KR20070091808A - Authentication method, system, server and recording medium for controlling mobile communication terminal by using encryption algorithm - Google Patents

Abstract

An authentication method, a system, a server, and a recording medium for controlling a mobile communication terminal by using an encryption algorithm are provided to raise the security level of the mobile communication terminal by preventing a non-authenticated user from using contents stored in the mobile communication terminal. An authentication system includes a user terminal(110) and an authentication server(150). When a user succeeds in a log-in process, the user terminal generates or receives a random number, transmits the random number, requests an authentication on the random number and receives first authentication information. The user terminal generates second authentication information by using the random number, compares the first and second authentication information with each other to perform the authentication process. The authentication server receives a log-in request from the user terminal, receives the random number fro the user terminal, and processes the random number by using an encryption algorithm to generate the first authentication information. The authentication server transmits the first authentication information to the user terminal.

Description

Authentication Method, System, Server and Recording Medium for Controlling Mobile Communication Terminal by Using Encryption Algorithm}

1 is a block diagram schematically illustrating an authentication system for controlling a mobile terminal using an authentication key according to a first embodiment of the present invention;

2 is a flowchart illustrating an authentication method for controlling a mobile terminal using an authentication key according to the first embodiment of the present invention.

3 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an authentication key according to a second embodiment of the present invention;

4 is a block diagram schematically illustrating an authentication system for controlling a mobile terminal using an encryption algorithm according to a third embodiment of the present invention;

5 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an encryption algorithm according to a third embodiment of the present invention;

6 is a block diagram schematically illustrating an authentication system for controlling a mobile communication terminal using an encryption algorithm according to a fourth embodiment of the present invention;

7 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an encryption algorithm according to a fourth embodiment of the present invention;

8 is a flowchart illustrating an authentication method for controlling a mobile terminal over time according to a fifth embodiment of the present invention;

9 is a block diagram schematically illustrating an authentication server according to a third embodiment and a fourth embodiment of the present invention;

10 is an exemplary view showing a user information table according to a preferred embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

110 and 410: user terminal 120 and 610: mobile communication terminal

130: mobile communication network 140: Internet

150, 420, 620: authentication server

The present invention relates to an authentication method, a system, a server and a recording medium for controlling a mobile terminal using an encryption algorithm. More specifically, one or more of the mobile communication service and the Internet service may not be used to prevent an illegal user or an external device such as an unauthorized computer from illegally using the mobile terminal to download contents. The present invention relates to a method, a system, a server, and a recording medium for authenticating a user or an external device to control a mobile communication terminal by using an encryption algorithm through interworking between a mobile communication terminal or an external device and an authentication server on a network.

BACKGROUND With the rapid development of computer, electronic and communication technologies, various wireless communication services using wireless communication networks have been provided. The most basic wireless communication service is a voice call service that allows wireless communication between mobile subscribers using a mobile communication terminal regardless of time and place. In recent years, a wireless data service has emerged, which allows a mobile communication subscriber to perform data communication using a wireless communication network while the mobile subscriber is moving.

Accordingly, the mobile subscribers can freely move anywhere at any time by using the voice call service and make voice calls with the other party, as well as various information necessary for life using the wireless data service, for example, news, weather, sports, and securities. , Exchange rates, traffic information, etc. can be provided while moving in a variety of forms, such as text, voice, images.

Such wireless communication services include a mobile communication service implemented as a code division multiple access (CDMA) 2000 system, a wideband CDMA (WCDMA) system, a wireless local area network (WLAN) service, and a wireless internet broadband (WiBro) service. Etc. Wireless communication services such as mobile communication service, wireless LAN service, WiBro service, etc. have been recently specialized in high speed data communication service due to rapid technology development.

Accordingly, a subscriber of a wireless communication service (hereinafter referred to as a 'wireless subscriber') can transmit and receive various data by wirelessly accessing another subscriber or the Internet wirelessly while on the move. That is, the wireless subscriber not only carries out voice communication while carrying a terminal (hereinafter referred to as a "wireless terminal") that performs a wireless communication service, but also accesses the Internet by using wireless Internet technology to access text, images, Multimedia data services such as voice or video are provided.

Recently, with the development of the Internet and multimedia data technology, a content provider (CP) that provides various contents such as multimedia communication, network games, video games, mobile photobooks, and broadcast programs has emerged. It also plays the role of a multimedia terminal that downloads, stores and uses various contents provided by.

In this way, the wireless terminal does not merely serve as a communication means for voice call or data communication, but also serves as a multipurpose electronic communication device that downloads, stores and utilizes various contents. A technology has been developed that connects an external device to download content stored in a wireless terminal to an external device or uploads to a wireless terminal stored in an external device to share and use the stored content between the wireless terminal and the external device. There is an advantage that can utilize the content stored in their wireless terminal or an external device more diversely.

However, the content sharing technology between the wireless terminal and the external device includes a problem of illegal use of content. In other words, content provided by a content provider may be provided free of charge, but is usually provided for a fee. If a illegal user other than the person who purchased the content provided for a fee is used without the permission of the content provider, the copyright is not used. There is a problem of infringement.

In addition, a user who uses a wireless terminal stores various text information such as a video, a video or a recorded voice, a short message, a multimedia message, a schedule, a phone number, and the like that are recorded on the wireless terminal. When an illegal user downloads content such as video, video, voice, and text information by controlling the wireless terminal using an external device, the user's important information such as personal information or privacy is violated. There is a problem that is exposed.

However, until now, when downloading contents stored in the wireless terminal to an external device or uploading contents of the external device to the wireless terminal, a person who wants to synchronize and use the wireless terminal and the external device through a program installed on the external device By inputting an arbitrarily set ID and password, there is a problem in that the wireless terminal can be easily controlled by an external device without additional authentication process, so that the control of the wireless terminal is not strictly authenticated.

In order to solve such a problem, the present invention provides a mobile communication service and an Internet service to prevent an illegal user or an external device such as an unauthorized computer from illegally using the mobile terminal to download contents. When the above is not available, a method, system, server, and recording medium for authenticating a user or an external device that wants to control the mobile communication terminal by using an encryption algorithm through interworking between the mobile communication terminal or an external device and an authentication server on the network. The main purpose is to provide.

In order to achieve the above object, the present invention provides a system for performing authentication for controlling a mobile communication terminal. When the login request is successful and the login is successful, the first authentication information is requested by receiving or generating a random number and transmitting the random number. A user terminal for receiving the certificate, generating second authentication information using a random number, and performing authentication by comparing the first authentication information with the second authentication information; And an authentication server that receives the login request from the user terminal, processes the login, receives the random number from the user terminal, processes the random number using an encryption algorithm, generates first authentication information, and transmits the first authentication information to the user terminal. It provides an authentication system for controlling a mobile communication terminal using an encryption algorithm comprising a.

In addition, according to another object of the present invention, in a system comprising a user terminal for controlling a mobile communication terminal and an authentication server for performing the authentication of the control of the user terminal, in the method for performing authentication, (a) a user terminal Receiving a random number from the server; (b) generating first authentication information by processing the random number into an encryption algorithm; And (c) transmitting the first authentication information to the user terminal, and controlling the user terminal to perform the authentication.

According to still another object of the present invention, there is provided a near field communication means for communicating with a mobile communication terminal, a network communication means for communicating with an authentication server, and a control means for performing authentication for controlling a mobile communication terminal. A software for performing authentication in a computer, comprising: registering login information with an authentication server; Accessing the authentication server to request a login, and upon successful login, receiving, generating, storing, and transmitting a random number to the authentication server; Receiving and storing first authentication information from an authentication server; Generating second authentication information by processing a random number; And performing a control by comparing the first authentication information with the second authentication information and confirming whether the first authentication information and the second authentication information are identical to control the mobile communication terminal. A computer readable recording medium having recorded authentication software is provided.

In addition, according to another object of the present invention, in a system for authenticating a user terminal for controlling a mobile communication terminal, if the login is successful and the login is successful, a random number is input or generated and transmitted and the authentication is requested to perform the first mobile authentication. A mobile communication terminal that receives information, generates second portable authentication information by processing a random number using an encryption algorithm, and then performs authentication by comparing the first portable authentication information with the second portable authentication information; And processing the login by receiving a login request from the mobile communication terminal, generating a first mobile authentication information by receiving a random number from the mobile communication terminal and processing a random number using an encryption algorithm, and converting the first mobile authentication information to the mobile communication terminal. An authentication system for controlling a mobile communication terminal using an encryption algorithm, characterized in that it comprises an authentication server for transmitting.

In addition, according to another object of the present invention, in a system comprising a user terminal for controlling a mobile communication terminal and an authentication server for performing the authentication of the control of the user terminal, in the method for performing authentication, (a) moving Receiving a random number from a communication terminal; (b) processing the random number into an encryption algorithm to generate first portable authentication information; And (c) controlling the mobile communication terminal to perform authentication by transmitting the first portable authentication information to the mobile communication terminal. do.

According to still another object of the present invention, there is provided a short-range communication means for communicating with a user terminal, a wireless communication means for communicating with an authentication server using a mobile communication network, and performing authentication for allowing control of the user terminal. A software for performing an authentication function in a mobile communication terminal including a control means, comprising: registering login information with an authentication server; Accessing the authentication server to request a login, and upon successful login, receiving, generating, storing, and transmitting a random number to the authentication server; Receiving and storing first portable authentication information from an authentication server; Generating second portable authentication information by processing a random number; And comparing and verifying whether the first portable authentication information and the second portable authentication information match and verifying whether the first portable authentication information matches the second portable authentication information. Provide a recording medium that can be read by a mobile communication terminal that records software.

Further, according to another object of the present invention, an authentication server for authenticating a user terminal to control a mobile communication terminal, comprising: a wired network processing unit which is a wired communication means for performing communication with a user terminal; An authentication processing unit for receiving a random number from a user terminal and requesting authentication, transmitting a random number to request and receiving first authentication information, and then transmitting the random number to a user terminal; A database unit for storing a Mobile Access Number (MDN) of a mobile communication terminal corresponding to a MAC (Media Access Control) address of the user terminal and the MAC address; An encryption unit configured to generate and transmit first authentication information by encrypting using an encryption algorithm when receiving the encrypted information; When receiving the random number from the authentication processing unit and receiving the first authentication information, the MDN is received by the database unit, and an ESN (Electronic Serial Number) corresponding to the MDN is received and received, and the date, MDN, random number, and ESN for which authentication is requested. A wired authentication unit for generating and transmitting the encrypted information to the encryption unit, receiving the first authentication information from the encryption unit, and transmitting the received authentication information to the authentication processing unit; And it provides an authentication server for controlling a mobile communication terminal using an encryption algorithm, characterized in that it comprises an external interworking unit for receiving the ESN request from the authentication processing unit, retrieved from the subscriber database of the mobile communication network and forwarded.

Further, according to another object of the present invention, an authentication server for authenticating a user terminal to control a mobile communication terminal, comprising: a wireless network processing unit which is a wired communication means for performing communication with a mobile communication terminal; An authentication processing unit for receiving a random number from a mobile communication terminal and requesting authentication, transmitting a random number to request and receiving first portable authentication information, and then transmitting the random number to the mobile communication terminal; An encryption unit configured to generate and transmit first portable authentication information by encrypting using an encryption algorithm when receiving the portable encryption information; And when receiving a random number from the authentication processing unit generates the mobile encryption information including the year and date when the authentication is requested, the mobile directory number (MDN) of the mobile communication terminal, the random number and the ESN (Electronic Serial Number) of the mobile communication terminal and transmits to the encryption unit. And an wireless authentication unit for receiving the first portable authentication information from the encryption unit and transferring the first portable authentication information to the authentication processing unit.

In addition, according to another object of the present invention, in a method for performing authentication according to time for a user terminal intended to use a mobile communication terminal in a mobile communication terminal, (a) authentication is successful to allow control of the user terminal step; (b) storing an authentication success time which is a time at which authentication is successful, and calculating and storing the authentication expiration time; (c) receiving a control command from a user terminal; (d) checking whether the current time is the authentication expiration time; And (e) informing the user terminal that the authentication has expired and blocking the control when the current time is the authentication expiration time.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are designated as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

1 is a block diagram schematically illustrating an authentication system for controlling a mobile communication terminal using an authentication key according to a first embodiment of the present invention.

An authentication system for controlling a mobile communication terminal using an authentication key according to the first embodiment of the present invention includes a user terminal 110, a mobile communication terminal 120, a mobile communication network 130, an internet 140, and an authentication server 150. ).

The user terminal 110 is a computer that communicates with various network servers through the Internet 140 and is connected to the mobile communication terminal 120 to control the mobile communication terminal 120. The user terminal 110 may be a desktop computer, a notebook computer, a work computer. It may be a station or the like, and may include a web browser for accessing the Internet, a memory for storing a program, a microprocessor for executing and operating a program, and the like.

The user terminal 110 according to the first embodiment of the present invention is a wired / wireless communication device such as a mobile communication terminal 120, a RS-232C (Recommended Standard-232C), a universal serial bus (USB), an infrared data association (IrDA), and the like. Is connected by wire or wireless by using and connected to the authentication server 150 using TCP / IP through the Internet 140, the mobile communication terminal 120 and the mobile terminal through the interworking with the authentication server 150 Perform an authentication procedure to control 120.

To this end, the user terminal 110 according to the first embodiment of the present invention transmits and receives data with the authentication server 150 through a short-range communication means for performing wired and wireless communication with the mobile communication terminal 120, the Internet 140 The user terminal 110 by executing a network communication means, an input / output means for receiving command and data from a user and outputting information, a storage means for storing a first authentication module which is software for performing the above-described authentication procedure, and an authentication module. Control means for controlling to perform the above-described authentication procedure.

Here, the first authentication module is software for performing a procedure for authentication, which is executed by the control means so that the control means receives user information for allowing the user terminal 110 to control the mobile communication terminal 120. A function of registering user information by transmitting the user information, and entering a control mode for controlling the mobile communication terminal 120, generating an authentication key and transmitting the request to the mobile communication terminal 120 to request authentication. Control to receive and store temporary authentication information from the authentication server 150, and upon receiving an authentication wait response from the mobile communication terminal 120, request and receive an authentication code from the authentication server 150, and an authentication key. And the combination of the authentication code to generate a combination authentication information sent to the mobile communication terminal 120 and receives the authentication result according to the mobile communication terminal It includes the function of controlling the terminal 120.

In addition, the first authentication module analyzes the authentication result received from the mobile communication terminal 120 to check the control level, grasps the control right to control the mobile communication terminal 120 according to the control level, and moves according to the control right. And a function of controlling the communication terminal 120.

The mobile communication terminal 120 is a wireless terminal that performs a mobile communication service including a voice call service, a wireless internet service, and a short message service provided by the mobile communication network 130. The video, video, voice, game, text information, etc. Stores various contents of the memory.

The mobile communication terminal 120 according to the first embodiment of the present invention includes a short range communication means for performing wired and wireless communication with the user terminal 110, a wireless communication means for performing communication with the mobile communication network 130, and a user terminal ( 110 and a storage means for storing a second authentication module, which is software for performing an authentication procedure in association with the authentication server 150, and controlling the mobile communication terminal 120 to execute the authentication procedure by executing the second authentication module. Means.

Here, the second authentication module is a software for performing a procedure for authentication. When the second authentication module receives an authentication key for control from the user terminal 110, the second authentication module transmits the authentication key to the authentication server 150 using the mobile communication network 120. A function for requesting temporary authentication information, a function for receiving and storing temporary authentication information from the authentication server 150 and for notifying the user terminal 110 that the authentication is in a waiting state, and upon receiving the combination authentication information from the user terminal 110, the temporary authentication. And a function of generating an authentication result by comparing the information with the combined authentication information and transmitting the result to the user terminal 110 and receiving a control command from the user terminal 110 that has successfully authenticated and operating according to the control command.

Meanwhile, the mobile communication terminal 120 transmits an authentication key to the authentication server 150 and receives temporary authentication information from the authentication server 150, preferably using a short message service. In addition, the mobile communication terminal 120 preferably uses an extended short message service that does not output the message content on the screen. In the case of using a conventional short message service, a user or an illegal user can check the contents of a message, that is, an authentication key for authentication, temporary authentication information, etc. through message software such as a message manager provided in the mobile communication terminal 120. This is because there is a concern that the authentication can be arbitrarily controlled.

The mobile communication network 130 is a network implemented as a mobile communication system providing a mobile communication service including a voice call service, a short message service, and a wireless data service to the mobile communication terminal 120, and authenticates with the mobile communication terminal 120. Relays data transmitted and received between the server 150. Here, the mobile communication system may be a short message service such as a code division multiple access (CDMA) 2000 system, a wideband CDMA (WCDMA) system, a wireless local area network (WLAN) system, or a wireless internet broadband (WiBro) system. It may be a wireless communication system that provides a wireless data service.

The Internet 140 is a service that exists in the TCP / IP protocol and its upper layers, namely Hypertext Transfer Protocol (HTTP), Telnet, File Transfer Protocol (FTP), Domain Name Server (DNS), and Simple Mail Transfer Protocol (SMTP). , An open computer network structure that provides a simple network management protocol (SNTP), a network file service (NFS), and a network information service (NIS), and is transmitted and received between the user terminal 110 and the authentication server 150. Relay the data.

The authentication server 150 according to the first embodiment of the present invention is implemented as a general network server, receives a request for registration of user information from the user terminal 110, and receives an authentication key from the mobile communication terminal 120. When the temporary authentication information is requested, an authentication code is generated using an encryption algorithm, and then the temporary authentication information combining the authentication key and the authentication code is generated and transmitted to the mobile communication terminal 120.

In addition, if the authentication server 150 according to the first embodiment of the present invention receives the authentication key from the user terminal 110 and requests an authentication code, the user terminal 110 or the user terminal ( Check whether the user using 110 is a legitimate user, and transmits the authentication code to the user terminal (110).

In addition, the authentication server 150 according to the first embodiment of the present invention may store and manage the history of the authentication processing result, that is, the authentication history, which is the result of the authentication, and provide it to the administrator, the user terminal 110 or If there is a request from the mobile communication terminal 120 may provide a history of authentication.

2 is a flowchart illustrating an authentication method for controlling a mobile terminal using an authentication key according to a first embodiment of the present invention.

In order to control the mobile terminal 120, the user may use user information such as an ID and password for logging into the authentication server 150, and an IP address of the user terminal 110 to control the mobile terminal 120. When inputting to the terminal 110 and instructing the registration of the user information, the user terminal 110 generates the user information by processing the input data, transmits the authentication server 150 and requests the registration of the user information (S202). .

The authentication server 150 stores and registers the received user information in a database and transmits the registration to the user terminal 110 to respond to user information registration (S206). The user terminal 110 receives the output on the screen and the user confirms that the user information is normally registered. In this case, the authentication server 150 may notify the user terminal 110 of the response to the user information registration through the Internet 140 as described above, but other communication means such as a wired telephone or another mobile communication terminal of the user. It could be used.

After the user information is registered as described above, when the user attempts to control the mobile communication terminal 120 by operating the user terminal 110, the user terminal 110 enters the control mode to store the first authentication module stored in the memory. Start the procedure for authentication by running. That is, the user terminal 110 generates an authentication key, transmits it to the mobile communication terminal 120, and requests authentication (S208). Here, the authentication key is, for example, a 4-bit key value arbitrarily generated by the authentication module.

When receiving the authentication key, the mobile communication terminal 120 executes the second authentication module, creates the received authentication key as an extended short message, and transmits the received authentication key to the authentication server 150 using the mobile communication network 130. Request temporary authentication information for authenticating 110 (S210).

The authentication server 150 checks the authentication key upon receiving the extended short message, generates arbitrary authentication codes for authenticating the user terminal 110, and generates temporary authentication information combining the received authentication key and the authentication code. In operation S212, the mobile communication network 130 transmits an extended short message to the mobile communication terminal 120 (S214). Here, the authentication code may be, for example, an 8-bit authentication code, and thus, the temporary authentication information may include 12 bits in which a 4-bit authentication key and an 8-bit authentication code are combined. The mobile communication terminal 120 stores the received temporary authentication information in a memory and notifies the user terminal 110 of the waiting state for authentication (S218).

The user terminal 110 notified of the waiting state for authentication transmits the authentication key transmitted to the mobile communication terminal 120 in step S208 to the authentication server 150 to request an authentication code (S220). In this case, the user terminal 110 may request authentication for the IP address of the user and the user terminal 110 by transmitting the user information registered in step S202 to step S206.

When the authentication server 150 that has received the authentication code is requested to authenticate using the user information as described above, whether the ID and password of the user and the IP address match the registered user ID and password, and registered in the corresponding ID. Check whether it matches the IP address (S222), if it does not match, transmits an authentication failure response to the user terminal 110 (S224), and if it matches, transmits to the mobile communication terminal 120 in step S212. The authentication code is transmitted to the user terminal 110 to notify the authentication code response (S226). Here, when the authentication server 150 is not requested to authenticate using the user information, only the authentication code is transmitted to the user terminal 110 as in step S226.

The user terminal 110 that has received the authentication failure response as in step S224 does not control the mobile communication terminal 120, and the user terminal 110 that has received the authentication code and received the authentication code response as in step S226 receives the The combination authentication information is generated by combining the authentication code and the authentication key transmitted to the mobile communication terminal 120 in step S208 (S228). Here, since the authentication key is 4 bits and the authentication code is 8 bits, the combined authentication information is also 12 bits.

The user terminal 110 generating the combination authentication information transmits the combination authentication information to the mobile communication terminal 120 (S230), and the mobile communication terminal 120 receiving the combination authentication information transmits the authentication server 150 in step S214. The authentication is performed by comparing the temporary authentication information received from the combination authentication information with each other and confirming whether they match with each other (S232).

The mobile communication terminal 120 determines that the authentication failed when the temporary authentication information and the combination authentication information do not match as a result of the check in step S232, and notifies the user terminal 110 of the authentication failure response indicating that authentication failed ( In step S234, when the control of the user terminal 110 is not allowed and the temporary authentication information and the combination authentication information match, it is determined that the authentication is successful, and the user terminal 110 notifies the authentication success response indicating that the authentication is successful (S236). ), The control of the user terminal 110 is allowed.

The user terminal 110 notified of the authentication success response from the mobile communication terminal 120 transmits an AT command such as an external interface (EIF) to the mobile communication terminal 120 and transmits a control command (AT command) through the control command. 120 can be controlled.

In the above, the user terminal 110 transmits an authentication key to the mobile communication terminal 120 and requests authentication so that the mobile communication terminal 120 receives temporary authentication information from the authentication server 150 and waits for authentication. The first embodiment of receiving the authentication code from the authentication server 150 has been described.

Hereinafter, the user terminal 110 does not transmit the authentication key to the mobile communication terminal 120, but the user terminal 110 transmits the authentication key directly to the authentication server 150 so that the authentication server 150 moves. The method of transmitting the temporary authentication information to the communication terminal 120 and the authentication code to the user terminal 110 will be described with reference to the second embodiment.

In the authentication system for controlling the mobile communication terminal using the authentication key according to the second embodiment of the present invention, the user terminal 110, the mobile communication terminal 120, and the user terminal 150 in the system described with reference to FIG. 1 will be described later. Operation as described in the method and other details are the same, so the detailed description is omitted.

3 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an authentication key according to a second embodiment of the present invention.

Since the steps S302 to S306 are the same as the method for registering the user information with the authentication server 150 as in the steps S202 to S206 described with reference to FIG. 2, a detailed description thereof will be omitted.

The user terminal 110 that has registered the user information enters a control mode to control the mobile communication terminal 120, generates an authentication key, and transmits the authentication key to the authentication server 150 to request authentication (S308). In this case, when the user authentication is performed using the user information, the authentication server 150 checks whether the user information and the registered user information match (S310), and if it does not match, sends an authentication failure response to the user terminal. If not (S312), if it matches, generates an authentication code (S314), and sends an authentication code to the user terminal 110 to notify the authentication code response (S316).

In addition, the authentication server 150 generates temporary authentication information by combining the generated authentication code and the authentication key, and transmits the temporary authentication information to the mobile communication terminal 120 (S318). The mobile communication terminal 120 receiving the temporary authentication information stores the temporary authentication information (S320) and notifies the user terminal 110 of the waiting state for authentication (S322).

The user terminal 110 notified of the waiting state for authentication generates a combination authentication information by combining the generated authentication key and the authentication code received from the authentication server 150 (S324), and as described through steps S230 to S236. When the combination authentication information is transmitted to the mobile communication terminal 120 (S326), the mobile communication terminal 120 performs authentication by comparing the temporary authentication information with the combination authentication information (S328), and if it does not match, the authentication failure response. Notify the user terminal 110 (S330), and if it matches, notifies the user terminal 110 of the successful authentication response (S332), and informs the user terminal 110 of the authentication result.

In the above, the authentication system and method for controlling the mobile communication terminal using the authentication key according to the first and second embodiments of the present invention have been described with reference to FIGS. In the authentication system and method for controlling a mobile communication terminal using an authentication key according to the first and second embodiments of the present invention, the user terminal 110 can use the Internet 140, and the mobile communication terminal 120 This is possible only when the mobile communication service can be performed using the mobile communication network 120. However, because of the spatial and temporal constraints due to the characteristics of the Internet and mobile communication services, an authentication scheme for controlling a mobile terminal should be considered when the Internet and mobile communication services are not provided.

Hereinafter, when the user terminal 110 can access the Internet 150 and the mobile communication terminal 120 cannot perform a mobile communication service through the third and fourth embodiments, respectively, and the user terminal 110. An authentication system and method for controlling the mobile communication terminal 120 when the user cannot access the Internet 150 and the mobile communication terminal 120 can perform a mobile communication service will be described.

4 is a block diagram schematically illustrating an authentication system for controlling a mobile communication terminal using an encryption algorithm according to a third embodiment of the present invention.

An authentication system for controlling a mobile communication terminal using an encryption algorithm according to a third embodiment of the present invention includes a mobile communication terminal 120, the Internet 140, a user terminal 410, and an authentication server 420.

The mobile communication terminal 120 is the same as the conventional mobile communication terminal described with reference to FIG. That is, in the description of the mobile communication terminal 120 described with reference to FIG. 1, the mobile communication terminal 120 stores contents as an object of control rather than interworking with the user terminal 110 and the authentication server 410. Mobile communication terminal. The Internet 140 relays data transmitted and received between the user terminal 410 and the authentication server 420 as described above with reference to FIG. 1.

The user terminal 410 performs authentication for controlling the mobile communication terminal 120 in conjunction with the authentication server 420 as well as the role of the conventional computer described above. That is, the user terminal 410 according to the third embodiment of the present invention is an input / output means for receiving data and commands from a user and outputting information, a short-range communication means for communicating with the mobile communication terminal 120, and an authentication server. The mobile communication terminal is provided with a network communication means for performing data communication with the 150, a storage means for storing the third authentication module for performing the above-described authentication, and a control means for controlling the overall operation of the user terminal 110. When controlling the 120, the third authentication module is executed to perform authentication through interworking with the authentication server 150.

Here, the third authentication module is a function that is executed by a control means to register login information with the authentication server 420, accesses the authentication server 420 to request login, and receives or generates a random number upon successful login. Storing and transmitting to the authentication server 420, receiving and storing encrypted first authentication information from the authentication server 620, generating second authentication information by processing the stored random number, and first authentication information; By comparing the second authentication information and confirming whether or not match, the software performs a function of performing the control of the mobile communication terminal 120 only when authentication is successful.

When the authentication server 420 according to the third embodiment of the present invention receives the login information from the user terminal 410 and receives a registration request, the authentication server 420 stores and registers the login information. When the login request is received from the user terminal 410, the login is performed. When the request is made, the received login information and the stored login information are compared and checked to determine whether the login is successful, and the login result is transmitted to the user terminal 410. When the random number is received, the first authentication information encrypted using an encryption algorithm such as a message digest 5 (MD5) algorithm or a cellular authentication & voice encryption (CAVE) algorithm is generated and transmitted to the user terminal 410.

In addition, the authentication server 420 according to the third embodiment of the present invention manages the history of the authentication processing result, that is, the result of performing authentication, that is, the administrator who manages the authentication server 420 to inquire the authentication history. When receiving an inquiry request from the user terminal 410 or the mobile communication terminal 120, the authentication history may be provided.

5 is a flowchart illustrating an authentication method for controlling a mobile communication terminal using an encryption algorithm according to a third embodiment of the present invention.

When the user operates the user terminal 410 to control the mobile communication terminal 120 and inputs login information such as an ID, a password, and a MAC (Media Access Control) address, the user terminal 410 receives the input login information. It transmits to the authentication server 420 and requests registration of login information (S502). The authentication server 620, which has been requested to register the login information, stores and registers the received login information in a database (S504) and notifies the user terminal 410 that the login information has been normally registered (S506).

Subsequently, when the user manipulates the user terminal 410 to control the mobile communication terminal 120, the user terminal 410 executes the stored authentication module to perform authentication for controlling the mobile communication terminal 120. . That is, the user terminal 410 transmits an ID, a password, and a MAC address of the user terminal 410 to access and log in to the authentication server 620 (S508).

Receiving the ID and password of the user and the MAC address of the user terminal 410, the authentication server 620 checks whether or not the login success by encrypting and matching the user ID and password with the ID stored in the database ( S510, if it does not match, notifies the user terminal 410 of the login failure response indicating that the login has failed (S512), and if it matches, checks whether the received MAC address matches the MAC address stored in the database. (S514) If not matched, the user terminal 410 notifies the login failure response indicating that the login has failed (S516), and if not, notifies the user terminal 410 of the login success response indicating the successful login. (S518).

The user terminal 410 notified that the login has been successfully received receives or generates an arbitrary random number (S520), and transmits the generated random number to the authentication server 420 (S522). The authentication server 420 that has received the random number may request the authentication by using an encryption algorithm such as an MD5 algorithm or a CAVE algorithm, a mobile directory number (MDN) of the mobile communication terminal 120, a random number, and a mobile communication terminal 120. After generating the first authentication information as an output value by encrypting the electronic serial number (ESN) (S524), the first authentication information is transmitted to the user terminal 410 (S526).

Here, the authentication server 420 uses the MAC address of the user terminal 410 in obtaining the MDN and ESN of the mobile communication terminal 120. That is, the authentication server 420 grasps the MDN of the mobile communication terminal 120 corresponding to the MAC address of the user terminal 410 in the database provided, and moves from the subscriber DB in association with the subscriber DB of the mobile communication network 120. Obtain the MDN and ESN of the communication terminal 120.

The user terminal 410 stores the received first authentication information and enters a control mode (S528). The user terminal 410 entering the control mode generates second authentication information by processing the stored random number (S530). Here, the user terminal 410 generates the second authentication information by processing, that is, encrypting the random number with the same algorithm as the encryption algorithm provided in the authentication server 420. Accordingly, the user terminal 410 encrypts the MDN of the mobile communication terminal 120, the random number, and the ESN of the mobile communication terminal 120 to generate second authentication information as an output value.

The user terminal 410, which has generated the second authentication information, compares the first authentication information received in step S526 with the generated second authentication information (S540), and if it does not match, to control the mobile communication terminal 120. Recognizes that the number is not recognized and outputs a message indicating that it cannot be controlled (S534), and if there is a match, waits for input of a control command for controlling the mobile communication terminal 120 (S536). When the command is input, the mobile communication terminal 120 is controlled according to the input control command.

6 is a block diagram schematically illustrating an authentication system for controlling a mobile communication terminal using an encryption algorithm according to a fourth embodiment of the present invention.

An authentication system for controlling a mobile communication terminal using an encryption algorithm according to a fourth embodiment of the present invention includes a user terminal 110, a mobile communication network 130, a mobile communication terminal 610, and an authentication server 620.

The user terminal 110 serves as a conventional computer described with reference to FIG. 1, and the mobile communication network 130 is a network providing a typical mobile communication service described with reference to FIG. 1. That is, in the description of the user terminal 110 described with reference to FIG. 1, the user terminal 110 is intended to control the mobile communication terminal 610 instead of interworking with the mobile communication terminal 610 and the authentication server 620. A target computer is a typical computer connected to the mobile communication terminal 610 by wire or wireless. As described above with reference to FIG. 1, the mobile communication network 130 is a network for providing a mobile communication service including a wireless data service to the mobile communication terminal 410. Therefore, detailed description of the user terminal 110 and the mobile communication network 130 will be omitted here.

The mobile communication terminal 610 according to the fourth embodiment of the present invention not only serves as the conventional mobile communication terminal described above with reference to FIG. 1 but also permits the control of the user terminal 110 in association with the authentication server 620. Perform authentication. That is, the mobile communication terminal 610 according to the fourth embodiment of the present invention includes input / output means for receiving data and commands from a mobile subscriber and outputting information, short-range communication means for communicating with the user terminal 110; Wireless communication means for performing data communication with the authentication server 620, storage means for storing the fourth authentication module for performing authentication, and a control means for controlling the overall operation of the mobile communication terminal 610, the user terminal When connected to the 110, if there is a request for control from the user terminal 110, authentication is performed through interworking with the authentication server 620.

Here, the fourth authentication module is executed by the control means to register login information with the authentication server 620, access the authentication server 620, request a login, and if the login is successful, a random number is input or generated and Storing and transmitting to the authentication server 620, receiving and storing encrypted first portable authentication information from the authentication server 620, generating second portable authentication information by processing the stored random number, and first portable. By comparing the authentication information and the second portable authentication information and confirming whether or not matched to perform the authentication and the function to allow the control of the user terminal 110 only when the authentication is successful.

In addition, the fourth authentication module analyzes the second mobile authentication information to check the control level included in the second mobile authentication information, grasps the control right according to the control level, and then controls the control of the user terminal according to the control right. Allow only control based on control authority and block control not conforming to control authority.

When the authentication server 620 according to the fourth embodiment of the present invention receives login information from the mobile communication terminal 610 and requests registration, the authentication server 620 stores and registers login information and receives a login request from the mobile communication terminal 610. When the login is requested, it is determined whether the login is successful by comparing the received login information with the registered login information and confirming whether the login is successful, and transmitting the login result to the mobile communication terminal 610, and successfully logging in the mobile communication. When the random number is received from the terminal 610, first mobile authentication information encrypted using an encryption algorithm such as an MD5 algorithm or a CAVE algorithm is generated and transmitted to the mobile communication terminal 610.

In addition, the authentication server 620 according to the fourth embodiment of the present invention may store and manage the history of the authentication processing result, that is, the authentication history, which is the result of the authentication, and provide the same to the administrator, the user terminal 110 or If there is a request from the mobile communication terminal 610, it may provide an authentication history.

7 is a flowchart illustrating an authentication method for controlling a mobile terminal according to a fourth embodiment of the present invention.

The mobile subscriber operates the mobile communication terminal 610 to register a user or a computer that can control the mobile communication terminal 610, and inputs an ID and a password. Login information including a password and its own MDN is generated and transmitted to the authentication server 620 to request registration of the login information (S702). The authentication server 620, which has been requested to register the login information, stores and registers the received login information in a database (S704), and notifies the mobile communication terminal 610 that the login information has been normally registered (S706).

Thereafter, when the user connects the user terminal 110 and the mobile communication terminal 610 to control the mobile communication terminal 610 and inputs a control command for control, the user terminal 110 enters the control mode. The mobile communication terminal 610 requests permission of the control. The mobile communication terminal 610, which has received the permission of the control, executes the fourth authentication module to perform authentication for control. That is, the mobile communication terminal 610 transmits an ID, a password, and an MDN to access and log in to the authentication server 620 (S708).

The authentication server 620 that receives the user's ID, password, and MDN checks whether the login succeeds by encrypting and comparing the ID and password with the ID stored in the database (S710). Notify the mobile terminal 610 of the login failure response indicating that the service failed (S712), and if it matches, checks whether the received MDN matches the MDN stored in the database (S714), and if it does not match, login Notify the mobile terminal 610 of the login failure response indicating that the failure (S716), and if it matches, notifies the mobile terminal 510 of the login success response indicating the successful login (S718).

The mobile communication terminal 610 notified of the successful login has received or generated an arbitrary random number (S720), and transmits the random number to the authentication server 620 (S722). The authentication server 620 that receives the random number may request the authentication by using an encryption algorithm such as an MD5 algorithm or a CAVE algorithm, a mobile directory number (MDN) of the mobile communication terminal 610, a random number, and a mobile communication terminal 610. After the electronic serial number (ESN) is encrypted to generate the first portable authentication information as an output value (S724), the first portable authentication information is transmitted to the mobile communication terminal 610 (S726).

The mobile communication terminal 610 stores the received first portable authentication information (S728), and generates the second portable authentication information by processing the stored random number (S730). Here, the mobile communication terminal 610 generates the second portable authentication information by processing a random number with the same algorithm as the encryption algorithm provided in the authentication server 620. Accordingly, the mobile communication terminal 610 encrypts the date, the MDN, the random number, and the ESN requesting the authentication to generate the second portable authentication information as an output value.

The mobile terminal 610 that has generated the second portable authentication information compares the first portable authentication information received in step S726 with the generated second portable authentication information (S732), and if it does not match, the user terminal 110. In operation S734, a message indicating that it cannot be controlled is transmitted (S734), and if it matches, the control of the user terminal 110 is allowed and the control command is received from the user terminal 110 to operate according to the control command (S736).

In the above description, the user terminal 110 to control the mobile communication terminal 120 by interworking between the user terminal 110, the mobile communication terminal 120, and the authentication server 150 through the first and second embodiments is described. The method of authentication has been described, and when the mobile communication terminal 120 cannot perform a mobile communication service according to the third embodiment, a method of performing authentication by interworking between the user terminal 410 and the authentication server 420. As described above, when the user terminal 110 cannot perform an Internet service through the fourth embodiment, a method of performing authentication by interworking between the mobile communication terminal 610 and the authentication server 620 has been described. . In other words, the method of performing authentication has been described above.

On the other hand, when the authentication is successful in the user terminal (110, 410) and the mobile communication terminal (120, 610) as described above, the control between the user terminal (110, 410) and the mobile communication terminal (120, 610), Once authentication is successful, there is a problem that control can be continued unless the connection is disconnected.

That is, if a legitimate user performs authentication and controls the mobile communication terminals 120 and 610 to the user terminals 110 and 410 and then leaves the connection without disconnecting, the illegal user moves to the user terminals 110 and 410. Since the communication terminals 120 and 610 can be controlled, a method of preventing the communication terminals 120 and 610 should be devised. Therefore, in the following, when the user terminals 110 and 410 control the mobile communication terminals 120 and 610, a predetermined time may occur while the user terminals 110 and 410 or the mobile communication terminals 120 and 610 perform the control. After that, a method of expiring authentication will be described with reference to FIG. 8 as a fifth embodiment.

8 is a flowchart illustrating an authentication method for controlling a mobile terminal over time according to a fifth embodiment of the present invention.

In FIG. 8, for convenience of description, only the authentication method for controlling the mobile communication terminal over time in the mobile communication terminals 120 and 610 is illustrated. However, this is only for convenience of description, and those skilled in the art may be configured similarly to the method for illustrating an authentication method for controlling a mobile terminal over time in the user terminals 110 and 410. Keep in mind that you can.

If the authentication is successful as described through the first to fourth embodiments (S810), the mobile terminal 120, 610 that has performed the authentication stores the date and time of successful authentication, that is, the authentication success time, and authenticates. The authentication expiration time to release the success is calculated and stored (S820). Here, authentication expiration time is the time which added predetermined time (for example, 24 hours) from authentication success time. That is, for example, assuming that the authentication success time is 22:34 on February 24, 2005, the authentication expiration time is 22:34 on February 25, 2005, which is 24 hours plus the authentication success time.

The mobile communication terminals 120 and 610 storing the authentication expiration time receive a control command from the user terminals 110 and 410 (S830). Upon receiving the control command, the mobile communication terminals 120 and 610 check whether the current time is the authentication expiration time (S840).

If the current time is not the authentication expiration time, as a result of checking in step S840, the mobile communication terminals 120 and 610 perform a corresponding operation according to the control command (S850), proceed to step S830 to receive the control command again, If the current time is the authentication expiration time, the user terminal 110, 410 is notified that the authentication time has expired (S860), and control of the user terminals 110, 410 is blocked.

As a result, even if the connection for control is not released after successful authentication once, illegal users can be prevented from illegally controlling the mobile communication terminals 120 and 610, and the right user can use the mobile communication terminals 120 and 610. Can provide enough time to control

9 is a block diagram schematically illustrating an authentication server according to a third embodiment and a fourth embodiment of the present invention.

Although the authentication servers 420 and 620 according to the third and fourth embodiments of the present invention perform somewhat different roles according to the third and fourth embodiments, the user terminal 410 is connected through a wired network. The algorithm for processing authentication is merely a difference between interworking with the mobile communication terminal 610 through a wireless network or the like.

Accordingly, an integrated authentication server performing both the roles of the authentication server 420 according to the third embodiment and the authentication server 620 according to the fourth embodiment will be described with reference to FIG. 9.

The authentication servers 420 and 620 according to the third and fourth embodiments of the present invention are referred to as a wired network processing unit 910, a wireless network processing unit 920, and a user interface (UI). ) Includes a provider 930, an authentication unit 940, an encryption unit 950, a database unit 960, and an external interworking unit 970.

The wired network processing unit 910 is a wired communication means for communicating with the user terminal 410 through the Internet 140. The wireless network processor 920 is a wired communication means for communicating with the mobile communication terminal 610 through the mobile communication network 130. The wired network processing unit 910 and the wireless network processing unit 920 respectively relay data transmitted and received between the user terminal 410, the mobile communication terminal 610, and the UI provider 930.

The UI provider 930 includes a login information register 932, a login processor 934, an authentication processor 936, and an authentication history manager 936. The login information registration unit 932 provides a UI for registering the login information to the user terminal 410 or the mobile communication terminal 610 and registers the login information by storing the login information in the database unit 940 when the login information is received. The terminal 410 or the mobile communication terminal 610 notifies that the login information is normally registered.

When the login processing unit 934 receives the login information from the user terminal 410 or the mobile communication terminal 610 and requests a login, the login processing unit 934 determines whether the login is successful by checking whether the login information matches the login information stored in the database unit 940. The result is transmitted to the user terminal 410 or the mobile communication terminal 610.

When the authentication processor 936 receives a random number from the user terminal 410 or the mobile communication terminal 610, the authentication processor 936 transmits the random number to the authentication unit 960, and the first authentication information or the first portable authentication information from the authentication unit 960. Receive and transmit to the user terminal 410 or the mobile communication terminal 610. When the authentication processing unit 936 transmits the first authentication information or the first portable authentication information to the user terminal 410 or the mobile communication terminal 610, the authentication processing unit 936 transmits the authentication processing result to the authentication history management unit 938. Here, the result of the authentication processing means that when authentication is requested to a specific mobile communication terminal, that is, when a random number is received for authentication on a specific mobile communication terminal, the date and date of requesting the authentication and the user terminal 410 or mobile communication requesting authentication. This refers to information about the terminal 610.

In addition, when the authentication processor 936 receives a random number from the user terminal 410, transmits a random number to the wired authentication unit 952 of the authentication unit 950, and receives a random number from the mobile communication terminal 610. Next, the random number is transmitted to the wireless authentication unit 954 of the authentication unit 950 to request the output of the result value.

The authentication history management unit 938 receives the authentication processing result from the authentication processing unit 936 and generates the authentication processing result as authentication history information in the form of a list for each MDN of the mobile communication terminal for which authentication is requested, and stores the result in the database unit 940. When an authentication history is requested from the user terminal 410 or the mobile communication terminal 610, the corresponding authentication history information is retrieved from the authentication history information stored in the database 940 to the user terminal 410 or the mobile communication terminal 610. Send.

The database unit 940 receives the login information from the login information registration unit 932 and stores the login information for each MDN of the mobile communication terminal. When the login information is requested from the login processing unit 934, the database unit 940 retrieves and transmits the corresponding login information. Authentication history information is received from 938 and stored.

The authenticator 950 includes a wired authenticator 952 and a wireless authenticator 954 to perform authentication. When authentication is requested from the user terminal 410, the wired authentication unit 952 receives the random number received from the user terminal 410 in the authentication processing unit 936, and then, from the database unit 940, the wired authentication unit 952 of the user terminal 410. Receives the MDN corresponding to the MAC address, receives the ESN corresponding to the MDN from the subscriber database of the mobile communication network 130 using the external interworking unit 970, and includes the date, MDN, random number and ESN requested authentication The encryption information is generated and transmitted to the encryption unit 960, the first authentication information is received from the encryption unit 960, and transmitted to the authentication processing unit 936.

In addition, when authentication is requested from the mobile communication terminal 610, the wireless authentication unit 954 uses the external interworking unit 970 when the authentication processing unit 936 receives a random number received from the mobile communication terminal 610. Receives the ESN corresponding to the MDN of the mobile communication terminal 610 from the subscriber database of the mobile communication network 130, generates the mobile encryption information including the date, the MDN, the random number, and the ESN for which authentication is requested, and then encrypts it. ), The first mobile authentication information is received from the encryption unit 960 and transmitted to the authentication processing unit 936.

When the encryption unit 960 receives the encryption information or the portable encryption information from the wired authentication unit 952 or the wireless authentication unit 954, respectively, the encryption unit 960 encrypts the first authentication information or an encryption algorithm such as an MD5 algorithm or a CAVE algorithm. After the first portable authentication information is generated, it is transmitted to the wired authentication unit 952 or the wireless authentication unit 954.

The external interworking unit 970 communicates with a plurality of mobile subscribers and a subscriber database that manages information on the plurality of mobile communication terminals in the mobile communication network 130, thereby receiving data requested from the authentication unit 950 from the subscriber database. Search, extract and deliver.

As described with reference to FIG. 9, the authentication servers 420 and 620 according to the third and fourth embodiments authenticate in cooperation with the user terminal 410 through a wired network and the mobile communication terminal 610 through a wireless network. Do this. However, as described above, although FIG. 9 illustrates an authentication server capable of authenticating authentication for both the user terminal 410 and the mobile communication terminal 610, that is, if necessary, only interworking with the user terminal 410 If only or in the case of interworking with the mobile communication terminal 610 may be configured only to the corresponding portion.

Meanwhile, according to the present invention, the control class is assigned to the user or the user terminal 110 or 410 to control the mobile communication terminal 120 or 610, and the mobile communication terminal 120 according to the user or the user terminal 110 or 410. Authentication may be processed to vary the authority to control 610. Hereinafter, a method of processing authentication by changing control authority through FIG. 10 will be described.

10 is an exemplary view showing a user information table according to a preferred embodiment of the present invention.

The authentication servers 150, 420, and 620 described through the first to fourth embodiments receive, store, and register user information or login information from the user terminals 110 and 410 or the mobile communication terminals 120 and 610. do. At this time, the authentication server (150, 420, 620) is stored in a database with user information or login information, for example, as shown in the table shown. That is, the authentication server (150, 420, 620), the control class, IP address, MAC address, ID, password of the user terminal (110, 410) to control for each MDN of the mobile communication terminal (120, 620) to be controlled Store, register, and manage user descriptions, control rights, etc. in a table format.

Therefore, in the first embodiment, when the authentication server 150 transmits the authentication code to the user terminal 110, the authentication server 150 checks the IP address received from the user terminal 110 to check and control the control class corresponding to the IP address. After generating the authority information that is information on the authority, and transmits to the user terminal (110). When the user terminal 110 receives the authority information, when the authentication is successful with the mobile communication terminal 120, the user terminal 110 may perform only control regarding the control authority specified in the authority information.

That is, for example, the user terminal 110 has a cross section having an IP address of 210.192.214.181, the control class is 1, and the control authority can download the content stored in the mobile communication terminal 120, and the mobile communication terminal. The content may be uploaded to 120. Therefore, an administrator who is a user who uses the user terminal 110 may control both downloading and uploading the mobile communication terminal 120 to the user terminal 110.

In addition, in the second embodiment, when the authentication server 420 transmits the first authentication information to the user terminal 410, the authentication server 420 checks a control level corresponding to the ID, password, and MAC address received from the user terminal 410. After generating the authority information, and transmits to the user terminal (410). The user terminal 410 confirming the control level may perform control only for the control authority specified in the control level.

In addition, in the third embodiment, when the authentication server 620 transmits the first portable authentication information to the mobile communication terminal 610, the authentication server 620 receives a control level corresponding to the ID, password, and MDN received from the mobile communication terminal 610. After confirming and generating the authority information, and transmits to the mobile communication terminal (610). Upon checking the control level, the mobile communication terminal 610 receives a control command from the user terminal 110, and processes the control command only when it meets the control level, and rejects the processing when the control command does not match.

In this way, by specifying the control authority of the user terminal (110, 410) in the authentication server (150, 420, 620), one mobile communication terminal (120, 610) a plurality of users (for example, administrator, test, When the user wants to control, the user can classify the tasks that can be controlled by each user, such as an external device such as a computer, a keyboard, a game pad, etc. to control the mobile communication terminals 120 and 610. Security controls for 110, 410) can be strengthened.

The above description is merely illustrative of the technical idea of the present invention, and those skilled in the art to which the present invention pertains may make various modifications and changes without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, according to the present invention, the user who wants to control the mobile communication terminal or an external device such as a computer, a keyboard, a game pad, etc. can be authenticated, and contents such as mobile photobooks and personal information stored in the mobile communication terminal are illegal. It can be prevented from being exposed to the user or the outside by unauthorized means, protects privacy and prevents the illegal use of expensive contents, and prevents unauthorized use of the mobile communication terminal. It is possible to prevent the innumerable damages of the mobile subscribers in advance.

In addition, the control authority can be set and designated differently for each user or external device that wants to control the mobile communication terminal, so that when a plurality of users or multiple external devices want to control one mobile communication terminal, only appropriate permission is granted. Strengthen security control for mobile communication terminals.

In addition, not only when the mobile communication terminal and the external device can perform the mobile communication service and the Internet service, but also when the mobile communication service or the Internet service cannot be performed, authentication can be performed using each terminal only. Authentication anywhere can control the mobile terminal.

In addition, the administrator or user can query the history of the authentication process, so that the administrator or user can recognize that the illegal user attempted to control the mobile terminal in an illegal manner, as well as take appropriate measures. have.

Claims (36)

In the system for performing the authentication to control the mobile communication terminal, If the login request is successful and the login is successful, the random number is received or generated and transmitted to request the authentication to receive the first authentication information, generate the second authentication information using the random number, and then generate the first authentication information. A user terminal which performs the authentication by comparing the second authentication information with the second authentication information; And Receives the login request from the user terminal, processes the login, receives the random number from the user terminal, generates the first authentication information by processing the random number using an encryption algorithm, and generates the first authentication information. Authentication server to send to user terminal Authentication system for controlling a mobile terminal using an encryption algorithm, characterized in that it comprises a. The method of claim 1, wherein the user terminal, And the second authentication information is generated by processing the random number using the encryption algorithm. The method of claim 1, The user terminal requests the login by transmitting at least one of an ID, a password, and a Media Access Control (MAC) address to the authentication server, and the authentication server determines whether the ID and password match a previously stored ID and password, and Authentication system for controlling a mobile communication terminal using an encryption algorithm, characterized in that for processing the login by checking whether one or more of the MAC address matches a pre-stored MAC address. The method of claim 1, wherein the authentication server, The first authentication by encrypting the encryption information including the mobile directory number (MDN) of the mobile communication terminal, the random number, and the electronic serial number (ESN) of the mobile communication terminal using the encryption algorithm. Authentication system for controlling a mobile terminal using an encryption algorithm, characterized in that for generating information. The method of claim 3, wherein the authentication server, Authentication system for controlling a mobile communication terminal using an encryption algorithm, characterized in that for obtaining the MDN and the ESN using the MAC (Media Access Control) address of the user terminal. The method of claim 1, wherein the user terminal, And verifying whether the first authentication information and the second authentication information are the same to control the mobile communication terminal if the same is the same. The authentication system for controlling a mobile communication terminal using an encryption algorithm. In the system comprising a user terminal for controlling a mobile communication terminal and an authentication server for performing the authentication of the control of the user terminal, in the method for performing the authentication, (a) receiving a random number from the user terminal; (b) generating first authentication information by processing the random number into an encryption algorithm; And (c) transmitting the first authentication information to the user terminal to control the user terminal to perform the authentication; Authentication method for controlling a mobile communication terminal using an encryption algorithm comprising a. The method of claim 7, wherein the authentication method, before the step (a), (a-1) receiving a login request from the user terminal and performing the login to check whether the login is successful; And (a-2) notifying the user terminal that the login was successful when the login is successful as a result of the checking in step (a-1); Authentication method for controlling a mobile communication terminal using an encryption algorithm, characterized in that it further comprises. The method of claim 8, wherein the authentication method, before the step (a-1), (a-3) receiving login information including at least one of an ID, a password, and a media access control (MAC) address from the user terminal and requesting registration of the login information; And (a-4) storing and registering the login information in a database Authentication method for controlling a mobile communication terminal using an encryption algorithm, characterized in that it further comprises. The method of claim 9, wherein step (a-2) comprises: (a-11) receiving the login request from the user terminal; And (a-12) confirming whether the login is successful by checking whether at least one of the ID, password, and MAC address matches at least one of previously stored ID, password, and pre-stored MAC address, respectively. Authentication method for controlling a mobile communication terminal using an encryption algorithm comprising a. In a computer comprising a short range communication means for communicating with a mobile communication terminal, a network communication means for communicating with an authentication server, and a control means for performing authentication for controlling the mobile communication terminal, Software that performs Registering login information with the authentication server; Requesting to log in by accessing the authentication server and receiving, generating, storing, and transmitting a random number to the authentication server when the login is successful; Receiving and storing first authentication information from the authentication server; Generating second authentication information by processing the random number; And A function of performing control of the mobile communication terminal only when the authentication is successful by performing the authentication by comparing the first authentication information with the second authentication information and confirming whether they match. A computer-readable recording medium having recorded therein authentication software for controlling a mobile terminal using an encryption algorithm. The method of claim 11, wherein the login information, A computer-readable recording medium having recorded therein authentication software for controlling a mobile terminal using an encryption algorithm, characterized in that it comprises at least one of an ID, a password, and a MAC (Media Access Control) address of the computer. The method of claim 11, wherein the second authentication information, Characterized in that the encrypted information including an MDN (Mobile Directory Number) of the mobile communication terminal, the random number and the ESN (Electronic Serial Number) of the mobile communication terminal is encrypted using an encryption algorithm. A computer-readable recording medium recording authentication software for controlling a mobile terminal using an encryption algorithm. The method of claim 11, wherein the authentication software, Analyze the first authentication information to confirm the control level, to determine the control authority to control the mobile communication terminal according to the control level, and further comprising the function of controlling the mobile communication terminal according to the control authority And the authentication server inserts the control level and the control right into the first authentication information. The recording medium of claim 1, wherein the authentication server for controlling the mobile communication terminal using the encryption algorithm is recorded. In the system for authenticating a user terminal for controlling a mobile communication terminal, After requesting login, if the login is successful, a random number is received or generated and transmitted, and authentication is requested to receive the first portable authentication information, and after generating the second portable authentication information by processing the random number using an encryption algorithm, A mobile communication terminal which performs the authentication by comparing the first portable authentication information with the second portable authentication information; And The first mobile authentication information is generated by processing the login by receiving the login request from the mobile communication terminal, receiving the random number from the mobile communication terminal, and processing the random number using the encryption algorithm. Authentication server for transmitting mobile authentication information to the mobile communication terminal Authentication system for the control of the mobile communication terminal using an encryption algorithm comprising a. The method of claim 15, wherein the mobile communication terminal, Permitting control of the user terminal if the first portable authentication information and the second portable authentication information are the same, and blocking control of the user terminal if the first portable authentication information and the second portable authentication information are not the same. An authentication system for controlling a mobile communication terminal using an encryption algorithm. The method of claim 15, wherein the encryption algorithm, The date and month of the request for authentication, mobile encryption information including the mobile directory number (MDN) of the mobile communication terminal, the random number and the electronic serial number (ESN) of the mobile communication terminal is encrypted using the encryption algorithm, characterized in that for encrypting Authentication system for control of a communication terminal. In the system comprising a user terminal for controlling a mobile communication terminal and an authentication server for performing the authentication of the control of the user terminal, in the method for performing the authentication, (a) receiving a random number from the mobile communication terminal; (b) processing the random number into an encryption algorithm to generate first portable authentication information; And (c) transmitting the first portable authentication information to the mobile communication terminal to control the mobile communication terminal to perform the authentication; Authentication method for the control of the mobile communication terminal using an encryption algorithm comprising a. 19. The method of claim 18, wherein the authentication method is performed prior to step (a), (a-1) receiving a login request from the mobile communication terminal and checking whether the login is successful by performing the login; And (a-2) notifying the mobile communication terminal that the login is successful when the login is successful as a result of the checking in step (a-1); Authentication method for the control of the mobile communication terminal using an encryption algorithm characterized in that it further comprises. The method of claim 19, wherein the authentication method, before the step (a-1), (a-3) receiving login information including at least one of an ID, a password, and a mobile directory number (MDN) from the mobile communication terminal and requesting registration of the login information; And (a-4) storing and registering the login information in a database Authentication method for the control of the mobile communication terminal using an encryption algorithm characterized in that it further comprises. The method of claim 20, wherein step (a-2) (a-11) receiving the login request from the mobile communication terminal; And (a-12) confirming whether the login is successful by checking whether at least one of the ID, password, and MDN matches at least one of a stored ID, password, and previously stored MDN, respectively. Authentication method for the control of the mobile communication terminal using an encryption algorithm comprising a. In a mobile communication terminal comprising a short-range communication means for communicating with a user terminal, a wireless communication means for communicating with an authentication server using a mobile communication network, and a control means for performing authentication for allowing control of the user terminal. Software that performs the function of performing authentication, Registering login information with the authentication server; Requesting login by accessing the authentication server, and receiving or generating a random number, storing and transmitting the random number to the authentication server when the login is successful; Receiving and storing first portable authentication information from the authentication server; Generating second portable authentication information by processing the random number; And A function of allowing the control only when the authentication is successful by performing the authentication by comparing the first portable authentication information with the second portable authentication information and confirming whether or not they match. The recording medium readable by the mobile communication terminal recording the authentication software for controlling the mobile communication terminal using an encryption algorithm comprising a. The method of claim 22, wherein the login information, A recording medium readable by a mobile terminal having recorded authentication software for controlling the mobile terminal using an encryption algorithm, characterized in that it comprises at least one of an ID, a password, and a mobile directory number (MDN) of the mobile terminal. The method of claim 22, wherein the second authentication information, The date and time of the request for authentication, the mobile encryption information including the mobile directory number (MDN) of the mobile communication terminal, the random number and the ESN (Electronic Serial Number) of the mobile communication terminal is information that is encrypted using an encryption algorithm. A recording medium readable by a mobile communication terminal having recorded authentication software for controlling a mobile communication terminal using an encryption algorithm. The method of claim 22, wherein the authentication software, And analyzing the first portable authentication information to check a control level, to grasp the control authority of the user terminal according to the control class, and to further control the control of the user terminal according to the control authority. The authentication server reads a record that can be read by a mobile communication terminal that records authentication software for controlling the mobile communication terminal using an encryption algorithm, wherein the control level and the control authority are further inserted into the first portable authentication information. media. In the authentication server for authenticating a user terminal to control the mobile communication terminal, A wired network processing unit which is a wired communication means for performing communication with the user terminal; An authentication processor for receiving a random number from the user terminal and requesting authentication, transmitting the random number to request and receiving first authentication information, and then transmitting the random number to the user terminal; A database unit for storing a Media Access Control (MAC) address of the user terminal and a Mobile Directory Number (MDN) of the mobile communication terminal corresponding to the MAC address; An encryption unit configured to generate and transmit the first authentication information by encrypting using an encryption algorithm when receiving encryption information; When the random number is received from the authentication processor and the first authentication information is requested, the MDN is received by the database unit, and an ESN (Electronic Serial Number) corresponding to the MDN is requested and received. A wired authentication unit generating the encryption information including the MDN, the random number, and the ESN and transmitting the encrypted information to the encryption unit, receiving the first authentication information from the encryption unit, and transmitting the first authentication information to the authentication processing unit; And The external interworking unit which receives the ESN from the authentication processing unit, retrieves the extracted data from the subscriber database of the mobile communication network, and delivers the extracted information. Authentication server for controlling a mobile terminal using an encryption algorithm, characterized in that it comprises a. The method of claim 26, wherein the authentication server, Receiving an authentication processing result from the authentication processing unit, generating the authentication processing result as authentication history information by listing the MDN of the mobile communication terminal for which authentication is requested, and storing the authentication history information in the database unit; And an authentication history management unit for providing the authentication history information from the user terminal or the administrator. The method of claim 26, wherein the authentication processing result, Authentication server for controlling a mobile communication terminal using an encryption algorithm, characterized in that the information on the date and year of the request for authentication to the mobile terminal and the user terminal requesting the authentication. The method of claim 26, wherein the authentication server, A login information registration unit configured to receive login information from the user terminal, store and register the login information in the database unit, and notify the user terminal that the login information is normally registered; And The login processing unit which receives the login information from the user terminal, receives a login request, checks whether the login information matches the stored login information, determines whether the login is successful, and sends a login result to the user terminal. Authentication server for controlling a mobile terminal using an encryption algorithm, characterized in that it further comprises. In the authentication server for authenticating a user terminal to control the mobile communication terminal, A wireless network processing unit which is a wired communication means for performing communication with the mobile communication terminal; An authentication processor for receiving a random number from the mobile communication terminal and requesting authentication, transmitting the random number to request and receiving first portable authentication information, and then transmitting the random number to the mobile communication terminal; An encryption unit configured to generate and transmit the first portable authentication information by encrypting using an encryption algorithm when receiving the portable encryption information; And When the random number is received from the authentication processing unit, the portable encryption information including the year and month when the authentication is requested, a mobile directory number (MDN) of the mobile communication terminal, the random number, and an electronic serial number (ESN) of the mobile communication terminal. A wireless authentication unit that generates and transmits to the encryption unit, receives the first portable authentication information from the encryption unit, and delivers the first portable authentication information to the authentication processing unit. Authentication server for the control of the mobile communication terminal using an encryption algorithm comprising a. The method of claim 30, wherein the authentication server, A database unit for storing authentication history information; And Receives an authentication processing result from the authentication processing unit, lists the authentication processing results by MDN of the mobile communication terminal for which authentication is requested, generates the authentication history information, and stores the authentication history information, and stores the authentication history information in the database. Authentication history management unit to provide the authentication history information requested from the administrator Authentication server for the control of the mobile communication terminal using an encryption algorithm characterized in that it further comprises. The method of claim 30, wherein the authentication process result, Authentication server for the control of the mobile communication terminal using an encryption algorithm, characterized in that the information on the mobile terminal and the date and year when the authentication is requested for the mobile communication terminal. The method of claim 30, wherein the authentication server, A database unit for storing login information; A login information registration unit which receives the login information from the mobile communication terminal, stores and registers the login information in the database, and notifies the mobile communication terminal that the login information is normally registered; And Receiving the login information from the mobile communication terminal, a login request unit for determining whether the login success by sending a login result to the mobile communication terminal by determining whether the login request is matched with the stored login information; Authentication server for the control of the mobile communication terminal using an encryption algorithm characterized in that it further comprises. In the method for authenticating a user terminal to use the mobile communication terminal over time in a mobile communication terminal, (a) allowing the control of the user terminal after the authentication is successful; (b) storing an authentication success time which is a time at which authentication is successful, and calculating and storing an authentication expiration time; (c) receiving a control command from the user terminal; (d) checking whether a current time is the authentication expiration time; And (e) if the current time is the authentication expiration time, notifying the user terminal that authentication has expired and blocking the control; Method for authenticating the control of the mobile terminal over time, characterized in that it comprises a. The method of claim 34, wherein the method is After step (e), (f) if the current time is not the authentication expiration time, performing an operation according to the control command and repeating steps (c) and (d) Method for authenticating the control of the mobile terminal over time, characterized in that it further comprises. The method of claim 34, wherein the authentication expiration time, And authenticating the control of the mobile communication terminal according to the time, wherein the authentication is successful.

Images