KR20010092011A - An user authentication system and method using a mobile terminal - Google Patents

Abstract

PURPOSE: A user authentication system using a mobile communication terminal and a method therefor are provided to conveniently and simply confirm a user and process an authentication in a service provider and a server user using the mobile communication terminal. CONSTITUTION: A user authentication information database(350) previously stores an intrinsic identification number of each mobile communication terminal(200) of a user of which authentication is requested. A mobile communication terminal(200) receives a shorten message and transmits a detected shorten message in case that the shorten message related to a user authentication is detected from the received shorten message. A user authentication server system(300) detects an intrinsic identification number of a corresponding user mobile communication terminal through the analysis of the transmitted shorten message, compares the detected identification number with the identification number stored in the user authentication information database(350), and performs a user authentication process when the detected identification number is identical to the identification number stored in the user authentication information database(350).

Description

User authentication system and method using mobile communication terminal {AN USER AUTHENTICATION SYSTEM AND METHOD USING A MOBILE TERMINAL}

The present invention relates to a user authentication system and method used in accordance with the provision of services and other related services on a wired or wireless computer network, and more particularly, a mobile communication terminal for identifying and authenticating a user using a mobile communication terminal of a service user. It relates to a user authentication system used and a method thereof.

With the development of information and communication technology, the rapid development of computer network technology based on it, the expansion of users, and services related to e-commerce activities and wired / wireless computer network use based on them, "User Authentication" is very important. It became an essential information processing process.

"User authentication" means that the data provider and receiver can be reliably checked to each other in the process of transmitting and receiving data on the network, thereby stably trading goods, providing services, and financial transactions between the provider and the receiver. It's a technology that makes it possible.

If user authentication is not done properly, service providers and sellers of goods will not be able to verify the user's credibility, so they will not be able to make stable payments for selling goods or using services. There will be many limitations in the provision of services. This brings a problem of not being provided with quality service even from the point of view of the service user.

As such, user authentication becomes an essential matter in providing services through electronic commerce and computer networks. Recently, related technologies and methods have been proposed and implemented in various forms.

A typical user authentication method is a public key / secret key based user authentication method that can be trusted by a trading party, a service use and a providing party only for a certificate issued by a predetermined certification authority.

In the case of the public key / secret key method, the satisfaction is high in terms of security and reliability, and is used in various fields.

However, in the case of the public / secret key-based security / authentication method, before the initial transaction and service start, the identification process through a designated certification authority becomes an essential element, in which case the user visits the certification authority or In addition, the user has to visit a corresponding place in person and issue a separate certificate.

On the other hand, in recent years, a computer network access service through a mobile communication network, that is, a user authentication method through a wireless Internet service has been used.

However, unlike wired computer network related services, there are various difficulties in applying the aforementioned public key / secret key security / authentication method to electronic commerce and other related services and financial related services through wireless.

The most representative example of this is the limitation of the capacity of data that can be transmitted and received. In the case of the wireless Internet, the amount of data that can be transmitted and received is inevitably smaller than that of a wire.

Therefore, wireless Internet services are generally implemented to provide other related services with a minimum amount of data. However, in the case of the public key / private key method, it is difficult to apply it as it is to the wireless Internet service.

In some cases, public / private keys have been proposed to reduce the amount of data and simplify the processing, but in this case, the security and reliability of wires have been degraded, and users and service providers have to avoid such services. Gave birth to.

Moreover, in recent years, computer network services related to wired / wireless integration have been proposed in various forms, and there has been a demand for a user authentication method that can be applied to all wired and wireless environments. However, existing methods do not solve all of them.

However, in order to solve such problems, a user authentication system for processing user authentication using a system as shown in FIG. 1 and a method thereof have been proposed.

The operation thereof will be briefly described with reference to FIG. 1.

1 is a diagram illustrating a user authentication through a mobile communication network and a general user authentication system configuration for performing the same.

First, in the case where the user wants to provide Internet-related services through the wireless and wired networks or requires user authentication in accordance with other transactions and service provisioning activities, first of all, Request for short message transmission to SMS server 60 of mobile communication network.

Then, the short message service server 60 transmits the requested item to the message center 40, and the requested item becomes an authentication request message according to user authentication.

The message center 40 receiving the authentication request message checks the subscriber information of the corresponding user and confirms the location of the corresponding user mobile communication terminal through the home location register (HLR) 50 of the mobile communication network.

Through the verification process of the home location register 50, the real name of the subscriber is confirmed.

Next, the message center 40 transmits a mobile application part (MAP) message to the MSC 20, and the MSC 20 transmits the MAP message to the base station system 10 in which the subscriber is located according to a location check result. To pass.

The base station system 10 transmits a short message to the mobile communication terminal (MS) of the subscriber through the transferred MAP. The transmitted short message is a message including a code or password including the authentication request item.

The subscriber who has received the short message checks the content of the short message and accesses the predetermined code and password included in the content to the service provider server on the computer network to be provided with the service, and inputs the short message.

Then, the service provider server compares the input code and password with the subscriber information in the database stored in correspondence with the subscriber, and if it matches, the service provider server provides the necessary services by treating the identity of the corresponding user or as an authenticated user. Done.

As described above, the user authentication through the system illustrated in FIG. 1 may be processed only through the help of a mobile communication service provider, that is, a mobile communication service provider.

In the case of mobile communication service providers, the user identification using the system shown in FIG. It is the way.

This is the most widely used user authentication method in recent years because it is determined that the reliability and security is relatively improved. In addition, in the case of providing related services on the wireless Internet in addition to the wired, it can be appropriately applied, and the implementation is made accordingly.

However, the system of the type shown in FIG. 1, and the user authentication method according to the method, despite the advantages of security and stability, in the case of a service provider requiring user authentication, provides a mobile Internet network. The network service provider is required to pay a separate additional cost related to user authentication processing.

That is, in the user authentication process, service providers that provide computer network related services are required to authenticate users who require the use of the service. In addition to the cost of using the mobile network, the authentication fee is to be paid separately.

This leads to a problem that service providers providing computer network related services avoid the use of the mobile communication network despite user convenience and stability when authenticating a user through the mobile communication network.

Accordingly, an object of the present invention is to use a mobile communication terminal of a user who wants to use a related service requiring user authentication, so that both a service provider and a service user can more conveniently and conveniently identify and authenticate a user. A user authentication system using a terminal and a method thereof are provided.

In another aspect, an object of the present invention is to use a mobile communication terminal that allows a service provider to independently process user authentication regardless of the mobile network service provider while maintaining the security and reliability advantages of the mobile communication network. A user authentication system and method are provided.

The present invention to achieve these objects;

A user authentication information database for storing an identification number unique to each mobile communication terminal required for authentication;

A mobile communication terminal that receives a shortcut message and delivers the detected shortcut message when a shortcut message related to user authentication is detected from the received shortcut message;

Through analysis of the delivered shortened message, an identification number unique to the corresponding user mobile communication terminal is detected, and the identification number stored in the user authentication information database is compared with the detected identification number, and if it is determined to be the same identification number, A user authentication system using a mobile communication terminal comprising a user authentication server for performing user authentication processing is proposed.

In addition, the present invention;

A user authentication information database which pre-stores a decision code corresponding to each user for authentication;

A mobile communication terminal that receives a shortcut message and delivers the detected shortcut message when a shortcut message related to user authentication is detected from the received shortcut message;

When the decision code designated by the user is detected through the analysis of the delivered short message, the detected decision code is compared with the decision code stored on the user authentication information database, and if it is determined to be the same decision code, the user authentication is performed. We propose a user authentication system using a mobile communication terminal comprising a user authentication server for processing.

And, the present invention;

A short message receiving process for receiving a short message transmitted through a wireless network from a mobile communication terminal of a user for whom user authentication has been requested;

An identification number detection process of detecting an identification number unique to the mobile communication terminal included in the received short message;

An identification number comparison process of determining whether the identification number unique to the user's mobile communication terminal is identical to the identification number previously stored for the user;

A user authentication process of authenticating a corresponding user when the detected identification number and the stored identification number are determined to be the same identification number;

The present invention proposes a user authentication method using a mobile communication terminal comprising a user authentication result delivery process of delivering the authenticated result to a user authentication requestor requesting user authentication.

1 is a view showing a user authentication through a mobile communication network and a conventional user authentication system configuration for performing the same;

2 is a view showing the configuration of a user authentication system for performing user authentication using a mobile communication network according to an embodiment of the present invention;

3 is a block diagram illustrating an internal block configuration of a user authentication system according to an embodiment of the present invention;

4 is a view showing a packet configuration of a short message used in a user authentication system according to an embodiment of the present invention;

5 is a view showing a packet configuration of a mobile communication terminal identification code included in a short message in a user authentication system according to a preferred embodiment of the present invention;

6 is a view showing an authentication database table structure of a user authentication system according to an embodiment of the present invention;

7A, 7B, 7C, and 7D illustrate an operation flow of a user authentication system according to a preferred embodiment of the present invention;

8 is a view showing a display screen state on the mobile communication terminal in the operation of the user authentication system according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First, in describing the present invention through the reference numerals added to the components of each drawing, it should be noted that the same reference numerals are used even when the same reference numerals are shown on the other drawings to indicate the same components.

In addition, the matters mentioned in the following description are intended to help a more general understanding of the present invention, and it will be apparent to those skilled in the art that the present invention may be practiced without these matters.

In the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

In particular, a detailed description of the already known and publicly known facts, and configurations and operations not directly related to the gist of the present invention will be omitted in the wireless Internet and other mobile communication terminals to be described below.

First, Figure 2 is a view showing the configuration of a user authentication system using a mobile communication terminal according to a preferred embodiment of the present invention.

A home location register, which constitutes a normal mobile communication network on the drawing. The configuration of the mobile switching center, the VLR, the message center and the like and the description thereof are omitted. This is based on the fact that it is not configured as a main element in explaining the gist of the present invention. However, in the practice of the present invention, its configuration will be necessary.

2, reference numeral 100 denotes a base station configured in a mobile communication network. The base station is connected to a mobile switching center of a mobile communication network, and forms a wireless channel with a mobile communication terminal for a user authentication system proposed according to an embodiment of the present invention.

Transmission of the proposed short message according to the embodiment of the present invention is performed through the formed wireless channel.

The base station becomes a normal base station established by a mobile communication service provider in each region and location.

Reference numeral 200 is a mobile communication terminal according to an embodiment of the present invention, and forms a wireless channel with the base station.

In addition, the mobile communication terminal is connected to the user authentication server system according to the embodiment of the present invention. And receiving and processing a wireless signal transmitted from a mobile communication terminal of a user for which user authentication has been requested, and if the shortened message related to user authentication is included in the received wireless signal, transmitting the shortened message to the user authentication server system. do.

The radio signal is transmitted through the base station, which is a signal transmitted from a mobile communication terminal of a user requiring user authentication and transmitted through a mobile switching center of a corresponding mobile communication service provider.

In the practice of the present invention, the mobile communication terminal may be a conventional mobile phone, and other terminals equipped with a mobile communication terminal chip subscribed to a mobile communication service provider may be used. Examples thereof include wireless communication PDAs, two-way pagers, and other related portable information terminals.

In addition, the mobile communication terminal transmits a short message related to user authentication transmitted from the user authentication server system to the mobile communication terminal of the corresponding user as a radio signal in the practice of the present invention. The transmitted radio signal is also transmitted to the user's mobile communication terminal through the base station and the mobile switching center connected thereto.

Reference numeral 300 denotes a user authentication server system according to an embodiment of the present invention.

The user authentication server system receives a short message according to user authentication from the mobile communication terminal, and performs authentication of the corresponding user.

User authentication is performed through data analysis on the transmitted short message.

Then, the authentication result of the corresponding user is transferred to the service provider who requested the user authentication or the authentication requester. A typical authentication requestor may be a paid content provider (CP) or the like.

The user authentication server system further includes a user authentication database for storing related data according to user authentication, and allows the user authentication server system to authenticate a user by performing access to relevant information according to user authentication stored on the database. do.

3 is a block diagram illustrating an internal block configuration of a user authentication system according to an exemplary embodiment of the present invention.

This is a view showing the internal block configuration of the mobile communication terminal and the user authentication server system connected thereto shown in FIG. 2 in more detail.

Reference numeral 200 denotes a mobile communication terminal, and reference numeral 300 denotes a user authentication server system. Reference numeral 350 is a user authentication information database to which the user authentication server system is accessed.

The mobile communication terminal includes a wireless signal processor 210, a controller 220, and a user interface 230 therein. Although not shown in the figure, it has a configuration of a conventional mobile communication terminal.

First, the radio signal (RF) unit 210 receives a radio signal transmitted through the base station. Then, the radio signal required for transmission is transmitted.

The radio signal transmitted and received is a radio signal corresponding to a frequency band permitted by the mobile communication network service provider to which the mobile communication terminal is subscribed.

In addition, the received radio signal is a radio signal including a short message according to a user authentication proposed according to the embodiment of the present invention, in addition to the radio signal related to the normal mobile communication. Similarly, the transmitted radio signal is also a short message according to the user authentication request proposed according to the embodiment of the present invention, in addition to the normal radio signal.

The controller 220 controls the overall operation of the mobile communication terminal. That is, normal voice call execution and data transmission / reception related processing are controlled.

In addition, according to an embodiment of the present invention, the controller 220 identifies and reads a short message related to user authentication from a wireless signal received through the wireless signal processor 210. This is done through data decoding and demodulation operations. In the case of a shortcut message related to user authentication, the shortcut message is controlled to be transmitted to the user authentication server system.

In addition, the control unit 220 wirelessly processes the user authentication related short message transmitted from the user authentication server system to the corresponding mobile communication terminal.

The user interface 230 is configured in a general mobile communication terminal, and performs an operation and a driving according to user interfacing.

This may be a display unit for displaying necessary information and functions, and may include a key input unit capable of inputting necessary commands. In addition, the user authentication server system and the connection interface for performing data transmission necessarily include.

The shortened message received and forwarded to the user authentication server system is transmitted through the connection interface unit.

Next, the user authentication server system configures a short message analyzing unit 310 and a database processing unit 320 therein. And other computer network connection related configurations. This has a different configuration depending on the application field of the user authentication server system.

First, in the implementation of the present invention, the shortcut message analyzer 310 receives a shortcut message received on the mobile communication terminal in response to a user authentication request and analyzes the contents thereof.

The analysis of the forwarded short message with respect to the user authentication process according to the practice of the present invention reads the MIN / ESN value on the transmitted short message packet, or the data value of the CHARI region on the predefined data burst message and its analysis. According to the analysis.

In this case, the present invention is applied to mobile communication services such as IS-95 (A / B / C) and IS-2000 of the CDMA system.

For reference, the CDMA technology shows superior security compared to other mobile communication methods, which is possible by encrypting each user using a unique PN (Pseudo Noise) code.

Moreover, the security is superior to that of any security method commonly used.

Meanwhile, in the implementation of the present invention, the packet configuration of the short message related to user authentication has the configuration shown in FIG. 4.

4 is a diagram illustrating a packet configuration of a short message used in a user authentication system according to an exemplary embodiment of the present invention.

Referring to this briefly, a short message packet having the above-described configuration is a packet configuration of a short message transmitted from a mobile communication terminal of a user requiring authentication in the embodiment of the present invention and received by a mobile communication terminal connected to the user authentication server system. Becomes

MIN. For the user authentication process according to the embodiment of the present invention in the short message packet configuration. ESN values are used. However, if analysis of the MIN / ESN is not possible due to specific circumstances and other circumstances, the data included in the CHARI region is used.

When the user authentication is processed using the data on the CHARI area, data stored in the bearer data area therein is used. In the bearer data area, data of the user data area defined therein is used.

In addition, when the data on the CHARI area is to be used, the user server system generates and transmits a short message including a predetermined code, that is, a decision code, predetermined to the mobile communication terminal of the user who has been requested for user authentication, and sends the shortened message that has been transmitted. The user authentication process is performed by analyzing the data of the CHARI area on the message.

Meanwhile, the configuration of the short message packet is determined according to the IS-637 protocol.

In the implementation of the present invention, the data of the user data area is composed of a decision code and reference data describing the same, and the user authentication is processed through an analysis result of the decision code and the reference data.

The determination code is a unique identification code for each user to be authenticated, and is data included in a short message previously transmitted to the user, and is the data transmitted in response thereto.

Therefore, whether or not the user authentication is determined based on whether the decision codes match.

5 is a diagram illustrating a configuration state of a mobile communication terminal identification code, that is, MIN / ESN value included in a short message in a user authentication system according to a preferred embodiment of the present invention.

Referring to this, two types of MINs are distinguished from each other in an MIN area, and an ESN is composed of an MFR code, a reserved code, and a serial number code unique to a corresponding mobile communication terminal.

That is, in the implementation of the present invention, the SMS analyzer 310 analyzes the MIN / ESN value on the short message transmitted from the mobile communication terminal, and processes the user's authentication through the result.

If analysis of the MIN / ESN value is impossible, authentication of the corresponding user is processed through analysis of the CHARI imaginary decision code and its reference data.

Meanwhile, the database processor 320 determines whether the authentication information of the user corresponding to the analyzed result is in a state of being stored on the user authentication information database 350 and performs user authentication processing accordingly.

This is achieved by accessing the user authentication information database 350 and comparing data identity between the user authentication related information read out according to the access and the analyzed result.

That is, when the MIN / ESN read as the analysis result on the abbreviated message is stored on the user authentication information database 350, the corresponding user is authenticated.

In the case of the CHARI analysis result, if the determination code and its reference data are stored on the user authentication information database 350, the user is authenticated.

The database processor 320 transmits the processed authentication result to a content provider (CP) or an authentication requestor who has requested a user authentication.

The user authentication information database 350 stores user authentication information related to a mobile communication terminal of a user who requires authentication.

The stored information is unique data corresponding to MIN / ESN of a mobile communication terminal owned by each user to be authenticated and each user included in the CHARI.

6 shows a table structure of data stored on the user authentication information database.

That is, FIG. 6 is a diagram illustrating a user authentication information database table structure of the user authentication system according to an exemplary embodiment of the present invention.

The table of the database constitutes at least essentially a serial number field, a MIN field and an ESN field, and a decision code field.

In addition, the reference field of the user, the voice field used when providing a voice related service, and other log file related fields may be further configured according to the request of the operator.

Each user is identified and stored, and correspondingly, the MIN / ESN of the mobile communication terminal of the corresponding user is stored. And the decision code is stored as needed.

The user authentication according to an embodiment of the present invention is determined as whether the stored MIN / ESN value and the decision code value are the same as the MIN / ESN value and the decision code value on the short message transmitted from the mobile communication terminal.

In the embodiment of the present invention, when the MIN / ESN value or the CHARI value is the same, user authentication processing is performed. Otherwise, user authentication is not performed. The result is then passed to the CP and the user authentication requester.

7A, 7B, 7C, and 7D are diagrams illustrating an operation flow of a user authentication server system according to a preferred embodiment of the present invention.

Hereinafter, a user authentication processing operation according to an embodiment of the present invention will be described in detail with reference to the drawings.

First, in step 701, the user authentication server system performs both standby states.

In step 702, it is determined whether to send an SMS. This is determined by whether or not a short message received from the mobile communication terminal, that is, a received short message in relation to user authentication, is delivered.

If there is a short message transmission in step 702, MIN / ESN detection on the short message is first performed in step 703.

In step 704, it is determined whether MIN / ESN detection is successful. This may be the case that MIN / ESN detection may not be possible depending on the specific situation of the mobile network service provider or mobile terminal manufacturer. In such a case, another form is an operation for determining to be able to handle user authentication.

If it is determined in step 704 that MIN / ESN detection is successful, in step 705, the user authentication information database is accessed.

In step 706, it is determined whether the MIN / ESN of the user corresponding to the detected MIN / ESN value is stored in the user authentication information database.

When the MIN / ESN value is in the stored state in step 706, in step 707, an equality comparison between the detected MIN / ESN value and the corresponding MIN / ESN value stored in the user authentication information database is performed.

In step 708, it is determined whether the two MIN / ESN values are the same. That is, to confirm the user.

In step 711, the authenticated result is transmitted to the requestor for requesting user authentication.

In step 712, the authentication result is processed as an authentication history and stored separately.

On the other hand, if it is determined in step 708 that the two MIN / ESN value is not the same value, in step 731 is performed according to the user authentication denial.

In operation 732, the process related to the illegal use is performed, and the result is provided to the user authentication requester.

In this case, the user authentication is not processed.

If it is determined in step 706 that the MIN / ESN of the user is not in the stored state, it is treated as an initial user related to user authentication. Therefore, in step 721, the user enters the initial user processing mode. That is, a process for registering a user for whom a user authentication request is made for the first time is performed.

This is done by analyzing the transmitted shortened message in step 722 and performing a process according to the corresponding user confirmation in step 723.

If user verification is made in step 724, the user authentication information database is accessed in step 725.

If the user confirmation is not performed in step 724, the user authentication rejection operation of step 731 is performed as it is.

In step 726, the identified user is registered on the user authentication information database. The registered user is then processed for user authentication according to a process related to user authentication.

On the other hand, if it is impossible to detect MIN / ESN in step 704, that is, if it is impossible to detect the MIN / ESN due to a specific situation, in step 741, the operation of analyzing the CHARI region data is performed.

First, in step 742, it is determined whether or not the decision code is included in the CHARI region data on the transmitted short message.

If it is determined that the decision code is included in the CHARI region data, the user authentication information database is accessed in step 743.

In operation 744, the included decision code is compared with a decision code stored on the user authentication information database.

If it is determined in step 745 that the decision code is the same, the user authentication process of step 709 is performed.

This is the case when user authentication has been processed.

However, if the comparison result of the determination code in step 745 is not the same code, the user authentication rejection operation of step 731 is performed as it is.

However, if the decision code is not included in the CHARI region data in step 742, the process according to the decision code transmission is performed in step 760.

This is an operation for transmitting the predetermined decision code generated by the mobile communication terminal of the corresponding user using the mobile communication terminal.

Then, in response to the short message received by the mobile communication terminal, the user sends the short message including the decision code to the mobile communication terminal again in connection with the user authentication process.

8 is a view showing a display screen state on a mobile communication terminal in the operation of a user authentication system according to a preferred embodiment of the present invention. FIG. 8 is a display screen of a user mobile communication terminal in user authentication processing through the use of the decision code. The figure shows the state.

Referring to this, in the case of the S1 screen, the screen when the user company mobile communication terminal payment mode is selected in the user mobile communication terminal that requires authentication. Herein, the decision code is “12345”, which is an output result of the shortened message transmitted from the user authentication server and the mobile communication terminal connected thereto according to the embodiment of the present invention.

In the case of the S2 screen, the user inputs a decision code in response to the short message sent from the user authentication server, and transmits the short message to the mobile communication terminal connected to the user authentication server. The user inputs the decision code " 12345 " included in the transmitted short message and then transmits it.

In the case of the S3 screen, a screen showing that user authentication has been processed according to the determination code input and the result of the transmission of the short message including the decision code is included. In this state, the user is able to use the service to be serviced.

Meanwhile, in the detailed description of the present invention, more specific embodiments such as a CDMA method have been described, but various modifications are possible without departing from the scope of the present invention.

For example, the present invention may be applied to a GSM or other mobile communication terminal.

Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the scope of the following claims, but also by the equivalents of the claims.

Implementation of the present invention as described above has the advantage that it is more convenient and simple to identify and authenticate the user for both the service provider to provide a service for which user authentication is required, and the service user to receive the service. give.

In addition, while retaining the advantages of security and reliability of the mobile communication network, the service provider has an advantage of allowing the user to independently process user authentication regardless of the mobile communication network service provider.

Accordingly, the service provider has an advantage of performing user authentication regardless of the mobile network service provider's request.

Claims (13)

In the user authentication system, A user authentication information database for storing an identification number unique to each mobile communication terminal required for authentication; A mobile communication terminal that receives a shortcut message and delivers the detected shortcut message when a shortcut message related to user authentication is detected from the received shortcut message; Through analysis of the delivered shortened message, an identification number unique to the corresponding user mobile communication terminal is detected, and the identification number stored in the user authentication information database is compared with the detected identification number, and if it is determined to be the same identification number, A user authentication system using a mobile communication terminal, characterized in that consisting of a user authentication server for performing a user authentication process. The method of claim 1, wherein the identification number, User authentication system using a mobile communication terminal, characterized in that the MIN / ESN value included in the defined short message related to the IS-637 protocol. The method of claim 1, wherein the mobile communication terminal, The user authentication system is connected to the user authentication server as a predetermined data transmission path, and the user authentication system using a mobile communication terminal, characterized in that for delivering the detected short message through the connected data transmission path. The method of claim 1, wherein the user authentication server, User authentication system using a mobile communication terminal, characterized in that for transmitting the result of the user authentication process performed to the user authentication requestor for the user authentication request. In the user authentication system, A user authentication information database that stores a decision code corresponding to each user required for authentication; A mobile communication terminal that receives a shortcut message and delivers the detected shortcut message when a shortcut message related to user authentication is detected from the received shortcut message; When the decision code designated by the user is detected through the analysis of the delivered short message, the detected decision code is compared with the decision code stored on the user authentication information database, and if it is determined to be the same decision code, the user authentication is performed. User authentication system using a mobile communication terminal, characterized in that consisting of a user authentication server to perform the processing. The method of claim 1, wherein the decision code, User authentication system using a mobile communication terminal, characterized in that the unique identification code stored in the user data area on the CHARI area data included in the defined short message related to the IS-637 protocol. The method of claim 1, wherein the user authentication server, If the decision code designated by the user is not detected from the delivered short message, a decision code of a predefined form is generated and registered, the generated decision code is generated as a short message, and then the mobile communication terminal of the user. User authentication system using a mobile communication terminal, characterized in that the request for transmission to. The method of claim 7, wherein the mobile communication terminal, And in response to the request for transmitting the shortened message from the user authentication server, transmitting the generated shortened message to the mobile communication terminal of the corresponding user. In the user authentication method using a mobile communication terminal, A shortcut message receiving process for receiving a shortcut message transmitted through a wireless network from a mobile communication terminal of a user for which user authentication has been requested; An identification number detection process for detecting an identification number unique to the mobile communication terminal included in the received short message; An identification number comparison process of determining whether the identification number unique to the user's mobile communication terminal is identical to the identification number previously stored for the user; A user authentication process of authenticating a corresponding user when the detected identification number and the stored identification number are determined to be the same identification number; A user authentication method using a mobile communication terminal, characterized in that the user authentication result delivery process for delivering the authenticated result to the user authentication requester requesting the user authentication. The method of claim 9, wherein the identification number, User authentication method using a mobile communication terminal, characterized in that the MIN / ESN value included in the defined short message related to the IS-637 protocol. The method of claim 9, A determination code detection process of detecting a determination code included in the received short message when an identification number unique to the user mobile communication terminal is not detected; A decision code comparison process of determining whether the detected decision code is identical to a previously stored decision code corresponding to the user; And if it is determined that the detected decision code and the stored decision code are the same decision code, further comprising a user authentication process for authenticating the corresponding user. The method of claim 11, wherein the decision code, A user authentication method using a mobile communication terminal, characterized in that the unique identification code stored in the user data area on the CHARI area data included on the defined short message related to the IS-637 protocol. The method of claim 11, A decision code generating step of generating a decision code of a predetermined rule if the decision code is not detected; A decision code registration process of storing the generated decision code and generating a short message including the determination code and transmitting the short message to the mobile communication terminal of the corresponding user; And a user authentication process for authenticating a user when the transmitted decision code is detected from the shortened message transmitted in response to the transmitted decision code.