KR102616704B1 - Service providing system and method for security of lost terminal - Google Patents

Abstract

The present invention relates to a service provision system and method for the security of a lost user terminal. More specifically, the present invention relates to a service provision system and method for the security of a lost user terminal. It relates to a service provision system and method for the security of a lost user terminal that ensures security for the lost user terminal by blocking the execution of an application. The present invention not only eliminates the need to configure a separate dedicated network by using an identification key for additional services instead of the identification information of the user terminal when requesting confirmation of loss of the user terminal from the telecommunication company server, but also takes into account the manufacturer and telecommunication company of the user terminal. It can effectively block unauthorized users' access to security-requiring apps installed on the user's terminal without needing to, ensuring versatility and improving security, efficiency, and economics.

Description

{Service providing system and method for security of lost terminal}

The present invention relates to a service provision system and method for the security of a lost user terminal. More specifically, the present invention relates to a service provision system and method for the security of a lost user terminal. It relates to a service provision system and method for the security of a lost user terminal that ensures security for the lost user terminal by blocking the execution of an application.

With the recent development of smartphones, various applications that provide various services are being provided, and users can receive various services such as finance, games, shopping, learning, etc. by installing and running various applications on their smartphones.

However, among these applications, if run by a malicious user who acquires the user's smartphone when the user's smartphone is lost, it may expose the user's personal information or cause damage to the user through unauthorized use of the user's money. Includes important applications.

Therefore, it is necessary to block the use of these important applications when the smartphone is lost.

To this end, smartphone manufacturers have previously provided lock-only applications that can remotely lock smartphones, and these lock-only applications use signals remotely received from the manufacturer's server that has received a loss report when a smartphone is lost. Based on this, it operates to disable the smartphone hardware.

However, these lock-only applications not only cause inconvenience in use because the user must download and install the lock-only application themselves, but also provide a lock function only for smartphones manufactured by the manufacturer, which reduces versatility.

In addition, when reporting loss to a telecommunication company, the telecommunication company only provides a function to disable the calling function or additional services provided by the telecommunication company for the lost smartphone, which may prevent other malicious users who have acquired the lost smartphone. Because important applications can access user data and execute functions supported by important applications, these carrier loss response services have limitations in blocking even important applications installed on smartphones.

Ultimately, in order to block these important applications, the user of the lost smartphone must individually report each important application to the service provider, resulting in considerable inconvenience and time.

Recently, in the case of financial-related applications, the responsibility of service providers is increasing when user damage occurs due to a smartphone that has been reported lost. Accordingly, service providers provide a function to determine whether the smartphone is lost through communication with the telecommunication company server. We want to provide separate modules by inserting them into important applications.

However, in order to check whether a smartphone is lost through this module, a separate dedicated network must be configured as security information, such as a phone number, must be transmitted and received between the module and the telecommunication company server. The cost required to configure such a dedicated network is significant, so the telecommunication company There is a problem with the side not wanting to support communication with these modules.

In addition, there is no way for the module to check the carrier used by the smartphone, so all carriers must be requested to check whether the smartphone is lost, which is quite inefficient.

Korean Patent No. 10-2286512

The present invention ensures versatility by supporting the blocking of services for apps that require security installed on user terminals that have been reported lost for all types of user terminals, and also ensures that phone numbers are not exposed during communication with telecommunication companies to confirm loss. It supports blocking services for apps that require security by checking whether the user's terminal is lost without the need to configure a separate dedicated network with a telecommunication company, thereby preventing the blocking of services related to apps that require security installed on the lost user terminal. The purpose is to ensure security, efficiency, and economy.

The method of providing a service for the security of a lost terminal according to an embodiment of the present invention is that when the control unit configured in the user terminal is executed to subscribe to the app security service of the service module included in the security request app installed in the user terminal, the telecommunication company's addition To provide the service, obtain an identification key for the supplementary service pre-allocated by the communication company for management of the supplementary service from the app for the supplementary service pre-installed on the user terminal, and identify the identification key for the supplementary service and the user terminal. A registration request step of transmitting registration request information for subscribing to the app security service including information to an app server corresponding to the security request app, and the app server transmits the registration request information to a service server that provides the additional service. A subscription step in which the service server generates and stores registration information for registration according to application security service subscription based on the registration request information by transmitting the service server, and the service module according to execution of the security request app by the control unit. A loss confirmation request step of transmitting loss confirmation request information including identification information of the user terminal to the service server through the app server each time it is executed, and the service server transmits the loss confirmation request information and registration information based on the loss confirmation request information and registration information. After identifying the identification key for the additional service corresponding to the user terminal, whether the user terminal is lost is checked through communication with the telecommunication company server based on the additional service identification key, and the confirmation result information is sent to the app server. It may include a loss confirmation step of transmitting and a blocking decision step in which the app server blocks services for the user terminal if the user terminal is lost based on the confirmation result information.

As an example related to the present invention, the security requirement app may be an app for any one of finance, securities, shopping, and games.

As an example related to the present invention, the identification key for the additional service may be included in the app for the additional service.

As an example related to the present invention, the identification information of the user terminal may be the phone number of the user terminal or MAC information of the user terminal.

As an example related to the present invention, the app for the additional service may be characterized as a pre-installed app.

As an example related to the present invention, the subscription step further includes the step of the app server including server identification information of the app server in the registration request information and transmitting it to the service server, and the loss confirmation request step includes: , the app server may further include the step of transmitting the loss confirmation request information to the service server by including server identification information of the app server.

As an example related to the present invention, the loss confirmation step includes the service server transmitting search request information including the identification key for the identified additional service to the telecommunication company server, and the telecommunication company server receiving the search request information from the service server. Upon receiving the search request information, identify the identification information of the user terminal matched to the identification key for the additional service according to the search request information, and determine whether a loss report of the user terminal has been received based on the identification information of the user terminal. After confirming whether the loss has occurred, transmitting response information regarding the loss to the service server; and transmitting, by the service server, confirmation result information including the response information and identification information of the user terminal to the app server. It may be characterized as including more.

As an example related to the present invention, the registration request step is performed whenever the control unit executes one or more service modules corresponding to one or more security-requiring apps installed on the user terminal to subscribe to the app security service. Further comprising transmitting request information to an app server corresponding to the service module, wherein the subscription step includes the service server receiving the registration request from each of the one or more app servers corresponding to the one or more security request apps. It further includes generating and storing one or more registration information corresponding to the one or more app servers based on the information, wherein the loss confirmation step is performed when the service server corresponds to any one of the one or more security requiring apps. The method may further include transmitting the confirmation result information to each of the one or more app servers when the loss of the user terminal is confirmed based on the one or more registration information and the loss confirmation request information received from a specific app server. there is.

As an example related to the present invention, after the blocking decision step, when the loss confirmation request information is received from the user terminal while the app server blocks the service for the user terminal, the loss confirmation request information is sent to the service server. It may further include the step of transmitting and resuming service for the user terminal when the lost state of the user terminal is lifted based on the confirmation result information received from the service server.

The service provision system for the security of a lost terminal according to an embodiment of the present invention provides a service through a security request app installed on the user terminal, and when running to subscribe to the app security service of the service module included in the security request app. , an identification key for additional services pre-allocated by the telecommunication company for management of the additional service, which is extracted by the service module from an app for additional services pre-installed on the user terminal to provide the additional service of the telecommunication company, and the user terminal. Registration request information for subscribing to the app security service, including identification information, is received from the user terminal and transmitted to a service server that provides the additional service, and upon execution of the security request app after transmission of the registration request information. Each time the service module is executed, an app server receives loss confirmation request information including identification information of the user terminal from the user terminal and transmits it to the service server, and app security based on the registration request information received from the app server Generate and store registration information for registration according to service subscription, identify the identification key for the additional service corresponding to the user terminal based on the loss confirmation request information and registration information when receiving the loss confirmation request information, and then identify the identification key for the additional service corresponding to the user terminal. Based on the identification key for additional services, the loss of the user terminal is confirmed through communication with the telecommunication company server, and the confirmation result information is transmitted to the app server, and the app server uses the confirmation result information to determine whether the user terminal is lost. It may include a service server that blocks the app server's service for the user terminal when the terminal is lost.

The present invention is a pre-assigned app for additional services that is pre-installed on the user terminal to provide additional services of the telecommunication company through communication between a service module that is automatically executed when a security-requiring app installed on the user terminal and the app server are executed. After generating the information for subscribing to the security service of the security request app, including the identification key for the additional service and the identification information of the user terminal, the additional service is transmitted to the service server that provides the user terminal and registered, and after registration, the security request app is registered. When the service module, which is automatically executed upon execution, requests confirmation of the loss of the user terminal from the app server that provides the service through the security request app using the identification information of the user terminal, the app server interlocks with the service server Using the identification key for additional services that matches the identification information of the user terminal, it is possible to check whether the user terminal is lost with the telecommunication company server, and then block security-required app-related services for the user terminal when the user terminal is lost. By supporting this, there is no need to configure a separate dedicated network by using the identification key for additional services instead of the identification information of the user terminal when requesting confirmation of the loss of the user terminal from the telecommunication company server, and it is not only necessary to take into account the manufacturer and telecommunication company of the user terminal. It can effectively block unauthorized users' access to security-requiring apps without the need to do so, thereby ensuring versatility and improving security, efficiency, and economics.

1 is a configuration diagram of a service provision system for security of a lost terminal according to an embodiment of the present invention.
Figure 2 is an operation example of a service providing system for security of a lost terminal according to an embodiment of the present invention.
Figure 3 is a flowchart of a method of providing a service for security of a lost terminal according to an embodiment of the present invention.
Figure 4 is another example of operation of a service providing system for security of a lost terminal according to an embodiment of the present invention.

Hereinafter, detailed embodiments of the present invention will be described with reference to the drawings.

Figure 1 is a configuration diagram of a service provision system for security of a lost terminal according to an embodiment of the present invention.

As shown, a control unit 140 configured in the user terminal 100 on which one or more applications (hereinafter referred to as apps) is installed, each corresponding to the one or more apps, and the user terminal 100 and One or more app servers 200 that communicate through a communication network, a service server 300 that communicates with the app server 200 and the communication company server 400 over a communication network and provides additional services of the communication company, and various services through the communication network. It may be configured to include a telecommunication company server 400 that communicates with servers and various terminals.

At this time, the communication network described in the present invention may include a wired/wireless communication network, and examples of such wireless communication networks include Wireless LAN (WLAN), DLNA (Digital Living Network Alliance), Wireless Broadband (Wibro), WiMAX (World Interoperability for Microwave Access: Wimax), GSM (Global System for Mobile communication), CDMA (Code Division Multi Access), CDMA2000 (Code Division Multi Access 2000), EV-DO (Enhanced Voice-Data Optimized or Enhanced Voice- Data Only), WCDMA (Wideband CDMA), HSDPA (High Speed Downlink Packet Access), HSUPA (High Speed Uplink Packet Access), IEEE 802.16, Long Term Evolution (LTE), LTE-A (Long Term Evolution- Advanced), Wireless Mobile Broadband Service (WMBS), 5G mobile communication service, Bluetooth, LoRa (Long Range), RFID (Radio Frequency Identification), Infrared Data Association (IrDA), UWB (Ultra Wideband), ZigBee, Near Field Communication (NFC), Ultrasound Communication (USC), Visible Light Communication (VLC), Wi-Fi, This may include Wi-Fi Direct, etc. In addition, wired communication networks include wired LAN (Local Area Network), wired WAN (Wide Area Network), Power Line Communication (PLC), USB communication, Ethernet, serial communication, and optical/coaxial. Cables, etc. may be included.

In addition, the user terminal 100 described in the present invention may refer to various terminals that support voice communication using a telephone network and data communication using a data network, and the user terminal 100 is a smart phone. , Portable Terminal, Mobile Terminal, Personal Digital Assistant (PDA), Portable Multimedia Player (PMP) Terminal, Personal Computer, Laptop Computer, Slate PC , may include various terminals such as tablet PCs, ultrabooks, etc.

Additionally, the user terminal 100 may include a communication unit 110, a storage unit 150, a display unit 130, a user input unit 120, and a control unit 140.

First, the communication unit 110 can communicate with the app server 200, the service server 300, and the communication company server 400 through the communication network, and can transmit and receive various data.

The display unit 130 displays various screens to provide information to the user, and the user input unit 120 receives various commands or data from the user. The display unit 130 may include a separately provided display element (e.g., an LCD panel, etc.), and the user input unit 120 may include an input element (e.g., a button, a wheel, a touch pad, an IR receiver, etc.). It may be implemented in a form that includes the display unit 130 and the user input unit 120 and may be implemented as a touch screen that is composed of one component and enables output and input simultaneously.

Additionally, the storage unit 150 stores various programs including one or more apps installed on the user terminal 100. The storage unit 150 may include at least one various memories such as ROM, RAM, flash memory, memory card, USB memory, HDD, etc.

The control unit 140 executes overall control functions of the user terminal 100 using programs and data stored in the storage unit 150. The control unit 140 may include RAM, ROM, CPU, GPU, and a bus, and the RAM, ROM, CPU, GPU, etc. may be connected to each other through a bus.

In addition, at least one of the communication unit 110, storage unit 150, display unit 130, and user input unit 120 may be included in the control unit 140, and the control unit 140 may be configured to include the communication unit ( 110), it is possible to communicate with various servers such as the one or more app servers 200 and the telecommunication company server 400.

In the following description, the communication configuration of the control unit 140 with the one or more app servers 200 and the telecommunication company server 400 through the communication unit 110 will be omitted.

In addition, one or more apps (app-related data) corresponding to the one or more app servers 200 may be installed and stored in the control unit 140 or the storage unit 150, and the control unit 140 may be configured to store the one or more apps (app-related data) corresponding to each of the one or more app servers 200. Among the above apps, a specific app can be executed to communicate with a specific app server 200 corresponding to the specific app through a communication network.

At this time, the control unit 140 communicates with a separate app store server that provides the app, downloads the app-related data from the app store server, and then stores the app in the control unit 140 or the storage unit 150. The app can be installed on the user terminal 100 by storing it in .

In addition, an app for additional services provided by a telecommunication company corresponding to the telecommunication company server 400 may be pre-installed in the control unit 140 or storage unit 150 of the user terminal 100. .

At this time, the additional service app may refer to a pre-installed app, which is an application that is installed by default when purchasing the user terminal 100.

In addition, the telecommunication company server 400 may assign a unique identification key for additional services to manage the additional service app pre-installed on the user terminal 100, and the additional service app pre-installed on the user terminal 100 may be assigned. The service app may be configured to include the identification key for the additional service in advance.

In the above-described configuration, among one or more apps installed on the user terminal 100, apps such as finance, securities, shopping, and games are used by the user of the user terminal 100 when the user terminal 100 is lost and used without permission by another user. As an app that requires security because it can cause financial damage or leak personal information, it is necessary to block the app that requires security when the user terminal 100 is lost.

Previously, when the user terminal 100 was lost, a locking function was introduced to block access to apps requiring security by remotely locking the user terminal 100 by the manufacturer of the user terminal 100. However, this locking function was not implemented. This lock function cannot be used in terminals of manufacturers that do not provide it, so access to apps requiring security is possible, and the phone function or additional service of the user terminal 100 can be used by the telecommunication company that has received a report of loss of the user terminal 100. Although it provides a blocking function to block apps, it only blocks access to phone functions or additional services provided by telecommunication companies and does not provide a function to block security-requiring apps. Ultimately, the service provider that provides these security-requiring apps If the user terminal 100 is lost, a method must be prepared to block access to apps requiring security.

In other words, the service provider must check whether the user terminal 100 is lost directly through the telecommunication company and block the service requested by the security request app running on the lost user terminal 100. Enable the app server 200 operated by the service provider transmitting data to check whether the user terminal 100 is lost through communication with the telecommunication company server 400 using the phone number of the user terminal 100 To do this, since a phone number requiring security is used, a separate dedicated network must be configured between the telecommunication company server 400 and the app server 200. Not only does it take a considerable amount of time and cost to configure such a dedicated network, but the service provider also requires Since the telecommunication company used by the user terminal 100 cannot be known, the dedicated network must be configured for each of the plurality of telecommunication companies, which further increases the cost and is quite inefficient.

Therefore, in order to solve this existing problem, the present invention provides a service module 101 included in the security request app in the app server 200 corresponding to the security request app, and provides a user terminal on which the security request app is installed ( 100), the identification key for the additional service pre-assigned by the telecommunication company (or the telecommunication company server 400) to the additional service app pre-installed on the user terminal 100 to provide the telecommunication company's additional service and the user terminal 100 After receiving the identification information, matching it with each other and registering it as registration information for the security service of the security request app in the service server 300 that provides the additional service to the user terminal 100, the security request app is stored in the user terminal 100. When the service module 101, which is automatically executed upon execution, requests the app server 200, which provides a service through a security request app, to check whether the user terminal 100 is lost using the identification information of the user terminal 100, , the app server 200 links the user terminal 100 to the communication service provider server 400 using an identification key for additional services that matches the identification information of the user terminal 100 through interworking with the service server 300. ), after checking whether the user terminal 100 is lost, it is possible to block services related to security-required apps for the lost user terminal 100, which will be described in detail with reference to the drawings below.

FIG. 2 is an exemplary operation diagram of a service providing system for security of a lost terminal according to an embodiment of the present invention, and FIG. 3 is a flowchart of a method of providing a service for security of a lost terminal according to an embodiment of the present invention.

As shown, the control unit 140 configured in the user terminal 100 where one or more security-requiring apps are installed, when a specific app among the one or more security-requiring apps is executed, the service pre-included in the specific app The module 101 can be executed.

At this time, the service module 101 may be included in advance in the form of an algorithm in the security-requiring app, and the service module 101 may be configured as an SDK (Software Development Kit) or in the app server 200 corresponding to the specific app. It may be a module created using the provided API (Application Programming Interface).

Additionally, the service module 101 may be automatically executed upon execution of the security-required app, and may be pre-configured (included) in each of the one or more security-required apps.

In addition, when the service module 101 included in the specific app is executed to subscribe to the app security service according to user input through the user input unit 120 configured in the user terminal 100, the control unit 140 provides the service Through the module 101, an identification key for additional services pre-assigned by the telecommunication company for management of the additional service app can be obtained from the additional service app pre-installed on the user terminal 100 (S1). .

In addition, the control unit 140 includes an identification key for the additional service and identification information of the user terminal 100 preset in the control unit 140 or the service module 101 through the service module 101. Registration request information for subscribing to the app security service of the specific app may be generated and transmitted to the app server 200 corresponding to the specific app (S2).

At this time, the identification information of the user terminal 100 may include the phone number of the user terminal 100, MAC information (or MAC address (Media Access Control Address)) of the user terminal 100, etc.

In the above-described configuration, the control unit 140 registers the service module 101 through the service module 101 when the service module 101 corresponding to the specific app is first executed according to the user input. Request information may be generated and transmitted to the app server 200 corresponding to the specific app.

In addition, when receiving the registration request information from the user terminal 100, the app server 200 transmits the registration request information to the service server 300 that provides the additional service to the user terminal 100 through a communication network. (S3).

At this time, the app server 200 may include server identification information of the app server 200 preset in the app server 200 in the registration request information and transmit it to the service server 300.

In addition, when receiving the registration request information, the service server 300 extracts the server identification information included in the registration request information, the identification information of the user terminal 100, and the identification key for the additional service, and then extracts the server identification information and the identification key for the additional service. Registration information for registration according to app security service subscription, including identification information of the user terminal 100 and identification key for additional services, can be generated and stored in the subscription status DB included in the service server 300 (S4) ).

That is, the service server 300 generates and stores registration information based on the registration request information when receiving registration request information for subscribing to the app security service, thereby creating and storing registration information for the specific app of the user terminal 100. You can complete your security service subscription.

In the above-described configuration, server identification information of the app server 200 may be preset in the service server 300, and when the service server 300 communicates with a plurality of different app servers 200, Server identification information for each of the plurality of app servers 200 may be preset (stored) in the service server 300.

For example, setting information including server identification information for each of the plurality of app servers 200 may be stored in advance in the service server 300.

Through this, the service server 300 identifies the app server 200 transmitting the registration request information, includes the server identification information in the registration request information, and then sends registration request information including the server identification information. Based on this, registration information can be created and saved.

At this time, the service server 300 may include a subscription status DB, and the service server 300 may store the registration information in the subscription status DB.

Meanwhile, after completing the application security service subscription for a specific app of the user terminal 100, the control unit 140 of the user terminal 100 includes the specific app automatically executed when the specific app is executed according to user input. Execute the service module 101 to generate loss confirmation request information including identification information of the user terminal 100 through the service module 101 (S5) and send it to the app server 200 corresponding to the specific app. It can be transmitted (S6).

At this time, the control unit 140 may generate the loss confirmation request information through the service module 101 of the specific app every time the specific app is executed and transmit it to the app server 200 corresponding to the specific app.

Additionally, the app server 200 corresponding to the specific app may transmit the loss confirmation request information to the service server 300 when receiving the loss confirmation request information from the user terminal 100 (S7).

At this time, when receiving the loss confirmation request information, the app server 200 corresponding to the specific app includes the server identification information preset in the app server 200 in the loss confirmation request information and transmits it to the service server 300. You can.

In addition, when the service server 300 receives loss confirmation request information from the app server 200, the service server 300 connects the user terminal 100 to the user terminal 100 based on the loss confirmation request information and registration information stored in the subscription status DB. After identifying the identification key for the additional service, it is confirmed whether the user terminal 100 is lost through communication with the telecommunication company server 400 based on the identification key for the additional service, and the confirmation result information is sent to the app server 200. ) can be transmitted to.

For example, when the service server 300 receives the loss confirmation request information from the app server 200 corresponding to the specific app, the service server 300 extracts the identification information of the user terminal 100 included in the loss confirmation request information and then extracts the Among one or more registration information pre-stored in the subscription status DB, specific registration information containing the extracted identification information of the user terminal 100 may be identified.

Additionally, the service server 300 may identify (extract) the identification key for the additional service assigned to the additional service app of the user terminal 100 from the specific registration information (S8).

In addition, the service server 300 generates search request information to check whether the user terminal 100 is lost, including the identified (extracted) identification key for the additional service, and transmits it to the telecommunication company server 400. (S9).

Accordingly, when receiving the search request information from the service server 300, the telecommunication company server 400 identifies the identification information of the user terminal 100 matched to the identification key for the additional service according to the search request information, , based on the identification information of the identified user terminal 100, whether the user terminal 100 is lost according to whether a loss report has been received, and then response information regarding the loss can be transmitted to the service server 300. There is (S10).

At this time, the communication company server 400 may store in advance the identification information of the user terminal 100 that matches the identification key for the additional service.

In addition, the service server 300 may communicate with a plurality of different telecommunication company servers 400, and after transmitting the search request information to the plurality of different telecommunication company servers 400, the plurality of different telecommunication company servers 400 may communicate with each other. Among the communication service provider servers 400, the response information may be received from a specific communication service provider server 400 of a specific communication service provider used by the user terminal 100.

Additionally, when receiving the response information from the telecommunication company server 400, the service server 300 may transmit the confirmation result information to the app server 200, which transmitted loss confirmation request information corresponding to the response information (S11). ).

At this time, the service server 300 sends confirmation result information including the response information and the identification information of the user terminal 100 included in the loss confirmation request information to the app server 200 that transmitted the loss confirmation request information. ) can be transmitted to.

In addition, the app server 200 corresponding to the specific app can check whether the user terminal 100 is lost based on the confirmation result information when receiving the confirmation result information, and the user terminal 100 is in a lost state. In the case of (lost state), the app server 200 for the user terminal 100 prevents the user terminal 100 from transmitting service-related data requested through the specific app to the user terminal 100. Services related to security-required apps can be blocked (S12).

At this time, if the user terminal 100 is lost, the app server 200 may send a message to the user terminal 100 to inform that a specific app corresponding to the app server 200 is blocked, The control unit 140 of the user terminal 100 may receive the message and display the message on the display unit 130 through the specific app.

Here, the message may be configured as a push message.

Through the above-described configuration, the present invention provides an additional service that is preloaded on the user terminal to provide additional services of the telecommunication company through communication between the app server and a service module that is automatically executed when a security-requiring app installed on the user terminal is executed. After generating the information for subscribing to the security service of the security-requiring app, including the identification key for the additional service pre-assigned to the app and the identification information of the user terminal, the information is transmitted to the service server that provides the additional service to the user terminal and registered. , When the service module that runs automatically when the security request app is executed after registration requests the app server that provides the service through the security request app to confirm the loss of the user terminal using the identification information of the user terminal, the app server After checking whether the user terminal is lost with the telecommunication company server using an identification key for additional services that matches the identification information of the user terminal through linkage with the service server, a security request for the user terminal is made when the user terminal is lost. By supporting the blocking of app-related services, there is no need to configure a separate dedicated network by using the identification key for additional services instead of the identification information of the user terminal when requesting confirmation of the loss of the user terminal from the telecommunication company server, as well as the user terminal. It can effectively block unauthorized users' access to security-requiring apps without having to consider manufacturers and carriers, thereby ensuring versatility and improving security, efficiency, and economics.

Meanwhile, the present invention provides that when the user terminal 100 is confirmed to be lost through the service module 101 configured in a specific app, which is a security requirement app installed on the user terminal 100, the device configured (installed) on the user terminal 100 ) It is possible to increase the security of all security-requiring apps installed on the lost user terminal 100 by automatically blocking services for other security-requiring apps. This will be explained in detail with reference to FIG. 4.

The control unit 140 of the user terminal 100 operates each time one or more service modules 101 corresponding to one or more security-required apps installed in the user terminal 100 are executed to subscribe to the app security service. The registration request information may be transmitted to the app server 200 corresponding to the service module 101.

For example, when the first service module included in the first security-requiring app installed on the user terminal 100 is executed to subscribe to the app security service, the control unit 140 controls the user terminal through the first service module. After obtaining the identification key for the supplementary service from the supplementary service app installed on 100, first registration request information including the identification information of the user terminal 100 and the identification key for the supplementary service is generated to request the first security. It can be transmitted to the first app server corresponding to the app.

In addition, the first app server may include server identification information (first server identification information) of the first app server in the first registration request information and transmit it to the service server 300, and the service server 300 ) may generate first registration information for registration according to app security service subscription based on the first registration request information and store it in the subscription status DB.

Likewise, when the second service module included in the second security request app installed on the user terminal 100 is executed, the control unit 140 operates the additional service module installed on the user terminal 100 through the second service module. After obtaining the identification key for the additional service from the service app, generate second registration request information including identification information of the user terminal 100 and the identification key for the additional service, and generate a second registration request information corresponding to the second security request app. It can be transmitted to the app server.

In addition, the second app server may include server identification information (second server identification information) of the second app server in the second registration request information and transmit it to the service server 300, and the service server 300 ) may generate second registration information for registration according to app security service subscription based on the second registration request information received from the second app server and store it in the subscription status DB.

In the above configuration, the first service module included in the first security requirement app and the second service module included in the second security requirement app may be the same service module.

As described above, the service server 300 is based on the registration request information received from each of the one or more app servers 200 corresponding to the one or more security request apps installed on the user terminal 100. One or more registration information corresponding to the app server 200 may be created and stored.

According to the above-described configuration, the service server 300 stores the loss confirmation request information received from the app server 200 corresponding to one of the one or more security request apps installed on the user terminal 100 and the subscription status DB. When the loss of the user terminal 100 is confirmed based on one or more stored registration information, the confirmation result information may be transmitted to each of the one or more app servers 200.

For example, after registration of the app security service for the first and second security-requiring apps installed on the user terminal 100 is completed (after creation of registration information), the service server 300 connects the first security-requiring app to the first security-requiring app. When loss confirmation request information is received from the corresponding first app server, the identification information of the user terminal 100 and the server identification information of the first app server included in the loss confirmation request information are extracted, and the extracted user terminal Specific registration information including identification information of 100 and server identification information of the first app server can be extracted from the subscription status DB.

In addition, the service server 300 extracts the identification key for the supplementary service assigned to the supplementary service app of the user terminal 100 from the specific registration information and then sends search request information including the extracted identification key for the supplementary service. It can be transmitted to the telecommunication company server 400 to request confirmation of whether the user terminal 100 has been lost.

At this time, the service server 300 may transmit the search request information to a plurality of telecommunication company servers 400.

In addition, when the service server 300 receives response information corresponding to the search request information from the telecommunication company server 400 and determines that the user terminal 100 is lost based on the response information, One or more registration information including an identification key for an additional service included in the search request information corresponding to the response information may be extracted from the subscription status DB.

In addition, the service server 300 can identify one or more app servers 200 corresponding to one or more security-required apps installed on the user terminal 100 based on one or more registration information extracted from the subscription status DB. there is.

At this time, the service server 300 may identify the app server 200 corresponding to the extracted registration information based on the server identification information included in the extracted registration information.

In addition, the service server 300 may transmit confirmation result information including the response information and identification information of the user terminal 100 extracted from registration information corresponding to the response information to each of the one or more app servers 200. there is.

Accordingly, each of the one or more app servers 200 that have received the confirmation result information determines whether the user terminal 100 is in a lost state based on the response information included in the confirmation result information and the identification information of the user terminal 100. Once identified, services for security-requiring apps installed on the user terminal 100 can be blocked.

For example, when the first app server determines that the user terminal 100 is lost based on the confirmation result information received from the service server 300, it sends a first security request corresponding to the first app server. App-related services can be blocked from being provided to the user terminal 100.

In addition, the second app server, which has received confirmation result information containing the same response information and user identification information included in the confirmation result information transmitted to the first app server, receives the confirmation result received from the service server 300. If it is confirmed that the user terminal 100 is lost based on the information, services related to the second security-required app corresponding to the second app server may be blocked from being provided to the user terminal 100.

That is, when the user terminal 100 is lost, the service server 300 provides information about the lost state of the user terminal 100 to one or more apps installed on the user terminal 100 and subscribed to the app security service. It may be transmitted to one or more app servers 200 corresponding to each security-required app, thereby blocking services for all security-required apps installed on the user terminal 100.

In addition, when the app server 200 blocks the service for the user terminal 100 and receives the loss confirmation request information from the user terminal 100, it sends the loss confirmation request information to the service server 300. transmission, and when the lost status of the user terminal 100 is canceled based on the confirmation result information received from the service server 300, the service for the user terminal 100 can be resumed.

As described above, the present invention provides security installed on the user terminal 100 that is reported lost for all types of user terminals 100 without the need to consider the telecommunication company used by the user terminal 100 or the manufacturer of the user terminal 100. In addition to ensuring versatility by supporting blocking services for necessary apps, the phone number is not exposed during the communication process with the telecommunication company to confirm loss, so the user terminal (100) does not need to configure a separate dedicated network with the telecommunication company. By supporting the blocking of services for apps requiring security by checking whether the device has been lost, the security, efficiency, and economics of blocking services related to apps requiring security installed on the lost user terminal 100 can be guaranteed. .

Meanwhile, in the above-described configuration, the service server 300 stores the additional service code from the telecommunication company server 400 when the communication service for the user of the user terminal 100 is terminated (for example, number transfer). Due to deletion, it becomes impossible to check whether the user terminal 100 is lost.

To prevent this, the service server 300 periodically transmits the identification key for the additional service included in each of the plurality of different registration information stored in the subscription status DB to a plurality of different telecommunication company servers 400 to provide the additional service. It can perform the function of checking the validity of the identification key for the service.

At this time, the service server 300 may transmit validity confirmation request information including an identification key for an additional service to a plurality of different telecommunication company servers 400, and the validity confirmation request information from each of the plurality of different telecommunication company servers 400 may be transmitted. After receiving validation response information corresponding to the confirmation request information, it is possible to check whether the identification key for the additional service is valid based on the validation response information.

In addition, when the service server 300 confirms that an identification key for a specific additional service that is invalid due to termination of communication service is performed through the above function, the service server 300 provides specific registration information including the identification key for the specific additional service in the subscription status DB. can be identified, and identification information of a specific user terminal 100 can be extracted from the specific registration information.

In addition, the service server 300 provides information about the specific user terminal 100 corresponding to the identification information of the specific user terminal 100 and the communication service provider server 400 that has changed according to termination of the communication service. After obtaining prior customer information consent and consent to provision of third party information through communication, procedures for automatic subscription or re-subscription to the above app security service may be performed.

At this time, the service server 300 may delete specific registration information including an invalid identification key for a specific additional service from the subscription status DB.

Components described in embodiments of the present invention include, for example, a storage unit such as memory, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, and a field programmable device (FPGA). One or more general-purpose computers, such as hardware such as a gate array, programmable logic unit (PLU), microprocessor, software containing an instruction set, or a combination thereof, or any other device capable of executing and responding to instructions. It can be implemented using a special purpose computer.

The above-described content can be modified and modified by anyone skilled in the art without departing from the essential characteristics of the present invention. Accordingly, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention, but are for illustrative purposes, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be interpreted in accordance with the claims below, and all technical ideas within the equivalent scope should be construed as being included in the scope of rights of the present invention.

100: user terminal 101: service module
110: Communication unit 120: User input unit
130: display unit 140: control unit
150: storage unit 200: app server
300: Service server 400: Telecommunications company server

Claims (10)

When the control unit configured in the user terminal is executed to subscribe to the app security service of the service module included in the security request app installed in the user terminal, the telecommunication company Obtain an identification key for the supplementary service previously allocated for management of the supplementary service, and send registration request information for subscription to the app security service, including the identification key for the supplementary service and identification information of the user terminal, to the security. A registration request step of transmitting to an app server corresponding to the requested app;
A subscription in which the app server transmits the registration request information to a service server that provides the additional service, and causes the service server to generate and store registration information for registration according to app security service subscription based on the registration request information. step;
A loss confirmation request step in which the control unit transmits loss confirmation request information including identification information of the user terminal to the service server through the app server whenever the service module is executed according to execution of the security request app;
The service server identifies the identification key for the additional service corresponding to the user terminal based on the loss confirmation request information and registration information, and then communicates with the communication service provider server corresponding to the communication service provider based on the identification key for the additional service. A loss confirmation step of checking whether the user terminal is lost and transmitting the confirmation result information to the app server; and
A blocking decision step in which the app server blocks services for the user terminal when the user terminal is lost based on the confirmation result information;
A method of providing a service for the security of a lost terminal including.
In claim 1,
A method of providing a service for the security of a lost terminal, wherein the security-required app is an app for any one of finance, securities, shopping, and games.
In claim 1,
A method of providing a service for security of a lost terminal, characterized in that the identification key for the additional service is included in the app for the additional service.
In claim 1,
A method of providing a service for security of a lost terminal, wherein the identification information of the user terminal is the phone number of the user terminal or MAC information of the user terminal.
In claim 1,
A method of providing a service for the security of a lost terminal, characterized in that the app for the additional service is a pre-loaded app.
In claim 1,
The registration step is,
Further comprising the step of the app server including server identification information of the app server in the registration request information and transmitting it to the service server,
The loss confirmation request step is,
A method of providing a service for security of a lost terminal, further comprising the step of the app server including server identification information of the app server in the loss confirmation request information and transmitting it to the service server.
In claim 1,
The loss confirmation step is,
transmitting, by the service server, search request information including the identification key for the identified additional service to the telecommunication company server;
When the telecommunication company server receives the search request information from the service server, it identifies the user terminal's identification information matched to the identification key for the supplementary service according to the search request information, and identifies the user based on the identification information of the user terminal. Confirming whether the terminal is lost based on whether a loss report has been received, and then transmitting response information regarding the loss to the service server; and
The service server transmitting confirmation result information including the response information and identification information of the user terminal to the app server.
A method of providing a service for the security of a lost terminal, further comprising:
In claim 1,
The registration request step is,
The control unit transmits the registration request information to the app server corresponding to the service module whenever each of one or more service modules corresponding to one or more security-required apps installed on the user terminal is executed to subscribe to the app security service. Includes further steps,
The registration step is,
A step of the service server generating and storing one or more registration information corresponding to the one or more app servers based on the registration request information received from each of the one or more app servers respectively corresponding to the one or more security request apps. Includes,
The loss confirmation step is,
When the service server confirms the loss of the user terminal based on the one or more registration information and the loss confirmation request information received from a specific app server corresponding to any one of the one or more security requiring apps, each of the one or more app servers A method of providing a service for the security of a lost terminal, further comprising the step of transmitting confirmation result information.
In claim 1,
After the above blocking decision step
When the app server blocks the service for the user terminal and receives the loss confirmation request information from the user terminal, it transmits the loss confirmation request information to the service server and based on the confirmation result information received from the service server. A method of providing a service for security of a lost terminal, further comprising the step of resuming service to the user terminal when the lost state of the user terminal is canceled.
The service is provided through a security-requiring app installed on the user terminal, and when running to subscribe to the app security service of the service module included in the security-requiring app, it is for an additional service pre-installed on the user terminal to provide additional services from the telecommunication company. Registration request information for subscription to the app security service, including identification information of the user terminal and an identification key for the supplementary service pre-assigned by the telecommunication company for management of the supplementary service extracted by the service module from the app. It is received from the user terminal and transmitted to a service server that provides the additional service, and includes identification information of the user terminal from the user terminal each time the service module is executed according to execution of the security request app after transmission of the registration request information. An app server that receives loss confirmation request information and transmits it to the service server; and
Based on the registration request information received from the app server, registration information for registration according to app security service subscription is generated and stored, and when the loss confirmation request information is received, the user based on the loss confirmation request information and registration information After identifying the identification key for the additional service corresponding to the terminal, it is confirmed whether the user terminal is lost through communication with the communication company server corresponding to the communication company based on the identification key for the additional service, and the confirmation result information is sent to the above. A service server that transmits to the app server and blocks the service of the app server for the user terminal when the user terminal is lost based on the confirmation result information from the app server.
A service provision system for the security of lost terminals including.

Images