KR20060133266A - Method for certificating a user with a service to inform of caller's phone number - Google Patents

Abstract

A method for certificating a user with a CID(Caller ID) service is provided to generate expenses according to transmission of text messages by transmitting a certification number needed for certification without transmitting the text message to the user. A certification server selects a caller phone number or multiple phone numbers assigned to the certification server as the caller phone number(S23). The certification server displays the caller phone number to a telephone by connecting to a call to the telephone of the user(S30). The certification server receives data from a user computer through the Internet(S61). The certification server certifies the user in case that the caller phone number is matched with the received data(S65). The certification server terminates call connection after the call is connected to the telephone of the user(S40).

Description

Method for certificating a user with a service to inform of caller's phone number}

1 is a diagram showing the overall configuration of an authentication system according to a first embodiment of the present invention;

2 is a diagram illustrating a user authentication method according to the present invention performed by the authentication system of FIG.

3 is a view similar to FIG. 1 showing a second embodiment of the invention, and

4 is a view similar to FIG. 1 showing a third embodiment of the present invention.

The present invention relates to a user authentication method on the Internet, and more particularly, to a method for authenticating a user using a caller ID service and a charging method using the authentication method.

On the Internet, when a user purchases an item in a shopping mall or purchases content such as an avatar, music, or video file from a specific website, the user must pay for the purchase price. The purchase of goods or content through the Internet must be accompanied by payment on the Internet. At this time, the most important thing in payment is authentication of the user. This authentication to verify the authenticity of a user is not only a payment for a purchase, but also when a user attempts to access a particular website that only needs to allow access to a genuine user or when a user tries to sign up for a particular website. This is necessary in a variety of cases, such as when you want to verify the authenticity of the applicant.

Among the conventional authentication methods, one of the most frequently used methods for payment of a small amount is authentication using a short message service (SMS). Authentication using SMS is based on the actual user's control at the time of authentication, when the user subscribes to a particular website or makes a payment, when the user has entered the phone number for authentication or the phone number previously entered by the user. As a method of authenticating a user based on whether there is one, this is performed through the following process. That is, the authentication server sends a text message to the user's mobile phone number, but includes a specific authentication code (usually composed of 6 digits) in the text message, and the user who owns the mobile phone checks the text message. When the authentication code included in the website is entered, the authentication server checks whether the authentication code entered by the user and the authentication code in the text message sent by the user match each other, and authenticates the user at the time of matching.

Such authentication using SMS is not large enough to say that the authenticity of the authentication itself is complete, but it is most commonly used for micropayments, and it is generally used in parallel with other authentication methods even when the reliability of the authentication is greatly required. It is used.

However, such an authentication method through SMS has a disadvantage in that it takes a lot of costs for authentication since a process of sending a text message must be included in the process of performing authentication. In other words, in order to send a text message, a typical carrier usually has to pay a few tens of won per case. Considering that SMS-based authentication is mostly used for micropayments of about several thousand won, the cost to sales is quite large. do. Therefore, the cost to be paid in return for certification to the certification agency becomes excessive compared to the sales, and the profitability is very low.

In addition, the authentication using the SMS has a disadvantage that usually use a mobile phone as a phone for authentication. In the case of a mobile phone, the function of sending and receiving text messages is provided in all models. However, in the case of a general telephone using a PSTN, only a few telephones that are recently spread are provided with a function of sending and receiving text messages. In this case, it is expected that it will take a long time for the phone used by the general public to be replaced with a model capable of sending and receiving text messages as it tends to use longer than a mobile phone. Furthermore, due to the high penetration rate of mobile phones that have been distributed to almost all citizens, it is very unlikely that the general telephones will be replaced with models capable of sending and receiving text messages. .

The present invention has been made to solve the problems described above, the object of the present invention, it is possible to send the authentication number required for authentication without sending a text message to the user does not incur the cost of the text message transmission It is to provide a user authentication method.

Another object of the present invention is to provide a user authentication method having a wide range of applications by allowing a caller ID service to be used for authentication regardless of a mobile phone or a general phone.

The user authentication method according to the present invention for achieving the above object, (a) the authentication server generates any outgoing call number, or any one of a plurality of phone numbers assigned to the outgoing call Selecting as a number; (b) the authentication server making a call to a user's telephone to display the outgoing telephone number on the telephone; (c) the authentication server receiving the data as data input by the user to the user computer is transmitted from the user computer through the Internet; And (d) the authentication server determining whether the outgoing call number and the data are the same and authenticating the user if they are the same.

Preferably, the user authentication method of the present invention, the authentication server further comprises the step of receiving the information on the telephone number specified by the user. At this time, in step (b), the authentication server connects the call to the designated telephone number.

On the other hand, in the step (b), immediately after the authentication server makes a call to the telephone and the call is connected, the authentication server terminates the call connection. Accordingly, it is possible to prevent the occurrence of unnecessary telephone charges due to the call connection.

The outgoing telephone number is preferably configured to include a predetermined code. The user can recognize that if the phone number of the confirmed caller includes a predetermined code, the phone number is a phone number to be input for user authentication.

On the other hand, according to a preferred embodiment of the present invention, the authentication server is confirmed whether the subscriber of the telephone is a subscriber receiving the caller ID service to the subscriber information providing server that provides information on the subscriber of the telephone, The authentication server requests the user computer to confirm whether the subscriber of the telephone is a subscriber receiving the calling number display service and receives confirmation that the calling number display service is provided from the user computer by the user's input. The step is additionally performed. Steps (a) to (d) are performed when it is confirmed that the caller ID service is provided in the confirmation step.

If it is confirmed in the checking step that the caller ID service is not provided, the authentication server makes a voice call to the ARS function by making a call to the user's telephone. Receiving the data by the authentication server as data input by the user to the user computer is transmitted from the user computer through the Internet; And authenticating, by the authentication server, whether the outgoing call number and the data are the same, and authenticating the user if they are the same. To be performed. Accordingly, even a user of the telephone who is not provided with the caller ID display service can receive the information on the caller ID for authentication to be input.

On the other hand, if it is confirmed that the caller ID service is not provided in the checking step, the authentication of the existing SMS method may be performed. The authentication of the SMS method may include: transmitting, by the authentication server, a short message including a predetermined authentication code to a user's telephone; Receiving the data by the authentication server as data input by the user to the user computer is transmitted from the user computer through the Internet; And authenticating, by the authentication server, whether the authentication code and the data are the same, and authenticating the user if they are the same.

On the other hand, according to another aspect of the present invention, the method comprising the steps of (a) the authentication server dials the user's phone and attempts to connect the call; (b) generating, by the originating number generation server, any outgoing telephone number to be displayed on the telephone connected by the authentication server, and transmitting the authentication server to the exchange which connects the authentication server to the telephone; (c) the exchange connecting the authentication server and the telephone to display the outgoing telephone number on the telephone; (d) the authentication server receiving the data as data input by the user to the user computer is transmitted from the user computer through the Internet; And (e) the authentication server determining whether the calling telephone number generated by the calling number generating server and the data are the same, and authenticating the user if they are the same. An authentication method is provided.

Meanwhile, according to the present invention, there is provided a recording medium on which a computer-readable program is recorded, which records a program for performing the user authentication method as described above.

In addition, according to the present invention, the method comprising the step of performing the billing of the goods and / or services provided by the web server providing the goods and / or services for the user authenticated by such a user authentication method A billing method is provided.

Furthermore, according to the present invention, there is provided a method for determining whether to register, comprising the step of allowing membership of a predetermined website for the user authenticated by the user authentication method.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the present invention.

Prior to this, terms or words used in the specification and claims should not be construed as having a conventional or dictionary meaning, and the inventors should properly explain the concept of terms in order to best explain their own invention. Based on the principle that can be defined, it should be interpreted as meaning and concept corresponding to the technical idea of the present invention.

Therefore, the embodiments described in the specification and the drawings shown in the drawings are only the most preferred embodiment of the present invention and do not represent all of the technical idea of the present invention, various modifications that can be replaced at the time of the present application It should be understood that there may be equivalents and variations.

In addition, in the description of the embodiments of the present invention, each server may be configured as one server, or may be configured as detailed servers performing the same function as a whole, on the contrary, one in which several servers function as the whole. It may be configured as a server of. In addition, each server may be modified to be operated by an entity other than the business entity illustrated in the embodiments, depending on its use.

1 is a diagram showing the overall configuration of an authentication system according to a first embodiment of the present invention. The first embodiment of the present invention is the most concise embodiment of the technical idea of the present invention, regardless of whether the authentication according to the present invention is applied to a field such as payment for the purchase of a product or content on the Internet. This is an example of performing purely user authentication itself. Therefore, the embodiment of the present invention is modified as in the other embodiments described below, and other web servers or other servers operated by other business entities are intervened by using the technical spirit of the present invention. In the case where the authentication method according to the present invention is performed in cooperation with the servers, it should be interpreted as being included in the protection scope described in the claims of the present invention.

Referring to Figure 1 in detail, the authentication system according to the present invention is the authentication server 50 through the authentication server 50 and the user computer 10, and the telephone network 200 connected to enable mutual data communication through the Internet (100) It is configured to include a user telephone 20 that can be connected to the call.

The authentication server 50 is a server for performing the authentication process according to the present invention, and is usually provided in a certification authority. Such an authentication server 50 may be provided with, for example, a web server providing a website to which the user accesses using the user computer 10 or may be implemented such that the web server functions as the authentication server 50.

The user computer 10 is a terminal that enables data communication to a specific website or the authentication server 50 through the Internet 100, and any terminal having such a function is not limited in its kind. That is, the user computer 10 may be configured not only as a general desktop computer but also as a portable internet access terminal such as a notebook computer or a PDA.

The user telephone 20 may be configured as a PDA having a telephone function as well as a mobile phone such as a cellular phone or a PCS terminal, and may be configured as a general wired / wireless phone capable of sending and receiving a call through a public telephone network (PSTN). It may be. In the present invention, the user telephone 20 is configured as a telephone having a function capable of displaying the caller's telephone number. Conventional mobile phones all have a caller's phone number display function, and even a general phone has a caller's phone number display function. In addition, the subscriber of the user telephone 20 must be a subscriber of the calling party number display service (hereinafter referred to as 'calling number display service') that is provided free of charge or at a telephone company or mobile carrier. In this state, the user's telephone 20 displays the telephone number of the caller who requested the call connection.

The telephone network 200 includes a public telecommunication network provided by a mobile telecommunication company, a public telephone network provided by a general telephone station, or a combination thereof. If the user telephone 20 is configured as a mobile phone, a mobile communication telephone network should be included.

Hereinafter, a user authentication method according to the present invention performed by the authentication system having such a configuration will be described with reference to FIG. 2.

In order for the user to be authenticated, the user first sends an authentication request to the authentication server 50. Accordingly, the authentication server 50 prompts the user to input a phone number of the user's telephone 20 used by the user. Transfer to computer 10. Then, the user inputs and specifies the telephone number of the user's telephone 20 by using the user computer 10 (S10). The input (designation) process of the telephone number may be performed for each authentication operation. Alternatively, the user may be pre-registered in advance, such as a method of inputting the user to the authentication server 50 or a specific web server.

The telephone number input by the user is transmitted to the authentication server 50 through the Internet 100 by the user computer 10, and thus the authentication server 50 receives the telephone number.

The authentication server 50 receiving the user's telephone number generates an arbitrary outgoing telephone number. (S23) Here, the outgoing telephone number is a number to be displayed on the user's telephone 20, and is arbitrarily selected by the authentication server 50. It is selected and created. In order to generate such an outgoing telephone number, a server or module for generating a random random telephone number may be provided in the authentication server 50.

The authentication server 50 makes a call connection to the user phone 20. (S25) Accordingly, the user phone 20 receives a call from the authentication server 50, and the user phone 20 displays the calling number. Since the user is subscribed to the service, an outgoing telephone number arbitrarily generated by the authentication server 50 is displayed on the user's phone 20. (S30) On the other hand, the authentication server 50 is able to perform a call operation in advance. A specific telephone number has been assigned by the telephone company, and if only an ordinary call operation is performed, the user's telephone 20 will display the telephone number assigned by the telephone company. However, in the present invention, the authentication server 50 makes a call using the line of the telephone number assigned by the telephone company, but the user telephone 20 displays the outgoing telephone number randomly generated by the authentication server 50. (The so-called calling number display service does not display the telephone number of the telephone attempting to connect the call, but the technology itself for displaying other numbers arbitrarily generated by the telephone attempting to connect the call itself is well known, so a detailed description thereof will be omitted. )

Immediately after the outgoing telephone number is displayed on the user's telephone 20, the authentication server 50 terminates the call connection. (S40) Since the authentication server 50 calls the user's telephone 20, the user's telephone If you receive a call to (20), you may be charged for the call. Therefore, by immediately ending the call connection after the outgoing call number is displayed on the user's telephone 20, the user's telephone 20 becomes incapable of receiving a call. In this case, the user's telephone 20 is stored with the outgoing telephone number displayed. It remains. On the other hand, the authentication server 50 sends a message to the user computer 10 to enter the caller's telephone number displayed on the user's telephone (20).

The user inquires the outgoing call number displayed on the user terminal 20 and inputs it to the user computer 10 (S51), and the data input by the user (that is, the input outgoing call number) is inputted by the user computer 10. The authentication server 50 receives the transmitted data (that is, the outgoing telephone number input by the user) (S61), and generates the received data in step S23. Compare with the outgoing call number. (S63)

As a result of the comparison, if the received data is the same as the outgoing telephone number generated by the user, this means that the current user using the telephone of the telephone number entered in step S10 is the same as the user currently using the user computer 10. do. Therefore, the authentication server 50 authenticates the user if both are the same (S65) and rejects the authentication if they are not the same (S67), and authenticates by sending a message to the user computer 10 informing such authentication or denial of authentication. This ends.

On the other hand, the outgoing telephone number generated in step S23 may be configured such as "# 235-2345" by using it with a specific code (for example, a code such as # or *) instead of only numbers. As such, when configuring the calling number including a specific code, when the user checks the calling phone number to be input in step S51 with the user's phone 20, the calling party's phone number displayed on the user's phone 20 is sent to the authentication server 50. It is easy to determine whether it is an authentication number sent by or a telephone number of a telephone actually received from another person. In this case, when the authentication server 50 sends a message to the user computer 10 to input the outgoing phone number, the outgoing phone number is a seven-digit number starting with "#". To reduce user confusion.

On the other hand, there may be a case where the user is not subscribed to the calling number display service for the user telephone 20, in which case it becomes impossible to authenticate in the manner described above.

Therefore, when the authentication server 50 receives the telephone number of the user telephone 20 in step S21, the user telephone 20 to which the telephone number is assigned to the telephone company before performing the step S23 (calling number generation step). It is necessary to determine whether)) is a phone subscribed to the caller ID service.

To this end, the telephone company providing the telephone network 200 is provided with a subscriber information providing server (not shown) for providing information on the subscriber of the phone, the authentication server 50 requests the inquiry to the subscriber information providing server Check whether the telephone number received in step S21 is a telephone number subscribed to the calling number display service. The subsequent steps are performed when it is confirmed that the user is subscribed to the calling number display service.

On the other hand, whether or not to subscribe to the calling number display service may employ a method of receiving a direct input from the user without adopting a method of inquiring a telephone station as described above. That is, in order to input the telephone number of the user's telephone 20 in step S10, the authentication server 50 has to provide an input screen with a telephone number input field to the user computer 10. By arranging whether or not to subscribe to the display service, the user may be provided with information about whether or not to subscribe. According to this method, since the authentication server 50 does not have to inquire the subscriber information providing server, it is possible to provide a service conforming to the privacy policy.

If it is determined that the call number is not provided with the calling number display service in the checking step as described above, the authentication method through the existing SMS as described in the related art is performed. That is, in this case, the authentication server 50 transmits a short message including a predetermined authentication code (usually composed of 6 digits) to the user's telephone 20, and the user receives the short message received by the user's telephone 20. Check the message and input the authentication code included in the short message to the user computer (10). As data input by the user to the user's computer 10 is transmitted to and received from the user's computer 10 to the authentication server 50 through the Internet 100, the authentication server 50 is a message within the text message sent by the user. It is determined whether the authentication code is identical to the data transmitted from the user computer 10, and if so, authenticates the user.

At this time, in the step of confirming whether or not to subscribe to the caller ID display service as described above, if it is confirmed that the user has signed up, the authentication server 50 enters the "caller ID number displayed on the current incoming call" to the user computer 50. When the request message is sent and it is confirmed that the user is not subscribed, the authentication server 50 sends a message requesting the user computer 50 to input the authentication code included in the currently received text message. Accordingly, after the user inputs the telephone number of the user's telephone 20 for authentication, the user can input the telephone number indicated by the calling number or the authentication code included in the text message according to the guidance message, thereby causing confusion in the authentication process of the user. This will not happen.

According to the present invention as described above, a random outgoing telephone number generated by the authentication server 50 replaces the same role as the authentication number included in the SMS when compared with the conventional SMS usage method. Therefore, the reliability of the authentication is the same as compared to the conventional SMS method, but there is an advantage that the cost required for authentication is significantly reduced since the process of sending a text message is omitted.

In addition, given that almost all ordinary telephones do not have a text message transmission / reception function, but many telephones have a calling number display function, the existing SMS method can provide only the authentication that is practically limited to mobile phones. Inevitably there is an advantage that the present invention can be extended to a large number of ordinary telephones.

On the other hand, when the user is not subscribed to the calling number display service for the user phone 20, in addition to the method of applying the existing SMS method, it is also possible to employ a method of guiding the outgoing call number directly through voice. .

That is, when it is confirmed that the user does not receive the calling number display service in the calling number display service checking step as described above, the authentication server 50 makes a call connection to the user's telephone 20 in step S25 of FIG. Is performed in the same manner, but the outgoing call number is not displayed on the user's phone 20 as in step S30 of FIG. 2, but the authentication server 50 uses the ARS system for the outgoing call number on the user's phone 20. Let me know and guide. S40 step in which the authentication server 50 terminates the call connection is performed after the voice guidance is finished, or after the voice guidance is guided several times by the authentication server 50 or at the request of the user, the authentication server 50 To be terminated by or at the user's request.

The user inputs an outgoing telephone number notified by voice to the user computer 10, and subsequent steps are performed in the same manner as in FIG. 2 to authenticate the user. In order to implement such a function, the authentication server 50 should have an ARS function or a separate ARS system should be attached to the authentication server 50.

According to this method, the present invention can be easily applied without particular limitation even when the user telephone 20 is a general telephone that does not even have an SMS reception function.

As a modification of the present invention, the authentication server 50 may be selected from existing telephone numbers, rather than generating any outgoing telephone number by itself in step S23 of FIG.

To this end, first, a plurality of telephone numbers are assigned to the authentication server 50 (or a plurality of telephone numbers are made available to the authentication server 50.) This is the operator of the authentication server 50 consults with the telephone company. Can be easily performed by subscribing as a user to a plurality of telephone numbers at the same time. The authentication server 50 selects any one of these telephone numbers in step S23, and makes a call to the user telephone 20 through the selected line in step S25. Accordingly, in step S30, the outgoing call number selected by the authentication server 50 is displayed on the user phone 20, and the subsequent process is performed in the same manner as in FIG.

Meanwhile, in step S63, the user is authenticated when the data input by the user is generated or selected by the authentication server 50, or when the data input by the user is the same as a part of the outgoing telephone number. You can also authenticate. In this way, in order to authenticate the user even at the same time, it is preferable that the authentication server 50 performs an input request for a part of the outgoing telephone number to the user computer 10 in advance. For example, while the user inputs the telephone number of the user's telephone 20 in step S10, while the authentication server 50 performs steps S21 to S25, the authentication server 50 is separately provided to the user computer 10. Send a message. At this time, the message includes the contents such as "Enter the last four digits of the telephone number displayed the calling number". Therefore, the user can be authenticated by inputting the corresponding number according to the instructions displayed on the user computer 10.

This method is particularly suitable for assigning a plurality of telephone numbers to the authentication server 50 and selecting an outgoing telephone number from the telephone numbers to which the authentication server 50 is assigned as described above. For example, if the telephone number assigned to the authentication server 50 is configured in the form of "02-555-XXXX", the area code and the station number are all the same, but only the last four digits are limited to 10,000 telephone numbers. Likewise, it is desirable to enter only the last four digits.

In this case, the authentication server 50 defaults to " 02-555- " in the input field displayed on the user's computer 10, together with or separately from the above four messages. It can also be marked as (default) and provide only input space for the next four digits. Accordingly, confusion on the user's input is reduced, thereby increasing user convenience.

FIG. 3 is a diagram illustrating a second embodiment of the present invention, and is a view for explaining a process of performing authentication in a relationship with a specific website for which the authentication system of FIG. 1 specifically requires authentication.

In FIG. 3, the configuration of the authentication server 50, the user computer 10, and the user telephone 20 is the same as that of the embodiment of FIG. 1, and a web server 40 that provides a specific website on the Internet 100 is further provided. The included point is different from FIG. The web server 40 may provide a website that sells a specific item or content online such as an internet shopping mall or a content providing site and requires a user to be authenticated at the time of login or a website that requires the user to pay for it. As a server, the server requests authentication of the user to the authentication server 50.

When requesting authentication of the web server 40 to the user connected to the web server 40, step S10 of FIG. 2 in which the user inputs the telephone number of the telephone 20 is performed from the user computer 10 to the web server. 40 is carried out. The web server 40 transmits the received telephone number to the authentication server 50. Accordingly, steps S21 to S51 of FIG. 2 are performed in the same manner. On the other hand, when the user enters the outgoing call number displayed on the user phone 20 to the user computer 10, the input outgoing call number is transmitted to the web server 40 in step S53 of Fig. 2 after the web server 40 Is transmitted to the authentication server 50, and steps S61 to S67 of FIG. 2 for authenticating by receiving and comparing outgoing telephone numbers are performed in the same manner.

According to the present embodiment as described above, the authentication is performed by the web server 40 requests authentication to the authentication server 50 when the authentication is required during a purchase or the like on a specific website. By inputting the telephone number of the user's telephone 20 in accordance with the guidance message on the website and inputting the outgoing telephone number displayed on the user's telephone 20 into the user's computer 10 by performing the same operation on the website. You can get certified.

4 is a diagram illustrating a third embodiment of the present invention, in which an outgoing call number to be displayed on the user's telephone 20 is generated by a predetermined caller number generation server 60 instead of the authentication server 50. It is shown. The originating number generation server 60 is a server which provides a randomly generated originating telephone number for the exchange 70 provided in the telephone station and installed in the telephone station.

That is, when the authentication server 50 makes a call to the user's telephone 20 and attempts to connect the call, the originating number generation server 60 randomly generates the outgoing telephone number and provides it to the exchange 70. At this time, as described above, the authentication server 50 has a unique telephone number assigned by the telephone company in order to perform a call operation, and the calling number generation server 60 is a line that attempts to connect the current call to the authentication server. It is possible to determine whether or not an outgoing telephone number should be generated by checking whether the telephone number of the telephone number allocated for 50 is a telephone over a line.

The exchange 70 connects the authentication server 50 and the user telephone 20, and displays the outgoing telephone number generated by the origination number generation server 60 on the user telephone 20. On the other hand, the origination number generation server 60 also transmits the originating telephone number generated by the authentication server 50, accordingly, the authentication server 50 can know the generated outgoing telephone number.

As the user inputs the outgoing telephone number displayed on the user's telephone 20 to the user's computer 10, the input data is transferred to the authentication server 50 through the Internet 100, and then the authentication server 50 is transferred to the user's computer. By comparing the data received from the (10) (or the data transmitted from the user computer 10 and transmitted through the web server 50, as shown in Figure 3) with the data generated by the source number generation server 60 In the same case, authentication is the same as described above.

According to the present embodiment, the operator of the authentication server 50 may allow the originating number generation server 60 to generate an arbitrary outgoing telephone number when the authentication server 50 makes a call in consultation with the telephone company. . Therefore, the authentication server 50 performs only the operation of making a call and comparing the two data input for authentication, and the generation of the outgoing call number is to be made by the call number generation server 60 provided separately in the telephone company. It becomes possible.

Compared to the method of Figs. 1 to 3 in which outgoing phone number is arbitrarily generated by the authentication server 50, the method according to the present embodiment has a specific purpose at the phone station by prior consultation with the phone company. Since it is generated, it is possible to implement a sales method without departing from the original purpose of the caller ID service that informs the receiver of the caller's actual telephone number.

On the other hand, also in the second and third embodiments of the present invention, various modifications in the above-described first embodiment is of course applicable.

On the other hand, the authentication method in the present invention can also be used for authentication on the premise of payment. That is, as a premise for the web server providing the goods and / or services to the user to perform the charging of the goods and / or services, the user of the present invention as described above to authenticate the user to be charged. An authentication method can be adopted.

In this case, the payment may be summed up when the bill is charged for the telephone number of the user's telephone 20, for example. That is, the purchase price is added to the telephone number input by the user, and as the user deposits the charged amount, the operator of the website providing the goods / service is settled from the telephone company.

Furthermore, the user authentication method according to the present invention may be used when a user wants to check the authenticity of a telephone number input at the time of registration when a user registers as a member on a specific website. That is, in general, when a user wants to join a specific website as a member, input of user information is required on the website, and the required user information typically includes the user's telephone number. When the operator of the website wants to confirm the authenticity of the user's telephone number, the authentication method according to the present invention can confirm whether the user of the telephone number of the telephone number entered by the user is currently using the telephone.

Therefore, if the user decides to allow membership for the authenticated user according to the present invention, the reliability of the member's personal information is increased. It is easy to be accurate.

According to the present invention, it is possible to transmit the authentication number required for authentication without transmitting a text message to the user has the advantage that the cost of the text message transmission does not occur. In addition, a phone capable of displaying a calling number can be utilized for authentication regardless of a mobile phone or a general phone, and thus has an advantage of wide application.

As described above, although the present invention has been described by way of limited embodiments and drawings, the present invention is not limited thereto and is intended by those skilled in the art to which the present invention pertains. Of course, various modifications and variations are possible within the scope of equivalents of the claims to be described.

Claims (19)

(a) the authentication server generating an arbitrary outgoing telephone number or selecting one of a plurality of telephone numbers assigned to the authentication server as the outgoing telephone number; (b) the authentication server making a call to a user's telephone to display the outgoing telephone number on the telephone; (c) the authentication server receiving the data as data input by the user to the user computer is transmitted from the user computer through the Internet; And (d) the authentication server determining whether the outgoing call number and the data are the same, and authenticating the user if they are the same. The method of claim 1, And receiving, by the authentication server, information on a phone number designated by the user, In the step (b), the authentication server is a user authentication method characterized in that the call connection to the specified telephone number. The method of claim 1, And immediately after the authentication server dials the telephone in the step (b) and the call connection is made, the authentication server terminates the call connection. The method of claim 1, And the outgoing call number comprises a predetermined code. The method of claim 1, The authentication server makes a request to the subscriber information providing server providing information on the subscriber of the phone to confirm whether the subscriber of the phone is a subscriber receiving caller ID service, or the authentication server sends the phone to the user computer. Requesting confirmation of whether the subscriber of the subscriber is provided with the calling number display service and receiving confirmation that the calling number display service is being provided from the user computer by the user's input; The steps (a) to (d) are performed when it is confirmed that the caller ID service is provided in the confirmation step. The method of claim 5, If it is confirmed in the confirmation step that the caller ID service is not provided, Transmitting, by the authentication server, a short message including a predetermined authentication code to a user's telephone; Receiving the data by the authentication server as data input by the user to the user computer is transmitted from the user computer through the Internet; And And authenticating, by the authentication server, whether the authentication code and the data are the same, and authenticating the user if the authentication code is the same. The method of claim 5, If it is confirmed in the confirmation step that the caller ID service is not provided, The authentication server making a call to a user's telephone to voice guide the outgoing telephone number to an ARS function; Receiving the data by the authentication server as data input by the user to the user computer is transmitted from the user computer through the Internet; And And authenticating, by the authentication server, whether the outgoing call number and the data are the same and authenticating the user if they are the same. The method of claim 1, The authentication server making an input request for a part of the outgoing telephone number to the user computer; And in step (d), authenticating the user if the data is the same as the part of the outgoing telephone number. (a) the authentication server dialing a user's telephone and attempting to connect a call; (b) the originating number generation server generates any outgoing telephone number to be displayed on the telephone connected by the authentication server or selects one of a plurality of telephone numbers assigned to the authentication server as the outgoing telephone number, Transmitting the authentication server to an exchange which connects the call to the telephone; (c) the exchange connecting the authentication server and the telephone to display the outgoing telephone number on the telephone; (d) the authentication server receiving the data as data input by the user to the user computer is transmitted from the user computer through the Internet; And (e) the authentication server determining whether the calling telephone number generated by the calling number generating server and the data are identical to each other, and authenticating the user if the authentication server is the same. Way. The method of claim 9, And receiving, by the authentication server, information on a phone number designated by the user, In the step (a), the authentication server is a user authentication method, characterized in that to attempt to connect to the telephone number. The method of claim 9, And immediately after the call connection by step (c), the authentication server terminating the call connection. The method of claim 9, And the outgoing call number comprises a predetermined code. The method of claim 9, The authentication server makes a request to the subscriber information providing server providing information on the subscriber of the phone to confirm whether the subscriber of the phone is a subscriber receiving caller ID service, or the authentication server sends the phone to the user computer. Requesting confirmation of whether the subscriber of the subscriber is provided with the calling number display service and receiving confirmation that the calling number display service is being provided from the user computer by the user's input; The steps (a) to (e) are performed when it is confirmed in the confirmation step that the caller ID service is provided. The method of claim 13, If it is confirmed in the confirmation step that the caller ID service is not provided, Transmitting, by the authentication server, a short message including a predetermined authentication code to a user's telephone; Receiving the data by the authentication server as data input by the user to the user computer is transmitted from the user computer through the Internet; And And authenticating, by the authentication server, whether the authentication code and the data are the same, and authenticating the user if the authentication code is the same. The method of claim 13, If it is confirmed in the confirmation step that the caller ID service is not provided, The authentication server making a call to a user's telephone to voice guide the outgoing telephone number to an ARS function; Receiving the data by the authentication server as data input by the user to the user computer is transmitted from the user computer through the Internet; And And authenticating, by the authentication server, whether the outgoing call number and the data are the same and authenticating the user if they are the same. The method of claim 1, The authentication server making an input request for a part of the outgoing telephone number to the user computer; And in step (d), authenticating the user if the data is the same as the part of the outgoing telephone number. A recording medium on which a computer-readable program is recorded, which records a program for performing the user authentication method according to any one of claims 1 to 16. A web server that provides goods and / or services for the user authenticated by the user authentication method according to any one of claims 1 to 16, performs charging for the provision of the goods and / or services. Charging method comprising a. 17. A method for determining whether to register according to claim 1, further comprising the step of allowing membership of a predetermined website to the user authenticated by the user authentication method according to any one of claims 1 to 16.

Images