KR102241244B1 - Message service apparatus and authentication verification method the same - Google Patents

Abstract

The present invention relates to a message service apparatus and a method for verifying authentication thereof. The disclosed message service device authentication verification method includes the steps of transmitting a service authentication request signal including a channel ID of a communication channel to which a message transmission request signal is received to an authentication device, and authenticating the channel ID of the communication channel to which the registration request signal is received. A service authentication request response signal including authentication result information according to a result of comparing the channel ID of the service authentication request signal with the channel ID for authentication of the white list from the authentication device that has registered the white list including as a channel ID for And receiving.

Description

Message service device and its authentication verification method {MESSAGE SERVICE APPARATUS AND AUTHENTICATION VERIFICATION METHOD THE SAME}

The present invention relates to a message service device and a method of verifying its authentication, and more particularly, to a message service device that transmits or blocks a message by referring to a white list when a message transmission request is received, and a method of verifying the authentication thereof.

As is well known, the message service provides services such as SMS (Short Messaging Service) and MMS (Multimedia Messaging Service) for mobile communication terminal devices, etc., and the message reception blocking service includes a specific reply number. It is either sending only messages or blocking them.

These message services and message reception blocking services are still used in general mobile communication services between people, but recently, they are in the spotlight in communication services between machines and machines.

Machine-to-machine communication services are diverse, such as Internet of Communication (IoT), Machine to Machine communication (M2M), Machine Type Communication (MTC), Smart Device communication, or Machine oriented communication. Is being called.

As an example of such a machine-to-machine communication service, there is a technology in which a message-based terminal control device transmits a control message to a terminal device having an M2M function.

As described above, in the case of transmitting a control message to a terminal device, security is very important, and generally, only a message including a specific reply number is transmitted and processed.

According to the prior art, when transmission of a message is requested, the message service device requests service authentication from the authentication device, and the authentication device processes authentication as passed if the reply number included in the message is included in the pre-registered white list, and the message The service device transmits and processes the message to the terminal device only when the authentication is passed.

However, according to the prior art, the reply number may be exposed during communication between the message service apparatus and the authentication apparatus, and in this case, there is a problem in that an unexpected message may be transmitted to the terminal apparatus through the change of the reply number.

Republic of Korea Patent Publication 10-2013-0058392, Publication date June 04, 2013.

According to an embodiment of the present invention, a message service device used for communication for authentication by combining a channel ID of a communication channel into which a message transmission request signal is received with a calling number, a called number, or a reply number and then encrypting it, and a method for verifying the authentication thereof do.

The problem to be solved of the present invention is not limited to those mentioned above, and another problem to be solved that is not mentioned will be clearly understood by those of ordinary skill in the art from the following description.

An authentication verification method performed by a message service device according to an aspect of the present invention includes transmitting a service authentication request signal including a channel ID of a communication channel into which a message transmission request signal is received to an authentication device, and the registration request signal is Authentication result information according to the result of comparing the channel ID of the service authentication request signal with the channel ID for authentication of the white list from the authentication device that registered the whitelist including the channel ID of the incoming communication channel as the channel ID for authentication It includes receiving a service authentication request response signal containing.

A message service device according to another aspect of the present invention includes an encryption unit that generates a service authentication request signal including a channel ID of a communication channel into which a message transmission request signal is received, and transmits the generated service authentication request signal to the authentication device. The channel ID of the service authentication request signal and the channel ID for authentication of the whitelist from the authentication device that registered the whitelist by including the signal transmission unit and the channel ID of the communication channel into which the registration request signal is received as the channel ID for authentication. And a signal receiving unit for receiving a service authentication request response signal including authentication result information according to a result of comparing the data.

According to an embodiment of the present invention, a channel ID of a communication channel to which a message transmission request signal is received is combined with a calling number, a called number, or a reply number, and then encrypted and used for authentication.

In this way, since the channel ID used for communication for authentication is assigned by the SMS/MMS operating entity to the call coming through a specific line, it cannot be manipulated at the message sender, etc., and because it is encrypted, the security is improved and the reply number There is an effect of resolving the fear that an unexpected message is transmitted to the terminal device through alteration or the like.

1 is a block diagram of a mobile communication service system including a message service device according to an embodiment of the present invention.
2 is a block diagram of a message service apparatus according to an embodiment of the present invention.
3 is a flowchart illustrating an authentication verification method and a message service method by a message service device according to an embodiment of the present invention.

Advantages and features of the present invention, and a method of achieving them will become apparent with reference to the embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in a variety of different forms, and only these embodiments make the disclosure of the present invention complete, and are common knowledge in the technical field to which the present invention pertains. It is provided to completely inform the scope of the invention to those who have, and the invention is only defined by the scope of the claims.

In describing embodiments of the present invention, if it is determined that a detailed description of a known function or configuration may unnecessarily obscure the subject matter of the present invention, a detailed description thereof will be omitted. In addition, terms to be described later are terms defined in consideration of functions in an embodiment of the present invention, which may vary according to the intention or custom of users or operators. Therefore, the definition should be made based on the contents throughout this specification.

1 is a block diagram of a mobile communication service system including a message service device according to an embodiment of the present invention.

As shown, the mobile communication service system according to the embodiment includes a message-based terminal control device 100, a mobile communication network 200, a terminal device 300, and the like, and the mobile communication network 200 includes a message service device 210 ), a home location register 220, an authentication device 230, and the like.

The message-based terminal control device 100 transmits a message transmission request signal requesting the terminal device 300 to transmit a message to the message service device 210 through a specific line provided by the mobile communication network 200, and provides a message service. A response signal to a message transmission request is received from the device 210.

The mobile communication network 200 is a long term evolution (LTE) communication system using an Evolved Packet Core (EPC) network, a wideband code division multiple access (WCDMA) communication system, a global system for mobile (GSM) communication system, and a code division (CDMA). Multiple access) communication systems, TDMA (Time Division Multiple Access) communication systems, etc. can be implemented alone or in combination with various mobile communication systems.

The message service device 210 of the mobile communication network 200 combines the channel ID of the communication channel into which the message transmission request signal is received from the message-based terminal control device 100 with a calling number, a called number, or a calling number, and then encrypts the service authentication. The request signal is transmitted to the authentication device 230, and when authentication passes based on the authentication result included in the service authentication request response signal received from the authentication device 230, a corresponding message is transmitted to the terminal device 300. .

The home location register 220 returns routing information that can be used when transmitting a message to the terminal device 300 according to the request of the message service device 210. When the message-based terminal control device 100 is subscribed to a specific number reception blocking service, the home location register 220 includes a reception blocking service identifier and transmits the routing information to the message service device 210.

The authentication device 230 decodes the service authentication request signal received from the message service device 210, and then compares the calling number, called party number, or reply number and the channel ID with the previously registered white list, and the authentication result information. And transmits a service authentication request response signal including the generated authentication result information to the message service device 210.

The terminal device 300 receives a message requested by the message-based terminal control device 100 and transmitted from the message service device 210 of the mobile communication network 200. The terminal device 300 may be implemented as various terminal devices equipped with a modem chip for mobile communication.

2 is a block diagram of a message service apparatus 210 according to an embodiment of the present invention.

As shown, the message service apparatus 210 according to the embodiment includes a signal receiving unit 211, a signal transmitting unit 212, an encryption unit 213, a message processing unit 214, and the like.

The signal receiver 211 receives a message transmission request signal for requesting to transmit a message to the terminal device from the message-based terminal control device 100 through a specific line, and from the home location register 220 to the terminal device 300 After receiving routing information that can be used when transmitting a message, and after the authentication device 230 decrypts the service authentication request signal, the calling number, called party number, or reply number and channel ID are compared with the previously registered white list. When a service authentication request response signal including authentication result information is transmitted, it is received.

The signal transmission unit 212 transmits a signal requesting routing information that can be used when transmitting a message to the terminal device 300 to the home location register 220, and authenticates the service authentication request signal generated by the encryption unit 213 Send to device 230.

The encryption unit 213 generates a service authentication request signal by combining the channel ID of the communication channel into which the message transmission request signal is received with the calling number, the called party number, or the reply number included in the message transmission request signal.

The message processing unit 214 transmits a message to the terminal device 300 when the signal receiving unit 211 passes authentication based on the authentication result information included in the service authentication request response signal received from the authentication device 230. .

3 is a flowchart illustrating an authentication verification method and a message service method by the message service device 210 according to an embodiment of the present invention.

As shown, in the message service method according to the embodiment, the authentication device receiving the whitelist registration request signal from the message-based terminal control device includes an authentication source number, an authentication destination number, an authentication reply number, and authentication for service authentication. And registering or updating a white list including a channel ID for use (401, 403).

And, the message service device further comprises the steps 405, 407 of returning the message transmission request response signal after receiving the message transmission request signal requesting to transmit the message to the terminal device from the message-based terminal control device.

Subsequently, a step 409 of requesting routing information from the home location register by the message service device receiving the message transmission request signal is further included.

And, when the home location register transmits the routing information request response signal including the reception blocking service identifier, the step of receiving the message service device (411).

Subsequently, when the reception blocking service identifier is included in the routing information request response signal, the message service device determines the channel ID of the communication channel through which the message transmission request signal is introduced into the calling number, called party number, or calling number included in the message transmission request signal. It further includes a step 413 of transmitting the encrypted service authentication request signal to the authentication device after the combination.

And, if the authentication device transmits a service authentication request response signal including authentication result information according to a result of comparing the calling number, called party number, or calling number and the channel ID with the previously registered white list after decrypting the service authentication request signal. It further includes steps (415, 417, 419) of receiving the message service device.

Subsequently, the step of transmitting the message to the terminal device only when the message service device passes authentication based on the authentication result information included in the service authentication request response signal (421, 423, 425) is further included.

Hereinafter, an authentication verification method and a message service method by a message service device according to an embodiment of the present invention will be described in more detail with reference to FIGS. 1 to 3.

First, the message-based terminal control device 100 accesses the mobile communication network 200 and transmits a whitelist registration request signal to the authentication device 230. In this case, the message-based terminal control apparatus 100 may transmit the whitelist registration request signal after encrypting it using a symmetric key encryption algorithm or the like (401).

Then, the authentication device 403 registers or updates the authentication source number, authentication destination number, and authentication reply number included in the white list registration request signal in the white list. At this time, the channel ID of the communication channel to which the white list registration request signal is received is used as the channel ID for authentication, and is registered or updated in the white list together. Here, if the message-based terminal control device 100 encrypts the whitelist registration request signal and then transmits it, the authentication device 403 also performs a whitelist registration or update procedure after decryption using a symmetric key encryption algorithm, etc. It can be done (403).

In this way, while the white list is registered by the authentication device 230, the message-based terminal control device 100 accesses the mobile communication network 200, and a message transmission request signal requesting the terminal device 300 to transmit a message. Is transmitted to the message service device 210, and the signal receiving unit 211 of the message service device 210 receives it (405).

Subsequently, the signal transmission unit 212 of the message service device 210 transmits a message transmission request response signal to the message-based terminal control device 100 (407), and routing of the terminal device 300 to the home location register 220 A routing information request signal for requesting information is transmitted (409).

Then, the home location register 220 returns a routing information request response signal including routing information that can be used when transmitting a message to the terminal device 300 to the message service device 210, and the message service device 210 The signal receiver 211 receives it. In this case, if the message-based terminal control device 100 is subscribed to a reception blocking service for a specific number, the home location register 220 transmits a routing information request response signal including a reception blocking service identifier (411).

In addition, the encryption unit 213 of the message service device 210 combines the channel ID of the communication channel into which the message transmission request signal is input to the calling number, called party number, or calling number included in the message transmission request signal received in step 405. After encryption, an encrypted service authentication request signal is generated. In this case, the encryption unit 213 may generate an encrypted service authentication request signal by changing the order of numbers using a symmetric key encryption algorithm or the like.

Subsequently, the signal transmission unit 212 of the message service device 210 transmits the service authentication request signal generated by the encryption unit 213 to the authentication device 230, and the authentication device 230 receives it (413). .

Next, the authentication device 230 decrypts the service authentication request signal using a symmetric key encryption algorithm, etc. (415), and records the calling number, called party number, reply number, and channel ID included in the decrypted service authentication request signal. Performs authentication comparing with the registered white list (417), and transmits a service authentication request response signal including authentication result information according to the result to the message service device 210, and a signal receiver of the message service device 210 (211) receives it (419).

Subsequently, the message processing unit 214 of the message service device 210 checks the authentication result information included in the service authentication request response signal (421), and if the authentication is passed, transmits the message requested to be transmitted in step 405 to the terminal device ( 300) is transmitted (423).

On the other hand, if the message processing unit 214 of the message service device 210 fails to pass authentication based on the authentication result information included in the service authentication request response signal, the message requested to be transmitted at 405 is sent to the terminal device 300. Block without transmitting (425).

As described so far, according to an embodiment of the present invention, the channel ID of the communication channel to which the message transmission request signal is received is combined with the calling number, called party number, or calling number, and then encrypted and used for communication for authentication.

In this way, since the channel ID used for communication for authentication is assigned by the SMS/MMS operating entity to a call coming through a specific line, it cannot be manipulated at the message sender, etc., and because it is encrypted, the security is improved and the reply number The fear that an unexpected message will be transmitted to the terminal device through alteration or the like is eliminated.

Combinations of each step of the flowchart attached to the present invention may be performed by computer program instructions. Since these computer program instructions can be mounted on the processor of a general purpose computer, special purpose computer or other programmable data processing equipment, the instructions executed by the processor of the computer or other programmable data processing equipment are the functions described in each step of the flowchart. Will create a means of doing things. These computer program instructions can also be stored in computer-usable or computer-readable memory that can be directed to a computer or other programmable data processing equipment to implement a function in a particular way, so that the computer-usable or computer-readable memory It is also possible for the instructions stored in the flow chart to produce an article of manufacture containing instruction means for performing the functions described in each step. Since computer program instructions can also be mounted on a computer or other programmable data processing equipment, a series of operating steps are performed on a computer or other programmable data processing equipment to create a computer-executable process to create a computer or other programmable data processing equipment. It is also possible for the instructions to perform the processing equipment to provide steps for executing the functions described in each step of the flowchart.

In addition, each step may represent a module, segment, or part of code that contains one or more executable instructions for executing the specified logical function(s). In addition, it should be noted that in some alternative embodiments, the functions mentioned in the steps may occur out of order. For example, two steps shown in succession may in fact be performed substantially simultaneously, or the steps may sometimes be performed in the reverse order depending on the corresponding function.

The above description is merely illustrative of the technical idea of the present invention, and those of ordinary skill in the art to which the present invention pertains will be able to make various modifications and variations without departing from the essential characteristics of the present invention. Accordingly, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention, but to explain the technical idea, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be interpreted by the following claims, and all technical ideas within the scope equivalent thereto should be construed as being included in the scope of the present invention.

According to an embodiment of the present invention, the channel ID assigned by the SMS/MMS operating entity for a call coming through a specific line is combined with the calling number, called party number, or called party number, and then encrypted and used for authentication. It cannot be manipulated on the back, and the security is improved as much because it is encrypted, thereby eliminating the fear of an unintended message being transmitted to the terminal device through alteration of the reply number or the like.

The present invention can be used in a machine-to-machine communication service, such as when a message-based terminal control device transmits a control message to a terminal device having an M2M function.

100: message-based terminal control device 200: mobile communication network
210: message service device 211: signal receiver
212: signal transmission unit 213: encryption unit
214: message processing unit 220: home location register
230: authentication device 300: terminal device

Claims (5)

As an authentication verification method performed by a message service device,
Encrypting a service authentication request signal including a channel ID of a communication channel into which the message transmission request signal transmitted from the message-based terminal control device is received, and transmitting it to the authentication device,
From the authentication device that registered the whitelist by including the channel ID of the communication channel into which the registration request signal transmitted from the message-based terminal control device is received as the channel ID for authentication, the channel ID of the service authentication request signal is selected from the whitelist. Comprising the step of receiving a service authentication request response signal including authentication result information according to the result of comparing the channel ID for authentication
How to verify authentication. The method of claim 1,
Requesting routing information from a home location register after receiving the message transmission request signal; and
Receiving a routing information request response signal including a reception blocking service identifier from the home location register;
Transmitting the service authentication request signal to the authentication device when the reception blocking service identifier is included in the routing information request response signal.
How to verify authentication. As a computer-readable recording medium storing a computer program,
The computer program,
Comprising instructions for causing a processor to perform a method according to claim 1 or 2
Computer-readable recording medium. An encryption unit that encrypts and generates a service authentication request signal including a channel ID of a communication channel into which the message transmission request signal transmitted from the message-based terminal control device is received;
A signal transmission unit for transmitting the generated service authentication request signal to an authentication device,
From the authentication device that registered the whitelist by including the channel ID of the communication channel into which the registration request signal transmitted from the message-based terminal control device is received as the channel ID for authentication, the channel ID of the service authentication request signal and the whitelist are Including a signal receiver for receiving a service authentication request response signal including authentication result information according to the result of comparing the authentication channel ID
Message service device. The method of claim 4,
When the message transmission request signal is received by the signal receiving unit, the signal transmitting unit transmits a routing information request signal for requesting routing information to a home location register,
The signal receiver receives a routing information request response signal including a reception blocking service identifier from the home location register,
When the reception blocking service identifier is included in the routing information request response signal, the signal transmission unit transmits the service authentication request signal to the authentication device.
Message service device.

Images