KR20020087654A - Method for certifying a right user using a wireless communication apparatus - Google Patents

Abstract

PURPOSE: A method for authenticating a fair user using a wireless communication device is provided which can prevent a series of service accesses from being proceeded when a series of short message passwords transmitted wirelessly are hacked by a malicious and unfair user, and thus can minimize the unpredicted damage of a fair user. CONSTITUTION: A fair user authentication system comprises the first authentication system(100) based on a series of wire internet networks and the second authentication system(200) based on a series of wireless internet networks. The first authentication system comprises the first interface module(101), the first authentication management server(102), an encryption message information D/B(103) and an operation message information D/B(104), and various encryption information required in a series of encryption processes are stored in the encryption message information D/B. And various operation information required in operating and managing a web page are stored in the operation message information D/B. The first authentication management server controls the encryption message information D/B and the operation message information D/B efficiently.

Description

Method for certifying a right user using a wireless communication apparatus}

The present invention relates to a party user authentication method using a wireless communication device, and more particularly, in a series of party user authentication processes, for example, by adopting a "process of encrypting a short password sent to a wireless section", The present invention relates to a party user authentication method using a wireless communication device capable of blocking a series of Internet service accesses in advance, except for a party user, even if a series of short passwords are hacked by a malicious unjust user during transmission.

Recently, with the rapid development of technology in the field of information and communication, the use of the Internet has become a general trend, and in accordance with the trend of the generalization of the Internet, numerous kinds of Internet websites have been widely opened by arbitrary service providers. It is becoming.

For example, Korean Patent Laid-Open Publication No. 2000-37105 "Advertising and shopping system and method using Internet game", Korean Patent Laid-Open Publication No. 2000-37174 "Intermediary for special information exchange and operation method using the Internet", Korean Patent Korean Patent Publication No. 2000-37207 "Method for managing registration of personal information on website", Korean Patent Publication No. 2000-37229 "System and method for advertisement of advertisement through dividend payment service", Korean Patent Publication No. 2000-37242 " Personal portal website operation system and operation method, Korean Patent Publication No. 2000-37385 "Operation apparatus and method of the website related to visual creation" and the like are described in detail various kinds of Internet websites according to the prior art. .

In general, the above-described conventional service providers use a series of " through a variety of paths " so that access to the service by unauthorized users can be blocked in advance whenever a series of Internet events, such as Internet events requiring payment, occur. Party user authentication process ".

For example, service providers perform a process of confirming a user's unique number, for example, a social security number, in advance, before a full-fledged Internet service is performed, so that "use of Internet service" by an unauthorized user can be blocked in advance.

However, in recent years, as personal information is leaked frequently, personal identification numbers such as social security numbers are easily leaked, and as mentioned above, most Internet websites, while proceeding to confirm the user's social security number, Without any countermeasures, most of them allow the unauthorized users to access the service.

In recent years, as the technology related to the short message service (SMS) is swiftly developed, a series of user authentication technologies that link this SMS with a user's wireless communication device has been improved. It is attracting much attention as an authentication technology.

When such a conventional "SMS / Wireless user connection technology" is implemented, any service provider transmits a series of short passwords to the user's wireless communication system through a systematic connection process with a wireless communication company. In the future, the user's legitimacy is judged by judging whether or not the specific password inputted by the service user is identical to the "short password previously transmitted to the wireless communication device".

In this case, since the validity of the user is proved based on the "owner's possession of the wireless device", in the service provider, the illegal user is a party user, even if any illegal user steals the social security number of the party user. Unless even a wireless device is stolen, a series of defenses can be provided that prevents normal services from being used, which in turn can significantly reduce the unforeseen damage of party users.

For example, Korean Patent Publication No. 2000-6796 "Electronic payment method using a mobile phone", Korean Patent Publication No. 2000-12391 "Electronic payment method and system on the Internet", Korean Patent Publication No. 2000-24137 " Payment method in Internet e-commerce using mobile communication, and Korean Patent Publication No. 2000-37355, "Method and system for approving electronic payment using short message service," such as "SMS / Wireless communication system linked user authentication" Technology "is more varied.

However, the conventional "SMS / wireless communication system-type user authentication technology" described above has a fatal disadvantage that a separate wireless communication system is not provided in a "wireless section" between a base station of a wireless communication company and a user's wireless communication device. Therefore, unless the service provider utilizing the countermeasures is taken, the party user / service provider, etc., hacks a series of short passwords transmitted over the wireless section by the wrongful user during the transmission. There is no choice but to suffer from technical problems that can be hacked.

If a series of short passwords transmitted over a wireless section are hacked by a malicious user during the transmission, the service provider may perform an "SMS / Wireless User Linked Technology", but the user may not be able to use it. Will be allowed to access most services without any countermeasures. At this time, if the Internet service is a service that can cause enormous financial damage to party users, for example, an e-commerce service such as home shopping, the damage that party users / service providers may inevitably increase.

Accordingly, an object of the present invention is to adopt a process of encrypting a short password sent over a wireless section as an example in the authentication process of a party user, or in another example, to transmit a series of subscription certificate information to a wireless communication device owned by the user. By adopting a process of widely transplanting and later using this subscription certificate information for user's validity judgment, a series of short passwords transmitted over a wireless section is hacked by a malicious unjust user during its transmission. Even if it is, in order to prevent the normal access to a series of services other than the party user is to block in advance.

It is another object of the present invention to minimize the damage of unjustified party users by blocking access to the service of illegal users in advance.

Still other objects of the present invention will become more apparent from the following detailed description and the accompanying drawings.

Figure 1 is an exemplary diagram conceptually showing a party user authentication system constituting the base environment of the present invention.

2 is a flowchart sequentially illustrating a party user authentication method using a wireless communication device according to an embodiment of the present invention.

3 is an exemplary diagram conceptually showing a web page posting status of a user-side client according to an embodiment of the present invention;

4 to 6 are conceptual views conceptually showing a message posting state of a user-side wireless communication device according to an embodiment of the present invention.

7 is a flowchart sequentially illustrating a party user authentication method using a wireless communication device according to another embodiment of the present invention.

8 is an exemplary diagram conceptually showing a message posting state of a user side wireless communication device according to another embodiment of the present invention.

In order to achieve the above object, the present invention discloses a party user authentication method using a wireless communication device composed of a combination of a series of user authentication preparation process and user authentication execution process proceeding in conjunction with each other.

At this time, the above-described user authentication preparation process is a step of determining whether a series of user authentication request events for authenticating the validity of the user from any service provider system connected to a specific user-side client has occurred. And, when a series of user authentication request events have occurred from the above service provider side system, transmitting a series of self-password input web pages including a predetermined self-password entry item to the user-side client, and the user-side client. Determining whether the series of self-password entry information corresponding to the previous self-password entry item has been transmitted from; and when the series of self-password entry information corresponding to the self-password entry item is transmitted from the user-side client described above. , Self rain A combination of the steps of generating a series of encrypted messages reflecting the password and transmitting the generated encrypted messages to the user-side wireless communication unit held by the user.

In addition, the above-described user authentication execution process includes determining whether a series of encryption messages have been returned from the previous user side wireless communication unit, and resetting the self-password when the encryption message is returned from the user side wireless communication unit. Transmitting a series of self-password re-entry request messages requesting input to the user-side wireless communication unit; and if a series of self-password information corresponding to the self-password re-entry request message is transmitted from the user-side wireless communication device, Decrypting, securing the initially entered self-password, and determining whether the re-entered self-password matches the initially entered self-password, and the re-entered self-password coincides with the initially entered self-password To the user side wireless communication It is a combination of the steps of the song.

Hereinafter, with reference to the accompanying drawings, it will be described in more detail a party user authentication method using a wireless communication device according to the present invention.

As shown in FIG. 1, the party user authentication system constituting the base environment of the present invention includes, for example, a first authentication system 100 based on a series of wired Internet networks, and a first wireless system based on a series of wireless Internet networks. 2 is a combination of the authentication system 200.

At this time, as shown in the figure, the first authentication system 100, the first interface module 101, the first authentication management server 102, encryption message information D / B 103, operating message information D / B 104, etc. In this case, the encrypted message information D / B 103 stores various encryption information necessary for a series of encryption processes, and the operation message information D / B 104 operates a web page. Various operational information required for the operation is stored.

In this state, the first authentication management server 102 systematically controls the encrypted message information D / B 103, the operation message information D / B 104, and the like, thereby storing and storing encrypted information, operation information, and the like. It plays a role to control whether extraction can be selectively determined.

With such a relationship with the encrypted message information D / B 103, the operation message information D / B 104, and the like, the first authentication management server 102 is arbitrarily connected via the first interface module 101. The service provider side system 300, the user side client 1, and the like also form a close signal connection relationship. In this case, the service provider side system 300, the user side client 1, etc. form a series of signal connection relationships with the first authentication management server 102, for example, using the Internet network.

In this state, the first authentication management server 102 requests a series of user authentication requests for authenticating the validity of the user from any service provider side system 300 that is in connection with the specific user-side client 1. When an event occurs, a series of user authentication preparation procedures are systematically performed by utilizing the above-mentioned encrypted message information D / B 103 and operation message information D / B 104, and through this, full-scale user authentication is performed. It provides a set of infrastructures on which the implementation process can proceed.

In this case, the first first interface module 101 processes various event data transmitted from the service provider side system 300, the user side client 1, and the like, which are connected through the Internet network, and then converts the event data into a first state. In addition to delivering to the authentication management server 102, and processes a variety of information transmitted from the first authentication management server 102, this information is service provider side system 300, the user side client (1) Act as a quick delivery.

On the other hand, the second authentication system 200 is similar to the aforementioned first authentication system 100, the second interface module 201, the second authentication management server 202, certificate information D / B (203), Operation message information D / B 204 or the like. In this case, the certificate information D / B 203 stores a series of subscription certificate information necessary for the authentication process of the user, and the operation message information D / B 204 stores various operation information necessary for the operation of the wireless message.

In this state, the second authentication management server 202 systematically controls the certificate information D / B 203, the operation message information D / B 204, and the like, thereby storing and storing subscription certificate information, operation information, and the like. It plays a role to control whether extraction can be selectively determined.

With such a relationship with the certificate information D / B 203, the operation message information D / B 204, and the like, the second authentication management server 202 uses the second interface module 201 as a user. The user-side wireless communication device 2 owned by the "), the wireless communication company-side system 500 that manages the user-side wireless communication device 2, and the like also form a close signal connection relationship. In this case, the base station 400 serves to transfer the information output from the second authentication system 200 to the user-side wireless communication device 2 and removes various information output from the user-side wireless communication device 2. 2 serves to return to the authentication system (200).

In this state, when a full-fledged user authentication event occurs from the user-side radio communication device 2, the second authentication management server 202 stores the preceding certificate information D / B 203 and operation message information D / B 204. By using the system, the process of authentic user authentication is carried out systematically, and through this, it provides a basic environment to prevent unauthorized users from accessing the service in advance.

At this time, the second interface module 201 is a variety of transmitted from the user-side wireless communication device 2 that is being connected through the Internet network, the wireless carrier-side system 500 that manages the user-side wireless communication device (2), etc. It processes the event data and delivers the event data to the second authentication management server 202, and processes various pieces of information transmitted from the second authentication management server 202 to process the information on the user side. It serves to quickly deliver to the communicator (2), wireless carrier-side system (500).

Hereinafter, the party user authentication method using the wireless communication device unique to the present invention based on the first and second authentication systems 100 and 200 described above will be described in detail.

As shown in FIG. 2, the party user authentication method using the wireless communication device according to the present invention comprises a combination of a series of user authentication preparation processes (step S100) and a user authentication execution process (step S200) which are performed in conjunction with each other.

First, the user authentication preparation process (step S100) will be described in detail.

First, a user U who wants to receive a predetermined Internet service from an arbitrary service provider side system 300 connects to the Internet network using, for example, the user side client 1, and then the service provider side. The system 300 is visited and a series of content surfing procedures are performed.

In this state, the first authentication management server 102 continuously checks the first interface module 101, whereby a series of user authentication request events for authenticating the user's validity from the service provider side system 300 is performed. It is determined whether or not (step S101) has occurred.

At this time, if it is determined that no separate user authentication request event has occurred from the service provider side system 300, the first authentication management server 101 proceeds to step S102 to maintain a series of standby states.

However, an action requiring payment, for example, occurs from the user side client 1, and accordingly, a series of user authentication request events are generated from the service provider side system 300 to authenticate the validity of the user. If it is determined, the first authentication management server 102 immediately utilizes a series of operation message information stored in the operation message information D / B 104, and sets a series of self-password input webs in which a self-password entry item is described. A page is generated, and a process of transmitting a web page for inputting a password to the user side client 1 via the first interface module 101 is performed (step S103).

In this case, the user side client 1 quickly interprets the self-password input web page 601 transmitted from the first authentication system 100 side and displays it as shown in FIG. For example, the user can freely input any password he / she wants in the self-password entry item 602 so that the user can easily be provided with a series of infrastructure environments.

In this state, the first authentication management server 102 continuously checks the first interface module 101, whereby a series of self-password input information corresponding to the previous self-password entry items is transmitted from the user side client 1. It is judged whether or not it is (step S104).

At this time, if the user U has not yet filled in the self-password entry item 602 and it is determined that no separate self-password input information has been transmitted from the user side client 1, the first authentication management server 102 The flow advances to step S105 to maintain a series of standby states.

However, the user U fills in the password input item 602 according to his or her intention, clicks the mobile phone payment item 603, and transmits a series of self-password input information from the user side client 1. Upon determining, the first authentication management server 102 immediately generates a series of encrypted messages in which the self password of the user U is reflected by utilizing the encryption information stored in the encrypted message information D / B 103. Then, the generated encrypted message is loaded on a predetermined encrypted message delivery page, and a process of transmitting the generated encrypted message to the user side radio communication device 2 held by the user U is carried out (step S106). In this case, the encrypted message is encrypted by, for example, the "DES (Data Encryption Standard) method", which is a 128-bit encryption scheme.

Through the above process, when the "encryption message delivery page" carrying a series of encryption messages is transferred from the first authentication management server 102 to the first interface module 101, the first interface module 101 immediately In addition, the "encryption message delivery page" is transmitted to the user side wireless communication unit 2 via the base station 400, and the user side wireless communication unit 2 has a corresponding "encryption message delivery page 701". As soon as it is transmitted, it is displayed as shown in FIG. 4, thereby providing a set of infrastructure environments where a full "user authentication process" can proceed.

In this case, the encrypted message 702 hidden in the "encryption message delivery page 701" includes, for example, "URL of the second authentication management server 202 to be dedicated to a series of user authentication execution processes", and "the user has a previous process." Password entered by the user arbitrarily input, "service information currently pending", "payment information charged to the user" and the like is contained.

When the step S106 of the present invention proceeds as described above, the encryption message 702 outputted from the system 100 is, as shown in FIG. 1, the base station 400 and the user U of the wireless carrier side. Must pass through the "Wireless section (WA)" between the user-side wireless communication device (2).

At this time, as described above, since no separate security system is provided in the "wireless section WA" between the base station 400 of the wireless communication company side and the user wireless communication unit 2, no special measures are taken. Unless, for example, a party user, a service provider, etc. are forced to suffer a problem in which a series of messages sent to a wireless section WA can be hacked by an unjust user of maliciousness during the transmission.

However, in the case of the present invention, since the process of encrypting the message sent to the wireless section WA has been advanced in advance through the above-mentioned step S106, the present invention is achieved even though the wireless section WA is performed. Even if a series of messages sent to the network are hacked by a malicious unjust user during the transmission, a series of services cannot be normally accessed except for a party user, so that the party user can avoid unexpected damage in advance. .

Next, the user authentication execution process (step S200) linked to the above-described user authentication preparation process (step S100) will be described.

First, as shown in FIG. 4, when a series of encryption messages 702 are transmitted to the user side wireless communication unit 2 through the aforementioned user authentication preparation process (step S100), the user U encrypts this encryption. By utilizing the message, the user authentication process can be carried out in earnest.

In this state of infrastructure, the second authentication management server 202 continuously checks the second interface module 201, so that a series of encrypted messages from the user side wireless communication device 2 held by the user U is obtained. It is determined whether a return event has occurred (step S201).

At this time, if it is determined that the user U does not take any further action on the "encryption message delivery page 701" and a separate encrypted message return event has not occurred from the user-side wireless communication device 2, the second authentication management is performed. The server 202 advances the flow to step S202 to maintain a series of standby states.

However, if the user U clicks on the confirmation item 703 of the "encryption message delivery page 701", and it is determined that a series of encrypted message return events have occurred from the user-side wireless communication device 2, the second authentication is performed. The management server 202 immediately proceeds with the process of transmitting a series of subscription certificate request messages to the user side radio communication unit 2 (step S203).

At this time, the above-mentioned subscription certificate is a series of "authorized from the system 100 side of the present invention at the time before the user U undergoes the authentic" authentication user authentication process "according to the present invention, for example, the service subscription time. The party user certificate "refers to the present invention. In the present invention, such a series of subscription certificate information is pre-transplanted into the wireless communication device 2 owned by the user at a specific point in time, for example, when the user U joins the service. In addition, this subscription certificate information can be widely used as a basis for judging the validity of the user.

On the other hand, the second authentication management server 202 continuously checks the second interface module 201 by transmitting a series of subscription certificate request messages to the user-side wireless communication device 2 through the previous step S203, It is judged whether or not a series of subscription certificate information corresponding to the above-mentioned subscription certificate request message is returned from the user side wireless communication device 2 (step S204).

At this time, if it is determined that no separate subscription certificate information is returned from the user side radio communication device 2, the second authentication management server 202 proceeds to step S205 to maintain a series of standby states.

However, if it is determined from the user side wireless communication device 2 that the series of subscription certificate information corresponding to the above-mentioned subscription certificate request message is returned, the second authentication management server 202 immediately returns the certificate information D / B 203. ), And extracts a set of certificate information stored in the package), and utilizes the same to determine whether the returned subscription certificate information matches the previously stored set of subscription certificate information (step S206).

At this time, if it is determined that the subscription certificate information returned from the user-side wireless communication device 2 does not match the previously stored series of subscription certificate information, the second authentication management server 202 immediately operates the operation message information D /. Using a series of operational message information stored in B 204, a series of error messages are generated, for example, "Authentication failed because the enrollment certificate information does not match. Please try again." The process of transmitting the completed error message to the user side wireless communication device 2 via the second interface module 201, the base station 400, etc. is performed (step S207). Of course, in this case, the unauthenticated user U cannot achieve normal service progress, and eventually, the party user can avoid unexpected damage in advance.

However, if it is determined that the subscription certificate information returned from the user-side wireless communication device 2 matches the previously stored series of subscription certificate information, the second authentication management server 202 immediately proceeds with the operation message information D / B. By using the series of operation message information stored in 204, a series of self password re-entry request messages are generated, and the self-password re-entry request message, which has been generated, is generated by the second interface module 201 and the base station 400. The process of transmitting to the user side wireless communication device 2 is carried out (step S208).

In this case, the user side wireless communication device 2 quickly interprets the self-retype password request message 704 transmitted from the system 200 side, and displays it as shown in FIG. Through the above-described steps S103 and S104, a user who has previously entered the password can easily input the password once again.

In this state, the second authentication management server 202 continuously checks the second interface module 201 so that a series of self-passwords corresponding to the previous self-password re-entry request message from the user side wireless communication unit 2 is entered. It is judged whether or not it is returned (step S209).

At this time, if the user U has not yet filled in the self-password entry item 705, and it is determined that no separate self-password is returned from the user-side wireless communication device 2, the second authentication management server 202 flows. Proceed to step S210 to maintain a series of standby states.

However, if the user fills in the password input item 705 in accordance with his or her intention and clicks the payment item 706 to determine that a series of self-passwords are returned from the user side wireless communication device 2, The authentication management server 202 immediately decrypts the encrypted message 702 obtained through the previous step S201, acquires the password previously input by the user, and compares the initial password with the returned password. It is judged whether or not both coincide with each other (step S211).

At this time, if the initial password previously input by the user and the returned password do not match each other, the second authentication management server 202 immediately proceeds to step S207 described above, for example, "Password does not match." , Authentication failed. Please try again "and the like, and the generated error message is transmitted through the second interface module 201, the base station 400, and the like. Proceed with the delivery process. Of course, even in this case, similarly to the above case, the unauthenticated user U cannot achieve normal service progress, and as a result, the party user can avoid unexpected damage in advance.

However, if the initial password previously input by the user and the returned password coincide with each other, the second authentication management server 202 immediately generates a series of authentication processing result messages, and generates the generated authentication processing result message. Through the second interface module 201, a process of transmitting the user-side wireless communication device 2 to the wireless communication company-side system 500 managing is performed (step S212).

In this state, the second authentication management server 202 continuously checks the second interface module 201 to determine whether a series of normal processing confirmation information is returned from the wireless carrier side system 500 ( Step S213).

At this time, if it is determined from the wireless carrier side system 500 that no separate normal processing confirmation information has been returned yet, the second authentication management server 202 proceeds to step S214 to maintain a series of standby states. do.

However, if it is judged that a series of normal processing confirmation information has been transmitted from the wireless carrier side system 500, the 2nd authentication management server 202 immediately immediately predetermined | prescribed stored in the operation message information D / B 204. A process of generating a series of authentication completion messages and transmitting the generated authentication completion messages to the user side wireless communication unit 2 via the second interface module 201 and the base station 400 by utilizing the operation message information of the terminal. Proceed to step S215.

In this case, the user side radio 2 quickly interprets the authentication completion message 707 transmitted from the system 200 side and displays it as shown in FIG. It is easy to confirm that the legitimacy has been reliably certified. "

Thereafter, the user U can select the completion item 708 of the authentication completion message 707 to freely enjoy a series of Internet services desired by the user U.

On the other hand, as shown in Figure 7, the party user authentication method using a wireless communication apparatus according to another embodiment of the present invention is a series of user authentication preparation process (step S300) and user authentication execution process (step S400) that is interlocked with each other ) Is a combination.

In another embodiment of the present invention, unlike the previous embodiment, by omitting a series of "self-password input process", "self-password re-entry process", etc., the overall user authentication process is greatly simplified.

First, the user authentication preparation process (step S300) will be described in detail.

First, similarly to the previous embodiment, a user U who wants to receive a predetermined Internet service from an arbitrary service provider side system 300 connects to the Internet network using, for example, the user side client 1. Thereafter, the service provider side system 300 is visited, and a series of content surfing processes are performed.

In this state, the first authentication management server 102 continuously checks the first interface module 101, whereby a series of user authentication request events for authenticating the user's validity from the service provider side system 300 is performed. It is determined whether or not (step S301) has occurred.

At this time, if it is determined that a separate user authentication request event has not occurred from the service provider side system 300, the first authentication management server 101 proceeds to step S302 to maintain a series of standby states.

However, an action requiring payment, for example, occurs from the user side client 1, and accordingly, a series of user authentication request events are generated from the service provider side system 300 to authenticate the validity of the user. If it is determined, the first authentication management server 102 immediately generates an encrypted message by utilizing the encryption information stored in the encrypted message information D / B 103 and generates a predetermined encrypted message. On the page for transmitting the encrypted message, a process of transmitting to the user-side wireless communication device 2 held by the user U is carried out (step S303). In this case, the encrypted message is encrypted by, for example, the "DES scheme" which is a 128-bit encryption scheme similar to the previous embodiment.

Through the above process, when the "encryption message delivery page" carrying a series of encryption messages is transferred from the first authentication management server 102 to the first interface module 101, the first interface module 101 immediately In addition, the "encryption message delivery page" is transmitted to the user side wireless communication unit 2 via the base station 400, and the user side wireless communication unit 2 has a corresponding "encryption message delivery page 801". As soon as it is transmitted, it is displayed as shown in FIG. 8, thereby providing a set of infrastructures where a full "user authentication execution process" can proceed.

At this time, the encrypted message 802 hidden in the "encryption message delivery page 801" includes, for example, "the URL of the second authentication management server 202 which is responsible for a series of user authentication execution processes", "by the system side. Randomly generated password "," service information currently pending by the user "," payment information charged to the user "and the like.

Even when such step S303 of the present invention proceeds, the encryption message 802 outputted from the system 100 side, as in the previous embodiment, is carried out by the base station 400 of the wireless carrier side and the user held by the user U. Must pass through the "wireless section (WA)" between the side radio communication unit (2).

At this time, in the case of another embodiment of the present invention, similarly to the previous embodiment, since the "process for encrypting the message sent to the wireless section (WA)" proceeded in advance, if the present invention is achieved, although, wireless section Even if a series of messages sent out to WA are hacked by a malicious unjust user during the transmission, a series of services cannot be normally accessed except for a party user, so that the party user can avoid unforeseen damages in advance. It becomes possible.

Next, the user authentication execution process (step S400) linked to the above-described user authentication preparation process (step S300) will be described.

First, as shown in FIG. 8, when a series of encryption messages 802 are transmitted to the user-side wireless communication unit 2 through the aforementioned user authentication preparation process (step S300), the user U encrypts this encryption. By utilizing the message, the user authentication process can be carried out in earnest.

In this state of infrastructure, the second authentication management server 202 continuously checks the second interface module 201, so that a series of encrypted messages from the user side wireless communication device 2 held by the user U is obtained. It is determined whether a return event has occurred (step S401).

At this time, if the user U does not take any action on the "encryption message delivery page 801" and it is determined that no separate encrypted message return event has occurred from the user-side wireless communication device 2, the second authentication management is performed. The server 202 advances the flow to step S402 to maintain a series of standby states.

However, if the user U clicks on the confirmation item 803 of the "encryption message delivery page 801" and it is determined that a series of encrypted message return events have occurred from the user-side radio communication device 2, the second authentication is performed. The management server 202 immediately proceeds to step S403 to step S407 immediately, and performs and completes a series of " subscription certificate verification process ". This subscription certificate verification process is the same as the above-described step S203 to step S207, detailed description thereof will be omitted.

On the other hand, if it is determined through the above-described process that a series of " subscription certificate verification process " is completed, the second authentication management server 202 immediately decrypts the returned encryption message, and the password recorded in this encryption message. Is obtained, and this password is compared with a series of initial passwords randomly assigned by the first authentication system, and it is judged whether or not they coincide with each other (step S408).

Of course, since the second authentication management server 202 before such a series of "password comparison process" proceeds in earnest, through the close data interworking process with the first authentication management server 102, "first authentication management It will be obvious that the server 102 has secured in advance an initial password "arbitrarily assigned by the progress of the previous step S303.

At this time, if the preset initial password and the returned password do not match with each other, the second authentication management server 202 immediately proceeds to step S407, for example, "Password does not match and authentication failed. Please try again "and a series of error messages are generated, and the process of delivering the completed error messages to the user side wireless communication device 2 via the second interface module 201, the base station 400, etc. do. Of course, even in this case, similarly to the previous embodiment, the unauthenticated user U cannot achieve normal service progress, and as a result, the party user can avoid unexpected damage in advance.

However, when the preset initial password and the returned password coincide with each other, the second authentication management server 202 immediately generates a series of authentication processing result messages, and generates the authentication processing result message which has been completely generated in the second interface. The process of transmitting to the wireless carrier side system 500 which manages the user side wireless communication device 2 via the module 201 is carried out (step S409).

In this state, the second authentication management server 202 continuously checks the second interface module 201 to determine whether a series of normal processing confirmation information is returned from the wireless carrier side system 500 ( Step S410).

At this time, if it is determined from the wireless communication company side system 500 that no separate normal processing confirmation information has yet been returned, the second authentication management server 202 proceeds to step S411 to maintain a series of standby states. do.

However, if it is determined that a series of normal processing confirmation information has been transmitted from the wireless carrier side system 500, the second authentication management server 202 immediately determines the predetermined message stored in the operation message information D / B 204. A process of generating a series of authentication completion messages and transmitting the generated authentication completion messages to the user side wireless communication unit 2 via the second interface module 201 and the base station 400 by utilizing the operation message information of the terminal. Proceed to step S412.

In this case, the user side wireless communication device 2 quickly interprets the authentication completion message 707 transmitted from the system 200 side and displays it as shown in FIG. It is easy to confirm that the validity of one's own justification is certified.

Thereafter, the user U can select the completion item 708 of the authentication completion message 707 in the same manner as in the above-described embodiment, so that the user U can freely enjoy a series of Internet services desired by the user.

As described in detail above, the present invention adopts, as an example, a process of encrypting a short password sent over a wireless section in a series of party user authentication processes, or, as another example, owns a series of subscription certificate information. The process of pre-transplanting to a wireless communication device of the present invention and later utilizing this subscription certificate information for the user's validity judgment.

In the case of the present invention, for example, because the "process of encrypting the message sent to the wireless section" is carried out in advance, when the present invention is achieved, even if a series of messages sent to the corresponding wireless section is malicious, Even if it is hacked by an illegal user of, a series of services cannot be normally accessed except for a political party user, and eventually, the political party user can avoid unexpected damages in advance.

The present invention can be variously applied to various types of wireless communication devices, such as PCS phones, mobile phones, mobile phones for IMT-2000, etc. which are on the market.

And while certain embodiments of the invention have been described and illustrated, it will be apparent that the invention may be embodied in various modifications by those skilled in the art.

Such modified embodiments should not be understood individually from the technical spirit or point of view of the present invention and such modified embodiments should fall within the scope of the appended claims of the present invention.

Claims (4)

It consists of a series of preparation process for user authentication and execution of user authentication. The user authentication preparation process may include determining whether a series of user authentication request events for authenticating the user's legitimacy have occurred from any service provider system connected to a specific user client; When a series of user authentication request events occur from the service provider side system, transmitting a series of self password input web pages including a predetermined self password input item to the corresponding user side client; Determining whether a series of self-password input information corresponding to the self-password entry item has been transmitted from the user side client; When a series of self-password input information corresponding to the self-password input item is transmitted from the user-side client, a user-side which generates a series of encrypted messages reflecting the self-password and holds the generated encrypted message by the user Transmitting to a wireless communicator, The user authentication execution process may include determining whether the encryption message is returned from the user side wireless communication device; When the encryption message is returned from the user side wireless communication unit, transmitting a series of self password re-entry request messages requesting re-entry of the user password to the user side wireless communication unit; When a series of self password information corresponding to the self password re-entry request message is transmitted from the user side wireless communication device, the encrypted message is decrypted to secure an initially entered self password, and the re-entered self password is initialized. Determining whether or not the person inputted to the password matches the password; And transmitting a series of authentication completion messages to the user side wireless communication unit when the re-entered self password matches the initially entered self password. 2. The method of claim 1, further comprising: transmitting a series of subscription certificate request messages to the user side wireless communication unit before transmitting the self password re-entry request message to the user side wireless communication device; Determining whether a series of subscription certificate information corresponding to the subscription certificate request message has been transmitted from the user side wireless communication device; When a series of subscription certificate information corresponding to the subscription certificate request message is transmitted from the user side wireless communication device, determining whether the subscription certificate information is identical to previously stored subscription certificate information is further performed. A party user authentication method using a wireless communication device. It consists of a series of preparation process for user authentication and execution of user authentication. The user authentication preparation process may include determining whether a series of user authentication request events for authenticating the user's legitimacy have occurred from any service provider system connected to a specific user client; Generating a predetermined encrypted message randomly when a series of user authentication request events occur from the service provider side system, and transmitting the generated encrypted message to a user side wireless communication device held by the corresponding user; The user authentication execution process may include determining whether the encryption message is returned from the user side wireless communication device; If the encrypted message is returned from the user side wireless communication device, determining whether the returned encrypted message matches the initially generated encrypted message; And transmitting the series of authentication completion messages to the user-side wireless communication unit when the returned encrypted message matches the initially generated encryption message. 4. The method of claim 3, further comprising: transmitting a series of subscription certificate request messages to the user-side wireless communicator prior to determining whether the returned encrypted message matches an initially generated encrypted message; Determining whether a series of subscription certificate information corresponding to the subscription certificate request message has been transmitted from the user side wireless communication device; When a series of subscription certificate information corresponding to the subscription certificate request message is transmitted from the user side wireless communication device, determining whether the subscription certificate information is identical to previously stored subscription certificate information is further performed. A party user authentication method using a wireless communication device.