KR102209881B1 - Method for authentication using mobile originated service - Google Patents

Abstract

Disclosed is a user authentication method using a mobile-originated (MO) service to prevent illegal use of the telephone number of a mobile terminal. The user authentication method comprises: a step in which a first application requesting user authentication is executed by a mobile terminal, and an authentication request for the telephone number of the mobile terminal is received from the first application by an authentication server; a step of assigning an authentication code and a mobile-originated (MO) special number for the authentication request to transmit the authentication code and the MO special number to the mobile terminal by the authentication server; a step in which a second application for transmitting an authentication message to a MO server is executed by the mobile terminal if the authentication code and the MO special number are received in the mobile terminal; a step of transmitting the authentication message including the authentication code to a reception number including the MO special number by the mobile terminal through the second application; a step of receiving the authentication message and extracting the authentication code, the MO special number, and the telephone number of the mobile terminal associated with the authentication message to transfer the authentication code, the MO special number, and the telephone number of the mobile terminal to the authentication server by the MO server; a step of verifying information received from the MO server by the authentication server; a step of transferring a telephone number mapped to the authentication code and the MO special number to the mobile terminal as a response by the authentication server if the MO special number and the authentication code are transmitted to the authentication server by the mobile terminal; and a step of outputting the telephone number of the mobile terminal received from the authentication server as a fixed value on a user authentication window by the first application of the mobile terminal.

Description

How to authenticate yourself using MO service{METHOD FOR AUTHENTICATION USING MOBILE ORIGINATED SERVICE}

The present invention relates to an identity authentication method using MO service. Specifically, the present invention relates to a method of authenticating that a user of a mobile terminal is an identity by using an authentication message transmitted from a mobile terminal to a server and a phone number of the mobile terminal.

The content described in this section merely provides background information on the present embodiment and does not constitute the prior art.

With the recent development of technology, mobile terminals have been able to perform various functions. For example, the user can perform functions of data and voice communication through a communication network, taking a picture through a camera, playing a music file through a speaker system, and outputting an image or video using a mobile terminal. In addition, a user can perform functions requiring security, such as performing payment in an Internet shopping mall or receiving financial services through a financial institution application, using a mobile terminal.

In particular, in order to use such security-critical services, the server may request the user's identity authentication from the mobile terminal. In this case, the user of the mobile terminal may authenticate himself/herself by using the mobile terminal's mobile originated (MO) service.

In this case, it is common for the server to request the phone number and authentication code of the mobile terminal to authenticate that the user of the mobile terminal is the user. However, if a malicious user uses the victim's phone number, there is a problem in that the victim's name can be used to authenticate himself/herself.

In order to solve this problem, the need to strengthen the security of the phone number-based service of mobile terminals is increasing.

An object of the present invention is to allocate and transmit an MO special number and authentication code for the mobile terminal in a server when performing identity authentication using a mobile terminal, and then transmit the mobile terminal's phone number to the corresponding MO special number and authentication code. By mapping, it is to provide an identity authentication method for preventing theft of a phone number by a mobile terminal.

In addition, an object of the present invention is to provide an identity authentication method that further enhances security by performing additional authentication on the mobile terminal when the accessibility mode in which the recipient number can be modified is running when performing identity authentication using a mobile terminal. To provide.

The objects of the present invention are not limited to the above-mentioned objects, and other objects and advantages of the present invention that are not mentioned can be understood by the following description, and will be more clearly understood by examples of the present invention. In addition, it will be easily understood that the objects and advantages of the present invention can be realized by the means shown in the claims and combinations thereof.

In the method for authenticating an identity using MO service according to an embodiment of the present invention, a first application for requesting identity authentication is executed in a mobile terminal, and an authentication request for a phone number of the mobile terminal is requested from the first application in an authentication server. Receiving; Allocating a Mobile Originated (MO) special number and an authentication code to the authentication request by the authentication server and transmitting it to the mobile terminal; Executing a second application for transmitting an authentication message from the mobile terminal to an MO server when the MO special number and the authentication code are received by the mobile terminal; Transmitting the authentication message including the authentication code from the mobile terminal to a reception number including the MO special number through the second application; Receiving the authentication message from the MO server, extracting the phone number of the mobile terminal, the MO special number, and the authentication code related to the authentication message, and transmitting the extracted authentication code to the authentication server; Verifying information received from the MO server in the authentication server; When the mobile terminal transmits the MO special number and the authentication code to the authentication server, transmitting the MO special number and the phone number mapped to the authentication code from the authentication server to the mobile terminal in response thereto. ; And outputting, in the first application of the mobile terminal, the phone number of the mobile terminal received from the authentication server as a fixed value in a user authentication window.

In addition, in the step of transmitting the authentication message through the second application, the second application allocates the receiving number, which is the sum of the MO number and the MO special number for transmitting the authentication message to the MO server, Layer processing may be performed on the reception number so that the allocated reception number is not changed.

In addition, in the step of allocating a MO special number and an authentication code to the mobile terminal with respect to the authentication request received from the mobile terminal and transmitting it to the mobile terminal, the authentication server sets the special number state mapped to the MO special number to a first state. It may include setting up.

In addition, in the step of verifying the information received from the MO server in the authentication server, the authentication server, the special number status of the MO special number received from the MO server is a first state, and the received from the MO server If the authentication code matches the authentication code mapped to the MO special number, the phone number of the mobile terminal received from the MO server is mapped to the MO special number and the authentication code, and the special number status of the MO special number is It may include changing from the first state to the second state.

In addition, in the step of verifying the information received from the MO server in the authentication server, the authentication server, if the authentication code received from the MO server is different from the authentication code mapped to the MO special number,'authentication code An error message indicating'different' is output, and if the special number status of the MO special number received from the MO server is different from the first status, an error message indicating'duplicate reception' or'no assignment number' is displayed. May include doing.

In addition, in the step of transferring the MO special number and the phone number of the mobile terminal mapped to the authentication code to the mobile terminal, the authentication server, the special number status of the MO special number received from the mobile terminal is the first In the 2 state, when the authentication code received from the mobile terminal matches the authentication code mapped to the MO special number, the MO special number and the telephone number mapped to the authentication code may be transferred to the mobile terminal.

Further, in the step of transmitting the MO special number and the originating number of the mobile terminal mapped to the authentication code to the mobile terminal, the authentication server maps the authentication code received from the mobile terminal to the MO special number. If it is different from the authorized authentication code, an error message indicating'issued code is different' is output, and if the special number status of the MO special number received from the mobile terminal is in the first state,'an authentication message has not arrived' Outputs an error message indicating, and when the special number status of the MO special number received from the mobile terminal is different from the first and second statuses, an error message indicating'duplicate reception' or'no assignment number' is displayed. May include printing.

In addition, in the step of allocating an MO special number and an authentication code to the mobile terminal with respect to the authentication request received from the mobile terminal and transmitting it to the mobile terminal, the authentication server searches for a DB included in the authentication server, and the telephone number is An unassigned MO special number can be selected and transmitted to the mobile terminal.

In addition, when the mobile terminal is executing an accessibility mode capable of modifying the layer-processed reception number, the authentication server may further include performing additional authentication for the mobile terminal.

As described above, the identity authentication method using the MO service of the present invention allows the user of the mobile terminal to use a phone number of a mobile terminal other than the mobile terminal being used when performing identity authentication using an authentication message. Since there is no phone number theft can be prevented.

In addition, the identity authentication method using the MO service of the present invention is advantageous in that it is possible to prevent theft of personal information by requesting additional authentication when there is an attempt to change the layer-processed receiving number using the accessibility mode of the mobile terminal. There is this.

In addition to the above-described contents, specific effects of the present invention will be described together while describing specific details for carrying out the present invention.

1 is a diagram for explaining an identity authentication system using an MO service according to an embodiment of the present invention.
2 is a flow chart illustrating a method of authenticating an identity using an MO service according to an embodiment of the present invention.
3A and 3B are flow charts for explaining an identity authentication method performed in a mobile terminal, an MO server, and an authentication server according to an embodiment of the present invention.
Figure 4 is a UI diagram for explaining the problem of the identity authentication system using a conventional MO service.
5 is a UI diagram for explaining an identity authentication system using an MO service according to an embodiment of the present invention.
6 is a diagram for explaining a response method when an attempt is made by changing an authentication code in an embodiment of the present invention.
7 is a flowchart illustrating a mobile terminal using an accessibility mode in an embodiment of the present invention.

The terms or words used in the specification and claims are limited to their general or dictionary meanings and should not be interpreted. According to the principle that the inventor can define the concept of terms or words in order to explain his own invention in the best way, it should be interpreted as a meaning and concept consistent with the technical idea of the present invention. In addition, the embodiments described in the present specification and the configurations shown in the drawings are only one embodiment in which the present invention is realized, and do not represent all the technical ideas of the present invention, and thus these can be replaced at the time of application. It is to be understood that there may be various equivalents and variations and examples of application.

Terms such as first, second, A, and B used in the present specification and claims may be used to describe various elements, but the elements should not be limited by the terms. These terms are used only for the purpose of distinguishing one component from another component. For example, without departing from the scope of the present invention, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element. The term'and/or' includes a combination of a plurality of related listed items or any of a plurality of related listed items.

When a component is referred to as being "connected" or "connected" to another component, it is understood that it may be directly connected or connected to the other component, but other components may exist in the middle. Should be. On the other hand, when a component is referred to as being "directly connected" or "directly connected" to another component, it should be understood that there is no other component in the middle.

Terms used in the specification and claims are only used to describe specific embodiments, and are not intended to limit the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In the present application, terms such as "include" or "have" should be understood as not precluding the possibility of existence or addition of features, numbers, steps, actions, components, parts, or combinations thereof described in the specification. .

Unless otherwise defined, all terms, including technical or scientific terms, used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs.

Terms as defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and should not be interpreted as an ideal or excessively formal meaning unless explicitly defined in this application. Does not.

In addition, each configuration, process, process, or method included in each embodiment of the present invention may be shared within a range not technically contradicting each other.

The MO service is an abbreviation of mobile originated service and refers to a service that collects text messages from a customer's terminal to a server assigned a specific number and utilizes it. In the past, MO service was used only to collect text messages, but the recent MO service is to fix the phone number of the mobile terminal during identity authentication in order to authenticate whether the user using the mobile terminal has a mobile terminal in his/her name. Can be used to

In addition, the mobile terminal may have a SIM card on one side, wherein the SIM card is an IC card implementing a Subscriber Identification Module (SIM) and may include user information of the mobile terminal.

At this time, depending on the operating system (OS) of the mobile terminal, the phone number of the mobile terminal may or may not be fetched from the SIM card provided in the mobile terminal. For example, in a specific operating system, an application executed in the mobile terminal is set so that the phone number of the mobile terminal cannot be obtained from the SIM card due to problems such as security.

A user of a mobile terminal using such an operating system must directly input the phone number of the mobile terminal in order to perform identity authentication using the MO service. However, there is a problem in that the phone number of another person's mobile terminal can be abused because the user can directly input the phone number of the mobile terminal used for self-authentication.

In order to prevent this, conventionally, a method of forcibly entering a phone number of a mobile terminal on which an identity authentication application is running by using an MO service has been used. However, even in this case, there is a problem in that it is possible to bypass another person's mobile terminal to input the phone number of another person's mobile terminal into the identity authentication window by using the MO service.

Hereinafter, a method of preventing theft of another person's phone number when authenticating that the user of the mobile terminal is the name holder using the MO service will be described in detail.

1 is a diagram for explaining an identity authentication system using an MO service according to an embodiment of the present invention.

Referring to FIG. 1, an identity authentication system using an MO service may include a mobile terminal 100, an MO server 200, an authentication server 300, a security server (not shown), and a telecommunication company server (not shown). .

In one embodiment of the present invention, the mobile terminal 100 may refer to a mobile electronic device that can have a unique identification number, such as a mobile phone, a smart phone, or a wearable device (eg, a watch-type terminal). Here, it goes without saying that the operating system (OS) of the mobile terminal 100 is not limited to a specific operating system (eg, iOS or Android operating system).

In addition, the mobile terminal 100 is an input unit that receives a user's input, a display unit that displays visual information, a communication unit that transmits and receives signals to and from the outside, and processes data, controls each unit inside the mobile terminal 100, and controls the units. It may include a control unit that controls the transmission / reception of data between. Hereinafter, what the controller performs inside the mobile terminal 100 according to a user's command is collectively referred to as what the mobile terminal 100 performs.

In one embodiment of the present invention, the mobile terminal 100 may execute a first application requesting identity authentication according to a user's input. Here, the first application may correspond to an identity authentication application for performing identity authentication. For example, a user may run an identity authentication application to perform an Internet shopping mall payment in a mobile terminal.

In one embodiment of the present invention, the mobile terminal 100 may output a button requesting an authentication message for confirming the phone number of the mobile terminal 100 through the display unit. Here, the mobile terminal 100 may receive a user input for a button. In addition, when the phone number of the mobile terminal 100 is verified, the mobile terminal 100 may fix and output a user authentication window including the phone number of the mobile terminal 100 through the display unit.

In one embodiment of the present invention, the mobile terminal 100 transmits and receives at least one of a base station, an external terminal, and a server on a mobile communication network established according to a technology standard or communication method for mobile communication through a communication unit. I can.

That is, the mobile terminal 100 may transmit and receive wireless signals with at least one of the MO server 200, the authentication server 300, the security server, and the communication company server included in the identity authentication system of the present invention. In an embodiment of the present invention, the mobile terminal 100 may transmit a signal to the authentication server 300 for requesting information necessary for an authentication message, and receive a MO special number and an authentication code from the authentication server 300. have.

In addition, the first mobile terminal 110, the second mobile terminal 120 to the ninth mobile terminal 190 to be described later may be understood with reference to the mobile terminal 100 described above.

In addition, the server is a computer system that provides information or services to clients through a communication network, and may refer to a computer program or a device.

In an embodiment of the present invention, the MO server 200 may correspond to a server providing an MO service. Accordingly, the MO server 200 may collect a short message service (hereinafter, an SMS message) from a plurality of mobile terminals 100. In particular, the SMS message may include a calling number. At this time, the MO server 200 may receive an authentication code included in an SMS message received from the mobile terminal 100, a phone number of the mobile terminal 100, and a special MO number assigned by the MO server 200.

In addition, in an embodiment of the present invention, the MO server 200 receives an authentication message including an authentication code from the mobile terminal 100, and extracts the received MO special number, authentication code, and phone number of the mobile terminal. It can be transmitted to the authentication server 300.

In an embodiment of the present invention, the authentication server 300 may assign an MO special number to the mobile terminal 100 and generate an authentication code for the mobile terminal 100. That is, in one embodiment of the present invention, before the mobile terminal 100 transmits the authentication message to the MO server 200, the authentication server 300 allocates a MO special number and an authentication code to the mobile terminal 100. can do.

Further, the authentication server 300 may verify information received from the mobile terminal 100 after transmitting the MO special number and authentication code generated to the mobile terminal 100. For example, the authentication server 300 may verify at least one of the received phone number, MO special number, and authentication code of the mobile terminal 100.

Additionally, in an embodiment of the present invention, the security server (not shown) may determine whether the user information received from the mobile terminal 100 matches the user information checked by the communication company server (not shown). Specifically, the user may input the user's name, the first digit of the resident registration number, the mobile terminal 100 to which the mobile terminal 100 is subscribed, and the phone number of the fixed mobile terminal 100 as user information through the identity authentication application.

Thereafter, the mobile terminal 100 may transmit user information input according to a user's command to a security server (not shown), and the security server (not shown) may verify the received user information.

In an embodiment of the present invention, a communication service provider server (not shown) may hold personal information input by a subscriber of the mobile terminal 100 as user information at the time of subscription. For example, a communication company server (not shown) can hold personal information such as the user's name, resident registration number, and phone number of the mobile terminal 100 when the mobile terminal 100 is opened through a communication company server (not shown). have. Accordingly, the communication company server (not shown) may provide user information of the mobile terminal 100 to another server having a legitimate authority.

In addition, the above-described servers may be directly operated or managed by a specific company or individual or entrusted to the outside, and may be operated by the same subject.

In addition, since the name of the server is not specified, functions performed by each server can also be performed by other servers, and of course, functions performed separately by multiple servers can be performed by one server. .

Hereinafter, a method of preventing theft of another person's phone number through the mobile terminal 100, the MO server 200, and the authentication server 300 and authenticating the identity of the person will be described in detail.

2 is a flow chart illustrating a method of authenticating an identity using an MO service according to an embodiment of the present invention.

Referring to FIG. 2, in the method of authenticating an identity using an MO service according to an embodiment of the present invention, a first application for requesting identity authentication may be executed in the mobile terminal 100 (S201). In more detail, the mobile terminal 100 may execute an identity authentication application that requests identity authentication according to a user's request. For example, when a user performs an internet shopping mall payment using the mobile terminal 100, the mobile terminal 100 may execute an application requesting identity authentication.

In addition, the mobile terminal 100 may output a button for requesting an authentication message for confirming the phone number of the mobile terminal 100 within an identity authentication application requesting identity authentication. Here, the button is a button for transmitting an authentication message using the phone number of the mobile terminal 100 as the calling number from the mobile terminal 100 to the MO server 200 in order to check the phone number of the mobile terminal 100 Can correspond to

Subsequently, the authentication server 300 may receive an authentication request for the phone number of the mobile terminal 100 from the first application (S202). Specifically, when there is an authentication request for the phone number of the mobile terminal 100 from the first application of the mobile terminal 100, the mobile terminal 100 sends the authentication server 300 to the phone number of the mobile terminal 100. You can send an authentication request for. Accordingly, the authentication server 300 may receive an authentication request for the phone number of the mobile terminal 100 from the first application.

For example, the user may touch a button requesting an authentication message for confirming the phone number of the mobile terminal 100 in the first application. When the mobile terminal 100 receives a user input for a button, the mobile terminal 100 may transmit a signal to the authentication server 300 to request information necessary for the authentication message. Here, the information required for the authentication message may correspond to information necessary for the mobile terminal 100 to send an authentication message to the MO server 200.

In one embodiment of the present invention, the mobile terminal 100 is characterized in that it transmits an authentication message including an authentication code to the MO server 200 by using the sum of the received MO special number and the MO number as a receiving number. Therefore, the mobile terminal 100 may request the MO special number and authentication code, which are information necessary for the authentication message, from the authentication server 300 before transmitting the authentication message to the MO server 200.

Subsequently, the authentication server 300 may allocate an MO special number and an authentication code to the authentication request and transmit it to the mobile terminal 100 (S203). Specifically, the authentication server 300 may select an MO special number for the mobile terminal 100, generate an authentication code, and transmit it to the mobile terminal 100.

In an embodiment of the present invention, the authentication server 300 may select an unoccupied MO special number from among the MO special number DB existing in the authentication server 300. In addition, when allocating the MO special number and authentication code to the authentication request received from the mobile terminal 100, the authentication server 300 sets the special number status of the MO special number to a first state (eg, Status=1). I can. This will be described in detail in FIGS. 3A and 3B below.

In addition, the authentication server 300 may generate an authentication code including a random number or letter for the mobile terminal 100 and transmit it to the mobile terminal 100.

Subsequently, when the MO special number and the authentication code are received by the mobile terminal 100, the mobile terminal 100 executes a second application for transmitting an authentication message to the MO server 200 (S204). Specifically, the mobile terminal 100 transmits an authentication request for the phone number of the mobile terminal 100 to the authentication server 300 through the first application, and the MO special number and authentication code are received from the authentication server 300. In this case, the mobile terminal 100 may execute a second application for transmitting an authentication message to the MO server 200. Here, the second application may correspond to the message application.

Further, in another embodiment of the present invention, when the mobile terminal 100 receives an input for a button requesting an authentication message through the first application, the mobile terminal 100 authenticates in the background state of the first application. The MO special number received from the server 300 may be added to the MO number and set as a reception number transmitted to the MO server 200, and a message pop-up window including an authentication message including the received authentication code may be displayed. Thereafter, the user may check the authentication message output on the message pop-up window through the mobile terminal 100 and touch a button for transmitting the authentication message.

In addition, steps S202 to S204 according to an embodiment of the present invention may be performed simultaneously as one operation.

In addition, in the step of transmitting the authentication message through the second application, the mobile terminal 100 allocates a receiving number that is the sum of the MO number and the MO special number for transmitting the authentication message to the recipient item, and the assigned receiving number is changed. You can layer the recipient item so that it does not. This will be described in detail in FIG. 5 below.

Subsequently, the mobile terminal 100 transmits an authentication message including an authentication code to a receiving number including an MO special number through the second application (S205). For example, the mobile terminal 100 may transmit an authentication message including an authentication code to a receiving number including an MO special number through a message application. Specifically, upon receiving an input for a button for transmitting an authentication message, the mobile terminal 100 may transmit an authentication message including an authentication code to the MO server 200. At this time, the mobile terminal 100 may transmit an SMS message to the MO server 200, which is a destination of the recipient number, through a mobile communication network.

Subsequently, the MO server 200 receives the authentication message, extracts the phone number, MO special number, and authentication code of the mobile terminal 100 related to the authentication message and transmits it to the authentication server 300 (S206).

Specifically, when the MO server 200 receives an authentication message from the mobile terminal 100, the MO server 200 receives the calling number of the mobile terminal 100 (that is, the phone number of the mobile terminal 100). can do. In addition, since the mobile terminal 100 transmits an authentication message to the MO server 200 by adding the unique MO special number of the mobile terminal 100 to the MO number, the MO server 200 provides the MO special number and the authentication message. The authentication code included in can also be obtained. Accordingly, the MO server 200 may extract the MO special number, the authentication code, and the phone number of the mobile terminal 100 from the received authentication message and transmit it to the authentication server 300.

Subsequently, the authentication server 300 verifies the information received from the MO server 200 (S207). In one embodiment of the present invention, the authentication server 300 searches for the MO special number received from the MO server 200 to verify the validity of the authentication code, and then, if the MO special number and the authentication code are valid, the mobile terminal 100 You can set the phone number of ).

Specifically, in the authentication server 300, the special number status of the MO special number received from the MO server 200 is in the first state, and the authentication code received from the MO server 200 matches the authentication code mapped to the MO special number. In this case, the phone number of the mobile terminal 100 received from the MO server 200 is mapped to the MO special number and the authentication code, and the special number status of the MO special number is changed from the first state to the second state (e.g., Status=2). ) Can be changed. This will be described in detail in FIGS. 3A and 3B below.

Subsequently, the mobile terminal 100 transmits the MO special number and the authentication code to the authentication server 300 through the first application (S208).

In one embodiment of the present invention, the first application of the mobile terminal 100, that is, the identity authentication application may include a data transmission program in itself by interworking with the authentication server 300. Accordingly, the identity authentication application of the mobile terminal 100 may transmit the MO special number and authentication code to the authentication server 300 upon receiving an input for a button for transmitting an authentication message.

Subsequently, the authentication server 300 verifies the information received from the mobile terminal 100 (S209). In an embodiment of the present invention, the authentication server 300 may verify the MO special number and authentication code received from the mobile terminal 100.

Specifically, in the authentication server 300, the special number status of the MO special number received from the mobile terminal 100 is in the second state, and the authentication code received from the mobile terminal 100 matches the authentication code mapped to the MO special number. In this case, it is considered that the verification is successful, and the phone number mapped to the MO special number and the authentication code can be transferred to the mobile terminal 100. This will be described in detail in FIGS. 3A and 3B below.

Subsequently, when the authentication server 300 successfully verifies the received information, the authentication server 300 transmits the phone number mapped to the received information to the mobile terminal 100 (S210).

Subsequently, the mobile terminal 100 fixes the phone number of the mobile terminal 100 received from the authentication server 300 in the first application in the user authentication window (S211). That is, the mobile terminal 100 may output the phone number of the mobile terminal 100 received from the authentication server 300 as a fixed value in the user authentication window.

Specifically, when the authentication server 300 succeeds in verifying the MO special number and authentication code received from the mobile terminal 100, the mobile terminal 100 authenticates itself including the phone number of the verified mobile terminal 100. You can print the window. In one embodiment of the present invention, the mobile terminal 100 may forcibly input the phone number transmitted to the identity authentication window displayed on the first application and then fix it. Accordingly, the user can perform identity authentication by inputting remaining user information without modifying the phone number of the mobile terminal 100.

On the other hand, when the authentication server 300 fails to verify the received information, the mobile terminal 100 outputs an error message (S212). Specifically, when the authentication code received from the mobile terminal 100 is different from the authentication code mapped to the MO special number, the authentication server 300 may output an error message indicating'the issued code is different'. In addition, when the special number status of the MO special number received from the mobile terminal 100 is the first state, the authentication server 300 may output an error message indicating'an authentication message has not arrived'. In addition, the authentication server 300, when the special number status of the MO special number received from the mobile terminal 100 is a state different from the first state and the second state (e.g., Status=3 or Status=4),'duplicate reception 'Or an error message indicating'No assignment number' can be displayed. This will be described in detail in FIGS. 3A and 3B below.

3A and 3B are flow charts for explaining an identity authentication method performed in a mobile terminal, an MO server, and an authentication server according to an embodiment of the present invention. Hereinafter, contents overlapping with the contents described above in FIGS. 1 and 2 may be omitted.

Referring to FIG. 3A, first, the mobile terminal 100 executes an identity authentication application that requests identity authentication according to a user's command (S310).

Subsequently, the mobile terminal 100 outputs an authentication message request button for confirming the phone number of the mobile terminal 100 (S302).

Subsequently, the mobile terminal 100 requests the authentication server 300 for information necessary for the authentication message (S303). Specifically, the mobile terminal 100 may request the authentication server 300 for information necessary to send an authentication message to the MO server 200. That is, the mobile terminal 100 may transmit an authentication request for the phone number of the mobile terminal 100 to the authentication server 300 through an identity authentication application.

Subsequently, the authentication server 300 allocates the MO special number and the authentication code to the authentication request (S304). Here, allocating the MO special number and the authentication code includes selecting an unoccupied MO special number in the authentication server 300 and generating a new authentication code.

Specifically, when the authentication server 300 allocates the MO special number and authentication code to the authentication request received from the mobile terminal 100, the authentication server 300 searches the DB existing in the authentication server 300 , MO special number to which the phone number of the mobile terminal 100 is not assigned can be selected. That is, the authentication server 300 may select an unoccupied MO special number among the MO special number DB existing in the authentication server 300 and generate an authentication code for the mobile terminal 100.

In an embodiment of the present invention, the authentication server 300 may hold data such as (a1) of FIG. 3B. Specifically, for example, when the range of the MO special number that the MO number received by the MO server 200 can have is from 000 to 999, the authentication server 300 is a different mobile terminal ( You can select “111” as the MO special number not occupied by 100).

In addition, the authentication server 300 may generate “aaa” as an authentication code for the mobile terminal 100. At this time, the authentication server 300 may map the selected MO special number "111" and the authentication code "aaa" for the mobile terminal 100 to set the special number status as the first state and store it in the DB.

In one embodiment of the present invention, the authentication server 300 may verify the phone number and authentication code of the mobile terminal 100 by setting a status of a special number. Specifically, referring to (a2) of FIG. 3B, the authentication server 300 may maintain four special number states.

Here, when the special number status is the first status, it may correspond to the status in which the MO special number is issued. When the special number status is the second state, the calling number of the mobile terminal 100 for the MO special number may correspond to a state in which reception is completed. When the status is in the third status, the status determined as a suspicious transaction can be responded to. When the status of the special number is the fourth status, it may correspond to the status in which the MO special number has not been issued. In this case, when the special number status is the third state, it may correspond to a case in which at least one of the MO special number, the authentication code, and the phone number of the mobile terminal 100 fails.

In an embodiment of the present invention, the authentication server 300 may set a default special number status to a fourth state, and a preset time (for example, 60 seconds) after the status of the special number is changed. ), if there is no change in the status of the special number, it is possible to switch to the default status.

Therefore, in the present invention, if the number of available MO special numbers is limited, the use of the MO special number can be improved by changing the used or unused MO special number to a reusable state immediately after a preset time elapses. have.

Hereinafter, a detailed look at how the authentication server 300 verifies the phone number, MO special number, and authentication code of the mobile terminal 100.

Subsequently, the authentication server 300 transmits the MO special number and authentication code to the mobile terminal 100 in response to the authentication request (S305).

Subsequently, the mobile terminal 100 executes a message application for transmitting an authentication message to the MO server 200 using the MO special number and authentication code received from the authentication server 300, or a message for transmitting an authentication message. A pop-up window is output (S306).

Subsequently, the mobile terminal 100 transmits an authentication message using the sum of the MO number and the MO special number as a reception number to the MO server 200 (S307).

Subsequently, the MO server 200 extracts the MO special number, the authentication code, and the phone number of the mobile terminal 100 and transmits it to the authentication server 300 (S308). In this case, the MO server 200 may specialize the received authentication message. Specifically, the MO server 200 may receive the phone number (ie, the calling number) of the mobile terminal 100 as it receives the authentication message from the mobile terminal 100, and the authentication transmitted by the mobile terminal 100 The MO special number can be obtained from the recipient number of the message. Accordingly, the MO server 200 may convert the MO special number, the authentication code, and the phone number of the mobile terminal 100 into data and transmit the data to the authentication server 300.

Subsequently, the authentication server 300 verifies the information received from the MO server 200 (S309). Specifically, referring to (b) of FIG. 3B, the authentication server 300 may search for a MO special number among information received from the MO server 200 in the DB.

In an embodiment of the present invention, the authentication server 300 has a status of the MO special number received from the MO server 200 in the first state, and the authentication code received from the MO server 200 is the MO special number. If it matches the authentication code mapped to the number, the phone number of the mobile terminal 100 received from the MO server 200 is mapped to the MO special number and the authentication code, and the status of the MO special number is first It can be changed from the state to the second state.

In one embodiment of the present invention, when the status of the searched MO special number is in the second state, the authentication server 300 has already received the phone number of another mobile terminal 100 for the MO special number. Therefore, it is possible to change the status of the special number to the third state. In addition, in this case, the authentication server 300 may output an error message indicating'duplicate reception'. This will be described in detail in FIG. 6 below.

In one embodiment of the present invention, when the status of the searched MO special number is in the third state, the authentication server 300 may determine the received information as a suspicious transaction, and the status of the special number It can be changed to the fourth state. In addition, in this case, the authentication server 300 may output an error message indicating'duplicate reception'. This will be described in detail in FIG. 6 below.

In an embodiment of the present invention, when the status of the searched MO special number is in the fourth state, the authentication server 300 may determine that the MO special number has not been issued and ignore the received information. . Also, in this case, the authentication server 300 may output an error message indicating'no assignment number'.

In addition, in an embodiment of the present invention, the authentication server 300 includes the authentication code received from the MO server 200 in the authentication server 300 and the authentication code transmitted from the authentication server 300 to the mobile terminal 100 You can check whether it is the same code.

At this time, if the authentication code received from the MO server 200 in the authentication server 300 and the authentication code transmitted by the authentication server 300 to the mobile terminal 100 are the same code, the authentication server 300 is the MO special number. And it is possible to map the authentication code and the phone number of the mobile terminal 100 received from the MO server 200.

On the other hand, if the authentication code received from the MO server 200 in the authentication server 300 and the authentication code transmitted by the authentication server 300 to the mobile terminal 100 are different, the authentication server 300 determines that the transaction is suspicious. The status of the authentication code can be changed to a third status. In addition, the authentication server 300 may output an error message indicating'the authentication code is different'.

In another embodiment of the present invention, although not shown in the drawing, if the authentication server 300 fails to verify the phone number and authentication code of the mobile terminal 100 received from the MO server 200, an error message is sent to the mobile terminal. A signal requesting output on the display unit of 100 may be transmitted to the mobile terminal 100.

Subsequently, the mobile terminal 100 transmits the MO special number and the authentication code to the authentication server 300 through the identity authentication application (S310).

In this case, step S310 may be performed after step S307 is performed. That is, after the mobile terminal 100 transmits the authentication message to the MO server 200, it may transmit the MO special number and the authentication code to the authentication server 300.

Subsequently, the authentication server 300 verifies the MO special number and authentication code received from the mobile terminal 100 (S311).

Specifically, referring to (c) of FIG. 3B, the authentication server 300 has a second status for the searched MO special number, and the received authentication code is MO special within the authentication server 300. If the number is the same as the authentication code mapped to the number, and if there is a phone number of the mobile terminal 100 mapped to the MO special number, it is determined that the verification is successful, and step S312 may be performed. Thereafter, the authentication server 300 may switch the status of the MO special number to a fourth state, which is a basic state.

Additionally, in an embodiment of the present invention, the authentication server 300 has a status of the searched MO special number in the first state, and the authentication server 300 is a preset time (eg, 60 seconds). If the authentication message is not received within the user and the step S309 is not performed, the status of the special number may be changed to the fourth state. In this case, a preset time for receiving the authentication message may be set by the authentication server 300.

In one embodiment of the present invention, even if the status of the searched MO special number is in the second state, the authentication server 300 authenticates that the received authentication code is mapped with the MO special number in the authentication server 300. If it is not the same as the code, the status of the special number can be changed to the third state.

In addition, in an embodiment of the present invention, when the status of the searched MO special number is in the third status, the authentication server 300 determines that it is a suspicious transaction and ignores it, and sets the status of the special number to a fourth status. You can change the state.

In addition, in one embodiment of the present invention, when the status of the searched MO special number is in the fourth state, the authentication server 300 determines that the MO special number is not issued and ignores the received information. I can.

This is to respond to a DDos attack with malicious intent, and a detailed description thereof will be described later with reference to FIG. 8.

Subsequently, the authentication server 300 transmits the verified phone number of the mobile terminal 100 to the mobile terminal 100 (S312). Specifically, when the verification of the MO special number and the authentication code is successful, the authentication server 300 may transmit the phone number of the mobile terminal 100 mapped to the MO special number and the authentication code to the identity authentication application of the mobile terminal 100. have.

In another embodiment of the present invention, although not shown in the drawing, the authentication server 300 may transmit a signal requesting to output an error message to the mobile terminal 100 when verification of the MO special number and the authentication code fails. .

Subsequently, the mobile terminal 100 fixes the phone number received from the authentication server 300 in the user authentication window (S313). Specifically, the mobile terminal 100 may output an identity authentication window in which the phone number of the mobile terminal 100 received from the authentication server 300 is fixed to the identity authentication window through the identity authentication application.

In addition, in another embodiment of the present invention, when the authentication server 300 fails to verify at least one of the MO special number, the authentication code, and the phone number of the mobile terminal 100, the user authentication Error messages can be output through an application.

Figure 4 is a UI diagram for explaining the problem of the identity authentication system using a conventional MO service. Hereinafter, content overlapping with the above-described content may be omitted.

4A, the user of the first mobile terminal 110 executes an identity authentication application to perform identity authentication, and then requests an authentication message to enter a phone number in the identity authentication window. 1 Input signal 410 can be input.

Referring to Figure 4 (b), when authenticating the user using the conventional MO service, the user is not the phone number of the first mobile terminal 110, but the phone number of the second mobile terminal 120 in the name of another person. You can use it to authenticate yourself.

Specifically, according to the first input signal 410, the first mobile terminal 110 outputs an authentication message including a first MO number and a first authentication code for transmitting an authentication message to the MO server 200 Pop-up window can be displayed.

At this time, when authenticating the user using the conventional MO service, the malicious user changes the first MO number for transmitting the authentication message to the MO server 200 (420) or changes the first authentication code included in the authentication message ( 430) You can.

For example, if the first authentication code generated by the identity authentication application is “aaa” and the first MO number for transmitting the authentication message to the MO server 200 is “1688-0033”, the malicious user is In the pop-up window, if the first MO number is changed to “1588-0033” as the second MO number, or if the first authentication code is “aaa”, it can be changed to the second authentication code “bbb”.

According to the first case 420 in which the MO number is changed, the first mobile terminal 110 cannot transmit the authentication message to the MO server 200 that collects the authentication message, so the MO server 200 is the first mobile terminal. (110) phone number will not be able to be received.

In addition, according to the second case 430 in which the authentication code is changed, the authentication message is normally transmitted to the MO server 200 because the MO number has not been changed, and the MO server 200 moves the second authentication code and the first. The phone number of the terminal 110 is extracted and transmitted to the authentication server 300.

Meanwhile, referring to (c) of FIG. 4, the user of the first mobile terminal 110 uses a malicious method to set the receiving number as the first MO number in the message pop-up window of the second mobile terminal 120, and After outputting the authentication message including the authentication code, it is possible to control to transmit the authentication message to the MO server 200.

Accordingly, the MO server 200, which is a destination of the first MO number, may extract the first authentication code and the phone number of the second mobile terminal from the received authentication message and transmit it to the authentication server 300. In this case, the authentication server 300 may map and store the first authentication code and the phone number of the second mobile terminal on the authentication server DB 350.

Thereafter, the identity authentication application of the first mobile terminal 110 determines that the authentication message has been transmitted to the MO server 200 and may request the authentication server 300 for a phone number of the mobile terminal mapped with the first authentication code. .

Subsequently, referring to (d) of FIG. 4, the authentication server 300 having received the request of the first mobile terminal 110 obtains the phone number of the second mobile terminal 120 mapped to the first authentication code. 1 It is possible to forcibly enter the identity authentication window of the identity authentication application of the mobile terminal 110.

That is, according to the conventional identity authentication system using MO service, the user of the first mobile terminal 110 can perform identity authentication by stealing the phone number of the second mobile terminal 120 through the method shown in FIG. 4. There was a problem.

Hereinafter, a detailed look at the identity authentication method according to an embodiment of the present invention that can prevent the theft of the phone number of others as described above.

5 is a UI diagram for explaining an identity authentication system using an MO service according to an embodiment of the present invention. Hereinafter, content overlapping with the above-described content may be omitted.

5A, the user of the first mobile terminal 110 executes an identity authentication application to perform identity authentication, and then requests an authentication message to enter a phone number in the identity authentication window. 1 Input signal 510 can be input.

5B, when the first mobile terminal 110 outputs an authentication message for transmitting the authentication message to the MO server 200 in the message pop-up window according to the first input signal 510, the first 1 The mobile terminal 110 may allocate a destination number in which the MO number, which is a destination, plus an MO special number, to the destination item, and layer-process the destination item (area) so that the assigned destination number is not changed. Here, the number obtained by adding the MO number and the MO special number corresponds to the reception number of the MO server 200.

Specifically, in order to supplement the conventional problem, the first mobile terminal 110 layer-processes the reception number obtained by adding the MO special number received from the authentication server 300 to the MO number, You can prevent users from changing the recipient number.

At this time, the authentication server 300 issues one of the MO special numbers provided by the MO server 200 to the first mobile terminal 110, and the first mobile terminal 110 adds the MO special number to the MO number. Allows to transmit an authentication message to the MO server 200.

For example, the authentication server 300 may select an unassigned MO special number from 000 to 999 and transmit it to the first mobile terminal 110. Thereafter, the first mobile terminal 110 uses the MO number “1688-0033” plus the MO special number received from the authentication server 300, “1688-0033-111” as the receiving number, and sends the authentication message to the MO server ( 200).

Here, layering is a method of adding an opaque marker to the MO number and MO special number to prevent the user from seeing the MO number and MO special number at all, or by adding a transparent marker to the MO number and MO special number. A method of preventing the user from changing the MO number and the MO special number may be used. Accordingly, the present invention can prevent the first case 420 of changing the MO number in FIG. 4.

Meanwhile, since the malicious user cannot modify the MO number and the MO special number in the message pop-up window of the first mobile terminal 110, the first authentication code included in the authentication message is changed to the second authentication code and transmitted, It is possible to attempt to obtain the phone number of the second mobile terminal 120.

For example, referring to (c) of FIG. 5, a malicious user sends an authentication message by inputting the first authentication code displayed on the first mobile terminal 110 in the message pop-up window of the second mobile terminal 120 to the MO server. It can be sent to 200.

In this case, the authentication server 300 may store the second MO special number, the first authentication code, and the phone number of the second mobile terminal on the authentication server DB 350. For example, the authentication server 300 stores the second MO special number "222", the first authentication code "aaa" and the phone number "B" of the second mobile terminal on the authentication server DB 350. I can.

Thereafter, since the identity authentication application of the first mobile terminal 110 cannot change the receiving number, the authentication message is transmitted to the MO server 200, and the phone number of the mobile terminal mapped to the MO special number to the authentication server 300 Can be requested.

At this time, if the user of the first mobile terminal 110 transmits the first authentication code “aaa” as it is, the phone number is duplicated because the number of the second mobile terminal 120 is already mapped to the second MO special number. The authentication server 300 may respond to the first mobile terminal 110 as the verification failure by determining that it has been received.

On the other hand, when the user of the first mobile terminal 110 changes the first authentication code to the second authentication code and transmits it (520), the MO special number and the mapped authentication code are not the same, so it is determined as a suspicious transaction and authenticated. The server 300 may respond to the first mobile terminal 110 with verification failure.

That is, according to an embodiment of the present invention, the user of the first mobile terminal 110 cannot change the receiving number of the authentication message, and because the MO special number and authentication code are mapped to the phone number of the mobile terminal, The number cannot be stolen.

6 is a diagram for explaining a response method when an attempt is made by changing an authentication code in an embodiment of the present invention. Hereinafter, contents overlapping with the above-described contents may be omitted. In addition, FIGS. 6A to 6D may correspond to data included in the authentication server DB.

Hereinafter, when a malicious user attempts to steal a number using the first mobile terminal 110 and the second mobile terminal 120, a detailed description will be given of a countermeasure of the authentication server 300 that can prevent this. .

At this time, the operating system of the first mobile terminal 110 and the second mobile terminal 120 may be different from each other, and hereinafter, the second mobile terminal 120 will be described on the premise that layer processing is not performed on the reception number. do.

Referring to FIG. 6, first, the user of the first mobile terminal 110 may request the authentication server 300 for information necessary for an authentication message for verifying a phone number in an identity authentication application requesting identity authentication (S601). ).

Subsequently, the authentication server 300 may select an MO special number according to the request of the first mobile terminal 110 and generate an authentication code (S602). For example, referring to (a) of FIG. 6, the authentication server 300 may select “111” as the MO special number and generate “aaa” as an authentication code mapped thereto. In addition, the authentication server 300 may store a special number status for the MO special number "111" in the authentication server DB as a first state.

Subsequently, the authentication server 300 may transmit the MO special number "111" and the authentication code "aaa" to the first mobile terminal 110 (S603).

Subsequently, the first mobile terminal 110 receives the MO special number and the authentication code from the authentication server 300 in response to step S601, and includes a receiving number including the MO special number and an authentication code in a message pop-up window. An authentication message can be set (S604). For the above example, when the MO number is “1688-0033”, the first mobile terminal 110 receives “1688-0033-111”, which adds the MO number to the MO number in the message pop-up window, as the receiving number. After layer processing, you can set the authentication message including the authentication code “aaa” in the message input window.

On the other hand, the user of the first mobile terminal 110 uses the second mobile terminal 120, which is not layered on the reception number, and includes the MO special number and authentication code received from the first mobile terminal 110. An authentication message can be set (S605).

For example, the malicious user can set the receiving number as “1688-0033-111” in the message pop-up window of the second mobile terminal 120 and the authentication message including the authentication code “aaa” in the message input window. have.

Subsequently, the user of the first mobile terminal 110 may transmit the authentication message set in the second mobile terminal 120 to the MO server 200 (S606).

Subsequently, the MO server 200 extracts the phone number of the second mobile terminal 120 into the MO special number and authentication code through the authentication message received from the second mobile terminal 120 and transmits it to the authentication server 300. Can be (S607). For example, when the MO special number is “111”, the MO server 200 may map the authentication code to “aaa” and the phone number to “B” and transmit it to the authentication server 300.

Subsequently, the authentication server 300 searches for the MO special number received from the second mobile terminal 120 through the authentication server DB, and verifies and sets the phone number of the second mobile terminal 120 in the searched MO special number. Can be (S608).

Specifically, referring to (d) of FIG. 6, when the MO special number received from the second mobile terminal 120 is “111”, the authentication server 300 receives the MO special number “111” from the authentication server DB. After searching and verifying that the authentication code mapped to the MO special number is correct, the phone number for the MO special number “111” is mapped to the phone number “B” of the second mobile terminal 120, and then the special number status ( status) can be changed to the second status and saved.

Subsequently, the malicious user may change and enter the authentication code in the message pop-up window of the first mobile terminal 110 (S609). For example, the user may change the authentication code from “aaa” to “bbb” in the message pop-up window of the first mobile terminal 110.

Subsequently, the first mobile terminal 110 may transmit the authentication message in which the authentication code has been changed to the MO server 200 having a reception number including an existing MO special number (S610). Taking the above-described example, the first mobile terminal 110 may transmit an authentication message including an authentication code "bbb" as "1688-0033-111".

Subsequently, the MO server 200 may map the MO special number, the second authentication code, and the phone number of the first mobile terminal 110 from the received authentication message to the authentication server 300 (S611). For example, the MO server 200 maps the second authentication code "bbb" and the phone number "A" of the first mobile terminal 110 to the MO special number "111" and transmits it to the authentication server 300. I can.

Subsequently, the authentication server 300 may search for the received MO special number to verify the phone number (S612).

Specifically, referring to (b) of FIG. 6, when the authentication server 300 searches for the received MO special number “111”, the searched MO special number “111” is the phone number of the second mobile terminal 120 Since “B” has already been mapped, the status of the special number is the second state. Accordingly, the authentication server 300 may change the special number status for the MO special number “111” to the third state.

Meanwhile, in step S609 described above, the user may proceed with the remaining steps without changing the authentication code in the message pop-up window of the first mobile terminal 110.

In this case, even if the first mobile terminal 110 transmits the authentication code to the MO server 200 as it is without changing the authentication code, the authentication server 300 already has a phone number mapped to the MO special number. Is changed from the second state to the third state.

That is, even if the user of the first mobile terminal 110 changes the authentication code or transmits the authentication code to the MO server 200 without changing the authentication code, the phone of the second mobile terminal 120 already mapped to the MO special number Since the number exists, the authentication server 300 determines that a duplicate telephone number is received. Accordingly, the status of the MO special number may be changed to the third status, which is a suspicious transaction.

Subsequently, the first mobile terminal 110 transmits the authentication message displayed in the message pop-up window output through the message application, and then transmits the MO special number and authentication code to the authentication server 300 through the identity authentication application to perform identity authentication. You can request a phone number for (S613). For example, the first mobile terminal 110 may transmit “111” as an MO special number and “aaa” as an authentication code to the authentication server 300 to request a phone number mapped thereto.

Subsequently, the authentication server 300 may search for the MO special number received from the first mobile terminal 110 to verify the request of the first mobile terminal 110 (S614).

At this time, when the authentication server 300 searches for the MO special number received from the first mobile terminal 110, the searched MO special number is already determined to be a suspicious transaction with a status of 3 through step S612. This is the case. Accordingly, the verification fails, and the authentication server 300 does not return the phone number to the first mobile terminal 110. In this case, in another embodiment of the present invention, the authentication server 300 may transmit an error message indicating the reason for the verification failure to the first mobile terminal 110.

Subsequently, the authentication server 300 may initialize the MO special number when a preset time elapses after the verification fails (S615). Specifically, referring to (c) of FIG. 6, when 60 seconds elapse after the verification fails, the authentication server 300 may switch the status of the MO special number “111” to the fourth state. Accordingly, the MO special number “111” becomes a MO special number that has not been occupied again, so it can be used for verification for other mobile terminals.

Through this, the identity authentication method using the MO service of the present invention, when the user of the mobile terminal performs identity authentication using an authentication message, because the phone number of a mobile terminal other than the mobile terminal being used cannot be used Number theft can be prevented.

7 is a flowchart illustrating a mobile terminal using an accessibility mode in an embodiment of the present invention. Likewise, in the following, contents overlapping with the above-described contents may be omitted.

Hereinafter, a method of preventing this when attempting to authenticate the person with another person's phone number using the accessibility mode in an embodiment of the present invention will be described in detail.

Referring to (a) of FIG. 7, the user of the first mobile terminal 110 receives the first MO special number and the first authentication code through the authentication server 300 to perform identity authentication, and the first movement The terminal 110 may include the first authentication code in the authentication message in the message pop-up window and set the receiving number in a state in which the first MO special number is added to the MO number. Here, the message pop-up window may be displayed on the message application.

Subsequently, referring to FIG. 7B, the user of the first mobile terminal 110 enters the receiving number in the message pop-up window of the second mobile terminal 120, which is another's mobile terminal, and the first MO special number to the MO number. It can be set to the added state and transmitted to the MO server (not shown) by including the first authentication code in the authentication message.

Accordingly, the MO server can extract the first MO special number, the first authentication code, and the phone number of the second mobile terminal 120 and transmit it to the authentication server 300, and the authentication server 300 is an authentication server DB ( (Not shown) may be stored by mapping the phone number of the second mobile terminal 120 to the first MO special number and the first authentication code.

Meanwhile, referring to (c) of FIG. 7, the user of the first mobile terminal 110 may attempt to bypass the identity authentication by using the third mobile terminal 130, which is another mobile terminal of the user.

Specifically, the user of the first mobile terminal 110 executes an identity authentication application in order to also perform identity authentication in the third mobile terminal 130, which is another mobile terminal of the person, and performs a second authentication through the authentication server 300. You can receive the MO special number and the second authentication code.

Subsequently, referring to FIG. 7D, the user of the first mobile terminal 110 may execute the accessibility mode while the message popup window of FIG. 7A is set. Here, the accessibility mode may correspond to a mode provided by the mobile terminal to assist the user when it is difficult for a user using the mobile terminal to use a general mode. For example, the mobile terminal can provide a user with various accessibility modes such as a visual support function, a listening support function, an interaction function, and a media assistance function.

In this case, the accessibility mode may include a first mode capable of modifying a reception number of a message pop-up window that has been layered so that it cannot be modified. In this case, the user of the first mobile terminal 110 may change the reception number set in the message pop-up window to a number in which the second MO special number is added to the MO number using the first mode.

Subsequently, the user of the first mobile terminal 110 may input the second authentication code in the message pop-up window and then transmit the authentication message to the MO server. Accordingly, the MO server may map the number of the first mobile terminal 110 to the second MO special number and the second authentication code from the received authentication message and transmit it to the authentication server 300. The authentication server 300 may map and store the second MO special number and the second authentication code on the DB with the phone number of the first mobile terminal 110.

As a result, the authentication server 300 maps the second MO special number to the phone number of the first mobile terminal 110 on the DB, and the first MO special number is mapped to the phone number of the second mobile terminal 120. I can.

Subsequently, referring to (e) of FIG. 7, since the first mobile terminal 110 transmits an authentication message to the MO server, it can continue to perform identity authentication on the identity authentication application.

Specifically, as the first mobile terminal 110 transmits the authentication message to the MO server, the first mobile terminal 110 may output the user authentication window on the user authentication application. At this time, the identity authentication application of the first mobile terminal 110 may transmit a first MO special number and a first authentication code to the authentication server 300 to request a reply of the phone number.

At this time, the authentication server 300 searches for the first MO special number in the DB according to the request of the first mobile terminal 110, verifies the first authentication code, and stores the mapped number of the second mobile terminal 120. You can reply.

Accordingly, the identity authentication application of the first mobile terminal 110 forcibly outputs the number of the second mobile terminal 120 received from the authentication server 300 to the identity authentication window.

That is, when the recipient number is changed using the accessibility mode, the same problems as in the prior art may occur.

To prevent this, in an embodiment of the present invention, the authentication server 300 may request additional authentication from the mobile terminal when the accessibility mode is running in the mobile terminal on which the identity authentication application is executed.

Specifically, even if the first mobile terminal 110 receives the number of the second mobile terminal 120 from the authentication server 300 and performs identity authentication, the first mobile terminal 110 is authenticated because the accessibility mode is executed. The server 300 may request additional authentication from the first mobile terminal 110.

For example, the authentication server 300 may request ARS authentication once more when the first mobile terminal 110 executes the accessibility mode and successfully authenticates the identity using the phone number in the identity authentication application.

In addition, for another example, when the first mobile terminal 110 logs in to the identity authentication application for the first time and the mobile terminal model when the first mobile terminal 110 logs in and the mobile terminal type is changed, the user If the authentication application succeeds in authentication using the phone number, the ARS authentication can be requested once more.

In addition, for another example, the authentication server 300 is the first mobile terminal 110 through the identity authentication application, if there is a specific financial transaction history (for example, loan or large transfer, etc.), the identity authentication application Even if you have successfully authenticated yourself using your phone number, you can request ARS authentication once more.

That is, in an embodiment of the present invention, since the identity authentication application executed in the mobile terminal can collect various information of the user executed after the identity authentication application of the mobile terminal is executed, abnormal transaction details different from the existing pattern can be found. Can and can prevent it.

The above description is merely illustrative of the technical idea of the present embodiment, and those of ordinary skill in the technical field to which the present embodiment belongs will be able to make various modifications and variations without departing from the essential characteristics of the present embodiment. Accordingly, the present embodiments are not intended to limit the technical idea of the present embodiment, but to explain the technical idea, and the scope of the technical idea of the present embodiment is not limited by these embodiments. The scope of protection of the present embodiment should be interpreted by the following claims, and all technical ideas within the scope equivalent thereto should be interpreted as being included in the scope of the present embodiment.

100: mobile terminal
200: MO server
300: authentication server

Claims (9)

In the identity authentication method using MO service,
Executing a first application requesting identity authentication in a mobile terminal, and receiving an authentication request for a phone number of the mobile terminal from the first application in an authentication server;
Allocating a Mobile Originated (MO) special number and an authentication code to the authentication request by the authentication server and transmitting it to the mobile terminal;
Executing a second application for transmitting an authentication message from the mobile terminal to the MO server when the MO special number and the authentication code are received by the mobile terminal;
Transmitting an authentication message including the authentication code from the mobile terminal to a receiving number including the MO special number through the second application;
Receiving the authentication message from the MO server, extracting the phone number of the mobile terminal, the MO special number, and the authentication code related to the authentication message, and transmitting the extracted authentication code to the authentication server;
Verifying information received from the MO server in the authentication server;
When the mobile terminal transmits the MO special number and the authentication code to the authentication server, transmitting the MO special number and the phone number mapped to the authentication code from the authentication server to the mobile terminal in response thereto. ; And
In the first application of the mobile terminal, including the step of outputting the phone number received from the authentication server as a fixed value in a user authentication window,
The phone number displayed on the identity authentication window is maintained in a state that cannot be modified,
The user information entered in the identity authentication window is transmitted to the authentication server and used for the identity authentication.
How to authenticate yourself using MO service.
The method of claim 1,
In the step of transmitting the authentication message through the second application,
The second application,
Allocating the receiving number of the MO number and the MO special number for transmitting the authentication message to the MO server,
Performing layer processing on the received number so that the assigned receiving number is not changed
How to authenticate yourself using MO service.
The method of claim 1,
In the step of allocating an MO special number and an authentication code to the authentication request received from the mobile terminal and transmitting it to the mobile terminal,
The authentication server comprises setting a special number state mapped to the MO special number as a first state.
How to authenticate yourself using MO service.
The method of claim 3,
In the step of verifying the information received from the MO server in the authentication server,
The authentication server,
When the special number status of the MO special number received from the MO server is in the first state, and the authentication code received from the MO server matches the authentication code mapped to the MO special number, the received from the MO server Map the phone number of the mobile terminal to the MO special number and the authentication code,
Including changing the special number state of the MO special number from the first state to the second state
How to authenticate yourself using MO service.
The method of claim 4,
In the step of verifying the information received from the MO server in the authentication server,
The authentication server,
When the authentication code received from the MO server is different from the authentication code mapped to the MO special number, an error message indicating'authentication code is different' is output, and
In case the special number status of the MO special number received from the MO server is different from the first status, outputting an error message indicating'duplicate reception'or'no assignment number'
How to authenticate yourself using MO service.
The method of claim 4,
In the step of transferring the phone number of the mobile terminal mapped to the MO special number and the authentication code to the mobile terminal,
The authentication server,
When the special number status of the MO special number received from the mobile terminal is in the second state, and the authentication code received from the mobile terminal matches the authentication code mapped to the MO special number, the MO special number and the Transferring the phone number mapped to the authentication code to the mobile terminal
How to authenticate yourself using MO service.
The method of claim 6,
In the step of transferring the calling number of the mobile terminal mapped to the MO special number and the authentication code to the mobile terminal,
The authentication server,
If the authentication code received from the mobile terminal is different from the authentication code mapped to the MO special number, an error message indicating'issued code different' is output, and
When the special number state of the MO special number received from the mobile terminal is the first state, an error message indicating'an authentication message has not arrived' is output, and
In case the special number status of the MO special number received from the mobile terminal is different from the first and second states, outputting an error message indicating'duplicate reception'or'no assignment number'
How to authenticate yourself using MO service.
The method of claim 1,
In the step of allocating an MO special number and an authentication code to the authentication request received from the mobile terminal and transmitting it to the mobile terminal,
The authentication server,
Searching the DB included in the authentication server, selecting an MO special number to which a phone number is not assigned, and transmitting it to the mobile terminal.
How to authenticate yourself using MO service. The method of claim 2,
When the mobile terminal is executing an accessibility mode in which the layer-processed reception number can be modified, the authentication server further comprising performing additional authentication for the mobile terminal.
How to authenticate yourself using MO service.

Images