KR20100107267A - Apparatus and method for verifying counsel using verification code - Google Patents

Abstract

PURPOSE: A device and a method for verifying counsel using a verification code are provided to improve the reliability of customer counsel by using dual authentication of a verification code and receiving a short message service. CONSTITUTION: A mobile communication terminal(100) includes a personal digital assistant including a wireless communication function, a computer, and a device for wireless communication. A UMTS terrestrial RAN(200) includes a radio network subsystem. A core network(300) is connected to a wireless connection network. The core net responds to the connection with an external network. A server(400) of a mobile communication provider provides a counsel verification message including a counsel verification result to a mobile communication terminal.

Description

Apparatus and method for verifying counsel using verification code}

The present invention relates to an apparatus and method for performing counseling verification using a verification code, and more particularly, to an apparatus and method for performing verification of consultation content using a verification code.

With the recent rapid development of electronic engineering and communication engineering, mobile communication terminals have various functions. That is, with the rapid development of wireless communication and data processing technology, people can use not only voice calls but also Internet access, video communication and video message transmission using mobile communication terminals. In addition, due to the rapid spread of mobile communication terminals, mobile communication terminals are becoming an essential means in modern life, such as a considerable amount of communication occurring in human relationships through mobile communication terminals.

Representative message transmission services available to a user in a mobile communication system are a short message service (SMS) and a multimedia message service (MMS). This is a two-way data radio calling service in accordance with the standard of the mobile communication globalization system (GSM), a service for transmitting data between the terminal and the terminal. SMS and MMS can send and receive messages consisting of letters and numbers between the mobile communication terminal or the network, and the types of services include short message transmission, urgent message display, date / time recording, and message recognition.

Such SMS and MMS has become commonplace by being able to easily send and receive messages anytime and anywhere among users who use mobile communication terminals in conjunction with the generalization of mobile communication terminals.

There is no countermeasure against fraud, such as phishing and other types of flooding of mobile phones, and a way for users to check the authenticity of customer service provided by means of mobile communication terminals. I do not have anxiety.

Therefore, a method for confirming the authenticity of the customer service provided by the customer (or the user) through a means such as a mobile communication terminal should be prepared as soon as possible.

An object of the present invention is to provide a verification code through a text service (MMS) of a mobile communication terminal, and to perform verification of consultation content using a provided verification code.

The objects of the present invention are not limited to the above-mentioned objects, and other objects that are not mentioned will be clearly understood by those skilled in the art from the following description.

In order to achieve the above object, the apparatus for performing consultation verification using a verification code according to an embodiment of the present invention, the communication unit for receiving a request for generating a verification code and the authentication request of the verification code, And a verification code generator for generating a verification code for the consultation information according to the generation request, and a verification code authentication unit for authenticating the verification code according to the authentication request of the generated verification code.

In addition, the method for performing the consultation verification using the verification code according to an embodiment of the present invention, receiving a request for generating the verification code from the first server, and for the consultation information according to the request for generating the verification code Generating a verification code and transmitting the generated verification code to the first server.

Specific details of other embodiments are included in the detailed description and the drawings.

Advantages and features of the present invention and methods for achieving them will be apparent with reference to the embodiments described below in detail with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but can be implemented in various different forms, and only the embodiments make the disclosure of the present invention complete, and the general knowledge in the art to which the present invention belongs. It is provided to fully inform the person having the scope of the invention, which is defined only by the scope of the claims. Like reference numerals refer to like elements throughout.

According to the apparatus and method for performing counseling verification using the verification code as described above, there are one or more of the following effects.

First, by providing a verification code through a text service (MMS) of the mobile communication terminal, there is an advantage that the user can receive a verification result for the consultation by inputting the provided verification code.

Second, by conducting counseling verification using the verification code, the carrier eliminates the fear of phishing of the user (or customer) without changing costs and the current system, thereby increasing the success rate of the customer counseling phone call attempt. There is an advantage that can provide a variety of customer service using this.

Third, the user (or customer) has an advantage that the user can have a reliability of customer service through the dual authentication of the text service (MMS) reception and verification code authentication.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a system for performing counseling verification using a verification code according to an embodiment of the present invention.

As shown, a UMTS communication network in a system for performing counseling verification using a verification code includes a mobile station (MS) 100 and a base station (Radio Network Subsytem, hereinafter referred to as "RNS"). A wireless access network (UMTS Terrestrial RAN, hereinafter referred to as " UTRAN ") 200, a core network 300 connected to the UTRAN 200 and responding to a connection with an external network (not shown); The mobile communication terminal 100 may include a mobile communication company server 400 that provides a message (ie, a counseling verification message) including the contents of the counseling authentication result.

The mobile communication terminal 100 may include personal digital assistants (PDAs) having a wireless communication function, computers, and the like, as well as devices used for wireless communication. In addition, the mobile communication terminal 100 may be fixed or mobile. In the present invention, the mobile communication terminal 100 is described, but may be referred to as terms such as a user terminal (UT), a subscriber station (SS), a wireless device, and the like.

In addition, the mobile communication terminal 100 receives a message (ie, a consultation information message) including a verification code transmitted through a text service (MMS), and the user uses the received verification code to verify the authenticity of the customer service. You can check the counseling verification message to check the status. Here, the user may access the mobile communication company portal site through the mobile communication terminal 100 and the computer, and then input the verification code included in the consultation information message to check the contents of the consultation verification. In addition, the consultation verification message may be provided in the form of MMS and SMS. Hereinafter, the consultation information message and the consultation verification message will be described in more detail with reference to FIGS. 4, 5A, and 5B.

RNS 210 is a radio network controller (hereinafter referred to as "RNC") for controlling a plurality of RNS 210 and RNS 210 to which a wireless access standard of 3GPP (3rd Generation Partnership Project) standard is applied to support WCDMA. 220). The UTRAN 200 transmits a call request signal or the like from the wireless mobile communication terminal 100 to the core network 300.

In addition, the RNS 210 establishes a wireless physical channel necessary for data exchange with the mobile communication terminal 100 according to the control information transmitted from the RNC 220, and transmits data transmitted from an upper layer protocol to a wireless environment according to the wireless environment. Transmission to the terminal 100. In addition, the data received from the mobile communication terminal 100 is transferred to the upper layer protocol of the RNC 220. The RNS 210 supports various radio access technologies such as channel coding, interleaving, modulation, and demodulation for data transmission in a radio section. The RNS 210 generally refers to a fixed station that communicates with the mobile communication terminal 100, such as a node-B, a base transceiver system (BTS), an access point, or the like. It may be called a term, but is not limited thereto.

The RNC 220 dynamically allocates radio resources of the wireless communication system and controls the RNS 210. The RNC 220 manages wired and wireless channels, protocol matching of the mobile communication terminal 100, protocol matching of a base station, soft handoff processing, protocol matching with the core network 300, and general packet radio service (GPRS). It is responsible for functions such as access, fault management, and system loading. The RNC 220 serves as an access point for services provided through the core network 300.

The circuit switching center (Mobile Switching Center, hereinafter referred to as "MSC") 310 transmits the incoming or outgoing signal from the RNS 210, exchanges between the mobile subscribers, fixed network such as mobile communication subscribers and PSTN, ISDN Provide exchange function with subscribers. The MSC 310 processes basic and additional services, processes an incoming signal of the mobile communication terminal 100 in association with an existing network or another network, and processes location registration and handoff.

The circuit switched gateway (Gateway MSC, hereinafter referred to as "GMSC") 320 is a gateway at a point where it is connected to an external network (not shown) through the MSC 310. All circuit switched connections are made via GMSC 320.

The MSC 310 and GMSC 320 may be referred to as a circuit switching unit, and the circuit switching unit establishes a communication path with the mobile communication terminal 100 through a circuit switching connection.

A packet switching support node (hereinafter referred to as a "SGSN") 330 is a mobile communication terminal 100 for GPRS service, to manage the originating and incoming signal processing procedure and packet data transmission and reception for processing supports, such as session (Sess i on) management, authentication and charging functions. It also has a routing processing function of packet data.

The packet switching gateway (Gateway GPRS Support Node, hereinafter referred to as "GGSN") 340 is a serving node of an IP (Internet Protocol) based packet network that provides a high speed packet data service for GPRS data service. It manages session for packet data service, performs routing processing of packet data, and provides interface for connecting WDCMA network and Internet network.

The SGSN 330 and the GGSN 340 may be referred to as a packet exchange unit, and the packet exchange unit transmits and receives data in packet units in transmitting and receiving data of the mobile communication terminal 100.

The home location register (HLR) 360 stores and manages the subscriber's location information and stores and manages the subscriber's additional service information.

The message management server 360 is a server that provides text message (SMS) and multimedia message (MMS) services, and stores and transmits text messages requested to be transmitted, and all kinds of media such as text, music, graphics, and video. Provides services related to the user. Here, the MMS refers to a message service that enables the transmission and reception of multimedia information by processing, converting, and selecting data in various formats to be suitable for various multimedia service environments. In addition, MMS is a service defined in the international standard recommendation 3GPP Technical Specification (TS) 22.140 and 23.140, and allows a user to send and receive various multimedia data such as voice, image, audio and video data as well as text messages between terminals. to be. The MMS presented in this standard recommendation adopts store and forward as the message transmission method.

In addition, when the message management server 360 receives counseling information (ie, customer information, agent profile, counseling contents, etc.) transmitted from a mobile service provider, the message management server 360 provides counseling information to the verification information while providing the verification code to the verification code generation server 370. Request generation of verification code for. Here, the customer information refers to a phone number, a part of the name and social security number, etc., and the agent profile refers to affiliation, name and photo.

In addition, when the verification code is transmitted from the verification code generation server 370, the message management server 360 generates a message (that is, a consultation information message) including the verification code, and converts the generated consultation information message into a corresponding mobile communication terminal. Send to 100. Here, the counseling information message includes information such as counselor profile, counseling contents and verification code, and is generated and transmitted in the form of MMS.

In addition, when the message management server 360 transmits the contents of the counseling authentication result from the mobile service provider server 400, the message management server 360 generates a message (that is, the counseling verification message) including the contents of the authentication result and then the mobile communication terminal 100. To send.

The verification code generation server 370 generates a verification code according to the request for generating the verification code for the consultation information from the message management server 360. In addition, the verification code generation server 370 performs authentication of the verification code as the verification code authentication is requested from the mobile communication company server 400. Here, the message management server 360, the verification code generation server 370 and the mobile carrier server 400 has been described as being present in each device, but is not necessarily limited thereto, the message management server 360, verification code The generation server 370 and the mobile communication company server 400 may be configured as one device. Hereinafter, the verification code generation server 370 will be described in more detail with reference to FIG. 2.

When the user (or customer) accesses the mobile communication company portal site through the mobile communication terminal 100 and the computer, and inputs the user identification information and the verification code, the mobile communication company server 400 may verify the generation code server 370. Sends the user identification information and the verification code to request authentication for the verification code. Here, the carrier portal site that the user (or customer) accesses should be guaranteed anti-phishing.

In addition, when the result of authentication is transmitted from the verification code generation server 370, the mobile communication company server 400 provides the transmitted content (that is, the content of the authentication result) to the mobile communication terminal 100 or the computer.

For example, when a user accesses a mobile carrier portal site through the mobile communication terminal 100, the mobile communication company server 400 requests the message management server 360 to generate a consultation verification message and thus the mobile communication terminal 100. The corresponding message is transmitted through MMS or SMS, and when the user accesses the carrier portal site through a computer, the carrier server 400 provides a consultation verification message on the UI screen.

2 is a block diagram of an apparatus for performing counseling verification using a verification code according to an embodiment of the present invention.

As shown, the apparatus for performing consultation verification using the verification code (that is, verification code generation server 370) is a communication unit 371, verification code generation unit 372, verification code authentication unit 373, storage The unit 374 and the control unit 375 are configured.

In this case, the term '~ part' used in the present embodiment refers to software or a hardware component such as an FPGA or an ASIC, and '~ part' performs certain roles. However, '~' is not meant to be limited to software or hardware. '~ Portion' may be configured to be in an addressable storage medium or may be configured to play one or more processors. Thus, as an example, '~' means components such as software components, object-oriented software components, class components, and task components, and processes, functions, properties, procedures, and the like. Subroutines, segments of program code, drivers, firmware, microcode, circuits, data, databases, data structures, tables, arrays, and variables. The functionality provided within the components and the 'parts' may be combined into a smaller number of components and the 'parts' or further separated into additional components and the 'parts'.

The communication unit 371 receives a message requesting generation of a verification code from the first server, and receives a message requesting authentication of the verification code from the mobile communication company server 400. Here, the first server performs the same role as the message management server 360, hereinafter referred to as message management server 360.

In addition, the communication unit 371 transmits the verification code generated by the request to the message management server 360, and transmits the result of the authentication performed by the request to the second server. Here, the second server performs the same role as the mobile communication company server 400, hereinafter referred to as mobile communication company server 400.

The verification code generation unit 372 generates a verification code for the consultation information. For example, when the consultation information (that is, the customer information, the agent profile and the contents of the consultation, etc.) is transmitted from the message management server 360 together with the verification code request message, the verification code generator 372 receives the transmitted consultation information. Generate verification code as a basis. Here, the verification code generation method may be understood as a method using an electronic signature and a hash function, and security features such as one-wayness, data freshness, and anti-forgery. Has In addition, the verification code generated by the verification code generation unit 372 is generated differently for each user (or customer).

When the verification code authentication unit 373 requests authentication of the verification code from the mobile communication company server 400, the verification code authentication unit 373 verifies whether the verification code is generated by the verification code generation unit 372 and performs verification of the verification code.

For example, when the verification code authentication request message, the user identification information, and the verification code are transmitted from the mobile communication company server 400, the verification code authentication unit 373 may store the user identification information and the verification code previously stored in the storage unit 374. And compares the transmitted user identification information and verification code and checks whether the same user identification information and verification code exist. Next, the check result is transmitted to the mobile communication company server 400.

The storage unit 374 stores the consultation information and the verification code received through the communication unit 371. Here, the counseling information may be understood as customer information, counselor profile and counseling contents, and the like, customer information refers to a phone number, a name and a social security number, and an agent profile refers to affiliation, name and photo.

The controller 375 controls the operations of the respective functional blocks 371 to 374 constituting the verification code generation server 370.

3 is a flowchart illustrating a method of performing counseling verification using a verification code according to an embodiment of the present invention. Here, a user (or a customer) and a mobile service provider counseling service through the mobile communication terminal 100, the mobile service provider counseling through the computer to enter the content of the consultation message management server 360 Assume that the situation is transmitted to the consultation information.

First, the message management server 360 receives and stores counseling information transmitted from a mobile service counselor through a computer (S410). Here, the counseling information may be understood as customer information, agent profile and counseling contents, and the customer information includes information such as a phone number, a part of a name and a social security number, and an agent profile includes information such as affiliation, name and photo. do.

Next, the message management server 360 requests generation of a verification code for the consultation information while providing consultation information to the verification code generation server 370 (S420).

Next, the communication unit 371 of the verification code generation server 370 receives a message and consultation information for requesting generation of verification code, and the verification code generation unit 372 generates a verification code for the consultation information (S430). Here, the verification code generation method may be understood as an electronic signature and a hash function, and has security characteristics such as one-wayness, data freshness, and anti-forgery. In addition, the verification code generated by the verification code generation unit 372 is generated differently for each user (or customer).

Next, the verification code generation server 370 transmits the generated verification code to the management server 360 through the message communication unit 371 (S440).

Next, the message management server 360 generates a message (ie, consultation information message) including the transmitted verification code (S450), and transmits the generated consultation information message to the corresponding mobile communication terminal 100 (S460). ). Here, the counseling information message includes information such as counselor profile, counseling contents and verification code, and is generated and transmitted in the form of MMS.

Next, the user of the mobile communication terminal 100 checks the received counseling information message, and if the user is wondering whether the received telephone counseling service is phishing, accesses the mobile communication company portal site through the mobile communication terminal 100 (S470). ). Here, the method of accessing the mobile communication company portal site may be connected using a computer as well as the mobile communication terminal 100, but is not necessarily limited thereto.

Next, when a screen for requesting input of a verification code through a UI screen is provided by accessing a mobile carrier portal site through the mobile carrier server 400, the user inputs a verification code included in the consultation information message (S480). Here, the user performs a process of inputting identification information before or after inputting the verification code.

Accordingly, the mobile communication company server 400 transmits the user identification information and the verification code to the verification code generation server 370 and requests authentication for the corresponding verification code (S490).

Next, the verification code authentication unit 373 of the verification code generation server 370 checks whether the verification code for which authentication is requested is generated by the verification code generation unit 372 and performs authentication of the verification code (S500). ).

For example, the verification code authenticator 373 compares the user identification information and the verification code previously stored in the storage unit 374 with the transmitted user identification information and the verification code and checks whether the same user identification information and the verification code exist. If the same user identification information and verification code exist, it is determined to be a valid verification code. If the same user identification information and verification code does not exist, it is determined to be an invalid verification code.

Next, the verification code generation server 370 transmits the result of performing the authentication to the mobile communication company server 400 (S510), and the mobile communication company server 400 transmits the content (that is, the content of the authentication result). A request for generation of a consultation verification message is transmitted to the message management server 360 (S520).

Next, the message management server 360 generates a message (ie, a consultation verification message) including the contents of the authentication result according to the request for generating the consultation verification message of the mobile carrier server 400 (S530), and generates the consultation. The verification message is transmitted to the mobile communication terminal 100 (S540).

Then, the user of the mobile communication terminal 100 may check whether the phishing counseling service is received by checking the transmitted counseling verification message (S550).

Meanwhile, when a user accesses a mobile communication company portal site using a computer, the user may check a consultation verification message provided through the computer UI. In this case, the step S550 is performed immediately after the steps S410 to S510 are performed.

4 is a diagram illustrating an example of a consultation information message provided on a screen of a mobile communication terminal according to an embodiment of the present invention.

As shown, the consultation information message 110 is displayed on the screen of the mobile communication terminal 100. Here, the consultation information message 110 is provided in the form of MMS.

The counseling information message 110 includes information such as an agent profile 111, counseling contents 112, and a verification code 113. Here, the agent profile 111 includes information such as the affiliation, name and photo of the agent, the consultation content 112 includes the contents of the consultation with the user, the date and time of the consultation and the customer information, and the customer information includes a telephone number, Information such as name and part of social security number is included.

5A and 5B illustrate examples of a counseling verification message provided on a screen of a mobile communication terminal or a computer according to an embodiment of the present invention.

As illustrated, the consultation verification message 130 is displayed on the screen of the mobile communication terminal 100. Here, the consultation verification message 130 may be provided in the form of MMS and SMS.

The consultation information message 130 may be divided into a message indicating "validation success" and a message indicating "validation failure".

For example, when a user (or a customer) wonders whether the received telephone consultation service is phishing, the user (or customer) accesses the mobile communication company portal site through the mobile communication terminal 100.

In this case, a message 120 requesting input of a verification code is provided on a screen of the mobile communication terminal 100, and when a user inputs a verification code received through a consultation information message, a predetermined time is required, and then consultation is performed. The verification message 130 is displayed.

When the verification result of the verification code verification server of the verification code generation server is successful, a consultation verification message 130 stating that "verification of verification code verification was successful" is provided (see FIG. 5A), and the verification result verification code of the verification code generation server is provided. If the authentication of the failed, the consultation verification message 130 is provided that "validation code authentication failed" (see Fig. 5b).

Although embodiments of the present invention have been described above with reference to the accompanying drawings, those skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing the technical spirit or essential features thereof. You will understand that. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

1 is a diagram illustrating a system for performing counseling verification using a verification code according to an embodiment of the present invention.

2 is a block diagram of an apparatus for performing counseling verification using a verification code according to an embodiment of the present invention.

3 is a flowchart illustrating a method of performing counseling verification using a verification code according to an embodiment of the present invention.

4 is a diagram illustrating an example of a consultation information message provided on a screen of a mobile communication terminal according to an embodiment of the present invention.

5A and 5B illustrate examples of a counseling verification message provided on a screen of a mobile communication terminal or a computer according to an embodiment of the present invention.

<Explanation of symbols on main parts of the drawings>

100: mobile communication terminal 360: message management server

370: verification code generation server 400: mobile carrier server

Claims (14)

A communication unit configured to receive a request for generating a verification code and an authentication request for the verification code; A verification code generation unit generating a verification code for consultation information according to the generation request of the verification code; And And a verification code authentication unit configured to perform authentication of a corresponding verification code according to an authentication request of the generated verification code. The method of claim 1, And the verification code generating unit generates a verification code based on the consultation information transmitted from the first server. 3. The method of claim 2, And the first server generates a consultation information message including a verification code transmitted from the communication unit. The method of claim 1, And the verification code authentication unit performs authentication of the verification code based on the user identification information transmitted from the second server. The method of claim 1, And the first server generates a consultation verification message including a verification code transmitted from the communication unit. The method according to any one of claims 1, 3 and 5, And a message management server which transmits the consultation information message and the consultation verification message to a mobile communication terminal of a customer who has consulted. Receiving a request for generating a verification code from a first server; Generating a verification code for consultation information according to the request for generating the verification code; And And transmitting the generated verification code to the first server. The method of claim 7, wherein And the verification code is generated based on the consultation information transmitted from the first server. The method of claim 7, wherein And the first server generates a consultation information message including the transmitted verification code. The method of claim 7, wherein Receiving an authentication request of the generated verification code from a second server; Performing authentication on the verification code according to the authentication request of the verification code; And And transmitting a result of performing authentication to the second server. The method of claim 10, And verifying the verification code based on user identification information transmitted from the second server. The method of claim 10, And the first server generates a consultation verification message including a result of performing authentication transmitted from the second server. The method according to any one of claims 9 and 12, And providing a consultation information message and a consultation verification message to a mobile communication terminal of a customer who has consulted. The method of claim 10, And the second server provides a result of performing the transmitted authentication through a computer, and performs counseling verification using a verification code.

Images