KR20100001404A - Onlineauthentication - Google Patents

Abstract

PURPOSE: An online-authentication is provided to secure a high level safety such as a user authentication of public certificate based, so being applied to wireless internet banking and a wireless civil affair document issuing service. CONSTITUTION: A web server](111) receives a wireless authentication related information including the authentication code identifier from a user terminal. A WAP server(112) supplies an application service to a cellular phone according to the authentication result. A wireless authentication server(114) supplies the authentication result of the cellular phone to the WAP server. An authentication database(115) stores wireless authentication related information including the authentication code.

Description

Mobile phone user authentication system and method using certificate in wireless internet environment {onlineauthentication}

The object of the present invention devised to solve the above problems of the prior art is a certificate-based digital signature technology and disposable

Using One Time Password technology to generate a verification code

It is intended to provide a system and method for authenticating identity.

The present invention relates to a user authentication system and method in a wireless Internet environment, and more particularly, using a certificate.

A system and method for authenticating the identity of a mobile phone user using the Internet.

So far, there are two methods for authenticating a mobile phone user in a wireless Internet environment.

The first method is to use a certificate for wireless Internet. Currently, the certificate used in the wired Internet network is the most secure

Since the user authentication method or the public certificate used in the wired Internet network cannot be directly applied to the wireless Internet environment,

Certificate Authorities are enacting separate wireless certificate standards and building separate systems for issuing wireless certificates. But,

Since this wireless certificate is practically difficult to be processed in real time on the mobile phone, the real service cannot be performed on the mobile phone.

Has a problem.

The second method is to insert a dedicated chip for internet banking into a mobile phone and authenticate the user using the dedicated chip. this

The solution is that the mobile operator and the bank work together to insert a dedicated chip into the mobile phone.

Make it available. This method is a relatively safe method, but since a dedicated chip must be embedded in the mobile phone,

The cost will rise, and if the authentication mechanism embedded in the dedicated chip is exposed to third parties, the stability of the system will not be secured.

There is a hum. In addition, it is not a user authentication method certified by the state like an accredited certificate, but an authentication method developed by operators.

There is a problem that cannot be applied to services that require public identification, such as issuing national civil documents.

No content

No content

According to the present invention as described above, user identification using a mobile phone is a high level of authentication, such as user authentication based on the certificate

Since the security is secured, there is an effect that can be applied to the issuance of civil documents using wireless Internet banking and mobile phones.

Cell phone user authentication using a certificate in a wireless Internet environment according to an embodiment of the present invention for achieving the above object

The system includes a web server connected through a user terminal of any user and a wired internet, a mobile phone of the user and a wireless internet.

Mobile phone use including a wireless access server that manages and discards wireless access-related information for mobile phone authentication.

In the mobile phone user authentication method in the user authentication system,

When a mobile phone authentication application request is inputted from the user terminal, the web server authenticates the user of the user terminal based on a certificate.

Authentication code confirmer which is a result of repeatedly hashing the initial secret value to the user terminal by the total number of times of authentication possible (n)

Requesting to generate a first terminal and receiving wireless authentication related information including the authentication code checker from the user terminal;

The system;

A second step of storing the wireless authentication related information including the authentication code checker; when an application service use request is input from the mobile phone, the swap server increases the authentication number j by the mobile phone by 1; After letting go

Request to generate an authentication code which is the result of repeatedly hashing the initial secret value n-j times, and

A third step of receiving information including the card;

When the authentication code is input from the swap server, the wireless authentication server uses the stored authentication code checker to obtain the authentication code.

Verifying and authenticating the mobile phone, and providing a verification result of the mobile phone to the swap server;

The swap server may include a fifth step of providing the application service to the mobile phone according to the mobile phone authentication result.

No content

Claims (1)

Connected via a user terminal and a wired Internet, when a mobile phone authentication application request is input from the user terminal, the user The terminal user is authenticated based on the certificate, and the user terminal is repeatedly authenticated to the user terminal by the total number (n) of authentication possible. Requesting to generate a hash code result authentication code confirmer, and wirelessly including the authentication code checker from the user terminal. A web server for receiving authentication related information; Connected via a mobile phone and the wireless Internet, when an application service application request is input from the mobile phone, the authentication number to the mobile phone After the number j is increased by 1, a request is made to generate an authentication code which is a result of hashing the initial secret value n-j times repeatedly. Receives the information including the authentication code from the phone, the application service to the mobile phone according to the authentication result of the mobile phone Providing a swap server; Receives the wireless authentication related information from the web server, stores it in an authentication database, and enters an authentication code from the swap server. If so, verify the authentication code using the authentication code checker stored in the authentication database to authenticate the mobile phone, A wireless authentication server for providing an authentication result of the mobile phone to the swap server; An authentication database for storing wireless authentication related information including the authentication code checker; Certificate in a wireless Internet environment, characterized in that it comprises a user database for storing information about the user Mobile phone user authentication system.

Images