 200) receives the received authentication request as a message and outputs the received message to the terminal screen so that the user can check it, so that the user can recognize the authentication progress. .

In the above example, when the user makes one-time touch input for authentication approval, the authentication execution unit extracts screen information displayed on a specific screen of the user device 200, encrypts the extracted screen information, and then encrypts the authentication screen. Information can be transmitted to an authentication server (not shown) through a communication network in response to an authentication confirmation request.

As another example, when a user uses a user device (e.g., mobile phone, 200) to use a payment service in an offline store, a registration card for payment may be selected from menus of the user device (e.g., mobile phone, 200). . At this time, the authentication device 100 included in the user device (eg, mobile phone, 200) automatically requests authentication to an authentication server (not shown) and the user device (eg, mobile phone, 200) It is possible to transmit and process encrypted screen information for a specific screen. That is, in this case, when the registration card is selected, the authentication device 100 receives an authentication confirmation request from an application for payment in an offline store, and in response to the received authentication confirmation request, as described above, the user checks Without going through the process, an authentication request and encrypted screen information for a specific screen of the user device (eg, mobile phone 200) may be transmitted and processed directly to an authentication server (not shown).

The communication network referred to in the present invention is a term that includes all of an external network for connecting the user device 200 to a server located outside, and an internal network for communication between the user device 200 and the authentication device 100. In addition, the external network includes a network that changes according to the location of the user device 200, and is connected to a communication network connected to an authentication server (not shown) when the authentication device 100 requests registration, and the authentication execution step. The communication networks may be the same or different from each other. In addition, a communication network through which the authentication device 100 receives an authentication confirmation request is a communication network with the same effect as above.

The registration request unit 110 encrypts the changed screen information, and the authentication execution unit 130 encrypts the extracted screen information.

At this time, at least one of the registration request unit 110 and the authentication execution unit 130 may encrypt using a public key encryption method using prime numbers of a predetermined number or more.

30 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied.

As shown in FIG. 30, a specific screen of the user device 200 may be set as a background screen K, which is a main control screen frequently encountered by the user. On the background screen K, a number of applications are arranged.

31 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.

As shown in FIG. 31, a new application 1 may be added to the specific screen K of the reference shown in FIG. 30 by a user input. As in this case, the addition of the new application 1 means that the arrangement information for at least one application of the specific screen K is changed. At this time, the authentication apparatus 100 detects the change of the screen information, and then proceeds with a registration request for changing the authentication information based on the changed screen information.

32 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.

As shown in FIG. 32, in the specific screen K of the reference shown in FIG. 31, any one application 2 may be deleted by a user's input.

As in this case, the deletion of the existing application 2 from the specific screen K means that the arrangement information of at least one application of the specific screen K has been changed. Also at this time, the authentication apparatus 100 detects the change of the screen information, and then proceeds with a registration request for changing the authentication information based on the changed screen information.

33 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.

As shown in FIG. 33, in the existing specific screen (K) shown in FIG. 32, a notification detail (3) informing that an e-mail sent from another user has been received as a factor other than the user's input is the specific screen (K). Can be displayed at the top of

As in this case, the reception of a new mail means that the notification detail information displayed on the specific screen K is changed. At this time, the authentication device detects the change of screen information according to the change of the notification detail information, and then proceeds with a registration request for changing the authentication information based on the changed screen information.

34 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.

As shown in FIG. 34, in the existing specific screen K shown in FIG. 33, a notification detail 4 informing that a message sent by another user has been received as a factor other than the user's input is displayed on the specific screen K ) May be displayed on one side of the corresponding application.

As in this case, reception of a new message means that the notification detail information displayed on the specific screen K is changed. At this time, the authentication apparatus 100 detects a change in screen information according to a change in the notification detail information, and then proceeds with a registration request for changing the authentication information based on the changed screen information.

FIG. 35 is an exemplary view showing a specific screen of a user device to which the authentication device of FIG. 29 is applied as another example.

As shown in FIG. 36, after creating a folder 5 by a user's input on the existing specific screen K shown in FIG. 34, several applications are grouped and arranged in the created folder 5, The remaining applications can be rearranged according to the user's convenience.

As in this case, rearranging applications that are already being arranged means that arrangement information for at least one application on the specific screen K has been changed. Also at this time, the authentication device detects the change of the screen information, and then proceeds with a registration request for changing the authentication information based on the changed screen information.

Although the embodiments of the present invention have been described with reference to the above and the accompanying drawings, those of ordinary skill in the art to which the present invention pertains can be implemented in other specific forms without changing the technical spirit or essential features. You can understand that there is. Therefore, it should be understood that the embodiments described above are illustrative and non-limiting in all respects.

In addition, the present invention changes the authentication information for automatic user authentication without user setting by changing screen information displayed on a specific screen of the user device, changing the usage history of the user device, or using information that can be combined based on these. According to the purpose of providing an authentication apparatus and method for the following, and a computer program and a recording medium applied thereto, it is an invention that has industrial applicability because it has a sufficient possibility of marketing or business as well as a degree that can be practically clearly implemented.

10, 10-1, 10-2, 100: authentication device
11, 110: registration request unit 12, 120: authentication verification unit 13, 130: authentication execution unit 20, 200: user device
30: other user device 40: authentication server
50, 60, 70, 80, 90: service server
91: authentication module 900-1: offline payment terminal

Claims (3)

Memory; And
Including at least one processor,
The processor,
Whenever there is an authentication request, a message according to the authentication request is received,
When receiving the message, as approval for the message is completed by the user, authentication information to be used to determine approval of the authentication request is transmitted and processed through the user device in response to the authentication request,
The message is an authentication means for non-deterministically continuing the information for authentication until a final approval point,
The authentication information is information that is changed in the user device without the user's intervention, may be different for each approval, and is generated one-time in response to the approval,
The authentication request is initiated from a user device other than the user device, and the authentication information is not input to the other user device,
An authentication device included in the user device or connected to the user device. Receiving, at the authentication device, a message according to the authentication request whenever there is an authentication request;
Upon receiving the message, completing approval of the message by a user; And
As the approval is completed, transmitting and processing information for authentication to be used to determine approval of the authentication request through a user device in response to the authentication request,
The message is an authentication means for non-deterministically continuing the information for authentication until a final approval point,
The authentication information is information that is changed in the user device without the user's intervention, may be different for each approval, and is generated one-time in response to the approval,
The authentication request is initiated from a user device other than the user device, and the authentication information is not input to the other user device,
The authentication method, characterized in that included in the user device or connected to the user device. Receiving a message according to the authentication request whenever there is an authentication request when executed by an authentication device;
Upon receiving the message, completing approval of the message by a user; And
As the approval is completed, transmitting and processing information for authentication to be used to determine approval of the authentication request through a user device in response to the authentication request,
The message is an authentication means for non-deterministically continuing the information for authentication until a final approval point,
The authentication information is information that is changed in the user device without the user's intervention, may be different for each approval, and is generated one-time in response to the approval,
The authentication request is initiated from a user device other than the user device, and the authentication information is not input to the other user device,
The authentication device is a computer-readable recording medium, characterized in that included in the user device or connected to the user device.

Images