KR102267628B1 - User authentication method using one time identifier and authentication system performing the same - Google Patents

Abstract

A one-time identifier provided through an inbound call allows the user to confirm that he or she is a legitimate user authorized to use certain services (eg, login, ID/password search, online payment, etc.) without an ID or password. Systems and methods are disclosed. According to an aspect of the present invention, when an inbound call is initiated between the mobile phone and the authentication system by the user's mobile phone, the authentication system acquires the mobile phone in the process of establishing the inbound call call. Issuing, by the authentication system, the one-time identifier (OTID) corresponding to the phone number of the user and usable in a predetermined service system; providing, by the authentication system, the issued one-time identifier to the user's mobile phone; and the authentication When the service system requests the authentication system to verify the one-time identifier after the system provides the one-time identifier through the inbound call call, the authentication system includes the step of verifying the validity of the one-time identifier. A user authentication method using a one-time identifier is provided.

Description

User authentication method using one-time identifier and authentication system for performing the same

The present invention relates to a user authentication system and method, and more particularly, by using a one-time identifier that a user is guided through an inbound call, without an ID or password, he or she can provide a predetermined service (eg, login, ID/password search, It relates to a system and method for verifying (ie, authenticating yourself) that you are a legitimate user authorized to use online payment, etc.).

In recent years, with the development of wired and wireless communication networks and the spread of computers and the Internet to each home, various online services such as online commerce and Internet banking are provided. Due to the nature of these services, it is very important to authenticate the user to check whether the user has a legitimate right to use the service.

Conventionally, an ID/PW-based method that authenticates a legitimate user according to whether or not a registered ID and password (P/W) are entered correctly has been mainly used, but this method uses the user's personal information obtained through an illegal path. A problem in which an ID or password can be obtained illegally by registering as a member or by using it, or ID through packet sniffing or key stroke intercepting means that are relatively widespread on the network, or phishing and passwords could be hacked. In addition, when a pre-registered ID/PW is lost or forgotten, it is impossible to log in or a very complicated procedure is required to find the forgotten ID/PW.

The technical problem to be achieved by the present invention is the right to use a predetermined service (eg, login, ID/password search, online payment, etc.) without an ID or password using a one-time identifier guided through an inbound call. It is to provide a system and method for verifying that the user is a legitimate user (ie, self-authentication).

According to an aspect of the present invention, when an inbound call is initiated between the mobile phone and the authentication system by the user's mobile phone, the authentication system acquires the mobile phone in the process of establishing the inbound call call. Issuing, by the authentication system, the one-time identifier (OTID) corresponding to the phone number of the user and usable in a predetermined service system; providing, by the authentication system, the issued one-time identifier to the user's mobile phone; and the authentication When the service system requests the authentication system to verify the one-time identifier after the system provides the one-time identifier through the inbound call call, the authentication system includes the step of verifying the validity of the one-time identifier. A user authentication method using a one-time identifier is provided.

In one embodiment, the authentication system comprises a plurality of Auto Response Systems (ARS) assigned different phone numbers, wherein each of the plurality of Auto Response Systems corresponds to a different service system. -, issuing a one-time identifier corresponding to the phone number of the mobile phone and usable in a predetermined service system, the authentication system is used in a service system corresponding to the automatic answering system in which the mobile phone and the inbound call are connected It may include issuing a possible one-time identifier.

In one embodiment, the step of issuing a one-time identifier corresponding to the phone number of the mobile phone and usable in a predetermined service system may include selecting any one of a plurality of service systems by the mobile phone through the inbound call call. , issuing, by the authentication system, a one-time identifier usable in the service system selected by the mobile phone.

In one embodiment, the step of providing, by the authentication system, the issued one-time identifier to the user's mobile phone includes: providing, by the authentication system, the issued one-time identifier in the form of a voice through the inbound call call may include.

In one embodiment, the step of providing, by the authentication system, the issued one-time identifier information to the user's mobile phone, includes, by the authentication system, the issued one-time identifier information in the form of a text message to the user's mobile phone It may include the step of providing

In an embodiment, the method may further include, by the authentication system, discarding the one-time identifier after completing verification of the validity of the one-time identifier.

In one embodiment, the authentication system configures a DB for storing login information and mobile phone numbers of each of a plurality of users who have subscribed to the service system - where the login information is necessary for the user to log in to the service system information - and if the one-time identifier is valid, the authentication system returns the mobile phone user's login information corresponding to the one-time identifier to allow the service system to log in the mobile phone user corresponding to the one-time identifier. It may further include the step of providing to a service system.

In one embodiment, if the one-time identifier is valid, the authentication system is configured to allow the mobile phone corresponding to the one-time identifier to log in to the service system, so that the service system allows the mobile phone user corresponding to the one-time identifier to log in. The method may further include providing a phone number.

According to another aspect of the present invention, there is provided a computer program installed in a data processing apparatus and stored in a recording medium to perform the above-described method.

According to another aspect of the present invention, there is provided an authentication system, comprising a processor and a memory storing a program, wherein the program, when executed by the processor, causes the authentication system to perform the above-described method this is provided

According to another aspect of the present invention, when an inbound call call is initiated between the mobile phone and the authentication system by the user's mobile phone, it corresponds to the phone number of the mobile phone acquired in the process of establishing the inbound call call and provides a predetermined service. The issuing module for issuing a one-time identifier usable in the system, a response module for providing the issued one-time identifier to the user's mobile phone, and the service system after the response module provides the one-time identifier through the inbound call call When a verification of the one-time identifier is requested from the authentication system, an authentication system including a verification module for verifying the validity of the one-time identifier is provided.

In one embodiment, the authentication system further includes a plurality of automatic answering systems to which different phone numbers are assigned, wherein each of the plurality of automatic answering systems corresponds to a different service system, the issuing module, It is possible to issue a one-time identifier usable in a service system corresponding to the automatic answering system in which the mobile phone and the inbound call are connected.

In one embodiment, when any one of a plurality of service systems is selected by the mobile phone through the inbound call call, the issuing module may issue a one-time identifier usable in the service system selected by the mobile phone. have.

In an embodiment, the response module may provide the issued one-time identifier information in the form of a voice through the inbound call.

In an embodiment, the response module may provide the issued one-time identifier information to the user's mobile phone in the form of a text message.

In an embodiment, the method may further include a discard module configured to discard the one-time identifier after completing verification of the validity of the one-time identifier.

In one embodiment, a DB for storing login information and mobile phone numbers of each of a plurality of users who have subscribed to the service system, wherein the login information is information required for the user to log in to the service system, and the one-time identifier is valid In this case, the service system may further include a providing module that provides log-in information of a mobile phone user corresponding to the one-time identifier to the service system in order to allow the mobile phone user corresponding to the one-time identifier to log in.

In one embodiment, if the one-time identifier is valid, the service system provides the phone number of the mobile phone corresponding to the one-time identifier to the service system in order to allow the mobile phone user corresponding to the one-time identifier to log in. It may further include a providing module.

When user authentication is performed using a one-time identifier as in the embodiment of the present invention described above, the user obtains through an inbound call without entering a conventional ID/password or entering his or her phone number into the service system. You can log in or authenticate yourself just by entering a one-time identifier.

In addition, since the user can be provided with information (ie, a one-time identifier) required for login or self-authentication through a phone call, a predetermined IC chip or separate software for self-authentication is installed in the mobile phone 210 or the user terminal 220 . It has the effect of not needing it. Therefore, the service according to the embodiment of the present invention can be utilized as much as possible in a conventional 2G phone or the like.

In addition, according to the technical idea of the present invention as described above, the user receives sufficient information (ie, one-time identifier) to log in or authenticate himself simply by making a call to the phone number guided by the service system using his or her mobile phone. It has the advantage of being able to easily log in to the online service even if you lose or do not remember the ID/password for logging in.

In addition, the one-time identifier used for identity authentication is not provided to the user through a data communication network (for example, the Internet) that is easy to hack, but is provided through a communication network that is difficult to eavesdrop or eavesdrop, so it has the effect of increasing security. .

In order to more fully understand the drawings cited in the Detailed Description, a brief description of each drawing is provided.
1 is a diagram for explaining an environment for performing a user authentication method using a one-time identifier according to an embodiment of the present invention.
2 is a flowchart illustrating a user authentication method using a one-time identifier according to an embodiment of the present invention.
3 is a diagram illustrating an example of a user authentication UI.
4A is a diagram for explaining an example of a user authentication method using a one-time identifier interworking with a plurality of service systems.
4B is a diagram for explaining another example of a user authentication method using a one-time identifier interworking with a plurality of service systems.
5 is a block diagram illustrating the configuration of an authentication system according to an embodiment of the present invention.

Since the present invention can apply various transformations and can have various embodiments, specific embodiments are illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to specific embodiments, and it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention. In describing the present invention, if it is determined that a detailed description of a related known technology may obscure the gist of the present invention, the detailed description thereof will be omitted.

Terms such as first, second, etc. may be used to describe various elements, but the elements should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly dictates otherwise.

In the present specification, terms such as "comprise" or "have" are intended to designate that the features, numbers, steps, operations, components, parts, or combinations thereof described in the specification exist, and one or more other It is to be understood that this does not preclude the possibility of addition or presence of features or numbers, steps, operations, components, parts, or combinations thereof.

In addition, in the present specification, when any one component 'transmits' data to another component, the component may directly transmit the data to the other component or through at least one other component. This means that the data may be transmitted to the other component. Conversely, when one component 'directly transmits' data to another component, it means that the data is transmitted from the component to the other component without passing through the other component.

Hereinafter, the present invention will be described in detail focusing on embodiments of the present invention with reference to the accompanying drawings. Like reference numerals in each figure indicate like elements.

1 is a diagram for explaining an environment for performing a user authentication method using a one-time identifier according to an embodiment of the present invention.

1, in order to implement the authentication method using a one-time identifier according to an embodiment of the present invention, an authentication system 100, a user's mobile phone 210, the user's user terminal 220, a service system ( 300) may be included.

A user may access the service system 300 through the user terminal 220 and receive a service from the service system 300 after logging in or authenticating the user.

The service system 300 may be a system that provides a predetermined online service (eg, online payment, online shopping mall, online community, SNS, etc.) to the user terminal 220 .

Each user's account may be previously created in the service system 300 . When a user's account is created, the service system 300 registers user identification information (eg, account name, ID, etc.) designated by each user and a normal self-authentication means (eg, login password, etc.). can In addition, the mobile phone number of the user may be registered in advance in the service system 300 when the user's account is created or after the user account is created. That is, the user may pre-register the phone number of his/her mobile phone 210 in the service system 300 before performing user authentication using the one-time identifier according to the technical idea of the present invention.

According to an embodiment, each user may further register his/her personal information. Each user's personal information may include at least one of the user's name, date of birth, resident registration number, payment method information (eg, credit card number, debit card number, etc.), landline phone number, gender, email address, and address. have. In addition, of course, the user's personal information may include any information dependent on the user.

The mobile phone number and/or personal information registered in advance in the service providing system 300 may be later used by the authentication system 100 . In an embodiment, the authentication system 100 may obtain a mobile phone number and/or personal information previously registered in order to perform the user authentication method according to an embodiment of the present invention from the service system 300 . .

On the other hand, the user terminal 200 may be used in the sense of including all types of data processing devices or computing devices (eg, laptops, desktops, mobile terminals, set-top boxes, etc.).

The user terminal 200 and the service system 300 are connected through a wired/wireless data communication network (eg, the Internet) to transmit/receive various information, data and/or signals necessary to implement the technical idea of the present invention or provide a service. can

On the other hand, the authentication system 100 issues/manages a one-time identifier used for a user's login or self-authentication, and guides it to the user through the user's mobile phone 210, and validation of the one-time identifier from the service system 300 is performed. If requested, verification can be performed on it.

The authentication system 100 may be a server.

The authentication system 100 may be connected to the mobile phone 210 through a mobile communication network, and a call call for a phone call may be established between the authentication system 100 and the mobile phone 210 . To this end, the authentication system 100 may include an Auto Response System (ARS).

In particular, the call established between the authentication system 100 and the mobile phone 210 may be an inbound call initiated by the user's mobile phone 210 . The inbound call is a call established by the user's mobile phone 210 originating and receiving the authentication system 100 . That is, when the user makes a call to the authentication system 100 or the phone number assigned to the automatic answering system in the authentication system 100 with his/her mobile phone 210, the mobile phone 210 and the authentication system 100 An inbound call call may be established between

The authentication system 100 may transmit/receive various types of information, signals, and/or data necessary for implementing the technical idea of the present invention through a call connected to the user's mobile phone 210 .

On the other hand, as shown in FIG. 1 , the authentication system 100 may be implemented in the form of a separate system separated from the service system 300 , and according to an implementation example, the service system 300 is configured It may be implemented as a part of In the former case, the service system 300 and the authentication system 100 may be connected through a network to transmit/receive various types of information and/or data required to implement the technical idea of the present invention. In the latter case, the authentication system 100 may be in the form of a subsystem of the service system 300 or a combination of software and hardware installed in the service providing system 300 .

According to an embodiment, some of the components of the authentication system 100 may be implemented in a form included in the service system 300 .

The mobile phone 210 may be a computing device including a smart phone, tablet PC, personal digital assistant (PDA), and processing connected to a wireless computing device or other wireless modem including a handheld device with wireless connectivity capabilities. It may be a device.

Although FIG. 1 shows an embodiment in which the user's mobile phone 210 and the user terminal 220 are physically separated devices, according to the embodiment, the mobile phone 210 and the user terminal 220 are physically separated. It may be the same device. That is, the user may be guided by the one-time identifier from the authentication system 100 using one device, and may perform user authentication or login using the information.

2 is a flowchart illustrating a user authentication method using a one-time identifier according to an embodiment of the present invention.

Referring to FIG. 2 , the user may access the service system 300 through the user terminal 220 ( S110 ). For example, the user may access the service system 300 by inputting the address of the service system 300 into an application (eg, a web browser) installed in the user terminal 220 .

Then, the service system 300 provides the user authentication UI information to the user terminal 220, and the user terminal 220 may display the user authentication UI using the provided UI information (S120, S130). The self-authentication UI may mean a UI that provides a procedure or guide information for login or self-authentication to a user, and allows the user to log in to the service system 300 or input information for self-authentication, The user authentication UI information may mean information required for the user terminal 220 to display the user authentication UI. For example, the user authentication UI may be a web page including a form for inputting login information.

3 is a diagram illustrating an example of a user authentication UI.

As shown in FIG. 3 , the identity authentication UI 400 may include a phone number 410 assigned to the authentication system 100 or an automatic answering system included in the authentication system 100 . Also, the user authentication UI 400 may include a UI 430 for inputting a one-time identifier to be described later.

According to an embodiment, the user authentication UI 400 may further include a system unique number 420 assigned to the service system 300 . The authentication system 100 may be information used to identify the service system 300 .

Referring back to FIG. 2 , the user may make a call to the authentication system 100 or a phone number of the automatic answering system included in the authentication system 100 using the mobile phone 210 , and the mobile phone An inbound call may be established between 210 and the authentication system 100 (S140).

The authentication system 100 may obtain the phone number of the mobile phone 210 in the process of establishing an inbound call to the mobile phone 210 .

When an inbound call is established between the mobile phone 210 and the authentication system 100, the authentication system 100 may generate (issue) a one-time identifier corresponding to the phone number of the mobile phone 210 ( S150).

The generated one-time identifier may be used by the user of the mobile phone 210 to log in to the service system 300 or to authenticate himself/herself.

The authentication system 100 may store the phone number of the mobile phone 210 in correspondence with the issued one-time identifier.

The one-time identifier may be information that is written once and discarded. That is, the one-time identifier may be information that is discarded and cannot be used again after the user of the mobile phone 210 is used for login or identity authentication.

In addition, the one-time identifier may be information having a unique value permanently or for a certain period of time. That is, the one-time identifier may be information that never overlaps with other one-time identifiers that have already been issued, or information that does not overlap with other one-time identifiers valid within a certain period of time.

In an embodiment, the authentication system 100 may store/store the issuance details of the generated (issued) one-time identifier. The issuance details may include a one-time identifier, a mobile phone number corresponding thereto, log-in information of a mobile phone user corresponding thereto, information about an issuance time, and/or information about an expiration time. Alternatively, according to an embodiment, the issuance details may further include a unique number of a service system (eg, 300) to which the one-time identifier is applied.

The authentication system 100 may provide the issued one-time identifier to the mobile phone 210 (S160).

In an embodiment, the authentication system 100 may provide the issued one-time identifier to the user's mobile phone 210 in the form of a text message. For example, the authentication system 100 may transmit the one-time identifier to the user's mobile phone 210 through a Short Message System (SMS) or a Multimedia Message System (MMS). Alternatively, the one-time identifier may be transmitted to a dedicated application installed in the mobile phone 210 .

In another embodiment, the authentication system 100 may transmit the issued one-time identifier in the form of a voice through an inbound call established between the mobile phone 210 and the authentication system 100 .

However, if the one-time identifier is provided in the form of a voice all at once, the user may not be able to remember it. In order to solve this problem, the authentication system 100 may provide the issued one-time identifier to the user one-by-one in the following manner.

If the one-time identifier is 'ABCD', the authentication system 100 may first provide 'A', which is the first letter of the one-time identifier, in a voice form. Then, the user inputs 'A' in the one-time identifier input UI (eg, 430 in FIG. 3 ) on the user terminal 220 and then through the mobile phone 210 a predetermined indicator (eg, '#', '*', etc.) can be entered. Then, the authentication system 100 provides the next letter 'B' in voice form, and the user inputs it to the one-time identifier input UI (eg, 430 in FIG. 3 ) on the user terminal 220 and enters the mobile phone ( 210), an indicator (eg, '#', '*', etc.) may be input. In this way, the authentication system 100 may provide a one-time identifier in the form of a voice.

The authentication system 100 may include a Speech-to-Text (STT) system to provide a one-time identifier in a voice form.

Meanwhile, when the user is provided with the one-time identifier through the mobile phone 210 , the user may input it into the user terminal 220 ( S170 ). For example, the user may input the one-time identifier into the one-time identifier input UI 430 included in the login guide screen 400 of FIG. 3 .

Then, the user terminal 220 may submit the one-time identifier input by the user to the service system 300 to request login or identity authentication (S180).

When the one-time identifier is submitted, the service system 300 may request verification of the one-time identifier to the authentication system 100 (S190), and the authentication system 100 may request verification of the service system 300 It is possible to verify the one-time identifier in response to (S200).

In an embodiment, the authentication system 100 may check whether the one-time identifier to be verified is normally issued by the authentication system 100 by checking the issuance details of the one-time authentication information. Alternatively, according to an embodiment, the authentication system 100 may determine that the one-time identifier to be verified is not valid when the one-time identifier is issued in a normal way but the expiration period has elapsed. In addition, the authentication system 100 may extract a mobile phone number corresponding to the one-time identifier to be verified.

The authentication system 100 may transmit a verification result to the service system 300 (S210), and the service system 300 may allow user login or user authentication when the one-time identifier is verified as valid. (S220).

According to an embodiment, the authentication system 100 may or may not include a database storing account information and mobile phone numbers of each of a plurality of users who have subscribed to the service system 300 .

If provided, the authentication system 100 extracts user account information from the database through the mobile phone number corresponding to the verified one-time authentication information, and the service system 300 uses the mobile phone ( 210) In order to allow the user to log in, account information of the user of the mobile phone 210 corresponding to the one-time identifier may be transmitted to the service system 300 .

If not provided, the authentication system 100 sends the one-time identifier to the service system 300 so that the service system 300 allows the user of the mobile phone 210 corresponding to the one-time identifier to log in. It is possible to transmit the phone number of the mobile phone 210 corresponding to . Then, the service system 300 may extract user account information corresponding to the phone number of the mobile phone 210 from the database it owns to allow login.

Meanwhile, the authentication system 100 may discard the one-time identifier after verifying the validity of the one-time identifier. There may be various methods for revoking the one-time identifier. In an embodiment, an item related to a one-time identifier to be discarded may be physically deleted from the issuance history of the authentication system 100 . Alternatively, a mark indicating that the one-time identifier has been discarded may be written in the item related to the one-time identifier to be discarded in the issuance history. In addition to this, there may be various revocation methods to prevent a one-time identifier that has already been validated from being judged as valid again.

Meanwhile, FIG. 2 illustrates an embodiment in which the authentication system 100 interworks with one service system 300 , but according to an embodiment, the authentication system 100 interworks with a plurality of service systems 300 . You may. Hereinafter, a case in which the authentication system 100 interworks with a plurality of service systems will be described with reference to FIGS. 4A and 4B . Although an example of interworking with two service systems is described in FIGS. 4A and 4B , the technical spirit of the present invention is not limited thereto, and the present invention shows that the authentication system 100 can be interlocked with three or more service systems. Those of ordinary skill in the art to which this belongs will be able to clearly understand.

4A is a diagram for explaining an example of a user authentication method using a one-time identifier interworking with a plurality of service systems.

Referring to FIG. 4A , the authentication system 100 may include a plurality of automatic response systems (eg, 170-1 to 170-2). Each of the answering systems 170-1 to 170-2 is assigned a different phone number.

In addition, each of the plurality of automatic answering systems 170 - 1 to 170 - 2 may correspond to a different service system. For example, the first automatic answering system 170-1 corresponds to the first service system 300-1, and the second automatic answering system 170-2 corresponds to the second service system 300-2. can be

When a user accesses the first service system 300 - 1 through the user terminal 220 , the first service system 300 - 1 may provide a first identity authentication UI to the user terminal 220 . . In this case, the first identity authentication UI may include a phone number assigned to the first automatic answering system 170-1. Then, the user may establish an inbound call call with the first automatic answering system 170-1 by making a call to the phone number assigned to the first automatic answering system 170-1. In this case, the authentication system 100 may issue a one-time identifier usable in a service system corresponding to the first automatic response system 170-1 (ie, the first service system 300-1).

If the user accesses the second service system 300-2 through the user terminal 220, the second service system 300-2 may provide a second identity authentication UI to the user terminal 220. have. In this case, the second identity authentication UI may include a phone number assigned to the second automatic answering system 170-2. Then, the user may establish an inbound call call with the second automatic answering system 170-2 by making a call to the phone number assigned to the second automatic answering system 170-2. In this case, the authentication system 100 may issue a one-time identifier usable in the service system corresponding to the second automatic response system 170-2 (ie, the second service system 300-2).

4B is a diagram for explaining another example of a user authentication method using a one-time identifier interworking with a plurality of service systems.

Referring to FIG. 4B , different system unique numbers may be pre-allocated to each of the service systems 300-1 to 300-2. For example, a unique number '1111' may be pre-allocated to the first service system 300-1, and a unique number '2222' may be pre-allocated to the second service system 300-2.

After the user calls the identity authentication system 300 through the mobile phone 210 to log in to the first service system 300-1 or the second service system 300-2, and an inbound call call is established, the user Select one of the first service system 300-1 or the second service system 300-2 by inputting a system unique number of the first service system 300-1 or the second service system 300-2. can When either the first service system or the second service system is selected by the mobile phone 210 through the inbound call, the authentication system 100 is used in the service system selected by the mobile phone 210 Possible one-time identifiers may be issued.

When the system-specific number consists of numbers, the authentication system 100 may receive a number as a DTMF tone. Alternatively, when the system-specific number is input in the form of a voice signal, the authentication system 100 may recognize the system-specific number from the voice signal through voice recognition.

In one embodiment, the system unique number of each service system (300-1 and 300-2) may be guided by the automatic response system of the authentication system (100).

In another embodiment, each of the service systems 300 - 1 and 300 - 2 may allow the system unique number assigned to it to be included on the user authentication UI. For example, when the user terminal 220 accesses the first service system 300-1, the first service system 300-1 includes its own number ('1111' in the above example). The user authentication UI can be displayed on the user terminal 220, and when the user terminal 220 accesses the second service system 300-2, the second service system 300-2 displays its own number ( In the above example, the user authentication UI including '2222' may be displayed on the user terminal 220 .

Then, the user inputs the system unique number displayed on the user authentication UI into the authentication system 100, and the authentication system 100 may issue a one-time identifier usable in the service system corresponding to the input unique number.

5 is a block diagram illustrating the configuration of the authentication system 100 according to an embodiment of the present invention. As shown in FIG. 5 , the authentication system 100 may include an issuing module 110 , a response module 120 , a verification module 130 , a discarding module 140 , and a providing module 150 . Also, according to an embodiment, the authentication system 100 may further include at least one automatic response system 170-1 to 170-N. Also, according to an embodiment, the authentication system 100 may further include a database 160 .

According to the embodiment of the present invention, some of the above-described components may not necessarily correspond to the components essential for the implementation of the present invention, and according to the embodiment, the authentication system 100 is more Of course, it may include more components. For example, the authentication system 100 includes other components included in the authentication system 100 (eg, the issuing module 110, the response module 120, the verification module 130, the discarding module 140). , may further include a control module (not shown) capable of controlling the functions and / or resources of the providing module 150, the automatic response system (170-1 to 170-N) and / or the database 160, etc.) have. In addition, the authentication system 100 may further include a communication module (not shown) capable of performing wired/wireless data communication.

The authentication system 100 may include hardware resources and/or software necessary to implement the technical idea of the present invention, and does not necessarily mean one physical component or one device. . That is, the authentication system 100 may mean a logical combination of hardware and/or software provided to implement the technical idea of the present invention, and if necessary, installed in devices spaced apart from each other to perform each function By doing so, it may be implemented as a set of logical configurations for implementing the technical idea of the present invention. In addition, the authentication system 100 may mean a set of components separately implemented for each function or role for implementing the technical idea of the present invention. For example, the issuing module 110, the response module 120, the verification module 130, the discarding module 140, the providing module 150, and the database 160 may be located in different physical devices, They may be located on the same physical device. In addition, the combination of software and/or hardware constituting each of the issuing module 110 , the response module 120 , the verification module 130 , the discarding module 140 , and the providing module 150 according to the embodiment is also mutually exclusive. Each of the modules may be implemented by organically combining components located in different physical devices and located in different physical devices.

Also, in the present specification, a module may mean a functional and structural combination of hardware for carrying out the technical idea of the present invention and software for driving the hardware. For example, the module may mean a logical unit of a predetermined code and a hardware resource for executing the predetermined code, and does not necessarily mean physically connected code or a single type of hardware. It can be easily deduced to an average expert in the art of the present invention.

In this specification, a database (DataBase; DB) may be implemented as at least one table, and further includes a separate DBMS (Database Management System) for searching, storing, and managing information stored in the DB. may be used as In addition, all data storage media and data structures that can store information to be stored in the pattern DB 130 can be implemented in various ways, such as in the form of a linked-list, a tree, and a relational DB. It can be used in an inclusive sense.

Referring to FIG. 5 , when an inbound call call is initiated between the mobile phone 210 and the authentication system 100 by the user's mobile phone 210, the issuance module 110 obtains in the process of establishing the inbound call call. A one-time identifier corresponding to the phone number of the mobile phone 210 and usable in the service system 300 may be issued.

As described above, according to the embodiment, the authentication system 100 may include a plurality of automatic answering systems 170-1 to 170-N to which different phone numbers are assigned, and the issuing module 110 is It is possible to issue a one-time identifier usable in a service system corresponding to the automatic answering system in which the mobile phone and the inbound call are connected.

Alternatively, when any one of a plurality of service systems is selected by the mobile phone 210 through the inbound call call, the issuing module 110 is a one-time identifier usable in the service system selected by the mobile phone 210 . can be issued.

The response module 120 may provide the issued one-time identifier to the mobile phone 210 of the user.

In an embodiment, the response module 120 may provide the issued one-time identifier information in the form of a voice through the inbound call.

In another embodiment, the response module 120 may provide the issued one-time identifier information to the user's mobile phone 210 in the form of a text message (eg, SMS, MMS, app message). .

When the verification module 130 requests the authentication system 100 to verify the one-time identifier after the authentication system 110 provides the one-time identifier through the inbound call call, the service system 300 requests the authentication system 100 to verify the one-time identifier. , it is possible to verify the validity of the one-time identifier.

The discard module 140 may discard the one-time identifier after completing verification of the validity of the one-time identifier.

The providing module 150 may provide the validation result of the one-time identifier to the service system 300 .

In an embodiment, when the one-time identifier is valid, the providing module 150 is configured to allow the mobile phone user corresponding to the one-time identifier to log in to the service system 300 to allow the mobile phone user corresponding to the one-time identifier to log in. The user's login information may be provided to the service system 300 .

In another embodiment, when the one-time identifier is valid, the providing module 150 sends the service system 300 to the service system 300 to allow the mobile phone user corresponding to the one-time identifier to log in. The phone number of the mobile phone corresponding to the one-time identifier may be provided.

When user authentication is performed using a one-time identifier as in the embodiment of the present invention described above, the user obtains through an inbound call without entering a conventional ID/password or entering his or her phone number into the service system. You can log in or authenticate yourself just by entering a one-time identifier.

In addition, since the user can be provided with information (ie, a one-time identifier) required for login or self-authentication through a phone call, a predetermined IC chip or separate software for self-authentication is installed in the mobile phone 210 or the user terminal 220 . It has the effect of not needing it. Therefore, the service according to the embodiment of the present invention can be utilized as much as possible in a conventional 2G phone or the like.

In addition, according to the technical idea of the present invention as described above, the user receives sufficient information (ie, one-time identifier) to log in or authenticate himself simply by making a call to the phone number guided by the service system using his or her mobile phone. It has the advantage of being able to easily log in to the online service even if you lose or do not remember the ID/password for logging in.

In addition, the one-time identifier used for identity authentication is not provided to the user through a data communication network (for example, the Internet) that is easy to hack, but is provided through a communication network that is difficult to eavesdrop or eavesdrop, so it has the effect of increasing security. .

Meanwhile, the authentication system 100 according to an embodiment of the present invention may be used not only to log in to the predetermined service providing system 300 but also to find an ID/password. To this end, the service system 300 may transmit a login ID and/or password corresponding to the user's account to the user terminal 220 or the mobile phone 210 when user authentication by the one-time identifier is successful.

Meanwhile, according to an embodiment, the authentication system 100 may include a processor and a memory for storing a program executed by the processor. The processor may include a single-core CPU or a multi-core CPU. The memory may include high-speed random access memory and may include non-volatile memory such as one or more magnetic disk storage devices, flash memory devices, or other non-volatile solid-state memory devices. Access to memory by the processor and other components may be controlled by a memory controller. Here, when the program is executed by the processor, the authentication system 100 according to the present embodiment may perform the user authentication method using the one-time identifier described above.

On the other hand, the user authentication method using the one-time identifier according to the embodiment of the present invention may be implemented in the form of a computer readable program command and stored in a computer readable recording medium, and the control program according to the embodiment of the present invention and the target program may also be stored in a computer-readable recording medium. The computer-readable recording medium includes all types of recording devices in which data readable by a computer system is stored.

The program instructions recorded on the recording medium may be specially designed and configured for the present invention, or may be known and available to those skilled in the software field.

Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical recording media such as CD-ROMs and DVDs, and floppy disks. hardware devices specially configured to store and execute program instructions, such as magneto-optical media and ROM, RAM, flash memory, and the like. In addition, the computer-readable recording medium is distributed in a computer system connected through a network, so that the computer-readable code can be stored and executed in a distributed manner.

Examples of the program instruction include not only machine code such as generated by a compiler, but also a device for electronically processing information using an interpreter or the like, for example, a high-level language code that can be executed by a computer.

The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

The description of the present invention described above is for illustration, and those of ordinary skill in the art to which the present invention pertains can understand that it can be easily modified into other specific forms without changing the technical spirit or essential features of the present invention. will be. Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive. For example, each component described as a single type may be implemented in a distributed manner, and likewise components described as distributed may be implemented in a combined form.

The scope of the present invention is indicated by the following claims rather than the above detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalent concepts should be construed as being included in the scope of the present invention. .

Claims (18)

establishing, by the authentication system, the inbound call call when an inbound call is initiated by the user's mobile phone between the mobile phone and the authentication system;
obtaining, by the authentication system, the phone number of the mobile phone in the process of establishing the inbound call;
issuing a one-time identifier corresponding to the acquired phone number of the mobile phone and usable in a predetermined service system, and storing the issued one-time identifier in correspondence with the phone number of the mobile phone in a DB;
providing, by the authentication system, the issued one-time identifier to the user's mobile phone; and
When the service system requests the authentication system to verify the one-time identifier after the authentication system provides the one-time identifier through the inbound call call, the authentication system verifies the validity of the one-time identifier; A user authentication method using a one-time identifier, comprising the step of extracting a phone number of a mobile phone corresponding to the one-time identifier from a DB.
According to claim 1,
The authentication system includes a plurality of automatic answering systems to which different phone numbers are assigned, wherein each of the plurality of automatic answering systems corresponds to a different service system;
The step of issuing a one-time identifier that corresponds to the phone number of the mobile phone and can be used in a predetermined service system,
and issuing, by the authentication system, a one-time identifier usable in a service system corresponding to an automatic answering system in which the mobile phone and the inbound call are connected.
According to claim 1,
The step of issuing a one-time identifier that corresponds to the phone number of the mobile phone and can be used in a predetermined service system,
and when any one of a plurality of service systems is selected by the mobile phone through the inbound call, the authentication system issues a one-time identifier usable in the service system selected by the mobile phone; User authentication method using .
According to claim 1,
The step of providing, by the authentication system, the issued one-time identifier to the mobile phone of the user,
and providing, by the authentication system, the issued one-time identifier in the form of a voice through the inbound call call.
According to claim 1,
The step of providing, by the authentication system, the issued one-time identifier to the mobile phone of the user,
and providing, by the authentication system, the issued one-time identifier to the user's mobile phone in the form of a text message.
According to claim 1,
The user authentication method using a one-time identifier further comprising the step of, by the authentication system, discarding the one-time identifier after completing verification of the validity of the one-time identifier.
According to claim 1,
configuring, by the authentication system, a DB for storing account information and mobile phone numbers of each of a plurality of users who have subscribed to the service system, wherein the account information is information necessary for the service system to identify the user; and
When the one-time identifier is valid, the authentication system provides the mobile phone user's login information corresponding to the one-time identifier to the service system so that the service system allows the mobile phone user corresponding to the one-time identifier to log in. User authentication method using a one-time identifier further comprising the step of.
According to claim 1,
If the one-time identifier is valid, the authentication system provides the phone number of the mobile phone corresponding to the one-time identifier to the service system so that the service system allows the mobile phone user corresponding to the one-time identifier to log in. User authentication method using a one-time identifier further comprising the step.
A computer program installed in a data processing apparatus and stored in a recording medium to perform the method according to any one of claims 1 to 8.
An authentication system comprising:
processor;
It includes a memory that stores the program,
An authentication system, wherein the program, when executed by the processor, causes the authentication system to perform the method according to any one of claims 1 to 8.
When an inbound call call is initiated between the mobile phone and the authentication system by the user's mobile phone, the inbound call is established, the phone number of the mobile phone is acquired in the process of establishing the inbound call call, and the acquired mobile phone an issuance module for issuing a one-time identifier corresponding to a phone number of , available in a predetermined service system, and storing the issued one-time identifier in a DB in correspondence with the phone number of the mobile phone;
a response module for providing the issued one-time identifier to the user's mobile phone; and
After the response module provides the one-time identifier through the inbound call call, when the service system requests the authentication system to verify the one-time identifier, the validity of the one-time identifier is verified, and the one-time identifier is obtained from the DB. Authentication system including a verification module for extracting the phone number of the mobile phone corresponding to the.
12. The method of claim 11,
The authentication system further includes a plurality of automatic answering systems to which different phone numbers are assigned, wherein each of the plurality of automatic answering systems corresponds to a different service system;
The issuance module is
An authentication system for issuing a one-time identifier usable in a service system corresponding to an automatic answering system in which the mobile phone and the inbound call are connected.
12. The method of claim 11,
The issuance module is
When any one of a plurality of service systems is selected by the mobile phone through the inbound call, the authentication system issues a one-time identifier usable in the service system selected by the mobile phone.
12. The method of claim 11,
The response module is
An authentication system for providing the issued one-time identifier in the form of a voice through the inbound call.
12. The method of claim 11,
The response module is
An authentication system for providing the issued one-time identifier to the user's mobile phone in the form of a text message.
12. The method of claim 11,
The authentication system further comprising a discard module for discarding the one-time identifier after completing verification of the validity of the one-time identifier.
12. The method of claim 11,
a DB for storing account information and mobile phone numbers of each of a plurality of users who have subscribed to the service system, wherein the account information is information necessary for the service system to identify the user; and
When the one-time identifier is valid, in order to allow the service system to log in the mobile phone user corresponding to the one-time identifier, a providing module for providing the log-in information of the mobile phone user corresponding to the one-time identifier to the service system; Including authentication system.
12. The method of claim 11,
When the one-time identifier is valid, the service system further includes a providing module that provides a phone number of the mobile phone corresponding to the one-time identifier to the service system in order to allow the mobile phone user corresponding to the one-time identifier to log in. authentication system.

Images