KR102247093B1 - Generation and authentication system and method for one-time-dynamic-code - Google Patents

Abstract

A method for generating and authenticating a one-time dynamic code according to one embodiment of the present invention comprises: a step of requesting, by a user terminal, a dynamic ID from a dynamic code server; a step of generating, by the dynamic code server, the dynamic ID and transmitting thereof to a user terminal; a step of generating, by the user terminal, a dynamic code that is changed at a specific period based on the received dynamic ID and a generation time of requesting the dynamic ID; and a step of expressing, by the user terminal, a one-time dynamic code including the dynamic ID and the dynamic code.

Description

One-time dynamic code generation and authentication system and its method {GENERATION AND AUTHENTICATION SYSTEM AND METHOD FOR ONE-TIME-DYNAMIC-CODE}

The present invention relates to a one-time dynamic code generation and authentication method, and more particularly, when generating a one-time dynamic code, by dynamically generating the code (having a specific period), it is difficult to predict by others and cannot be used even when exposed. It relates to a method for generating and authenticating a one-time dynamic code and a system using the same.

The integrated membership point service refers to a service that accumulates and uses points at various business sites without being subordinated to a specific company or brand. Users of the integrated membership point service can use the card by presenting it directly. Currently, for convenience purposes, it is possible to use the integrated membership point service by printing a barcode in a mobile environment. However, since it is provided in a fixed form, the card number can be created with malicious intent and used as a barcode, or the damage can be passed on to customers as it is used through a captured image.

In the case of a credit card as a similar service, various techniques have been proposed so far in order to prevent the damage that is abused for e-commerce payment. As a related technique, one-time card number generation has a one-time use in creation and use, but it is not possible to prevent damage that is abused because it is exposed when the authentication time is valid.

Also, as a related technique, a method of exchanging and authenticating a terminal ID in a secret communication process between a terminal and a server is used. This is mutual authentication between the terminal and the server, which guarantees safe communication between the two, but there is no way to prevent this when the duplicated terminal pretends to be a normal terminal. In addition, since the service is inevitably dependent on the terminal, the service is limited to the user who uses the service through login at various terminals in the mobile environment owned by the user.

The present invention is to solve the above problems, and an object of the present invention is to provide a one-time dynamic code authentication system and method for generating and authenticating a code that dynamically changes over time. In addition, the purpose of providing the above service is to enable it to be used based on "login" rather than the policy of "1 device 1 user".

A method for generating and authenticating a one-time dynamic code according to an embodiment of the present invention includes the steps of: requesting, by a user terminal, a dynamic ID from a dynamic code server; Generating, by a dynamic code server, the dynamic ID and transmitting it to a user terminal; Generating a dynamic code that is changed every specific period based on the dynamic ID received by the user terminal and a generation time for requesting the dynamic ID; And displaying, by the user terminal, a disposable dynamic code including the dynamic ID and the dynamic code.

According to an embodiment of the present invention, the user terminal accesses and logs in to a synchronization server; And synchronizing, by the user terminal, time with the synchronization server.

According to an embodiment of the present invention, the dynamic code server generating a first authentication value based on a plurality of factors including the dynamic ID and the generation time; further comprising, generating the dynamic code The step of: generating a second authentication value based on the plurality of factors; And generating the dynamic code based on the second authentication value and the specific period.

According to an embodiment of the present invention, generating the first authentication value includes generating the first authentication value using the plurality of factors and a one-way hash function, and generating the second authentication value. Generates the second authentication value using the plurality of factors and the one-way hash function.

According to an embodiment of the present invention, the plurality of factors further include a unique identification number that can identify a user, a connection token assigned when the user logs in, and means information that can identify a payment method.

According to an embodiment of the present invention, the dynamic code is divided into a plurality of regions and displayed, and at least a partial region of the dynamic ID is expressed so as to be located between the divided plurality of regions.

According to an embodiment of the present invention, the step of recognizing the one-time dynamic code expressed by the affiliate terminal; Requesting, by the affiliate terminal, authentication of the one-time dynamic code recognized as a real code server; Requesting, by the real code server, authentication of the one-time dynamic code recognized as the dynamic code server; Determining, by the dynamic code server, a dynamic code in the same manner as that in which the user terminal generates the dynamic code; And comparing, by the dynamic code server, the dynamic code determined by the dynamic code server with the dynamic code included in the disposable dynamic code recognized by the affiliate terminal.

According to an embodiment of the present invention, the determining of the dynamic code further includes determining the specific period corresponding to a time point at which the affiliate terminal recognizes the disposable dynamic code.

According to an embodiment of the present invention, when the dynamic code determined by the dynamic code server matches the dynamic code included in the disposable dynamic code recognized by the affiliate terminal, the dynamic code server may identify a payment method. It further includes a; step of transmitting the possible means information to the real code server.

According to an embodiment of the present invention, the dynamic ID is selected according to a predetermined rule from a random number table provided in the requested order.

A system for generating and authenticating a one-time dynamic code according to an embodiment of the present invention includes: a user terminal requesting a dynamic ID from a dynamic code server; And a dynamic code server that generates the dynamic ID and transmits the dynamic ID to the user terminal, wherein the user terminal generates a dynamic code that changes every specific period based on the received dynamic ID and the requested generation time, A disposable dynamic code including the dynamic ID and the dynamic code is displayed.

According to an embodiment of the present invention, a synchronization server to which a user terminal accesses and logs in is further included, wherein the user terminal synchronizes time with the synchronization server.

According to an embodiment of the present invention, the dynamic code server generates a first authentication value based on a plurality of factors including the dynamic ID and the generation time, and the user terminal generates a first authentication value based on the plurality of factors. A second authentication value is generated based on the second authentication value and the dynamic code is generated based on the second authentication value and the specific period.

According to an embodiment of the present invention, the dynamic code server generates the first authentication value using the plurality of factors and a one-way hash function, and the user terminal, the plurality of factors and the one-way hash function The second authentication value is generated by using.

According to an embodiment of the present invention, the plurality of factors further include a unique identification number that can identify a user, a connection token assigned when the user logs in, and means information that can identify a payment method.

According to an embodiment of the present invention, the dynamic code is divided into a plurality of regions and displayed, and at least a partial region of the dynamic ID is expressed so as to be located between the divided plurality of regions.

According to an embodiment of the present invention, there is provided an affiliate terminal for recognizing the disposable dynamic code expressed by the user terminal; When the affiliate terminal requests authentication of the recognized one-time dynamic code, a real code server for requesting authentication of the one-time dynamic code recognized by the dynamic code server; further comprising, the dynamic code server, the user terminal Determines a dynamic code in the same manner as the method of generating the dynamic code, and compares the dynamic code determined by the dynamic code server with the dynamic code included in the disposable dynamic code recognized by the affiliate terminal.

According to an embodiment of the present invention, the dynamic code server determines the specific period corresponding to a time point at which the affiliate terminal recognizes the disposable dynamic code.

According to an embodiment of the present invention, when the determined dynamic code matches the dynamic code included in the disposable dynamic code recognized by the affiliate terminal, the dynamic code server identifies the payment method. It transmits the possible means information to the real code server.

According to an embodiment of the present invention, the dynamic ID is selected according to a predetermined rule from a random number table provided in the requested order.

According to the present invention, a load for dynamically generating codes can be distributed by generating a one-time dynamic code in a terminal accessed by a user. By using a code that changes in real time according to a dynamic (specific period), it is possible to prevent damage that is exposed and used when the authentication time is valid, so that a security effect of blocking illegal use of the service can be obtained.

In addition, since the service is used in the same manner without modification/development in the system environment linked with affiliates, additional infrastructure changes or development can be minimized, and service users can use the service on a login-enabled terminal, providing flexible service. This is possible.

1 is a block diagram of a one-time dynamic code generation and authentication system according to an embodiment of the present invention.
2 is a block diagram showing in detail the internal configuration of a disposable dynamic code generation and authentication system according to an embodiment of the present invention.
3 is a conceptual diagram illustrating an example of a method of generating a dynamic ID.
4 is a reference diagram illustrating an example of a method of generating a first authentication value and a second authentication value.
5 shows a reference diagram for an example of a method of generating an authentication value and a dynamic code.
6 shows a reference diagram for a structure for generating a disposable dynamic code by combining detailed codes.
7 shows a method of expressing a disposable dynamic code according to a preferred embodiment of the present invention.
8 shows a reference diagram for a structure that performs an authentication process for verifying a one-time dynamic code.

Advantages and features of the present invention, and a method of achieving them will become apparent with reference to the embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but will be implemented in various forms different from each other, and only these embodiments make the disclosure of the present invention complete, and common knowledge in the technical field to which the present invention pertains. It is provided to completely inform the scope of the invention to the possessor, and the invention is only defined by the scope of the claims. Accordingly, in some embodiments, well-known process steps, well-known device structures, and well-known techniques have not been described in detail in order to avoid obscuring interpretation of the present invention. The same reference numerals refer to the same elements throughout the specification.

The terms used in the present specification are for describing exemplary embodiments and are not intended to limit the present invention. In this specification, the singular form also includes the plural form unless specifically stated in the phrase. As used herein, "comprises" and/or "comprising" refers to the presence of one or more other components, steps, actions and/or elements in which the recited component, step, operation and/or element is Or does not preclude additions.

In the present specification, terms such as first, second, and third may be used to describe various components, but these components are not limited by the terms. The terms are used for the purpose of distinguishing one component from other components. For example, without departing from the scope of the present invention, a first component may be referred to as a second or third component, and similarly, a second or third component may be alternately named.

Unless otherwise defined, all terms (including technical and scientific terms) used in the present specification may be used with meanings that can be commonly understood by those of ordinary skill in the art to which the present invention belongs. In addition, terms defined in a commonly used dictionary are not interpreted ideally or excessively unless explicitly defined specifically.

In order to clearly describe the present invention, parts irrelevant to the description are omitted, and the same reference numerals denote the same or similar components throughout the specification.

Hereinafter, embodiments of the present invention will be described with reference to FIGS. 1 to 8.

1 is a block diagram of a one-time dynamic code generation and authentication system according to an embodiment of the present invention. 2 is a block diagram showing in detail the internal configuration of the present disposable dynamic code generation and authentication system.

1 and 2, a one-time dynamic code generation and authentication system generates a user terminal 100 for using a one-time dynamic code, a synchronization server 200 for synchronizing time and login information, and a one-time dynamic code. It includes a dynamic code server 300 for authentication and an actual code server 600 communicating with the affiliate server 500 connected to the affiliate terminal 400.

The user terminal 100 includes a dynamic ID request unit 111, a second authentication value generation unit 112, a dynamic code generation unit 113, and a terminal manager 114.

The dynamic code server 300 includes a dynamic ID generation unit 310, a first authentication value generation unit 320, a dynamic code authentication unit 330, and a terminal management unit 340.

The synchronization server 200 includes a time server 210 and a login server 220, and the time server 210 and the login server 220 may be configured as independent servers according to their configuration.

The real code server 600 includes an authentication processing unit 610, a dynamic code authentication request unit 620, an actual code inquiry unit 630, and an authentication response unit 640.

The user terminal 100 is preferably a smart device capable of installing a dedicated application 110 for generating and expressing a disposable dynamic code and using a mobile communication network or a wireless communication network. It may include a tablet, a smart phone, a smart pad, and the like.

The user terminal 100 accesses the login server 220 of the synchronization server 200 and is assigned an access token (0. login processing).

When a one-time dynamic code generation request event occurs (1. One-time dynamic code generation request), the user terminal 100 synchronizes the time by accessing the time server 210 of the synchronization server 200 (2. time server synchronization). , The dynamic ID request unit 111 requests a dynamic ID whose value is changed every time a one-time dynamic code generation request is made to the dynamic ID generation unit 310 (3. A dynamic ID request (ReqTime, CNO, etc.)). 111) is a dynamic code server (ReqTime), a unique identification number (CNO) that can identify a user, an access token assigned when logging in from the login server 220, and terminal information extracted from the terminal manager 112. 300. The dynamic ID request unit 111 is a payment method such as a point management number, a coupon number, a payment method ID (a payment method registered for easy payment), and a gift certificate unique number. It is also possible to support the payment procedure by transmitting information on the means for identifying the method to the dynamic ID generating unit 310.

In addition, the method of generating the access token can be performed in various ways.

The dynamic ID generator 310 generates a dynamic ID whose value is changed every time a one-time dynamic code generation request is requested (4. dynamic ID allocation). The dynamic ID generation unit 310 maintains synchronization with the synchronization server 200, manages a generation time when a dynamic ID generation request is received based on a time synchronized with the time server 210, and stores the received terminal information. ) And manage. In addition, when dynamic ID is allocated, the access token of the logged-in user is transmitted from the login server 220 and managed together with dynamic ID allocation information.

The dynamic ID generation unit 310 responds to the dynamic ID request unit 111 and transmits the assigned dynamic ID to the second authentication value generation unit 112 (5. Dynamic ID response), and the same dynamic ID is first authenticated. It is transmitted to the value generator 320. The first authentication value generation unit 320 and the second authentication value generation unit 112 generate authentication values including the assigned dynamic ID, unique identification number, generation time, and means information (6a. First authentication value generation unit). And 6b.Generating a second authentication value).

The dynamic code generation unit 113 generates a one-time dynamic code based on the dynamic ID received from the dynamic ID request unit 111 and the second authentication value generated by the second authentication value generation unit 112 (7. Dynamic virtual code generation). The dynamic code generation unit 113 generates a dynamic code that changes according to a specific period from the second authentication value. The dynamic ID does not change according to a specific period. Disposable dynamic code includes dynamic ID and dynamic code. The generated disposable dynamic code may be exposed through the application 110 and may be one of a barcode, a two-dimensional code, a QR code, and a barcode serial number (information for key input).

The exposed disposable dynamic code may be input to the barcode reader 40 connected to the affiliate terminal 400 (8. Dynamic virtual code reading). The exposed disposable dynamic code can be directly input through the key input of the affiliate terminal 400, and the code value can be transmitted from the affiliate terminal 400 to the affiliate server 500 through various means (9. Authentication request). .

The affiliate server 500 does not perform separate verification for the corresponding disposable dynamic code, but transmits it to the authentication processing unit 610 of the real code server 600 as before and requests authentication (10. Authentication request). The authentication processing unit 610 may distinguish between a dynamic code and an actual code through a specific BIN. In the case of the dynamic code BIN, the dynamic code authentication request unit 620 transmits the authentication request for the one-time dynamic code transmitted to the authentication processing unit 610 to the dynamic code authentication unit 330 (11. One-time dynamic code). Authentication request).

The dynamic code authentication unit 330 separates the received one-time dynamic code into a dynamic ID and a detailed code including a dynamic code, and connects the detailed code with the dynamic ID and dynamic ID allocated by the dynamic ID generation unit 310 to remove the received one-time dynamic code. 1 A verification procedure is performed by comparing it with the first authentication value generated by the authentication value generator 320 (12. One-time dynamic code verification). When verifying the one-time dynamic code, the dynamic code authentication unit 330 performs a plurality of procedures for verifying whether or not the access token of the login server 220 has been changed, and further checks whether or not the access environment of the uniquely identified user has changed. Can increase the security of authentication.

The dynamic code authentication unit 330 performs verification on the one-time dynamic code and transmits the unique identification value of the corresponding one-time dynamic code or means information for searching the actual code to the dynamic code authentication request unit 620 (13. One-time dynamic code authentication result response). The unique identification value may include a unique identification number to identify the user. The means information for searching the actual code may include means information for identifying a payment means such as a point management number, a coupon number, a payment method ID (a payment method registered for easy payment), and a gift certificate unique number.

The actual code inquiry unit 630 checks the actual code through the unique identification value of the received disposable dynamic code or means information for searching the actual code (14. Actual code inquiry). This is because the actual code is not used other than the real code server 600, security is ensured.

The authentication response unit 640 generates authentication information corresponding to the real code verified through the real code inquiry unit 630 (15. Generating an authentication response) and transmits it to the affiliate terminal through the affiliate server 500 (16 • Authentication response and 17. Authentication response), and existing authentication tasks can be performed.

3 shows a conceptual diagram of an embodiment of a method for generating a dynamic ID.

Referring to FIG. 3, a method of generating a dynamic ID may be performed in the dynamic code server 300. Dynamic IDs are non-sequential and may be randomly assigned to have randomness. For example, after the sequential and non-overlapping numbers from 000000 to 999999 are configured as a two-dimensional array 390a, the values of the array are randomly rearranged in the horizontal 390b and the vertical 390c. The two-dimensional array 390d obtained as a result of this is a random number table and is randomly allocated to the position values (n,m) of the array so that the population does not overlap. When a dynamic ID is extracted from the two-dimensional array 390d according to the following specific rule, the extracted dynamic ID has randomness. Accordingly, the correlation between the dynamic IDs allocated each time the same user A (120a, 120c) attempts to extract the dynamic ID becomes unpredictable. In addition, the relationship between the previously extracted dynamic IDs of the user A 120a and the user B 120b that are sequentially accessed becomes unpredictable.

For example, if the user's sequence number is repeated from 1 to 1,000,000 and is acquired, the coordinate value (n, m) accessing the array is

n=QUOTINET(User sequence number -1, 1000)

: The quotient divided by the maximum value (row) of n values by subtracting 1 from the user's sequence number

m=MOD (user sequence number -1, 1000)

: The remainder divided by the maximum value (column) of the m value by subtracting 1 from the user sequence number

It can be determined through calculations such as For example, user A(120a) whose access sequence number is 1 is assigned a dynamic ID of “830320” corresponding to the two-dimensional array position value [0, 0] as n=0, m=0, and the access sequence number is 2 In user B 120b, a dynamic ID of “011954” corresponding to the two-dimensional array position value [0, 1] may be assigned as n=0 and m=1. Additionally, the coordinate values of the random number table two-dimensional array 390d may be determined based on additional variables other than the user's sequence number, or the above-mentioned coordinate value calculation formula may be adjusted to have other irregularities.

4 is a reference diagram for an example of generating a first authentication value and a second authentication value.

Referring to FIG. 4, the first authentication value and the second authentication value are determined using a one-way hash function. The one-way hash function includes a unique identification number that can identify a user, a connection token received from the login server 220, a dynamic ID allocated through the dynamic ID generator 310, and a dynamic ID in the dynamic ID request unit 111. The generation time requested by the generation unit 310 and the means information capable of distinguishing payment method information are added and used as a factor. The first authentication value and the second authentication value use factors obtained from the user device 100 and the dynamic code server 300, respectively. If the same factor is used for the one-way hash function, the output result is the same. Accordingly, the user device 100 and the dynamic code server 300 using the same factor have the same authentication value. Therefore, a factor can be added and used for additional purposes, and the corresponding factor value cannot be reversely extracted from the authentication value result due to the characteristics of the hash function, and the same authentication value is retained.

5 shows a reference diagram for an example of generating a dynamic code from an authentication value.

5, the second authentication value may be generated as a hexadecimal code string composed of hexadecimal numbers such as "76710078A3A9886C33816E605FF053C34D29 (omitted) 258A0BA0DAD971BB0A8876021442" as a result of a one-way hash function (eg, SHA512). have.

A -> 1 / B -> 2 / C -> 3 / D -> 4 / E -> 5 / F -> 6 If you substitute according to the rule to replace it, a decimal number such as "767100781319886333816560566053334429 (omitted) 2581021041497122018876021442" A result of replacing the second authentication value composed of columns may be generated.

Here, 3 digits are acquired from the upper digit according to a specific period and used as a dynamic code. For example, the dynamic code value of the first period is “767”, which is the first 3 digits of the upper order, and the dynamic code value of the second period is “671”, which takes 3 digits from the 2nd digit. Similarly, the dynamic code of the third period becomes “710” taking 3 digits from the 3rd digit, and a dynamic code that changes according to the flow of the period can be obtained. Here, the start of the first cycle is based on the time when the dynamic ID generator 111 requests the generation, that is, the generation time, which is a time synchronized with the time server 200.

6 shows a reference diagram for a structure for generating a disposable dynamic code by combining detailed codes.

6, 16 digits of the card number are 6 digits of the issuer's unique number (BIN, Bank Identification Number), 9 digits of the card number according to the issuer's rules, and a specific formula (e.g., LUHN Formula) to verify the card number. The actual code is composed of a combination of 1 digit. A disposable dynamic code having the same structure as the card number corresponding to the actual code may be generated by combining a plurality of detailed codes.

In one embodiment, the one-time dynamic code may include an issuer unique number area, a detailed code combination area, and a verification value area. The issuer unique number area may be an unchanged fixed area that is distinguished from the detailed code combination area. The detailed code combination area may be composed of a combination of a dynamic ID and a dynamic code extracted as described above. In the configuration of a disposable dynamic code, the dynamic code can be separated and placed, so that it can be divided and placed in the entire area designated by the issuer's arbitrary rule. For example, as shown in FIG. 6, dynamic codes 7, 6, and 7 may be separated from each other and disposed in an arbitrary area. In addition, the combination of the detailed code may be variably defined in an arbitrary position in the entire area of the disposable dynamic code. For example, since the detailed code is divided and the issuer's unique number area or the verification value area can be located in the signing, it is not possible to infer the numbering rule with only the barcode number.

Among the detailed codes, the dynamic ID is a reference value that is dynamically allocated according to the generation time when the one-time dynamic code request is received, and does not overlap, and has a one-time basis. Among the detailed codes, the dynamic code is a variable code whose value changes according to a period. The verification value is a code that verifies the card number by a specific formula (eg, LUHN Formula) and is variably calculated by the detailed code value. Therefore, the one-time dynamic code has a one-time due to the dynamic ID assigned according to the generation time when the one-time dynamic code request is received, and the dynamic code additionally changes every cycle, and accordingly, the verification value changes every cycle. In addition, there is no correlation that can extract dynamic code with only dynamic ID, and security is reinforced because it has a change value according to period even during the effective time by the one-time request.

7 shows a method of expressing a disposable dynamic code according to a preferred embodiment of the present invention.

Referring to FIG. 7, the disposable dynamic code is displayed in the form of a barcode in the application 110 installed in the user terminal 100. For example, the disposable dynamic code may be expressed as 10a at the time point of the first period, and may be changed to 10b and 10c as the period is changed, and may be displayed, and may be continuously changed for a limited valid time. The affiliate terminal 400 may acquire disposable dynamic codes of different values, such as 10a, 10b, and 10c, depending on the recognition time point.

8 shows a reference diagram for a structure that performs an authentication process for verifying a one-time dynamic code.

Referring to FIG. 8, the dynamic code authentication unit 330 verifies the disposable dynamic code introduced from the affiliate terminal 400. The dynamic code authentication unit 330 separates the disposable dynamic code into a detailed code, and obtains a dynamic ID and a dynamic code from the detailed code. The obtained dynamic code is compared with a substitution value of the first authentication value generated by the first authentication value generator 320 to verify whether the code is identical. The substitution of the first authentication value is performed in the same manner as in FIG. 5.

For example, if the dynamic code change cycle is assumed to be 2 seconds, the dynamic code is displayed by sequentially changing the values of “767”, ”671”, “710”, “100”, and “007” in the first cycle to the fifth cycle. do. When the time when the disposable dynamic code actually flows from the affiliate terminal 400 to the dynamic code server 300 is the inflow point k, the dynamic code server 300 is shared with the user terminal 100 when the dynamic ID is allocated. The dynamic code can be verified by determining a period corresponding to the one-time use dynamic code request time (s, the generation time of FIG. 4) and the recognition time (r1, r2) when the affiliate terminal 400 recognizes the one-time dynamic code. have.

In addition, according to the disposable dynamic code recognition time, it is divided into r1 and r2 to perform additional correction processing.

For example, the dynamic code server 300 determines a period corresponding to the recognition time points r1 and r2 at which the affiliate terminal 400 recognizes the disposable dynamic code. When the period corresponding to the one-time dynamic code inflow point (k) is the fifth period, and the dynamic code is “007”, and the one-time dynamic code recognition point (r2) is later than the one-time dynamic code change point (c) of the user terminal 100 , It can be verified whether the disposable dynamic code expressed in the user terminal 100 is the same as the dynamic code “007” of the fifth period of the dynamic code server 300. On the other hand, if it has the same disposable dynamic code inflow point k, but the recognition point r1 recognized by the actual affiliate terminal 400 precedes or is the same as the one-off dynamic code change point c, the actual user terminal 100 In the barcode displayed in ), “100” corresponding to the previous cycle (the fourth cycle) is expressed as a dynamic code, and thus can be recognized by the affiliate terminal 400. Accordingly, in this case, it can be verified whether the disposable dynamic code expressed in the user terminal 100 is the same as the dynamic code “100” of the fourth period of the dynamic code server 300. In consideration of external factors such as delay for the communication environment, etc., the verification period can be set.

Meanwhile, embodiments of the present invention may be implemented as computer-readable codes on a computer-readable recording medium. The computer-readable recording medium includes all types of recording devices that store data that can be read by a computer system.

Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tapes, floppy disks, optical data storage devices, and the like. Includes. Further, the computer-readable recording medium is distributed over a computer system connected by a network, so that computer-readable codes can be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the present invention can be easily inferred by programmers in the technical field to which the present invention belongs.

In the above, exemplary embodiments of the present invention have been described with reference to the accompanying drawings, but those of ordinary skill in the art to which the present invention pertains may be implemented in other specific forms without changing the technical spirit or essential features of the present invention. You will understand that you can. Therefore, it should be understood that the exemplary embodiments described above are illustrative and non-limiting in all respects.

User terminal 100
Synchronization Server (200)
Dynamic code server (300)
Affiliate Server (500)
Real Code Server (600)

Claims (20)

Requesting, by the user terminal, a dynamic ID from the dynamic code server;
Generating, by a dynamic code server, the dynamic ID and transmitting it to a user terminal;
Generating a dynamic code that is changed every specific period based on the dynamic ID received by the user terminal and a generation time for requesting the dynamic ID; And
Including, one-time dynamic code generation and authentication method comprising the; step of the user terminal changing the dynamic ID and the one-time dynamic code including the dynamic code at each specific period to display. The method of claim 1,
Logging in by connecting the user terminal to a synchronization server; And
Synchronizing the time with the synchronization server by the user terminal; further comprising, one-time dynamic code generation and authentication method. The method of claim 1,
The dynamic code server generating a first authentication value based on a plurality of factors including the dynamic ID and the generation time; further comprising,
Generating the dynamic code,
Generating a second authentication value based on the plurality of factors; And
Generating the dynamic code based on the second authentication value and the specific period; Containing, one-time dynamic code generation and authentication method. The method of claim 3,
The generating of the first authentication value includes generating the first authentication value by inputting the plurality of factors to a one-way hash function,
The generating of the second authentication value includes generating the second authentication value by inputting the plurality of factors to the one-way hash function. The method of claim 3,
The plurality of factors further include a unique identification number that can identify a user, a connection token assigned when the user logs in, and means information that can identify a payment method. The method of claim 1,
The dynamic code is divided into a plurality of areas and expressed, and at least a partial area of the dynamic ID is expressed to be located between the divided plurality of areas. The method of claim 1,
Recognizing the disposable dynamic code displayed by the affiliate terminal;
Requesting, by the affiliate terminal, authentication of the one-time dynamic code recognized as a real code server;
Requesting, by the real code server, authentication of the one-time dynamic code recognized as the dynamic code server;
Determining, by the dynamic code server, a dynamic code in the same manner as that in which the user terminal generates the dynamic code; And
The dynamic code server, comparing the dynamic code determined by the dynamic code server with the dynamic code included in the one-time dynamic code recognized by the affiliate terminal; further comprising, one-time dynamic code generation and authentication method. The method of claim 7,
The step of determining the dynamic code,
Further comprising the step of determining the specific period corresponding to a time point at which the affiliate terminal recognizes the disposable dynamic code. The method of claim 7,
When the dynamic code determined by the dynamic code server matches the dynamic code included in the disposable dynamic code recognized by the affiliate terminal, the dynamic code server sends means information for identifying a payment method to the real code server. Delivering; further comprising, one-time dynamic code generation and authentication method. The method of claim 1,
The dynamic ID is selected according to a predetermined rule from a random number table provided according to a request order, a one-time dynamic code generation and authentication method. A user terminal requesting a dynamic ID from the dynamic code server; And
Including; a dynamic code server for generating the dynamic ID and transmitting it to the user terminal,
The user terminal generates a dynamic code that changes every specific period based on the received dynamic ID and the requested generation time, and changes the one-time dynamic code including the dynamic ID and the dynamic code every specific period. Expressing, one-time dynamic code generation and authentication system. The method of claim 11,
A synchronization server through which the user terminal accesses and logs in; further includes,
The user terminal synchronizes time with the synchronization server, a one-time dynamic code generation and authentication system. The method of claim 11,
The dynamic code server,
Generates a first authentication value based on a plurality of factors including the dynamic ID and the generation time,
The user terminal,
Generating a second authentication value based on the plurality of factors,
A one-time dynamic code generation and authentication system for generating the dynamic code based on the second authentication value and the specific period. The method of claim 13,
The dynamic code server generates the first authentication value by inputting the plurality of factors to a one-way hash function,
The user terminal generates the second authentication value by inputting the plurality of factors to the one-way hash function, a one-time dynamic code generation and authentication system. The method of claim 13,
The plurality of factors further include a unique identification number that can identify a user, a access token assigned when the user logs in, and means information that can identify a payment means, one-time dynamic code generation and authentication system. The method of claim 11,
The dynamic code is divided into a plurality of areas and expressed, and at least some areas of the dynamic ID are expressed to be located between the divided plurality of areas. The method of claim 11,
An affiliate terminal that recognizes the disposable dynamic code expressed by the user terminal;
When the affiliate terminal requests authentication of the recognized one-time dynamic code, a real code server that requests authentication of the one-time dynamic code recognized by the dynamic code server; further includes,
The dynamic code server,
The user terminal determines the dynamic code in the same manner as the method of generating the dynamic code,
One-time dynamic code generation and authentication system for comparing the dynamic code determined by the dynamic code server with the dynamic code included in the one-time dynamic code recognized by the affiliate terminal. The method of claim 17,
The dynamic code server, the one-time dynamic code generation and authentication system for determining the specific period corresponding to the time point when the affiliate terminal recognizes the one-time dynamic code. The method of claim 17,
The dynamic code server, when the determined dynamic code matches the dynamic code included in the disposable dynamic code recognized by the affiliate terminal, the dynamic code server sends means information for identifying a payment method to the real code server. One-time dynamic code generation and authentication system to deliver to. The method of claim 11,
The dynamic ID is selected according to a predetermined rule from a random number table provided according to a request order, a one-time dynamic code generation and authentication system.

Images