KR20070077483A - Payment processing method - Google Patents

Abstract

A method for processing payment is provided to process the payment of the first web server connected through a wired terminal of a customer by receiving customer authentication information from a customer mobile terminal and authenticate the customer based on an authentication result of the first server when the customer connects to other web servers with the wired terminal. A server transmits an authentication information request message including a callback URL(Uniform Resource Locator) to the customer mobile terminal through a mobile telecommunication company server when the wired terminal of a customer requests the payment after connecting to the server. The server receives the authentication information from the customer mobile terminal connected to the server through the callback URL(1100). The server processes the payment requested from the wired terminal of the customer by using the authentication information received from the customer mobile terminal. The authentication information is formed by including at least one of an ID, a password, customer information, biometric information, certificate information, payment tool information, account information, IC chip information, and so on.

Description

Payment Processing Method

1 is a view showing a schematic configuration of a preferred customer authentication relay system according to the present invention.

2 is a view showing the configuration of a preferred storage medium according to the present invention.

3 is a simplified illustration of customer identifier information according to a preferred embodiment of the present invention.

4 is a simplified illustration of customer wireless terminal information according to a preferred embodiment of the present invention.

5 is a simplified illustration of customer authentication information according to a preferred embodiment of the present invention.

6 is a simple conceptual diagram of a customer authentication relay process according to a preferred embodiment of the present invention.

7 is a simple conceptual diagram of a customer authentication relay process including a customer authentication relay server according to a preferred embodiment of the present invention.

8 is a simple conceptual diagram of a customer authentication relay process according to another preferred embodiment of the present invention.

9 is a simple conceptual diagram of a customer authentication relay process including a customer authentication relay server according to another preferred embodiment of the present invention.

10 to 12 are simple flowcharts of a customer authentication relay process according to a preferred embodiment of the present invention.

<Description of main parts of drawing>

100: customer authentication relay server 105: information transmission unit

110: information receiving unit 115: authentication processing unit

120: storage medium 125: customer wired terminal

130: customer wireless terminal 135: the first web server

140: second to N web servers

According to the present invention, authentication of a customer connected to the web server 1 through a wired terminal can be performed more safely and efficiently through customer authentication information stored in the wireless terminal of the customer. The customer authentication required when the associated and / or related web servers 2 to N are connected to a customer authentication relay method and system based on the customer authentication of the web server 1.

As the Internet infrastructure and financial transaction infrastructure evolved, user authentication became very important for website access and financial transactions.

In particular, phishing, or domains of legally owned users, which have recently been disguised or linked with e-mails sent from websites such as financial institutions to extract individual authentication numbers, credit card numbers, and account information. Key input information (e.g., pharming that steals or misrepresents a Domain Name System (DNS) name to mislead users into a real site, steals personal information such as personal IDs, passwords, account information, or user keyboards) , Keyboard hacking to hack personal IDs, passwords, account information, etc. has become a problem, and more secure and efficient user authentication problems have emerged.

In addition, since a plurality of authentication information (for example, ID and password, etc.) required for login or financial transaction does not exist in general, when a user is leaked to another person through hacking or the like, the user has to bear the damage.

An object of the present invention is derived to solve the above problems, the authentication of the customer connected to the first web server by a wired terminal using the wireless terminal of the customer, and then the second to N-th web The present invention provides a method and system for relaying customer authentication information for allowing access based on an authentication result of the first web server when accessing a server.

The customer authentication relay method proposed to achieve the above object includes transmitting predetermined customer authentication information from the customer wireless terminal to predetermined information receiving means when the customer wired terminal accesses the first web server, and transmits the predetermined information. Transmitting the customer authentication result corresponding to the customer authentication information or the customer authentication information from the means to the first web server and based on the customer authentication information corresponding to the customer authentication information or the customer authentication information from the first web server. And, characterized in that it comprises a step of allowing the connection of the customer wired terminal.

In addition, the present invention, the customer authentication result corresponding to the customer authentication information or customer authentication information from the predetermined information transmission means to the second to N-th web server when the customer wired terminal is connected to the second to N-th web server; It may be configured to further include the step of transmitting.

Here, when the customer wired terminal is connected to the second to N-th web server, transmitting a customer authentication result corresponding to the customer authentication information or customer authentication information from the predetermined information transmission means to the second to N-th web server. When the customer wired terminal is connected to the second to N-th web server, the customer wired to a predetermined program provided in the customer wired terminal or a predetermined information receiving means associated with the information transmission means in the first web server. The method may further include transmitting the second to N-th web server access information of the terminal.

In addition, the present invention, when the customer wired terminal is connected to the first web server, the step of transmitting the predetermined customer authentication information from the customer wireless terminal to the predetermined information receiving means, the customer wired terminal is the first web server The method further includes the step of transmitting the first web server connection information of the customer wired terminal to a predetermined program provided in the customer wired terminal or the predetermined information receiving means connected to the information transmitting means in the customer wireless terminal. It can be configured to include.

The present invention may further include a payment processing step of authenticating a predetermined payment process through the customer wired terminal based on the customer authentication information in the first web server or the second to Nth web servers. can do.

In addition, according to the present invention, the customer authentication information, ID (ID) information, password information, customer personal information, customer biometric information, customer communication means information, authorized certificate information, authorized certificate password information and And payment means information, payment means password information, customer account information, password information corresponding to the customer account, account transfer password information corresponding to the customer account, and IC chip included in the second terminal of the customer Information (or data), authorized certificate information included in the IC chip provided in the second customer terminal, IC chip unique information provided in the second customer terminal, and predetermined authentication provided in the second customer terminal. And at least one key data.

The customer authentication information may be encrypted and transmitted according to a predetermined encryption processing process.

In addition, according to the present invention, the customer wireless terminal is characterized in that it comprises at least one or more of a mobile phone, PDA, portable Internet phone, telematics.

On the other hand, the present invention is characterized in that it comprises a recording medium on which a predetermined program for executing the at least one customer authentication relay method described above is recorded.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

1 is a view showing a schematic configuration of a preferred customer authentication relay system according to the present invention.

The customer authentication relay system includes a customer wireless terminal 130 for transmitting predetermined customer authentication information to a predetermined information receiving means when the customer wired terminal 125 connects to the first web server 135, and the first web server. Based on the information transmitting means for transmitting the customer authentication information or the customer authentication result corresponding to the customer authentication information and the customer authentication result corresponding to the customer authentication information or the customer authentication information to the 135, It may be configured to include a first web server 135 for allowing the connection of the customer wired terminal (125).

Further, according to the present invention, the customer authentication relay system can be connected to the customer wired terminal 125 via the network 1 and can also be connected to the customer wireless terminal 130 via the network 2. Here, the network 1 is a wired network including the Internet and the like, and the network 2 is preferably a wireless network.

The network 1 may be selected depending on the customer wired terminal 125, and the customer wired terminal 125 may include a wired terminal 125 including a computer, an information processor (or KIOSK), an ATM, and an ATM machine. A terminal (or device) including at least one payment terminal, a home appliance having a communication function such as a television, a refrigerator, a microwave oven, an audio, an exercise device having a communication function, a wired telephone, and an RFID terminal. It may be made including at least one.

The network 2 may be selected depending on the customer wireless terminal 130, and the customer wireless terminal 130 may connect a wireless terminal 130 such as a mobile phone, a PDA, a mobile Internet phone, telematics, a wired telephone, and a computer. A wired terminal 125, a terminal (or device) including at least one information processor (or KIOSK), a current prohibited air supply, a cash dispenser, a payment terminal, and a television, a refrigerator, a microwave oven, audio, etc. It may include a home appliance provided, an exercise device equipped with a communication function, and at least one RFID terminal.

In particular, the customer wireless terminal 130, when connecting to a predetermined first web server 135 on the customer authentication relay system, in response to the request of the customer authentication information of the first web server 135, the illustrated customer authentication It may include customer authentication information to be transmitted to the relay server 100.

For example, the customer authentication information may be stored in a memory and / or an IC chip provided in the customer wireless terminal 130.

In addition, the customer authentication information includes ID (ID) information, password information, customer personal information, customer biometric information, customer communication means information, authorized certificate information, authorized certificate password information, payment means information, Payment means password information, customer account information, password information corresponding to the customer account, account transfer password information corresponding to the customer account, and information (or data included in the IC chip provided in the customer wireless terminal 130) ), The authentication certificate information included in the IC chip provided in the customer wireless terminal 130, the IC chip unique information provided in the customer wireless terminal 130, and the predetermined provided in the customer wireless terminal 130. At least one authentication key data may be included.

According to an exemplary embodiment of the present invention, when the customer wireless terminal 130 is the wireless terminal connected to a mobile communication network, the customer authentication relay server 1000 transmits to the customer wireless terminal 130. A predetermined application processing platform for processing a message including customer authentication information request information may be mounted.

For example, the platform mounted on the customer wireless terminal 130 may include a wireless Internet platform for interoperability (WIPI) platform, a BREW platform of Qualcomm of the United States, or a wireless internet terminal open platform (WITOP). Therefore, it is revealed that a wireless platform before WIPI (eg, GVM / SK-VM, etc.) may be mounted.

Preferably, the information transmission means provided in the customer authentication relay system, when the customer wired terminal 125 is connected to the second to N-th web server, the customer authentication information or customer authentication information to the second to N-th web server The customer authentication result corresponding to the transmission may be transmitted.

In addition, the customer authentication relay system, when the customer wired terminal 125 is connected to the first to N-th web server, the first of the customer wired terminal 125 to the predetermined information receiving means associated with the information transmission means; Characterized in that it further comprises a predetermined program for transmitting the 1 to N-th web server connection information (for example, URL, IP address, etc.).

Referring to FIG. 1, the customer authentication relay server 100 included in the customer authentication relay system includes a predetermined customer from the customer wireless terminal 130 when the customer wired terminal 125 connects to the first web server 135. Information transmitting unit 105 for transmitting the authentication information corresponding to the customer authentication information or customer authentication information received by the information receiving unit 110 to the information receiving unit 110 and the first web server 135 for receiving authentication information. It can be configured to have.

Here, the information transmitting unit 105 of the customer authentication relay server 100, when the customer wired terminal 125 is connected to the second to N-th web server 140, the second to N-th web server 140 ) May transmit the customer authentication information or the customer authentication result corresponding to the customer authentication information.

In addition, the customer authentication relay server 100 may be further provided with an authentication processing unit 115 for processing authentication for the customer accessing the web server through the wired terminal (125).

In addition, the information receiving unit 110 of the customer authentication relay server 100, when the customer wired terminal 125 is connected to the first to N-th web server 140, the predetermined provided in the customer wired terminal 125. The second or N-th web server access information of the customer wired terminal 125 may be received from the program or the first web server 135.

Here, the customer authentication relay server 100 may include at least one server on an internet website server, an internet banking server, a communication company server, a finance company server, a VAN company server, a PG company server, and a network associated with the servers. It may be made of a single server, or a combination of a plurality of servers (or terminals).

Here, when the customer authentication information is encrypted and transmitted from the customer wireless terminal 130 according to a predetermined encryption processing process, the customer authentication relay server 100 decrypts the encrypted customer authentication information. Can be.

In addition, when the customer authentication relay server 100 connects to the second to N-th web server 140 after the successful connection of the first web server 135 of the customer, The customer authentication information and / or the customer authentication processing result can be encrypted and transmitted according to a predetermined encryption processing process.

According to a preferred embodiment of the authentication relay that the customer authentication relay server 100 performs for the customer connecting to the first web server 135 via the wired terminal 125, first the customer authentication relay server 100 Receives predetermined customer identifier information from the customer wired terminal 125, and works in conjunction with a predetermined storage medium 120 in which customer wireless terminal 130 information associated with the customer identifier information is stored. Extracting the wireless terminal 130 information corresponding to the customer identifier information, and using the extracted customer wireless terminal 130 information, transmits predetermined customer authentication information request information to the customer wireless terminal 130; Receiving customer authentication information corresponding to the customer authentication information request information from the customer wireless terminal 130, for the customer connected through the customer wired terminal 125 based on the received customer authentication information Authentication processing can be performed.

Here, the customer authentication relay server 100, after successfully performing the authentication process for the customer accessing the first web server 135, the customer is connected to the second or N-th web server 140. In this case, the authentication processing details (or authentication information) may be transmitted to the second to N-th web server 140.

In addition, the customer authentication relay process of the customer authentication relay server 100 according to another preferred method, for the authentication of the customer to access the first web server 135 via the customer wired terminal 125, the first Receives the customer wireless terminal 130 information from the customer wired terminal 125 accessing the web server 135, and by using the received customer wireless terminal 130 information, predetermined to the customer wireless terminal 130 Transmits the customer authentication information request information, receives the customer authentication information corresponding to the customer authentication information request information from the customer wireless terminal 130, and connects the customer wired terminal 125 based on the received customer authentication information. The authentication process may be performed for the connected customer, and the customer authentication processing details (or authentication information) may be transmitted to the second or N-th web server to which the customer accesses.

According to an exemplary embodiment of the present invention, the customer authentication relay server 1000 transmits a message including the customer authentication information request information of the customer of the customer wireless terminal 130 to the customer wireless terminal 13. A message including customer authentication information may be received from the client, wherein the message including the customer authentication information request information transmitted from the customer authentication relay server 1000 to the customer wireless terminal 130 may be received from the customer wireless terminal ( 130 may include a data communication standard that can be received by an application for data communication included in a wireless internet platform for interoperability (WIPI) platform.

In addition, the message including the customer authentication information request information of the customer transmitted by the customer authentication relay server 1000 to the customer wireless terminal 130 is, among the wireless messages including SMS and / or EMS and / or MMS In accordance with at least one standard is preferably transmitted to the customer authentication relay server 1000 via a mobile communication network.

In addition, the customer authentication relay server 100 is characterized in that it comprises a recording medium recording a program for executing the function of the server.

Referring to FIG. 1, the customer authentication relay server 100 may interwork with a predetermined storage medium 120 for performing a predetermined authentication process for a connected customer, wherein the storage medium 120 may include: The customer authentication relay server 100 may be provided in the form of a database or a database server, and / or may be connected to the customer authentication relay server 100 through a predetermined network.

In addition, the storage medium 120 may store a variety of information for the customer authentication relay server 100 to perform authentication processing for the customer connected to the first to N-th web server 140, where Information stored in the storage medium 120 and the storage medium 120 will be described in more detail with reference to FIGS. 2 to 5 below.

2 is a diagram showing the configuration of a preferred storage medium 120 according to the present invention.

Referring to FIG. 2, the storage medium 120 includes at least one customer information (eg, customer information 1, customer information 2,..., Customer information N). The information may include identifier information about the customer, wireless terminal 130 information, and customer authentication information, in order to smoothly perform the authentication process for the customer accessing the first to N-th web server shown in the above-described drawings. It is preferably stored in association.

Here, at least one or more customer information stored in the storage medium 120, customer identifier information associated with the customer information, wireless terminal 130 information and customer authentication information according to the present invention, the first web server It is stored before the authentication processing operation for the customer connected to the 135 is performed, and thereafter, at the time of accessing the first web server 135 of the customer, the customer authentication processing of the customer authentication relay server 100 is performed. It is preferable to refer to it when performing work.

3 to 5 are exemplary views of customer identifier information, wireless terminal 130 information, and customer authentication information stored in association with the customer information in the storage medium 120.

3 is a simplified illustration of customer identifier information according to a preferred embodiment of the present invention.

 Referring to FIG. 3, the customer identifier information may be input or selected by a customer connected to the first web server 135 through a predetermined terminal (for example, the customer wired terminal 125) through the customer wired terminal 125. Predetermined customer identification information transmitted to the customer authentication relay server 100 (or the first user authentication relay server 100 via the first web server 135), and connected to the first web server 135. It may be referred to the first authentication for the customer, and may also be the wireless terminal 130 information extraction information for extracting the customer wireless terminal 130 information from the storage medium 120.

Preferably, the customer identifier information, the ID (ID) information, password information and customer personal information granted and / or authorized from the customer authentication relay server 100 (or the first to N Web server) (E.g. social security number, insurance number, driver's license number, homepage information, etc.), customer biometric information (e.g., fingerprint, iris, back of hand, vein, face, voice, etc.), customer communication means information (e.g., customer phone number, Mobile phone number, e-mail information, etc.), and at least one or more public certificate information.

Figure 4 is a simplified illustration of customer wireless terminal 130 information in accordance with a preferred embodiment of the present invention.

Customer wireless terminal 130 information stored in the storage medium 120, in the process of performing the authentication process in the customer authentication relay server 100 for the customer connected to the first web server 135 in accordance with the present invention , As the customer authentication relay server 100 may be referred to for requesting predetermined customer authentication information stored in the customer wireless terminal 130, a customer telephone number, a mobile phone number, a mobile access terminal number, and an e-mail. , Subscriber identification number, mobile IP, unique IP, and the like.

For example, when the customer wireless terminal 130 is a customer mobile phone, the customer wireless terminal 130 information may be the mobile phone number. In this case, the customer authentication relay server 100 may be a customer presented in FIG. The mobile phone number corresponding to the identifier information may be extracted, and a message for requesting customer authentication information may be transmitted to the mobile phone by referring to the mobile phone number.

According to another preferred embodiment, the customer wireless terminal 130 information is used when the customer wireless terminal 130 information is used as customer identifier information for customer authentication from the customer connected to the first web server 135, As shown in FIG. 2, the storage medium 120 may not be present.

5 is a simplified illustration of customer authentication information according to a preferred embodiment of the present invention.

Referring to FIG. 5, the customer authentication information shown is information required in the process of performing the second authentication for the customer accessing the first web server 135. The customer authentication information is displayed in addition to the storage medium 120. It is preferably stored in the memory and / or IC chip of the wireless terminal 130.

According to a preferred embodiment, the customer authentication information, ID (ID) information, password information, customer personal information, customer biometric information, customer communication means information, public certificate information, public certificate password information, payment Means information, payment means password information, customer account information, password information corresponding to the customer account, account transfer password information corresponding to the customer account, and the IC chip included in the customer wireless terminal 130 Information (or data), authorized certificate information included in the IC chip included in the customer wireless terminal 130, IC chip unique information provided in the customer wireless terminal 130, and the customer wireless terminal 130. It may comprise at least one predetermined authentication key data provided in the.

In addition, the customer authentication information stored in the customer wireless terminal 130 is transmitted to the customer authentication relay server 100 at the request of the customer authentication relay server 100, the customer authentication relay server 100 is stored in the The authentication process for the access customer may be performed by comparing the customer authentication information previously stored in the medium 120 with the customer authentication information transmitted from the wireless terminal 130.

6 is a simple conceptual diagram of a customer authentication relay process according to a preferred embodiment of the present invention.

Referring to FIG. 6, a customer authentication relay process according to a preferred embodiment includes a customer authentication relay server 100 (first web server 135), a storage medium 120, and second through N web servers 140. And, it can be carried out via the customer wired terminal 125 and the customer wireless terminal 130, the customer through the customer wired terminal 125 the customer authentication relay server 100 (first web server 135) ), Customer identifier information for authentication relay processing is provided.

In particular, FIG. 6 is an embodiment in which the above-described customer authentication relay server 100 and the first web server 135 to which the customer is connected are provided in the same server or the same system.

First, in order to perform the customer authentication relay process according to the present invention, the customer is the customer identification information required for the customer authentication relay process, the customer wireless terminal 130 information, customer authentication to the customer authentication relay server 100 Information can be registered (1). In addition, the customer authentication relay server 100 preferably stores the customer identification information, the customer wireless terminal 130 information, the customer authentication information and the customer information provided by the customer in a storage medium 120 in association with each other. (2).

Thereafter, in the process of accessing the customer authentication relay server 100 (or the first web server 135) through a predetermined terminal (for example, the customer wired terminal 125), the customer receives the customer identifier information from the customer. It is provided to the authentication relay server 100 (or the first web server 135) (3), the customer authentication relay server 100 (or the first web server 135) from the customer wired terminal 125 Customer wireless terminal 130 information corresponding to the provided customer identifier information is extracted from the storage medium 120 (4).

In addition, the customer authentication relay server 100 (or the first web server 135) refers to the extracted customer wireless terminal 130 information, and is required for the customer authentication to the customer wireless terminal 130. Request customer authentication information (5). At this time, the customer inputs and / or extracts customer authentication information corresponding to the customer authentication request information received from the customer wireless terminal 130 from the customer wireless terminal 130 (6), and the input and / or The extracted customer authentication information is transmitted to the customer authentication relay server 100 (or the first web server 135) through the customer wireless terminal 130 (7).

Then, the customer authentication relay server 100 (or the first web server 135) is the customer authentication information transmitted from the customer wireless terminal 130, 145, and the customer authentication previously stored in the storage medium 120 By comparing the information, performing a final authentication process for the customer (8), and transmits the details of the final authentication process to the customer wired terminal 125, access through the customer wired terminal 125 A post-authentication operation (eg, login, content use, payment, etc.) for a customer is initiated (9).

In addition, when the customer connects to the second to N web servers 140 (10), the authentication relay server 100 (or the first web server 135) is the second to N web server 140 By transmitting the authentication process result (or authentication information) of the customer (11), it is possible to permit the connection of the customer.

7 is a simple conceptual diagram of a customer authentication relay process in which a customer authentication relay server 100 is separately provided according to a preferred embodiment of the present invention.

Referring to FIG. 7, the illustrated customer authentication relay process includes a first web server 135, a customer authentication relay server 100, a storage medium 120 and 150, and a second to N web servers 140. And, it can be carried out through the customer wired terminal 125 and the customer wireless terminal 130, the customer is connected to the first web server 135 through the customer wired terminal 125, the customer authentication relay The server 100 may perform an authentication relay process for a customer accessing the first web server 135.

Here, the second to N web server 140 may be a web server, a content providing server, etc. on the Internet that a customer wants to access through a network after connecting to the first web server 135. The customer authentication relay server 100 may perform an authentication relay process for a customer accessing the second to N web servers 140.

As shown in FIG. 6, in order to perform the illustrated customer authentication relay process, the customer may request customer identifier information, customer wireless terminal 130 information, and customer authentication information required for the customer authentication process to the customer authentication relay server. (1), the customer authentication relay server 100 links the customer identifier information provided by the customer, the customer wireless terminal 130 information, the customer authentication information and the customer information to the storage medium 120 Then save it (2).

Thereafter, in the process of accessing the first web server 135 (eg, a web server on the Internet, a content providing server, etc.) by using a predetermined terminal (eg, the customer wired terminal 125), the customer identifier is used. Information is provided to the first web server 135 (3), and the first web server 135 provides the customer identification information provided from the customer wired terminal 125 to the customer authentication relay server 100; Request authentication processing for the connected customer (4).

This embodiment is described in such a manner that the customer authentication relay server 100 performs authentication processing for a customer accessing the first web server 135 in response to a request of the first web server 135. The predetermined program provided in the first web server 135 and / or the customer wired terminal 125 confirms the connection of the first web server 135 of the customer wired terminal 125, and thus the customer. It is specified that the authentication relay server 100 may request authentication processing for the customer.

The customer authentication relay server 100 stores the customer wireless terminal 130 information corresponding to the customer identifier information provided from the first web server 135 according to the authentication processing request of the first web server 135. Extracting from the medium 120 (5), and with reference to the extracted customer wireless terminal 130 information, and requests the customer authentication information required for the customer authentication to the customer wireless terminal 130 (6).

When the customer authentication information request message is transmitted from the customer authentication relay server 100 to the customer wireless terminal 130, the customer receives customer authentication information corresponding to the customer authentication request information received by the customer wireless terminal 130. Input and / or extraction from the customer wireless terminal 130 (7), and transmits the input and / or extracted customer authentication information to the customer authentication relay server 100 via the customer wireless terminal 130 (8 ).

Then, the customer authentication relay server 100 compares the customer authentication information transmitted from the customer wireless terminal 130 with the customer authentication information previously stored in the storage medium 120, thereby performing a final authentication process for the customer. (9), and transmits the details of the final authentication process to the first web server 135 that the customer is connected through the wired terminal (125) (10).

The first web server 135 transmits the authentication processing details provided by the customer authentication relay server 100 to the customer wired terminal 125 to perform predetermined post-authentication work (eg, login, contents) on the customer. Use, payment, etc.) (11).

In addition, when the customer accesses the second to N web servers 140 (12), the customer authentication relay server 100 is the second to N web server 140 to the first web server of the customer ( By transmitting an authentication process result (or authentication information) that has been performed in the connection process (135) (13), it is possible to authorize the access of the customer.

8 is a simple conceptual diagram of a customer authentication relay process according to another preferred embodiment of the present invention.

The customer authentication relay process shown in FIG. 8 includes the customer authentication relay server 100 (or the first web server 135), the storage medium 120, the customer wired terminal 125, and the second through N web servers. 140 and the customer wireless terminal 130, the customer is connected to the customer authentication relay server 100 (or the first web server 135) through the customer wired terminal 125, Characterized by providing the customer wireless terminal 130 information for the customer authentication relay process.

In particular, FIG. 8 is an embodiment in which the customer authentication relay server 100 and the first web server 135 are the same server or are provided in the same system.

Preferably, in order to perform the customer authentication relay process shown in FIG. 8, the customer sends the customer authentication information required for the customer authentication relay process to the customer authentication relay server 100 (or the first web server 135). After registration (1), the customer authentication relay server 100 (or the first web server 135) may store the customer authentication information provided by the customer in a storage medium 120 in association with the customer information ( 2).

Thereafter, the customer requests the customer authentication relay process in the process of accessing the customer authentication relay server 100 (or the first web server 135) through a predetermined terminal (eg, the customer wired terminal 125). The customer wireless terminal 130 information stored in the customer authentication information is provided to the customer authentication relay server 100 (or the first web server 135) (3), the customer authentication relay server 100 (or first) 1 Web server 135 refers to the customer wireless terminal 130 information provided from the customer wired terminal 125, and requests the customer authentication information required for the customer authentication to the customer wireless terminal 130 ( 4).

Here, the customer inputs and / or extracts customer authentication information corresponding to customer authentication request information received from the customer wireless terminal 130 from the customer wireless terminal 130 (5), and inputs and / or extracts. The transmitted customer authentication information to the customer authentication relay server 100 (or the first web server 135) through the customer wireless terminal 130 (6).

Then, the customer authentication relay server 100 (or the first web server 135) compares the customer authentication information transmitted from the customer wireless terminal 130 with the customer authentication information previously stored in the storage medium 120. By performing the authentication process for the customer (7), by transmitting the details of the final authentication process to the customer wired terminal 125, for the customer connected through the customer wired terminal 125 A predetermined post-authentication operation (eg, login, content use, payment, etc.) is started (8).

In addition, when the customer connects to the second to N web servers 140 (9), the customer authentication relay server 100 (or the first web server 135) to the second to N web server ( 140, by transmitting an authentication process result (or authentication information) that was performed in the access process to the first web server 135 of the customer (10), it is possible to allow the access of the customer.

9 is a simple conceptual diagram of a customer authentication relay process including a customer authentication relay server 100 according to another preferred embodiment of the present invention.

Referring to FIG. 9, the illustrated customer authentication relay process includes a customer authentication relay server 100, a first web server 135, a storage medium 120, a second through N web servers 140, It may be implemented through the customer wired terminal 125 and the customer wireless terminal 130, the customer is the first web server 135 through the customer wired terminal 125 (first web server 135 after the connection after the first) 2 to N web servers 140, and the customer authentication relay server 100 connects to the first web server 135 (after the first web server 135 is connected) and the second to N web servers 140. It is characterized in that the authentication relay process for the customer connecting to the).

As shown in FIG. 7, the first web server 135 (or the second through N web servers 140) that the customer connects through the wired terminal 125 may be a web server or a content providing server on the Internet. The client authentication relay server 100 may be a relay server that substitutes and / or relays authentication processing for a customer accessing the first web server 135 (or second to N web servers 140). (Or a communication company server).

In order to perform the customer authentication relay process shown in FIG. 9, the customer registers customer authentication information required for the customer authentication relay process in the customer authentication relay server 100 (1), and the customer authentication relay server 100 ) May be preceded by a process of storing customer authentication information provided by the customer in association with the customer information in the storage medium 120 (2).

Then, in the process of the customer connecting to a predetermined server (e.g., a web server on the Internet, a content providing server, etc.) using a predetermined terminal (e.g., customer wired terminal 125), the customer is authenticated Provides the customer wireless terminal 130 information in which the required customer authentication information is stored to the first web server 135 (3), and the first web server 135 provides the customer wireless terminal provided from the customer wired terminal 125. The terminal 130 provides information to the customer authentication relay server 100 to request authentication processing for the connected customer (4).

According to another preferred method, when the customer's first web server 135 is connected, the customer wireless terminal 130 information stored in the customer authentication information required for the customer authentication process, the customer authentication relay server 100 It may be transmitted.

The customer authentication relay server 100 refers to the customer wireless terminal 130 information provided from the first web server 135 according to the authentication processing request of the first web server 135. 130, requesting customer authentication information required for the customer authentication (5).

Preferably, when a customer authentication information request message is transmitted from the customer authentication relay server 100 to the customer wireless terminal 130, the customer authenticates the customer corresponding to the customer authentication request information received by the customer wireless terminal 130. Information is input and / or extracted from the customer wireless terminal 130 (6), and the input and / or extracted customer authentication information is transmitted to the customer authentication relay server 100 through the customer wireless terminal 130. (7).

Then, the customer authentication relay server 100 compares the customer authentication information transmitted from the customer wireless terminal 130 with the customer authentication information previously stored in the storage medium 120 to perform an authentication process for the customer. (8) and transmits the details of the authentication process to the first web server 135 that the customer is connected through the wired terminal 125 (9).

The first web server 135 transmits the customer authentication processing details provided by the customer authentication relay server 100 to the customer wired terminal 125, so that a predetermined authentication and post operation (eg, login, Content usage, payment, etc.) (10).

In addition, after the customer authentication for the first web server 135 is completed, when the customer accesses the second to N web servers 140 (11), the customer authentication relay server 100 is By transmitting the authentication process result (or authentication information) that was performed in the process of connecting to the first web server 135 of the customer to the 2 ~ N web server 140 (12), the second ~ N web server of the customer ( 140) Allow access.

10 to 12 described below are required for the authentication relay process for the customer connected to the first web server 135 via a predetermined wired terminal 125 (for example, a personal computer, etc.) according to the present invention. As the customer authentication information, using the chip information stored in the IC chip provided in the wireless terminal 130 (wireless terminal 130) of the customer, the first web server 135 in the customer authentication relay server 100 An embodiment of performing an authentication process for a customer connected to.

10 is a simple flowchart of a customer authentication relay process according to a preferred embodiment of the present invention.

10, a customer connects to a first web server 135 using a personal computer (PC, etc.) as a customer wired terminal 125, and uses the customer's ID / PW as the customer identifier information to the first web server 135. When transmitting to, when the first web server 135 transmits the ID / PW information of the customer to the customer authentication relay server 100 to request authentication for the connected customer, the customer authentication relay server ( 100, a simple embodiment of a process of requesting customer authentication information to the customer wireless terminal 130 by extracting customer wireless terminal 130 information associated with the ID / PW of the customer.

Referring to FIG. 10, the illustrated embodiment includes customer information and / or customer identifier information (eg, ID / PW, etc.) and / or wireless terminal 130 information in the customer authentication relay server 100 according to the present invention. And / or storing customer authentication information (chip information) in a predetermined storage medium 120.

When a customer connects to the first web server 135 via a personal computer (1005), the first web server 135 may initiate an authentication process for the connected customer (1010) in accordance with the present invention. When the authentication process for the connected customer is started, the first web server 135 requests 1015 input of predetermined customer identifier information to the connected customer, and the customer uses a keyboard or the like provided in the personal computer. The registered ID / PW is input as the customer identifier information and transmitted to the first web server 135 (1020).

When the ID / PW is received from the customer computer, the first web server 135 transmits the customer identifier information input from the customer wired terminal 125 to the customer authentication relay server 100, and sends it to the connected customer. The authentication process is requested (1025).

Then, the customer authentication relay server 100 is linked with the storage medium 120, the customer wireless terminal 130 information corresponding to the customer identifier information (ID / PW) received from the first web server 135 Extract from the storage medium 120 (1030).

At this time, if the customer wireless terminal 130 information corresponding to the customer identifier information (ID / PW) received from the first web server 135 does not exist in the storage medium 120 (1035), the customer authentication The relay server 100 determines that it is not possible to continuously perform the customer authentication relay process according to the present invention, and sends a message indicating that the customer authentication cannot be processed to the first web server 135 and / or the customer wired terminal 125. It may transmit (1040).

Here, if the customer has not registered customer identifier information, customer wireless terminal 130 information and customer authentication information required for performing the customer authentication process according to the present invention, the customer authentication relay server 100 The customer may be requested to perform a predetermined information registration process for registering the information for performing the customer authentication relay process according to the present invention (1045).

However, if the customer refuses to perform the information registration process, the customer authentication relay process shown is terminated (1050).

On the other hand, if the customer wireless terminal 130 information corresponding to the customer identifier information (ID / PW) received from the customer wired terminal 125 is present in the storage medium 120 is extracted (1055), the customer authentication relay The server 100 transmits a customer authentication information request message to the customer wireless terminal 130 with reference to the extracted wireless terminal 130 information (wireless terminal 130 number) (1060). The customer authentication information request message may include a callback URL for more easily performing the process of the wireless terminal 130 accessing the server.

In addition, according to another preferred method, when the customer wireless terminal 130 information is used as the customer identifier information received from the customer computer, the above-described wireless terminal 130 information extraction process (1025 ~ 1055) may be omitted. It can be alright.

11 is a simple flowchart of a customer authentication relay process according to a preferred embodiment of the present invention.

FIG. 11 shows the customer identifier information (ID / PW) input from the customer wired terminal 125 (personal computer (PC, etc.)) from the first web server 135 through the embodiment shown in FIG. After transmitting to the customer authentication relay server 100, the customer authentication relay server 100 receives the customer wireless terminal 130 (wireless terminal 130 in this embodiment) corresponding to the customer identifier information; After extracting from the storage medium 120, and transmits a customer authentication information request message requesting predetermined customer authentication information to the customer wireless terminal 130, the customer wireless terminal 130 to the customer authentication information request message A simple embodiment of a process of extracting corresponding customer authentication information and transmitting it to the customer authentication relay server 100.

In particular, FIG. 11 is customer authentication information corresponding to a customer authentication request message transmitted from the customer authentication relay server 100 to the customer wireless terminal 130, and chip information stored in the IC chip provided in the customer wireless terminal 130. FIG. It characterized by using.

Referring to FIG. 11, it may be started from a process of receiving a customer authentication information request message from the customer authentication relay server 100 in the customer wireless terminal 130 (1100).

When the customer authentication information request message is received from the customer authentication relay server 100 at the customer wireless terminal 130, the customer receives PIN information for accessing the IC chip in which the customer authentication information corresponding to the customer authentication request message is stored. An input may be made through a keypad or the like provided in the wireless terminal 130 (1105).

When the PIN information is input, the IC chip provided in the wireless terminal 130 compares the PIN information input through the keypad and the PIN information previously stored in the IC chip, thereby validating the PIN information. Here, when the input PIN information and the PIN information stored in the IC chip does not match (1110), the output means (for example, screen output means, voice output means, etc.) provided in the wireless terminal 130 The PIN input failure message or a warning sound may be output (1115).

Preferably, the PIN information input may be repeatedly performed within a limited number of times. When the PIN information is re-entered (1120), the above-described PIN authentication procedure is performed again, and when there is no re-entry of the PIN information, The customer authentication relay process shown in 11 is terminated (1125).

Meanwhile, as a result of comparing the PIN information input through the keypad and the PIN information pre-stored in the IC chip, if authentication is successfully performed (1130), the wireless terminal 130 The electronic device may output at least one customer authentication information stored in the IC chip (1135).

In this case, the customer authentication information stored in the IC chip may include authorized certificate information, authorized certificate password information, payment method information, payment method password information, customer account information, password information corresponding to a customer account, and a customer. The account transfer password information corresponding to the account, information (or data) included in the IC chip included in the customer wireless terminal 130 and predetermined authentication key data may be included.

When a plurality of customer authentication information is stored in the IC chip, the customer transmits customer authentication information to be transmitted in response to the customer authentication information request message received from the customer authentication relay server 100 among the at least one customer authentication information output. It may be selected (1140).

As described above, when the customer authentication information corresponding to the customer authentication information request message is selected, the wireless terminal 130 accesses the server included in the customer authentication information request message received from the customer authentication relay server 100. Information (eg, a callback URL, etc.) may be checked (1145), and the selected customer authentication information may be transmitted with reference to the checked server access information (1150). In operation 1155, the wireless terminal 130 outputs the customer authentication information transmission details through the screen output means.

12 is a simple flowchart of a customer authentication relay process according to a preferred embodiment of the present invention.

FIG. 12 illustrates that the customer authentication information stored in the customer wireless terminal 130 is transmitted from the customer wireless terminal 130 to the customer authentication relay server 100 through the embodiment illustrated in FIG. 11. In the customer authentication relay server 100 using the customer authentication information transmitted from the customer wireless terminal 130, the process of performing the authentication process for the customer, and after the customer the second web server or N-th web server This is a simple embodiment for the case of connecting to.

FIG. 12 may start from receiving a customer authentication request response message including customer authentication information (eg, chip information) from the customer wireless terminal 130 at the customer authentication relay server 100 (1200).

11, when a customer authentication request response message including customer authentication information (eg, chip information) is received from the customer wireless terminal 130, the customer authentication relay server 100 receives the reception. The customer authentication information (eg, chip information, etc.) included in the received customer authentication request response message is checked (1205).

In addition, the customer authentication relay server 100 reads customer authentication information stored in association with the customer information from the storage medium 120 (1210), and the customer authentication information and the customer authentication information read from the storage medium 120. The customer authentication information confirmed from the request response message is compared to determine whether the customer authentication information matches (1215).

If the customer authentication information read from the storage medium 120 and the customer authentication information checked from the customer authentication request response message do not coincide with each other (1220), the customer authentication relay server 100 is connected to the first web server ( 135 and / or the customer authentication information mismatch message to the customer terminal (1225).

On the other hand, if the customer authentication information read from the storage medium 120 and the customer authentication information confirmed from the customer authentication request response message match (1230), the customer authentication relay server 100 is the wired terminal 125 In step 1235, it is confirmed that the authentication process for the customer accessing the first web server 135 has been successfully performed, and the customer authentication process details are transmitted to the first web server 135 and / or the customer terminal.

Preferably, when the customer authentication process is successfully performed through the customer authentication relay server 100, the first web server 135 may grant the user permission to access and / or use the content ( 1240).

Thereafter, if the customer wants to access the second web server or the N-th web server 140 (1245), the second to N web server access information is stored in a predetermined access program provided in the customer wired terminal 125. The client authentication relay server 100 is transmitted to the client authentication relay server 100 (1250), and the client authentication relay server 100 transmits the customer authentication information and the first web server 135 authentication processing result to the second to N web servers 140. By transmitting (1255), the second to N Web server 140 can be authorized to access the customer (1260).

According to the present invention, authentication of a customer connected to a first web server by a wired terminal is performed by using the wireless terminal of the customer, and then when accessing a second to N-th web server, authentication of the first web server is performed. By providing a method and system for relaying customer authentication information based on the results, it is possible to more safely and efficiently prevent the leakage of personal information through existing phishing, pharming, or keyboard hacking. There is an advantage.

In addition, the first (once) login to the wireless terminal, it is possible to omit the login process required when connecting to the associated site in the future, it is possible to provide the above-described secure login process, as well as to simplify the cumbersome login process There is this.

In addition, in the case of a customer wireless terminal in which customer authentication information is stored according to the present invention, a communication service provider has an advantage of generating additional revenue according to operation of a communication network.

In addition, when the present invention attracts the telecommunications carrier, there is an advantage that new revenue can be generated by performing authentication processing for a plurality of sites (or institutions).

In addition, when the present invention is applied to financial transactions, financial institutions can attract more financial transaction customers and enhance the corporate image by allowing customers to perform secure financial transactions.

Claims (2)

When a predetermined payment processing request is made after connecting to a server from a customer wired terminal, the server sends authentication information to which the callback UEL is added-authentication information required for approval of a payment processing-to the customer wireless terminal through a communication server server on a communication network. Requesting; Receiving, by the server, authentication information transmitted by the customer wireless terminal after accessing through the callback UE; And And processing the payment requested by the customer wired terminal by using the received authentication information in the server. The method of claim 1, wherein the authentication information, ID information, password information, customer personal information, customer biometric information, customer communication means information, public certificate information, public certificate password information, payment method information, payment method password information, customer Account information, password information corresponding to the customer account, account transfer password information corresponding to the customer account, information (or data) included in the IC chip included in the customer wireless terminal, and the customer wireless terminal And at least one authorized certificate information included in an IC chip, IC chip unique information provided in the customer wireless terminal, and predetermined authentication key data provided in the customer wireless terminal.

Images