KR20110005613A - System and method for managing wireless otp using location information, wireless terminal and recording medium - Google Patents

Abstract

PURPOSE: A wireless OTP(One Time Password) operating method using the location information, a system of the same, a wireless terminal for the same and a recording medium are provided to authenticate an OTP by using the same seed value with wireless terminal location information. CONSTITUTION: A location confirming device(245) confirms location information of a wireless terminal, which generates an OTP. An information configuring device(255) configures OTP generation information including the confirmed wireless terminal location information as a seed value. An OTP authentication device(250) generates an OTP through the OTP generation information. The OTP authentication device compares an OTP generated with a received OTP. The OTP authentication device authenticated the received OTP validity.

Description

System and Method for Managing Wireless OTP using Location Information, Wireless Terminal and Recording Medium}

1 is a diagram illustrating a configuration of a wireless terminal function having a function of generating an OTP by using wireless terminal position information according to an embodiment of the present invention.

2 is a diagram illustrating a configuration of a wireless OTP system according to an embodiment of the present invention.

3 is a diagram illustrating an OTP medium registration process according to an embodiment of the present invention.

4 is a diagram illustrating an OTP generation process according to a first embodiment of the present invention.

5 is a diagram illustrating an OTP generation process according to a second embodiment of the present invention.

6 is a diagram illustrating an OTP generation process according to a third embodiment of the present invention.

7 is a diagram illustrating an OTP authentication process according to an embodiment of the present invention.

<Description of main parts of drawing>

100: wireless terminal 105: control unit

110: screen output unit 115: sound processing unit

120: key input portion 125: position positioning portion

130: battery 135: wireless communication unit

140: USIM 145: USIM leader

150: memory unit 155: authentication unit

160: authentication processing unit 165: information verification unit

170: information configuration unit 175: OTP generation unit

180: OTP output unit 185: information transmission unit

The present invention, when generating the OTP in a wireless terminal having a positioning function, using the position information of the wireless terminal obtained through the positioning function in the wireless terminal as the seed value of the OTP to generate an OTP, and authenticates the OTP When the server in the OTP authentication, the location of the wireless terminal that has generated the OTP, and then providing the method and system for authenticating the OTP using the identified wireless terminal location information as the same seed value.

With the development of information and communication technology, non-face-to-face transactions using telecommunication networks are activated, non-face-to-face transaction providers must verify that users connected through telecommunication networks are valid traders and prepare for any incidents that may occur.

In the non-face-to-face transaction as described above, the most common method of authenticating a user connected through a communication network is used to authenticate using ID / PW. It is used to identify the trader rather than being used.

As a non-face-to-face transaction authentication method that is more advanced than the ID / PW method, an authentication method using an official certificate is used, and a medium (for example, a computer) on which the official certificate is recorded is hacked, When processing a non-face-to-face transaction through the installed terminal, the official certificate also has a problem that does not provide a reliable degree of face-to-face transaction authentication.

One time password (OTP) is used as a method for solving the problems of the above-mentioned public certificate. The OTP exchanges / shares one or more fixed seed values and fixed seed values dynamically determined at the time of generating the password, and then the fixed seed identified / determined at the point of non-face authentication by each trading party. By assigning a value and a dynamic seed value to a predetermined code generation algorithm (eg, a hash function) to generate an OTP that can be used once, and exchanging and authenticating the generated OTP, even if the OTP is exposed, the same OTP can be reused. Since it is not possible, it is used as a safer authentication means than hacking.

As described above, in order to generate an OTP, a user has to carry a portable device called an OTP generator. Recently, an OTP generator program (for example, an OTP generator algorithm) is implemented in a mobile phone that the user always owns. It is proposed to install a program code and seed value and use it as an OTP generator.

However, the conventional mobile phone OTP generator implements the OTP generator in the form of a portable device in the form of program code on a mobile phone. The OTP generating program installed in the mobile phone OTP generator is copied to another mobile phone (for example, a copy through a serial communication connection). Or, when replicating a mobile phone in which the OTP generating program is installed, the mobile phone OTP generator has a problem that it is no longer reliable.

In addition, when using a wireless non-face-to-face transaction such as wireless payment / banking through a mobile phone used as the mobile phone OTP generator, the mobile phone is used as a transaction medium for the non-face-to-face transaction as well as an authentication medium for authenticating the non-face-to-face transaction. In this case, such a wireless face-to-face transaction does not meet the two-factor authentication requirement that the transaction and authentication media must be separated into different media in a face-to-face transaction using OTP authentication. I have a problem.

An object of the present invention for solving the above problems, when generating the OTP in a wireless terminal having a positioning function, the wireless terminal position information obtained through the positioning function in the wireless terminal as the seed value of the OTP Generate the OTP, and when the OTP is authenticated by the server that authenticates the OTP, confirms the location of the wireless terminal that generated the OTP, and uses the identified wireless terminal location information as the same seed value. To authenticate.

In a wireless OTP operating method using location information according to the present invention, when generating a one time password (OTP) in a wireless terminal, positioning the location of the wireless terminal to obtain wireless terminal location information corresponding to the location of the wireless terminal; And generating OTP generation information including the wireless terminal location information as a seed value, and generating and outputting an OTP using one or more fixed seed values included in the OTP generation information and a dynamic seed value dynamically determined. Characterized in that comprises a step.

On the other hand, the wireless OTP operation method using the location information according to the present invention, receiving the OTP generated through the OTP generation information including the wireless terminal position information as a seed value, the location of the wireless terminal generating the OTP Confirming the information, configuring OTP generation information including the identified wireless terminal location information as a seed value, generating OTP 'through the OTP generation information, and generating the received OTP and the generated OTP'. And comparing (or verifying) the OTP 'to authenticate the received OTP validity.

The wireless OTP operating method using the location information according to the present invention is characterized in that it further comprises the step of hashing and processing the radio terminal location information to the seed value data structure of the OTP generation information.

In the wireless OTP operation method using the location information according to the present invention, the step of confirming the location information of the wireless terminal that generated the OTP, receiving the wireless terminal location information from the wireless terminal that generated the OTP, or A communication company which checks the location information of the wireless terminal through a positioning server on a communication network to which the wireless terminal is connected, or when the OTP is input and transmitted through the user terminal, the communication address information of the user terminal connected to the user terminal; Checking the address of the user terminal provided to the server as the location information of the wireless terminal, or if the user terminal to which the OTP is input is a terminal-merchant terminal, or financial terminal-managed by a terminal management authority, the user Provide the terminal information to the terminal management authority to determine the location of the user terminal to the wireless terminal It characterized in that it confirmed location information.

In a wireless OTP operation method using location information according to the present invention, the location information of the wireless terminal includes a coordinate value including a longitude value and a latitude value at which the wireless terminal is located, or the wireless terminal is located. And a location value including any one of address information, landmark information, and a location code.

In the wireless OTP operation method using the location information according to the present invention, the wireless terminal location information is characterized in that it is included as a dynamic seed value of the OTP generation information dynamically determined according to the location of the wireless terminal.

In the wireless OTP operation method using the location information according to the present invention, the OTP generation information, characterized in that it comprises the unique information of the radio terminal as a fixed seed value.

In the wireless OTP operation method using the location information according to the present invention, the OTP generation information, the terminal-side OTP generation information including the parameters for determining at least one fixed seed value and the dynamic seed value and the radio terminal position information It is characterized by being configured in combination.

In the wireless OTP operation method using the location information according to the present invention, the OTP generation information, the server-side OTP generation information including the parameters for determining at least one fixed seed value and the dynamic seed value and the radio terminal position information It is characterized by being configured in combination.

On the other hand, it includes a computer-readable recording medium, characterized in that for recording a program for executing a wireless OTP operating method using the above-described location information.

On the other hand, the wireless terminal according to the present invention, when generating the OTP (One Time Password) in the wireless terminal, the position location unit for positioning the position of the wireless terminal to obtain the wireless terminal position information corresponding to the position of the wireless terminal, and An information constituting unit configured to generate OTP generation information including wireless terminal location information as a seed value, and an OTP generating unit generating OTP using one or more fixed seed values included in the OTP generation information and a dynamic seed value dynamically determined. It is characterized by comprising.

On the other hand, the wireless OTP operating system using the location information according to the present invention, the information receiving means for receiving the OTP generated through the OTP generation information including the wireless terminal position information as a seed value, and the wireless terminal generating the OTP Location information means for confirming the location information of the information, means for configuring the OTP generation information including the identified radio terminal location information as a seed value and the OTP 'through the OTP generation information, and generating the received And OTP authentication means for authenticating the received OTP validity by comparing (or verifying) the OTP and the generated OTP '.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to a user's or operator's intention or custom. Therefore, the definition should be made based on the contents throughout the present invention.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a functional configuration of a wireless terminal 100 having a function of generating an OTP using location information of the wireless terminal 100 according to an embodiment of the present invention.

In more detail, FIG. 1 illustrates an OTP having one N (N> = 2) digits using the location information of the wireless terminal 100 in a wireless terminal 100 having a location positioning function and an OTP agent. FIG. 1 illustrates a functional configuration for generating a Time Password, and a person of ordinary skill in the art to which the present invention pertains refers to a wireless communication connected to a wireless communication network of various wireless communication standards by referring to and / or modifying FIG. A terminal (for example, a portable Internet terminal, etc.) may infer an implementation method having a function of generating an OTP using the location information of the wireless terminal 100, and the present invention includes all the implementation methods inferred. It is made, the technical features are not limited only to the implementation method shown in FIG.

Hereinafter, FIG. 1 illustrates that when a mobile phone connected to a mobile communication network is provided with the location location function of the wireless terminal 100 and an OTP agent, the mobile phone generates N-digit OTP using the location information of the wireless terminal 100. The technical features of the present invention will be described with reference to an implementation method.

Wireless terminal 100 according to the embodiment of the present invention, in terms of hardware configuration, including a body (body) and a speaker and a microphone, a keypad, a liquid crystal display (LCD), an antenna and a battery 130 and the like Internally, a modem chip (eg, MSM series modem chip manufactured by Qualcomm, Inc.) with functions such as a code division multiple access (CDMA) modem, a central processing unit / micro processing unit (CPU / MPU), and a vocoder; , Various memory elements, duplexer filter that separates transmission and reception signals from one antenna, power amplifier to amplify transmission signal, high power amplifier (HPA), isolator to prevent the return of high output transmission signal ), RF / IF SAW filter for removing out-of-band unwanted signals, frequency up-circuit in the transmission path, frequency down-conversion circuit in the receive path, and VCTCXO (Vol Stage Controlled Temperature Compensated X-tal Oscillator), UHF frequency synthesizer used as local signal of frequency up-down conversion, and codec chip for converting analog voice signal into digital signal. Elements are gradually integrated in the modem chip, and in addition to the core components for the mobile communication service, the modem chip is also integrated with various functions for various multimedia services or various additional services.

Referring to FIG. 1, the wireless terminal 100 includes a control unit 105 corresponding to the modem chip, a screen output unit 110 corresponding to a liquid crystal display (LCD), and a structure corresponding to the component. A sound processor 115 corresponding to a microphone / speaker, a key input unit 120 corresponding to a keypad, a wireless communication unit 135 corresponding to an antenna and various RF modules, and a memory unit 150 corresponding to a nonvolatile memory. ), A Universal Subscriber Identity Module (USIM 140) corresponding to an integrated circuit (IC) chip that stores universal subscriber identification information, and a USIM reader unit for reading / writing information (or data) to the USIM 140. 145 and a battery 130 for power supply. The USIM 140 and the USIM reader unit 145 may be omitted according to the intention of those skilled in the art.

According to the present invention, the wireless terminal 100 includes a location of the wireless terminal 100 and includes a coordinate value (or position value) corresponding to the location of the wireless terminal 100 by positioning the wireless terminal 100. It is characterized by comprising a position positioning unit 125 that constitutes information.

The control unit 105 includes a processor and an execution memory including a CPU / MPU provided in the modem chip in hardware, and provides a program routine for providing functions specific to the wireless terminal 100 from a memory device, or And a bus for inputting and outputting program data, and an electronic circuit (or an integrated circuit) provided therefor. The execution memory from the memory unit 150 or a memory device (or chipset) in software. Is a generic term for program routines or program data which are loaded into the processor and are processed by the processor to perform specific functions (hence, recording of the wireless terminal 100 to generate an OTP using the location information of the wireless terminal 100). A program code component corresponding to the OTP agent recorded on the medium is provided in the controller 105 for convenience. The program routine included in the control unit 105 is basically an operating system routine (not shown) and one or more system management routines (eg, a power management routine, a channel (forward / reverse) management routine). , A handoff routine, etc.), and various functional configurations intended to be implemented in the wireless terminal 100 are realized by the controller 105.

According to the exemplary embodiment of the present invention, after power is supplied to the wireless terminal 100, the operating system routine (not shown), one or more system management routines (not shown), and various system variables corresponding thereto are controlled by the controller 105. By loading into the execution memory and arithmetic processing by the processor, the wireless terminal 100 according to the booting process, the system configuration detailed state, the pilot channel acquisition detail state, the synchronization channel acquisition detail state and the timing conversion detail state The operation mode corresponding to the "mobile station initialization state" is set.

After performing the booting procedure, the operating system routine (not shown), one or more system management routines (not shown), and various system variables corresponding thereto are loaded into the execution memory included in the controller 105 and executed by the processor. By the arithmetic processing, the wireless terminal 100 is set to an operation mode corresponding to a "mobile station call waiting state", "system access state", or "call channel state", thereby enabling mobile communication based wireless access and call processing (Call). Processing procedure.

According to an embodiment of the present invention, the function of generating the OTP is preferably initiated (or realized) through the key input in the operation mode corresponding to the "mobile station call waiting state".

The screen output unit 110 is a function configuration unit for a screen for checking each operation mode operation and the corresponding operation state of the wireless terminal 100, at least one including an LCD provided in the wireless terminal 100 And at least one key data input through the key input unit 120 in connection with the controller 105, or wirelessly. One or more contents included in (or downloaded to) a menu screen, a function processing screen, and a function processing result screen corresponding to one or more functions (or programs) included in the terminal 100 or the wireless terminal 100. (Eg, text content, image content, multimedia content).

According to the exemplary embodiment of the present invention, the screen output unit 110 preferably performs a function of a screen output means for outputting a menu screen, a function processing screen, and a function processing result screen corresponding to the function for generating the OTP. .

The sound processor 115 is a functional component that processes input and output of sound in each operation mode of the wireless terminal 100. The sound processor 115 decodes one or more encoded sound data and is provided in the wireless terminal 100. It is characterized in that it comprises a vocoder (Code) and a codec for encoding or encoding the sound signal output to the speaker or input through the microphone provided in the wireless terminal (100).

According to the exemplary embodiment of the present invention, the sound processing unit 115 receives sound data corresponding to the call connection sound through the speaker in an operation mode corresponding to the “system access state” among the operation modes of the wireless terminal 100. The audio signal may be decoded and output, or the audio signal may be encoded and input through a microphone in an operation mode corresponding to the "call channel state", or the audio signal may be decoded and output through a speaker.

In addition, the sound processing unit 115, when playing one or more sound content or multimedia content provided (or downloaded) in the wireless terminal 100 in one or more operation modes including the "mobile station call waiting state", It is preferable to decode and output sound data corresponding to the content.

The key input unit 120 includes a key input device having one or more key buttons including a number key, a character key, or a function key, and the key input device. And at least one key input signal generated by clicking (or entering) the key button in the key input device.

According to the present invention, when a key input signal is detected from a key button provided in the key input device in the input mode or one or more operation modes controlled by the controller 105, the key input unit 120 detects the detected key. Generate a key event corresponding to an input signal (eg, MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, MH_KEY_RELEASEEVENT), and provide the generated key event to the controller 105, wherein the controller 105 is provided with the wireless terminal 100. Reads key data corresponding to the key event in the current input mode or operation mode (eg, from a key table that stores (manages) one or more key data corresponding to a specific key event in each input mode or operation mode). Read key data into a key event) or read a command that executes a function defined in accordance with the key event. It characterized.

According to the exemplary embodiment of the present invention, the key input unit 120 inputs a telephone number in an operation mode corresponding to the "mobile station call waiting state" of each operation mode of the wireless terminal 100, and presses the "call" button. By inputting, it is preferable to change the operation mode of the radio terminal 100 to an operation mode corresponding to the "system access state".

In addition, the key input unit 120 inputs a function key (for example, a menu key) in an operation mode corresponding to the "mobile station call waiting state" of each operation mode of the wireless terminal 100, thereby allowing the wireless terminal 100 to be input. It is desirable to execute the various functions provided in).

According to an embodiment of the present invention, the key input unit 120 preferably performs a function of key input means for inputting one or more key data corresponding to the function of generating the OTP.

The wireless communication unit 135 is a functional component that connects a base station and a wireless channel on a wireless communication network, and includes a CDMA modem and various RF modules (eg, a duplexer filter, a power amplifier, a high power amplifier (HPA), and an isolator). ), An RF / IF SAW filter, a frequency uplink circuit, a frequency downconversion circuit, a VCTCXO corresponding to a reference clock source, a UHF frequency synthesizer, etc.), and an antenna and a driver for driving the same. In response to each operation mode of the wireless terminal 100, a location registration, slot mode, power control, hand-off, or call processing procedure is performed. It is characterized by performing.

According to another exemplary embodiment of the present invention, if the wireless terminal 100 shown in FIG. 1 is a portable Internet terminal, the wireless communication unit 135 is configured to provide a wireless Internet service by accessing an IEEE 802.16x based portable Internet. It is possible to include a, it is possible to implement the present invention by modifying to other wireless communication configuration of various forms to provide wireless data communication in addition to the portable Internet, the present invention is limited by the configuration of the wireless communication unit 135 It is clear that it is not.

The USIM reader unit 145 is a function configuration unit for exchanging one or more information (or data or command) with the USIM 140 mounted or detached from the wireless terminal 100 through a standard including ISO / IEC 7816. A contact IC card reader corresponding to the ISO / IEC 7816 standard may be provided. The IC card reader may include one or more pieces of information (or information) with the USIM 140 through an APDU (Application Protocol Data Unit). Data or instructions).

The USIM 140 mounted or detached from the wireless terminal 100 is an IC chip conforming to the ISO / IEC 7816 standard. Referring to the ISO / IEC 7816 standard, the USIM 140 is a power supply (VCC). Communication with the USIM reader unit 145 via, for example, a reset signal RST, a clock signal CLK, a ground GND, a programming power supply VPP, an input / output I / O, or the like (eg, a command or data). A processor unit comprising an input / output interface for performing exchange and the like, a CPU (Central Process Unit), an MPU (Micro Process Unit), a coprocessor (Coprocessor), and the like, and a ROM (Read Only Memory) and RAM ( It consists of a memory consisting of one or more memory elements, including random access memory (EEPROM), electrically erasable and programmable read only memory (EEPROM), flash memory (FM), and the like, in particular one or more of the memory elements (eg ROM) IC card internal resources management A chip operating system (COS) which is operated and stored is stored. When power is supplied from the USIM reader unit 145 through a power supply (VCC) contact point of the input / output interface, the COS stored in the memory is transferred to the execution memory. The USIM 140 is loaded to control the overall operation of the USIM 140 and through an application protocol data unit (APDU) based on a clock frequency (eg, 3.57 MHz or 4.9 MHz) of the clock signal (CLK) contact point. Information or data exchange between the USIM reader unit 145 and the USIM reader unit 145.

According to the present invention, the memory of the USIM 140 is preferably provided with an OTP applet containing various information and program codes necessary for generating the OTP in the wireless terminal 100, the OTP applet is a wireless terminal ( A storage unit (not shown) for storing a data set corresponding to information or data that is read and read or used by a processor included in the processor 100, and an arithmetic function of the processor unit and an instruction set provided by a COS. A command set of the COS as a program routine (for example, a Java applet in the case of a Javacard) that is driven or executed in the operation and is used by a processor included in the wireless terminal 100. Processing corresponding to an application including instruction call code interacting with the executable code and execution code computed by the processor (Not shown), in particular, the processing unit reads an instruction provided from a processor provided in the wireless terminal 100 via the input / output interface through an APDU, and stores the instruction in the storage unit based on the read instruction. At least one information or data is read or recorded, and the result or read information or data is provided to a processor provided in the wireless terminal 100 through the input / output interface through an APDU.

According to an embodiment of the present invention, the storage unit of the OTP applet, it is preferable to store the terminal-side OTP generation information for generating the N (N> = 2) digits in the wireless terminal 100, the implementation method In this case, the terminal-side OTP generation information may be omitted.

The terminal-side OTP generation information includes a parameter for determining a fixed seed value dynamic seed value for generating an N (N> = 2) digit OTP in an OTP agent provided in the wireless terminal 100. Preferably, the fixed seed value and the dynamic seed value determined by the parameter are substituted into a predetermined OTP generation algorithm and an OTP generation method to generate N-digit OTP.

For example, if the OTP is generated in a time-synchronized manner, the terminal-side OTP generation information may be a parameter for determining one or more fixed seed values and dynamic seed values to be substituted into the time-synchronized OTP generation algorithm. For example, the synchronization time setting value for determining the synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP is preferably included.

Or, if the OTP is generated in a challenge-response manner, the terminal-side OTP generation information may be a parameter for determining one or more fixed seed values and dynamic seed values to be substituted into the challenge-response OTP generation algorithm. A random number generation value for generating a challenge-response random number, or random number reception information for receiving a random number).

According to an embodiment of the present invention, the terminal-side OTP generation information is preferably stored (encryption storage possible) in the storage unit of the OTP applet in association with the OTP agent provided in the user wireless terminal 100.

According to an embodiment of the present invention, the USIM 140 may have a function of generating an O (N> = 2) digit OTP, and OTP generation information for generating the N digit OTP is The processing unit of the OTP applet, if provided in the wireless terminal 100, the dynamic seed and one or more fixed seed value for generating the N-digit OTP through the OTP generation information provided through the wireless terminal 100 Program code for identifying / determining a value and assigning the identified / determined one or more fixed seed values and dynamic seed values to the set OTP algorithm to generate the OTP.

According to an embodiment of the present invention, the memory of the USIM 140 is divided into a subscriber information area having a fixed memory address and an application area having a directory file (EFdir) structure, and the application area is based on ISO / IEC 10202. And a security structure, wherein the memory includes a protected area in which secret information such as a chip serial number (CSN) is stored, a COS control area, a user application area, a read / write access area, an application program area, and a FAT. (File Allocation Table) A management area and the like, and the OTP applet is preferably stored in a separate designated storage area except the protection area and the COS control area.

In addition, according to the ISO / IEC 7816 standard, the application area of the memory includes one master file (MF) corresponding to a root file and function information about one or more stored information under the master file. Answer To Reset (ATR), and one or more Dedicated File (DF) corresponding to each ICC stored information, and substantive information or data disposed under the dedicated file and included for the smart card service. It includes a file structure consisting of an element file (EF), the OTP applet also includes the file structure as described above.

The memory unit 150 is a general term for a nonvolatile memory corresponding to a storage medium for storing one or more information (or data) in the wireless terminal 100 and a recording medium for recording program codes corresponding to one or more program routines. And a read only memory (ROM) corresponding to the read only memory, a flash memory (FM), an electrically erasable and programmable read only memory (EEPROM), and the like. .

According to the exemplary embodiment of the present invention, the memory unit 150 may encrypt and store terminal-side OTP generation information for generating the N (N> = 2) digits of the OTP in the wireless terminal 100. In some implementations, the terminal-side OTP generation information may be omitted. However, when the terminal-side OTP generation information is stored in the memory unit 150, it is preferable that the terminal-side OTP generation information is encrypted and stored in the memory unit 150.

The terminal-side OTP generation information includes a parameter for determining a fixed seed value dynamic seed value for generating an N (N> = 2) digit OTP in an OTP agent provided in the wireless terminal 100. Preferably, the fixed seed value and the dynamic seed value determined by the parameter are substituted into a predetermined OTP generation algorithm and an OTP generation method to generate N-digit OTP.

For example, if the OTP is generated in a time-synchronized manner, the terminal-side OTP generation information may be a parameter for determining one or more fixed seed values and dynamic seed values to substitute for the time-synchronized OTP generation algorithm. , A synchronization time setting value for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization method OTP.

Or, if the OTP is generated in a challenge-response manner, the terminal-side OTP generation information may be a parameter for determining one or more fixed seed values and dynamic seed values to be substituted into the challenge-response OTP generation algorithm. A random number generation value for generating a challenge-response random number, or random number reception information for receiving a random number).

The position location unit 125 locates the position of the radio terminal 100 and provides position information of the radio terminal 100 including coordinate values (or position values) corresponding to the position of the position of the radio terminal 100. It is characterized by the configuration.

According to an exemplary embodiment of the present invention, the position positioning unit 125 reads a satellite signal received from a GPS (Global Positioning System) satellite to position the position of the wireless terminal 100, and the GPS-based coordinate value ( Or location value) including the wireless terminal 100 location information.

Here, the coordinates of the radio terminal 100 is a position of the radio terminal 100 on the GPS position coordinate system with respect to the position of the radio terminal 100 that is measured using the GPS, and includes a longitude value and a latitude value. Do.

The location value of the wireless terminal 100 is address information indicating the location of the wireless terminal 100 to be positioned using the GPS as an address on an administrative area, and the land located within a predetermined short distance from the location of the wireless terminal 100. The location of the wireless terminal 100 may be determined according to landmark information including a landmark name (eg, “Seoul City Hall”) or a landmark code (eg, a code value assigned to the Seoul City Hall) and a preset location code. If the position code to be displayed (for example, the coordinates of the wireless terminal 100 is included in a rectangular region including (longitude 1, latitude 1) and (longitude 2, latitude 2) on the GPS position coordinate system, the wireless terminal (100) a code value assigned to a coordinate value).

According to the exemplary embodiment of the present invention, the memory unit 150 configures the location information of the wireless terminal 100 to match the longitude value and latitude value (or coordinate area) on the GPS location coordinate system. For example, it is preferable to store at least one of home address information, company address information, merchant address information), landmark information, and location code (eg, home location code, company location code, merchant location code).

According to another exemplary embodiment of the present invention, the location positioning unit 125 is a radio wave received from a positioning server (not shown) provided on a wireless communication network (for example, the wireless terminal 100 to a plurality of base stations). A method of tracking the location of the radio terminal 100 by a triangulation method through a time difference of a frequency signal or a cell ID method (for example, based on location information of a specific base station receiving a radio frequency signal from the radio terminal 100). The position of the wireless terminal 100 through a method of tracking the position of the wireless terminal 100) and receiving the coordinate value (or position value) of the wireless terminal 100 and including the coordinate value (or position value). It is desirable to organize the information.

Herein, the coordinates of the radio terminal 100 are positions of the radio terminal 100 on the position coordinate system with respect to the position of the radio terminal 100 positioned by the terrestrial method or the cell ID method, and include a longitude value and a latitude value. It is preferable to make.

The location value of the wireless terminal 100 is address information indicating the location of the wireless terminal 100, which is positioned using the terrestrial method or the cell ID method, as an address on an administrative area, and the location of the wireless terminal 100 and a predetermined short distance. Landmark information including a landmark name (eg, “Seoul City Hall”) or a landmark code (eg, a code value assigned to the Seoul City Hall) located within the area, and the wireless terminal 100 and a wireless communication section. Base station information including the connected base station, a position code indicating the position of the radio terminal 100 according to a preset position code (for example, the coordinates of the radio terminal 100 are in the position coordinate system (longitude 1, latitude 1)). And (a code value assigned to a coordinate value of the radio terminal 100 when included in a rectangular region including longitude 2 and latitude 2).

According to the exemplary embodiment of the present invention, the memory unit 150 configures the location information of the wireless terminal 100 to match the longitude value and latitude value (or coordinate area) on the GPS location coordinate system. For example, it is preferable to store one or more of home address information, company address information, merchant address information), landmark information, and location code (eg, home location code, company location code, merchant location code).

Referring to FIG. 1, when the wireless terminal 100 stores a user's password (or personal identification number) in the USIM 140 / memory unit 150, the user's password (or personal identification) through a key input. Number) is input, characterized in that it comprises an authentication unit 155 to authenticate the input password (or personal identification number) to authenticate the validity of generating the OTP through the location information of the wireless terminal 100 and According to the implementation method, the authentication unit 155 may be omitted.

Referring to FIG. 1, the wireless terminal 100 authenticates the wireless terminal 100 through an wireless communication network to authenticate the wireless terminal 100 as an OTP medium having a positioning function and an OTP agent. And the authentication processor 160 is omitted according to the intention of a person skilled in the art, or the authentication unit 155 authenticates the validity of generating the OTP through the location information of the wireless terminal 100. It is possible to perform the function of extending the thing to the communication network.

The authentication processor 160 confirms the unique information of the wireless terminal 100 provided in the USIM 140 / memory unit 150, and configures OTP medium authentication information including the unique information of the wireless terminal 100. The wireless terminal 100 is transmitted to a server on a communication network that authenticates with an OTP medium, and the OTP medium authentication information is encrypted and transmitted using an encryption method that can be decrypted by the server.

In this case, the unique information of the wireless terminal 100 provided in the USIM 140 may include a mobile identification number (MIN), a serial number (ESN), and a subscriber identification number in a fixed storage area of the USIM 140 memory. At least one IC chip serial number constituting an International Mobile Equipment Identity (IMEI), a Mobile Station International ISDN Number (MSISDN), a USIM 140, or the wireless terminal 100 may generate the OTP. It is preferred to include a separate OTP medium identifier (eg, a non-overlapping code value) or USIM 140 identifier registered to authenticate that the OTP agent is equipped with an OTP medium.

Alternatively, the unique information of the wireless terminal 100 provided in the memory unit 150 may include a mobile identification number (MIN) stored in a predetermined system area of the memory unit 150 provided in the wireless terminal 100. At least one serial number (ESN), subscriber identification number (IMEI), or International Mobile Equipment Identity (IMEI), or the wireless terminal 100 is registered to authenticate that it is an OTP medium equipped with an OTP agent capable of generating the OTP. It is preferred to include a separate OTP medium identifier (eg, non-overlapping code values).

Referring to FIG. 1, the wireless terminal 100 configures information for configuring OTP generation information including the location information of the wireless terminal 100 as a seed value for generating an O (N> = 2) digit. Unit 170 and the at least one fixed seed value and the dynamic seed value for generating the N-digit OTP from the configured OTP generation information, and the at least one fixed seed value and the dynamic seed value are determined and determined. And an OTP generation unit 175 for generating an OTP by substituting a preset OTP generation algorithm. When the terminal-side OTP generation information is stored in the USIM 140 / memory, the USIM 140 / And an information confirmation unit 165 for confirming terminal-side OTP generation information from the memory unit 150, wherein the information configuration unit 170 includes the terminal-side OTP generation information and the wireless terminal 100. Combine location information N (N> = 2) is characterized in that the configuration information for generating the OTP OTP generation of digits.

When the validity of generating the OTP through the wireless terminal 100 location information is authenticated by the authentication unit 155 (or the authentication processing unit 160), the information configuration unit 170 is the location positioning unit 125 Check the location information of the wireless terminal 100 obtained through the step, and if the location information of the wireless terminal 100 does not match the data structure for generating the N-digit OTP, the obtained location of the wireless terminal 100 The information is converted into a data structure for generating the N-digit OTP. If the location information of the wireless terminal 100 obtained through the location positioning unit 125 has a data structure for generating the N-digit OTP, or the wireless terminal obtained through the location positioning unit 125 100) When the data structure of the location information can be generated as it is and the N-digit OTP can be generated, the data structure of the location information of the wireless terminal 100 may not be changed, and the present invention is not limited thereto.

According to an exemplary embodiment of the present invention, the location information of the wireless terminal 100 is hashed through a hash function that hashes a series of text / binary data into a seed value data structure constituting the OTP generation information. It is preferable to convert to a data structure for generating digit OTP.

The information configuring unit 170 comprises OTP generation information for generating N-digit OTP by including the location information of the wireless terminal 100 as a dynamic seed value for generating the N-digit OTP. .

According to an embodiment of the present invention, the information configuration unit 170 includes the unique information of the wireless terminal 100 stored in the USIM 140 / memory unit 150 as the fixed seed value of the OTP generation information. It is preferable to configure OTP generation information for generating digit OTP.

If the N-digit OTP is a time-synchronized OTP, the information configuring unit 170 determines a time value (or a time value for a specific time interval) checked from a timer provided in the wireless terminal 100. The OTP generation information for generating the N-digit OTP may be configured by including the determined time value as the dynamic seed value of the OTP generation information.

Alternatively, if the N-digit OTP is a challenge-sync OTP, the information constructing unit 170 generates a predetermined random value and transmits / exchanges with a server, or receives / exchanges a random number generated by the server. After that, it is preferable to configure the OTP generation information for generating the N-digit OTP by including the random number value as the dynamic seed value of the OTP generation information.

If the terminal-side OTP generation information is stored in the USIM 140 / memory, the information checking unit 165 checks the terminal-side OTP generation information from the USIM 140 / memory unit 150 and configures the information. The unit 170 processes the location information of the wireless terminal 100 as a dynamic seed value for generating the N-digit OTP, and then combines the confirmed terminal-side OTP generation information and the location of the wireless terminal 100. Therefore, it is preferable to configure OTP generation information for generating N-digit OTP.

When the OTP generation information including the position information of the wireless terminal 100 as the dynamic seed value for generating the N-digit OTP is configured by the information configuration unit 170, the OTP generation unit 175 is configured. Identify at least one fixed seed value included in the OTP generation information, determine at least one dynamic seed value through the parameter included in the OTP generation information, and set the at least one fixed seed value and the dynamic seed value It is characterized by generating an OTP having N (N> = 2) digits by substituting the OTP generating algorithm. Here, the number of digits of the N for the OTP may be fixed or may be changed dynamically every time the OTP is generated, and thus the present invention is not limited thereto.

Referring to FIG. 1, when the N-digit OTP is generated through the OTP generation unit 175, the wireless terminal 100 outputs the generated OTP through the screen output unit 110. Characterized in that it comprises a unit 180, when the short-range communication means (not shown) is provided in the wireless terminal 100, the OTP output unit 180 is the generated OTP through the short-range communication means It is possible to output to the terminal (or device) located in the near and the wireless terminal 100.

When the OTP is generated, the OTP output unit 180 outputs the generated OTP in a predetermined area on the screen of the wireless terminal 100 in association with the screen output unit 110.

According to an exemplary embodiment of the present invention, the OTP output unit 180 outputs an OTP output screen on the screen of the wireless terminal 100 in association with the screen output unit 110 and generates the OTP output screen on the screen. It is preferable to output the OTP.

According to another exemplary embodiment of the present invention, the OTP output unit 180 outputs (or allocates) an OTP output region to a screen region currently output on the screen of the wireless terminal 100 in association with the screen output unit 110. It is preferable to output the generated OTP to the OTP output region.

If the wireless terminal 100 is provided with short-range communication means (eg, Bluetooth, infrared communication, RFID communication, RF communication, etc.), the OTP output unit 180 generates the short-term communication means through the short-range communication means. It is possible to output the OTP to the terminal (or device) located near the wireless terminal 100.

According to another exemplary embodiment of the present invention, when the wireless terminal 100 transmits the generated OTP to a server that is provided on a communication network and authenticates the OTP, the OTP output unit 180 is the wireless communication unit 135. Connect a secure communication channel (for example, encryption / decryption based communication channel) for transmitting the OTP to a server that authenticates the OTP (), and may omit it if it is already connected), and authenticate the OTP through the secure communication channel. It is possible to directly transmit the generated OTP to the server, thereby the present invention is not limited.

Referring to FIG. 1, when the location information of the wireless terminal 100 to be included as the dynamic seed value of the OTP generation information is located through the location positioning unit 125, the wireless communication unit 135 is located. And an information transmitter 185 for connecting the communication channel with the server on the communication network and transmitting the location information of the wireless terminal 100 to the server through the communication channel. Accordingly, the information transmitter 185 may be omitted.

2 is a diagram showing the configuration of a wireless OTP system according to an embodiment of the present invention.

In more detail, Figure 2 provides an OTP agent for generating an N-digit OTP using the location information of the wireless terminal 200 to the wireless terminal 200 having the location location function of the wireless terminal 200. After the wireless terminal 200 has the functional configuration of the wireless terminal 200 shown in FIG. 1, the wireless terminal 200 authenticates the N-digit OTP generated by using the location information of the wireless terminal 200. FIG. 2 illustrates a wireless OTP system configuration, and a person of ordinary skill in the art to which the present invention pertains may refer to FIG. 2 and / or modify the wireless OTP system configuration (for example, some components). Addition, omission, subdivision, or combined) may be inferred, but the present invention includes all the inferred implementation methods, and only the implementation method shown in FIG. The technical features are not limited.

Referring to FIG. 2, the wireless OTP system includes an OTP authentication request server for requesting OTP authentication to a user having the wireless terminal 200 and the user having the wireless terminal 200. 215 and the OTP medium information corresponding to the wireless terminal 200 registered as the OTP medium and the server-side OTP generation information in association with the functional configuration as shown in FIG. 1 and stored in the storage medium 265. After providing the OTP agent corresponding to the function configuration of the wireless terminal 200 shown in FIG. 1 to the wireless terminal 200 (however, if the OTP agent is provided in the wireless terminal 200, the wireless terminal 200 may be omitted), the wireless When using the terminal 200 as an OTP medium, using the position information of the wireless terminal 200, characterized in that it comprises an OTP operating system for receiving and authenticating the N-digit OTP generated by the wireless terminal 200 , According to the intention of the skilled person Achieved by further comprising: a wireless terminal user terminals by the user using the possession of 200 205 and a separate OTP server 220 to authenticate the OTP of the N number of digits generated by the mobile terminal 200.

According to the present invention, the OTP operating system, each means constituting the OTP operating system is implemented in the form of one integrated server, or each means (or a combination of two or more means) constituting the OTP operating system The server system is implemented in the form of each server, or some of the means for configuring the OTP operating system is implemented in the form of a server and the other part of the OTP server 220, OTP authentication request server 215, Each means for constituting one or more of the communication server servers 210 provided in the wireless communication network to which the wireless terminal 200 is connected, or constituting the OTP operating system is the OTP server 220, OTP The authentication request server 215, the carrier server 210 may be all distributed and implemented in the form of one or more components of the server, the OTP operating system is implemented Expression bayida put out clearly that the invention is not limited by the type of server and SHALL implementation location and number.

The wireless terminal 200 is registered as an OTP medium for generating an N-digit OTP using the position information of the wireless terminal 200 among the wireless terminal 200 having the positioning function of the wireless terminal 200. A communication terminal apparatus, which is configured by driving an OTP agent shown in FIG. 1 by receiving an OTP generation request through a key input means, an OTP generation request according to a preset menu selection, or an OTP generation command through a wireless communication network. After the OTP generation validity authentication, the OTP generation information including the location information of the wireless terminal 200 is configured to generate and output an N-digit OTP.

The OTP authentication request server 215 is a generic term for servers requesting to authenticate a user, payment, and financial transaction through an OTP generated by the wireless terminal 200. The OTP authentication request server 215 generates an OTP generated by the wireless terminal 200. Web server for processing user authentication through, OTP generated by the wireless terminal 200 through the shopping mall server or content providing server or home shopping server to handle payment authentication through the OTP generated by the wireless terminal 200 It comprises one or more banking server for authenticating a financial transaction, the present invention is not limited by the type of the OTP authentication request server 215 and OTP authentication request method.

The user terminal 205 is a generic term for a communication terminal in which a user having the wireless terminal 200 accesses the OTP authentication request server 215 through a communication network, and includes key input means, screen output means, and data communication means. It consists of all kinds of terminal device provided with, preferably a PC, a computer terminal including a laptop, a wireless communication terminal (for example, wireless terminal 200, portable Internet terminal, etc.) connected to a wireless communication network, two-way communication It includes a digital TV, IP-TV, a home appliance terminal connected to a home network, and the like.

According to the embodiment of the present invention, the user terminal 205 and the wireless terminal 200 may be the same device, and the present invention is not limited thereto.

The OTP server 220 receives an N-digit OTP generated by the wireless terminal 200 through a communication network, generates an OTP 'matching with the OTP, and compares (or verifies) the OTP and the OTP'. As a generic term for the server that processes the OTP authentication, the function of authenticating the OTP in the OTP server 220 may be provided in the OTP operating system, and thus the present invention is not limited thereto.

Referring to FIG. 2, the OTP operating system generates an OTP medium having an N-digit OTP using the wireless terminal 200 location information of the wireless terminal 200 having the positioning function of the wireless terminal 200. And OTP medium registration means 225 for configuring server-side OTP generation information for generating OTP 'for authenticating the N-digit OTP generated by the wireless terminal 200 and storing it in the storage medium 265. It characterized in that it is provided, and provides an OTP agent for generating an N-digit OTP using the position information of the wireless terminal 200 to the wireless terminal 200 registered as the OTP medium, or the server-side OTP generation information It is characterized in that it further comprises a wireless terminal processing means 230 for configuring the terminal-side OTP generation information matched with and provided to the wireless terminal 200.

When the predetermined OTP registration terminal provides the unique information of the wireless terminal 200 to be registered as the OTP medium and the customer information of the customer who uses the wireless terminal 200, the OTP medium registration means 225 is configured to perform the wireless terminal ( 200) OTP medium information including the unique information and customer information is configured and stored in the storage medium 265.

Here, the OTP registration terminal is a generic term for a terminal device requesting to register the wireless terminal 200 as an OTP medium, and includes a user terminal 205 and an OTP registration authority (eg, a national authority, an OTP authentication request) used by the user. At least one terminal (eg, national institution terminal, OTP authentication request server 215 operating institution terminal, card company terminal, financial company terminal, securities company terminal, etc.) provided in the server 215 operating institution, card company, financial company, securities company, etc.). It is done by

The unique information of the wireless terminal 200 included in the OTP medium information includes a mobile identification number (MIN), a serial number (ESN), and a subscriber stored in a predetermined system area of a memory unit included in the wireless terminal 200. A separate OTP medium including an identification number, one or more International Mobile Equipment Identity (IMEI), or registered to authenticate that the wireless terminal 200 is an OTP medium equipped with an OTP agent capable of generating the N-digit OTP. It is preferred to include an identifier (e.g., a non-overlapping code value).

Alternatively, the unique information of the wireless terminal 200 may include a mobile identification number (MIN), a serial number (ESN), a subscriber identification number, and an IMEI in a fixed storage area of the USIM memory included in the wireless terminal 200. (International Mobile Equipment Identity), MSISDN (Mobile Station International ISDN Number), one or more IC chip serial number constituting the USIM, or the OTP agent that the wireless terminal 200 can generate the N-digit OTP It is preferable to include a separate OTP medium identifier (eg, non-overlapping code value) or USIM identifier registered to authenticate that the OTP medium is provided.

The customer information preferably comprises a social security number corresponding to the nominee (or user) of the wireless terminal 200 to be used as the OTP medium, name, address, contact information of the nominee (or user) according to the intention of the skilled person. It is preferable to further include personal information such as.

If the financial transaction is included in the subject of authentication using the wireless terminal 200 as an OTP medium, the customer information further includes financial information (eg, account number, bank, etc.) of the customer corresponding to the customer information. It is preferable.

Alternatively, when a card transaction is included in the object of authentication using the wireless terminal 200 as an OTP medium, the customer information further includes card information (eg, card number, card company, etc.) of the customer corresponding to the customer information. It is preferable.

According to the intention of the person skilled in the art and the field of using the wireless terminal 200 as the OTP medium, the customer information is a variety of information (for example, the user who authenticates using the wireless terminal 200 as the OTP medium is a game accessor. In the case of including the authentication, it is possible to further include customer account information, etc. for the game, whereby the present invention is not limited.

When the OTP medium information is received, the OTP medium registration means 225 provides the customer information and the unique information of the wireless terminal 200 to the communication company server 210 to which the wireless terminal 200 is connected, thereby providing the communication company. It is preferable to authenticate whether it is effective to use the wireless terminal 200 as an OTP medium through the server 210.

When the OTP medium information is received or the validity of using the wireless terminal 200 as the OTP medium is authenticated, the OTP medium registration means 225, the wireless terminal 200 based on the OTP medium information Generates (or allocates) server-side OTP generation information for authenticating N-digit OTPs generated using the location information of the wireless terminal 200.

Here, the server-side OTP generation information is maintained on the OTP operating system, for generating an N-digit OTP 'to be compared (or verified operation) with the N-digit OTP generated by the wireless terminal 200. It is preferred to include one or more fixed seed values and a parameter for determining the dynamic seed value.

When the location information of the wireless terminal 200 is used as the dynamic seed value for generating the N-digit OTP in the wireless terminal 200, the server-side OTP generation information may refer to the location information of the wireless terminal 200. It is preferable to include the wireless terminal 200 location information setting information for determining the dynamic seed value for generating the OTP 'of the digit. According to an embodiment of the present invention, the location information setting information of the wireless terminal 200 may be implemented in the form of a program code constituting the location checking means 245 of the OTP operating system, and in this case, the server side OTP generation information The wireless terminal 200 location information setting information is omitted.

According to an embodiment of the present invention, the location information setting information of the wireless terminal 200 is the same as the dynamic seed value determined through the location information of the wireless terminal 200 obtained by the actual location positioning of the wireless terminal 200. It is preferable to include information for confirming the location information of the wireless terminal 200 for determining the dynamic seed value. Here, the wireless terminal 200 location information setting function as described above is a program code constituting the positioning means 245 for confirming the location information of the wireless terminal 200 with reference to the location information setting information of the wireless terminal 200. Or a program code constituting the location checking means 245 may be implemented in the form of a program code in the configuration of the location information setting information of the wireless terminal 200 and the location information of the wireless terminal 200. Do.

According to an exemplary embodiment of the present invention, when the wireless terminal 200 transmits OTP medium authentication information including location information of the wireless terminal 200 positioned by the wireless terminal 200 for OTP medium authentication, the wireless terminal 200 The location information setting information of the terminal 200 may include information for setting the location information of the wireless terminal 200 included in the OTP medium authentication information as the location information of the wireless terminal 200. The wireless terminal 200 location information setting function is preferably implemented in the program code constituting the positioning means 245.

According to another exemplary embodiment of the present invention, when the location information of the wireless terminal 200 positioned by the wireless terminal 200 is transmitted through a wireless communication network, the location information setting information of the wireless terminal 200 is the wireless terminal 200. It is preferable to include the information to set to receive the location information of the wireless terminal 200 from, the wireless terminal 200 location information setting function as described above is implemented in the program code constituting the positioning means 245 It is preferable to be.

According to another embodiment of the present invention, when the user terminal 205 inputs and transmits an N-digit OTP, the user information of the location information setting information of the wireless terminal 200 is transmitted by inputting the N-digit OTP. It is preferable to include the information to set to confirm the location information of the wireless terminal 200 based on the terminal 205 information, the location information setting function of the wireless terminal 200 as described above is the positioning means 245 It is preferable to be implemented in the program code constituting.

For example, when the user terminal 205 is a terminal device connected to a communication network, the location information setting information of the wireless terminal 200 may correspond to a communication company (eg, an Internet service provider) that provides a communication network to the user terminal 205. In order to determine the dynamic seed value by confirming the location information of the wireless terminal 200 including a location value corresponding to any one of address information, landmark information, and location code corresponding to the IP address of the user terminal 205 in association. It is preferable that the information is included.

Alternatively, when the user terminal 205 is a terminal device managed by a specific terminal management institution such as an affiliated terminal or a financial terminal, the location information setting information of the wireless terminal 200 is linked to the terminal management institution. Information for determining the dynamic seed value by determining the location information of the wireless terminal 200 including the location value corresponding to any one of address information, landmark information, and location code corresponding to the terminal information corresponding to 205. It is preferable to comprise.

According to another exemplary embodiment of the present invention, the wireless terminal 200 location information setting information is a dynamic seed value determined through the location information of the wireless terminal 200, which is positioned by a terrestrial method or a cell ID method, and the wireless terminal. Preferably, the dynamic seed value determined through positioning of 200 includes information for setting the same seed value, and the method of determining the dynamic seed value through the position information of the wireless terminal 200 includes: The same applies to the OTP agent and / or the terminal-side OTP generation information provided in the wireless terminal 200.

For example, when the location information of the wireless terminal 200 obtained by the actual location positioning of the wireless terminal 200 includes a coordinate value, the location information setting information of the wireless terminal 200 is the wireless terminal 200. When the coordinate value obtained by the positioning is included in a specific coordinate region, the dynamic seed value is determined by the coordinate information corresponding to the coordinate region, not the coordinate value obtained by the positioning. It is desirable to include information to make it possible.

Alternatively, when the location information of the wireless terminal 200 obtained by the actual location positioning of the wireless terminal 200 includes a coordinate value, the location information setting information of the wireless terminal 200 may be determined by the wireless terminal 200. Includes information to determine the dynamic seed value from the degree, minute, and second of the coordinate value obtained by the positioning to only a specific coordinate unit, or to discard the number of digits or less of the specific coordinate unit to determine the dynamic seed value. It is preferable to make.

If the wireless terminal 200 uses the unique information of the wireless terminal 200 provided in the USIM / memory unit as it is, or changes the data structure of the unique information of the wireless terminal 200 to generate the N-digit OTP. When using the fixed seed value, the server-side OTP generation information preferably includes a fixed seed value corresponding to the unique information of the wireless terminal 200 as a fixed seed value for generating the N-digit OTP '.

According to an embodiment of the present invention, the server-side OTP generation information preferably includes a fixed seed value generated based on the unique information and / or customer information of the wireless terminal 200 included in the OTP medium information. The generated fixed seed value is preferably included in the terminal-side OTP generation information to be provided to the wireless terminal 200.

If the N-digit OTP is generated by the time-synchronization scheme, the server-side OTP generation information includes synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization scheme OTP. It is preferable.

Or when the N-digit OTP is generated in a challenge-response manner, the server-side OTP generation information generates a random number corresponding to the dynamic seed value of the challenge-response OTP or receives a random number through the wireless communication network. It is preferred to include a random number generation value for the purpose.

When the server-side OTP generation information is generated (or assigned), the OTP medium registration means 225 configures the terminal-side OTP generation information that matches the server-side OTP generation information, and generates the terminal-side OTP. When the information includes information provided in the wireless terminal 200 or can be dynamically determined by the OTP agent provided to the wireless terminal 200 without any additional information, configuring the terminal-side OTP generation information It is possible to omit it, thereby not limiting the present invention.

The OTP medium registration means 225 stores the wireless terminal 200 using the location information of the wireless terminal 200 by storing the wireless terminal 200 in the storage medium 265 in association with the OTP media information and the server-side OTP generation information. Register as an OTP medium generating N-digit OTP.

When the wireless terminal 200 is not provided with the OTP agent corresponding to the configuration of the wireless terminal 200 shown in FIG. 1, the wireless terminal processing means 230, the wireless terminal 200 through a wireless communication network (C) connecting a communication channel with a wireless terminal 200 corresponding to unique information, and providing an OTP agent program code corresponding to the configuration shown in FIG. 1 to the wireless terminal 200 through the communication channel. It is processed to be recorded on the recording medium provided in the (200), and if the OTP agent is provided in the wireless terminal 200, providing the OTP agent program code to the wireless terminal 200 may be omitted. .

When the terminal-side OTP generation information is configured by the OTP medium registration means 225, the wireless terminal processing means 230 is connected to the wireless terminal 200 corresponding to the unique information of the wireless terminal 200 through a wireless communication network. Connects a communication channel, provides the terminal-side OTP generation information to the wireless terminal 200 through the communication channel, and processes it to be recorded in a USIM / memory unit provided in the wireless terminal 200, and the terminal-side OTP The generation information is not configured or the OTP is generated through the unique information and the location information of the wireless terminal 200 provided in the wireless terminal 200 without the terminal-side OTP generation information in the wireless terminal 200. If possible, the provision of the terminal-side OTP generation information to the wireless terminal 200 may be omitted.

According to an embodiment of the present invention, the wireless terminal processing means 230 provides the OTP agent program code and the terminal-side OTP generation information to the wireless terminal 200 through a separate communication channel, or the OTP agent program. It is possible to provide package data including code and terminal-side OTP generation information to the wireless terminal 200.

Referring to FIG. 2, the OTP operating system receives OTP medium authentication information from the wireless terminal 200 through a wireless communication network, and compares the OTP medium authentication information with OTP medium information stored in the storage medium 265. (Or a verification operation) characterized by further comprising a medium authentication means 235 for authenticating the wireless terminal 200 as an OTP medium.

When the OTP medium authentication information is transmitted from the wireless terminal 200, the medium authentication means 235 receives the OTP medium authentication information, and the configuration information included in the OTP medium authentication information from the storage medium 265. Confirm the OTP medium information including the configuration information matched with and compare the configuration information included in the OTP medium authentication information with the configuration information included in the OTP medium information, and perform the comparison (or verify operation). As a result, when the configuration information included in the OTP medium authentication information and the configuration information included in the OTP medium information stored in the storage medium 265 match (or match) or a predicted result is obtained through a verification operation, The wireless terminal 200 transmitting the OTP medium authentication information is authenticated by the valid wireless terminal 200 registered as the OTP medium by the OTP medium registration means 225.

According to an embodiment of the present invention, the OTP medium authentication information includes unique information of the wireless terminal 200 provided in the USIM / memory unit of the wireless terminal 200, in which case the medium authentication means 235 may be used. The wireless terminal 200 compares (or verifies) the unique information of the wireless terminal 200 included in the OTP medium authentication information with the unique information of the wireless terminal 200 included in the OTP medium information stored in the storage medium 265. It is desirable to authenticate with an OTP medium.

Referring to FIG. 2, the OTP operating system receives an N-digit OTP generated by using the location information of the wireless terminal 200 in an OTP agent provided in the wireless terminal 200 through a communication network, and the OTP. Information receiving means 240 for confirming the unique information of the wireless terminal 200 that generated the information, and information checking means for confirming server-side OTP generation information associated with the unique information of the wireless terminal 200 from the storage medium 265. 260, the position confirming means 245 for checking the position information of the radio terminal 200 generating the N-digit OTP, and the server-side OTP generation information and the position information of the radio terminal 200 in combination with N digits. Information structuring means 255 for constructing OTP generation information for generating OTP ', and an N-digit OTP' is generated through the OTP generation information, and the N-digit OTP and OTP 'are compared (or a verification operation). To authenticate that the received OTP is valid. Characterized in that it comprises the OTP authentication means 250, the information receiving means 240, information checking means 260 and OTP authentication means 250 may be implemented in a separate OTP server 220 It is apparent that the present invention includes all such inferred methods of implementation.

When the wireless terminal 200 generates the N-digit OTP, and the OTP is input and transmitted through the OTP input interface displayed on the user terminal 205, the information receiving unit 240 transmits the information through the communication network. And receiving the OTP from the user terminal 205. In this case, the user terminal 205 may use the unique information of the wireless terminal 200 generating the N-digit OTP or the customer using the wireless terminal 200. Further transmits the customer information of the information, and the information receiving means 240 receives the unique information of the wireless terminal 200 from the user terminal 205, or the N digits from the OTP medium information based on the customer information. It is desirable to check the unique information of the wireless terminal 200 that generated the OTP.

Alternatively, the wireless terminal 200 may generate the N-digit OTP and then transmit the generated OTP through a wireless communication network. In this case, the information receiving means 240 may perform the wireless communication through the wireless communication network. Characterized in that receiving the OTP from the terminal 200, by reading the communication protocol defined in the wireless communication network to confirm the unique information of the radio terminal 200, or from the radio terminal 200 to the radio terminal ( 200) Receive unique information.

According to the exemplary embodiment of the present invention, when the OTP is encrypted and transmitted, the information receiving unit 240 decrypts the OTP according to a predetermined decryption scheme.

When the OTP is received, the information checking means 260 confirms server-side OTP generation information associated with the unique information of the wireless terminal 200 from the storage medium 265.

The positioning means 245 is characterized in that the wireless terminal 200 confirms the location information of the wireless terminal 200 used to generate the N-digit OTP.

According to an embodiment of the present invention, when the OTP medium authentication information including the location information of the wireless terminal 200 generating the N-digit OTP is received by the medium authentication means 235, the location checking means 245. Confirms the location information of the wireless terminal 200 included in the OTP medium authentication information.

According to another exemplary embodiment of the present invention, when the wireless terminal 200 generating the N-digit OTP transmits the location information of the wireless terminal 200 obtained by positioning the wireless terminal 200, the positioning means 245 receives location information of the wireless terminal 200 from the wireless terminal 200.

For example, when the N-digit OTP is received from the user terminal 205, the positioning means 245 checks the unique information of the wireless terminal 200 that generated the N-digit OTP, and the wireless terminal It is preferable to receive the location information of the wireless terminal 200 from the wireless terminal 200 through the unique information.

Alternatively, when the N-digit OTP is received from the wireless terminal 200, the positioning means 245 receives the N-digit OTP and the unique information of the wireless terminal 200 together, or the N-digit It is preferable to receive the location information of the wireless terminal 200 before or after receiving the OTP.

According to another exemplary embodiment of the present invention, the positioning unit 245 confirms the location information of the wireless terminal 200 by using the user terminal 205 information transmitted by inputting the N-digit OTP.

For example, when the user terminal 205 is a terminal device connected to a communication network, the positioning unit 245 checks the IP address of the user terminal 205 and provides a communication network to the user terminal 205. It is preferable to check the location information of the wireless terminal 200 including a location value corresponding to any one of address information, landmark information, and location code corresponding to the IP address in association with a communication company (for example, an Internet service provider). Do.

Alternatively, when the user terminal 205 is a terminal device managed by a specific terminal management institution such as a merchant terminal or a financial terminal, the location checking means 245 confirms terminal information corresponding to the user terminal 205. In addition, it is preferable to check the location information of the wireless terminal 200 including a location value corresponding to any one of address information, landmark information, and location code corresponding to the terminal information in association with the terminal management authority.

According to another exemplary embodiment of the present invention, the positioning means 245 checks the location information of the wireless terminal 200 for the terrestrial method or the cell ID method in the positioning server provided in the wireless communication network, and the terrestrial method or Processing such that the mobile terminal 200 location information of the cell ID method is determined so that the dynamic seed value equal to the dynamic seed value determined from the radio terminal 200 location information for the radio terminal 200 is determined (to determine the same seed value). If the wireless terminal 200 location information is confirmed, it may be omitted).

When the server-side OTP generation information and the wireless terminal 200 location information are confirmed, the information structuring means 255 combines the server-side OTP generation information and the wireless terminal 200 location information to form N-digit OTP '. Configure OTP generation information for generation.

When OTP generation information for generating the N-digit OTP 'is configured, the OTP authentication means 250 confirms one or more fixed seed values for generating the OTP' from the OTP generation information, and generates the OTP generation information. One or more dynamic seed values are determined through the parameters included in the parameter, and the one or more fixed seed values and the dynamic seed values are substituted into a predetermined OTP generation algorithm to generate N digits of OTP '.

When the N-digit OTP 'is generated, the OTP authentication means 250 authenticates the OTP validity by comparing (or verifying) the received N-digit OTP with the generated OTP'.

If the result of the comparison matches (or matches) the OTP and the OTP ', or a predicted result is obtained through the verification operation, the OTP authentication means 250 processes the OTP validity as being authenticated, and the OTP The validity authentication result is provided to one or more OTP authentication result receiving means of the OTP authentication request server 215, the user terminal 205, and the wireless terminal 200 that require the OTP authentication result.

On the other hand, if the comparison result does not match (or match) the OTP 'or OTP', or the result of the prediction is not obtained through the verification operation, the OTP authentication means 250 processes the OTP validity as not authenticated. The OTP validity authentication result is provided to one or more OTP authentication result receiving means of the OTP authentication request server 215, the user terminal 205, and the wireless terminal 200 that require the OTP authentication result.

3 is a diagram illustrating an OTP medium registration process according to an embodiment of the present invention.

In more detail, FIG. 3 illustrates a process of registering a user's wireless terminal 200 as an OTP medium on the wireless OTP system shown in FIG. 2, and a person skilled in the art to which the present invention pertains. However, various implementation methods (e.g., some steps may be omitted or the order may be changed) for the OTP medium registration process may be inferred by referring to and / or modifying the drawing 3, but the present invention is inferred from the above It is made including all implementation methods, the technical features are not limited only to the implementation method shown in FIG.

In the following Figure 3, the OTP operating system shown in Figure 2 is referred to as "server" for convenience.

Referring to FIG. 3, when an OTP registration terminal accesses a server through a communication network and requests registration of the user's wireless terminal 200 as an OTP medium (300), the server transmits the user information and the user information to the OTP registration terminal. Provides an OTP medium registration interface for inputting / registering OTP medium information including unique information of the wireless terminal 200 corresponding to the user's wireless terminal 200 (300), and correspondingly, the OTP registration terminal provides the OTP medium. The OTP medium information including the unique information and the customer information of the wireless terminal 200 is input and configured through the registration interface and transmitted to the server (310).

The server receives OTP medium information including the unique information and customer information of the wireless terminal 200 from the OTP registration terminal, and the unique information and customer information of the wireless terminal 200 to the unique information of the wireless terminal 200. Provided to the corresponding carrier server 210 to determine the validity of using the radio terminal 200 corresponding to the unique information of the radio terminal 200 as the OTP medium (315).

If the validity of using the wireless terminal 200 as the OTP medium is not confirmed (320), the server provides OTP medium error information to the OTP registration terminal (325), OTP to the wireless terminal 200 The process of registering with the media is terminated.

On the other hand, if the validity of using the wireless terminal 200 as the OTP medium is confirmed (320), the server is generated using the location information of the wireless terminal 200 in the wireless terminal 200 based on the OTP medium information The server-side OTP generation information for authenticating the N-digit OTP is generated (or assigned) (330), and the OTP medium information is stored in the storage medium 265 in association with the server-side OTP generation information (335).

When providing the terminal-side OTP generation information to the wireless terminal 200 according to the embodiment of the present invention, the server preferably configures the terminal-side OTP generation information matching the server-side OTP generation information, the terminal If the side OTP generation information includes information provided in the wireless terminal 200 or can be dynamically determined by the OTP agent provided to the wireless terminal 200 without additional information, the terminal side OTP generation information. It can be omitted that constitutes, thereby the present invention is not limited.

Thereafter, the server checks whether the wireless terminal 200 corresponding to the unique information of the wireless terminal 200 is provided with an OTP agent corresponding to the configuration of the wireless terminal 200 shown in FIG.

According to an exemplary embodiment of the present invention, the server may include unique information of the wireless terminal 200 and OTP agent information (eg, OTP agent version information, OTP issuer information, OTP usage information, and OTP provided in the wireless terminal 200). It is preferable to check whether the OTP agent is provided in the wireless terminal 200 through a database (not shown) or OTP server 220 or a communication company server 210 that stores and stores an agent usage history.

If the wireless terminal 200 is not equipped with an OTP agent (345), the server is operable in the platform (or operating system) provided in the wireless terminal 200, the wireless terminal 200 shown in Figure 1 If the OTP agent program code corresponding to the configuration is provided to the wireless terminal 200 and the terminal-side OTP generation information matching the server-side OTP generation information is configured, the terminal-side OTP generation information is transmitted to the wireless terminal 200. (350), the wireless terminal 200 records the OTP agent on a recording medium (for example, a program area of the USIM / memory unit) provided in the wireless terminal 200, and generates the terminal-side OTP information. It is connected to the OTP agent and stored in the USIM / memory unit provided in the wireless terminal 200 (360).

On the other hand, if the OTP agent is installed in the wireless terminal 200 (345), the server may not provide the OTP agent program code to the wireless terminal 200, the terminal is matched with the server-side OTP generation information When the side OTP generation information is configured, the terminal side OTP generation information is provided to the wireless terminal 200 (350), and the wireless terminal 200 includes the terminal side OTP generation information in the wireless terminal 200. 360 is connected to the OTP agent recorded in the recorded recording medium (eg, the program area of the USIM / memory unit) and stored in the USIM / memory unit provided in the wireless terminal 200 (360).

4 is a diagram illustrating an OTP generation process according to a first embodiment of the present invention.

In more detail, FIG. 4 illustrates a process of generating an N-digit OTP using the location information of the wireless terminal 200 in the wireless terminal 200 illustrated in FIG. 1, and specifically, the wireless terminal 200. FIG. 2 is a diagram illustrating an implementation method of transmitting the location information of the wireless terminal 200 to the OTP operating system shown in FIG.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 4 to implement various methods for the OTP generation process (for example, some steps may be omitted or the order may be changed). Although it can be inferred, the present invention includes all the implementation methods inferred, and the technical features are not limited only to the implementation method shown in FIG.

For example, in FIG. 4, for convenience, the OTP medium authentication information including the location information of the wireless terminal 200 and the unique information of the wireless terminal 200 is transmitted from the wireless terminal 200 to the OTP operating system shown in FIG. Although a process of processing OTP medium authentication for the wireless terminal 200 is illustrated and described, the present invention is not limited thereto, and the OTP medium authentication process may be omitted.

In the following Figure 4, the OTP operating system shown in Figure 2 is referred to as "server" for convenience.

Referring to FIG. 4, the wireless terminal 200 inputs a dedicated key button for requesting to generate an N-digit OTP through a key input means, or requests to generate the N-digit OTP through a preset menu selection. Or, if an OTP generation command (or OTP agent driving command) is received through the mobile communication network, the OTP agent corresponding to the configuration of the wireless terminal 200 shown in FIG. 1 is driven to OTP the wireless terminal 200. User authentication for use as a medium is requested (400), and user authentication is processed through a password (or personal identification number) (405).

If the user authentication is not processed (410), the wireless terminal 200 outputs user authentication error information (415), and terminates the OTP generation process.

On the other hand, if the user authentication is processed (410), the wireless terminal 200 obtains the location information of the wireless terminal 200 through the position location function of the wireless terminal 200 (420).

If the location information of the wireless terminal 200 is obtained through the location positioning function of the wireless terminal 200 (425), the wireless terminal 200 is the location information of the wireless terminal 200 and the unique information of the wireless terminal 200. Configure OTP medium authentication information, including (430), and transmits the configured OTP medium authentication information to the server and requests to authenticate the wireless terminal 200 as an OTP medium (435).

If the wireless terminal 200 is not authenticated as an OTP medium (440), the wireless terminal 200 outputs OTP medium error information (445), and terminates the OTP generation process.

If the wireless terminal 200 is authenticated as an OTP medium (440), the wireless terminal 200 includes the position information of the wireless terminal 200 as the dynamic seed value for generating the N-digit OTP. OTP generation information for generating an OTP is configured (450).

According to the exemplary embodiment of the present invention, when the terminal-side OTP generation information is not stored in the USIM / memory unit, the server may generate the OTP generation information using the unique information of the wireless terminal 200 previously stored in the USIM / memory unit. It is preferable to configure OTP generation information for generating the N-digit OTP by including a fixed seed value of.

If the N-digit OTP is a time-synchronized OTP, the wireless terminal 200 determines a time value (or a time value for a specific time interval) checked from a timer provided in the wireless terminal 200. It is preferable to configure the OTP generation information for generating the N-digit OTP by including the determined time value as the dynamic seed value of the OTP generation information.

Or, if the N-digit OTP is a challenge-sync OTP, the wireless terminal 200 generates a predetermined random value and transmits / exchanges with a server, or receives / exchanges a random number generated by the server. After that, it is preferable to configure the OTP generation information for generating the N-digit OTP by including the random number value as the dynamic seed value of the OTP generation information.

If the terminal-side OTP generation information is stored in the USIM / memory, the wireless terminal 200 confirms the terminal-side OTP generation information from the USIM / memory unit, and the wireless terminal 200 is the wireless terminal 200. After processing the location information as the dynamic seed value for generating the N-digit OTP, OTP generation for generating an N-digit OTP by combining the identified terminal-side OTP generation information and the location information of the radio terminal 200 It is desirable to organize the information.

If the OTP generation information including the location information of the wireless terminal 200 as the dynamic seed value is configured 455, the wireless terminal 200 checks one or more fixed seed values included in the configured OTP generation information. Determine one or more dynamic seed values through the parameters included in the OTP generation information, and generate and output N-digit OTPs by substituting the identified / determined fixed seed values and dynamic seed values into a preset OTP generation algorithm. (460).

5 is a diagram illustrating an OTP generation process according to a second embodiment of the present invention.

In more detail, FIG. 5 illustrates a process of generating an N-digit OTP using the location information of the wireless terminal 200 in the wireless terminal 200 shown in FIG. 1, and specifically, the wireless terminal 200. FIG. 2 illustrates a method of transmitting the location information of the wireless terminal 200 to the OTP operating system shown in FIG. 2 through a separate communication channel.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 5 to implement various methods for the OTP generation process (for example, some steps may be omitted or the order may be changed). Although it can be inferred, the present invention includes all the implementation methods inferred, and the technical features are not limited only to the implementation method shown in FIG.

For example, in FIG. 5, for convenience, the position information of the wireless terminal 200 is obtained from the wireless terminal 200, and then the position information of the wireless terminal 200 is transmitted to the OTP operating system shown in FIG. Although the present invention is not limited thereto, the process of transmitting the location information of the wireless terminal 200 to the OTP operating system may be processed after the N-digit OTP is generated. The present invention is not limited.

Alternatively, when the wireless terminal 200 directly transmits the N-digit OTP to the OTP operating system shown in FIG. 2, the location information of the wireless terminal 200 is transmitted to the OTP operating system together with the N-digit OTP. The present invention may be transmitted, and the present invention is not limited thereto.

Hereinafter, the OTP operating system shown in FIG. 2 in FIG. 5 is referred to as a "server" for convenience.

Referring to FIG. 5, the wireless terminal 200 inputs a dedicated key button for requesting to generate an N-digit OTP through a key input means, or requests to generate the N-digit OTP through a preset menu selection. Or, if an OTP generation command (or OTP agent driving command) is received through the mobile communication network, the OTP agent corresponding to the configuration of the wireless terminal 200 shown in FIG. 1 is driven to OTP the wireless terminal 200. User authentication for use as a medium is requested (500), and user authentication is processed through a password (or personal identification number) (505).

If the user authentication is not processed (510), the wireless terminal 200 outputs user authentication error information (515), and terminates the OTP generation process.

On the other hand, if the user authentication is processed (510), the wireless terminal 200 obtains the location information of the wireless terminal 200 through the position location function of the wireless terminal 200 (520).

If the position information of the wireless terminal 200 is obtained through the position location function of the wireless terminal 200 (525), the wireless terminal 200 connects a communication channel with the server, and obtains the information through the communication channel. The wireless terminal 200 transmits the location information to the server (530).

In addition, the wireless terminal 200 configures OTP generation information for generating N-digit OTP by including the position information of the wireless terminal 200 as a dynamic seed value for generating the N-digit OTP (535). .

According to the exemplary embodiment of the present invention, when the terminal-side OTP generation information is not stored in the USIM / memory unit, the server may generate the OTP generation information using the unique information of the wireless terminal 200 previously stored in the USIM / memory unit. It is preferable to configure OTP generation information for generating the N-digit OTP by including a fixed seed value of.

If the N-digit OTP is a time-synchronized OTP, the wireless terminal 200 determines a time value (or a time value for a specific time interval) checked from a timer provided in the wireless terminal 200. It is preferable to configure the OTP generation information for generating the N-digit OTP by including the determined time value as the dynamic seed value of the OTP generation information.

Or, if the N-digit OTP is a challenge-sync OTP, the wireless terminal 200 generates a predetermined random value and transmits / exchanges with a server, or receives / exchanges a random number generated by the server. After that, it is preferable to configure the OTP generation information for generating the N-digit OTP by including the random number value as the dynamic seed value of the OTP generation information.

If the terminal-side OTP generation information is stored in the USIM / memory, the wireless terminal 200 confirms the terminal-side OTP generation information from the USIM / memory unit, and the wireless terminal 200 is the wireless terminal 200. After processing the location information as the dynamic seed value for generating the N-digit OTP, OTP generation for generating an N-digit OTP by combining the identified terminal-side OTP generation information and the location information of the radio terminal 200 It is desirable to organize the information.

If the OTP generation information including the location information of the wireless terminal 200 as the dynamic seed value is configured 540, the wireless terminal 200 checks one or more fixed seed values included in the configured OTP generation information. Determine one or more dynamic seed values through the parameters included in the OTP generation information, and generate and output N-digit OTPs by substituting the identified / determined fixed seed values and dynamic seed values into a preset OTP generation algorithm. (545).

6 is a diagram illustrating an OTP generation process according to a third embodiment of the present invention.

In more detail, FIG. 6 illustrates a process of generating an N-digit OTP using the location information of the wireless terminal 200 in the wireless terminal 200 illustrated in FIG. 1, and specifically, the wireless terminal 200. FIG. 2 is a diagram illustrating an implementation method of not transmitting the location information of the wireless terminal 200 to the OTP operating system shown in FIG. 2.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 6 to implement various methods for the OTP generation process (for example, some steps may be omitted or the order may be changed). Although it can be inferred, the present invention includes all the implementation methods inferred, and the technical features are not limited only to the implementation method shown in FIG.

In the following Figure 6, the OTP operating system shown in Figure 2 is referred to as "server" for convenience.

Referring to FIG. 6, the wireless terminal 200 inputs a dedicated key button for requesting to generate an N-digit OTP through a key input means, or requests to generate the N-digit OTP through a preset menu selection. Or, if an OTP generation command (or OTP agent driving command) is received through the mobile communication network, the OTP agent corresponding to the configuration of the wireless terminal 200 shown in FIG. 1 is driven to OTP the wireless terminal 200. User authentication for use as a medium is requested (600), and user authentication is processed through a password (or personal identification number) (605).

If the user authentication is not processed (610), the wireless terminal 200 outputs user authentication error information (615), and terminates the OTP generation process.

On the other hand, if the user authentication is processed (610), the wireless terminal 200 obtains the location information of the wireless terminal 200 through the positioning function of the wireless terminal 200 (620).

If the location information of the wireless terminal 200 is obtained through the location positioning function of the wireless terminal 200 (625), the wireless terminal 200 generates the N-digit OTP of the location information of the wireless terminal 200. The OTP generation information for generating the N-digit OTP is configured by including the dynamic seed value to perform the operation (630).

According to the exemplary embodiment of the present invention, when the terminal-side OTP generation information is not stored in the USIM / memory unit, the server may generate the OTP generation information using the unique information of the wireless terminal 200 previously stored in the USIM / memory unit. It is preferable to configure OTP generation information for generating the N-digit OTP by including a fixed seed value of.

If the N-digit OTP is a time-synchronized OTP, the wireless terminal 200 determines a time value (or a time value for a specific time interval) checked from a timer provided in the wireless terminal 200. It is preferable to configure the OTP generation information for generating the N-digit OTP by including the determined time value as the dynamic seed value of the OTP generation information.

Or, if the N-digit OTP is a challenge-sync OTP, the wireless terminal 200 generates a predetermined random value and transmits / exchanges with a server, or receives / exchanges a random number generated by the server. After that, it is preferable to configure the OTP generation information for generating the N-digit OTP by including the random number value as the dynamic seed value of the OTP generation information.

If the terminal-side OTP generation information is stored in the USIM / memory, the wireless terminal 200 confirms the terminal-side OTP generation information from the USIM / memory unit, and the wireless terminal 200 is the wireless terminal 200. After processing the location information as the dynamic seed value for generating the N-digit OTP, OTP generation for generating an N-digit OTP by combining the identified terminal-side OTP generation information and the location information of the radio terminal 200 It is desirable to organize the information.

If the OTP generation information including the location information of the wireless terminal 200 as the dynamic seed value is configured 635, the wireless terminal 200 checks one or more fixed seed values included in the configured OTP generation information. Determine one or more dynamic seed values through the parameters included in the OTP generation information, and generate and output N-digit OTPs by substituting the identified / determined fixed seed values and dynamic seed values into a preset OTP generation algorithm. (640).

7 is a diagram illustrating an OTP authentication process according to an embodiment of the present invention.

In more detail, FIG. 7 illustrates N (N) generated by the wireless terminal 200 shown in FIG. 1 through a process shown in FIGS. 4 through 6 through a communication network in the OTP operating system shown in FIG. > = 2) A process of receiving an OTP of digits, generating an N digit OTP 'matching the OTP, and comparing (or verifying) the received N digits of OTP with OTP' to authenticate OTP validity. As one skilled in the art to which the present invention pertains, various methods of implementing the OTP authentication process (e.g., some steps may be omitted or the order may be changed) by referring to and / or modifying the drawing. Implementation method) may be inferred, but the present invention includes all the implementation methods inferred, and the technical features are not limited only to the implementation method shown in FIG.

Hereinafter, in FIG. 7, the OTP operating system shown in FIG. 2 is referred to as a "server" for convenience.

Referring to FIG. 7, after the N-digit OTP is generated / output by the wireless terminal 200 shown in FIG. 1 through the process shown in FIGS. 4 to 6, the server is shown in FIG. Receiving the N-digit OTP input through the OTP input interface output to the user terminal 205, or receiving and generating the N-digit OTP from the wireless terminal 200 shown in FIG. (200) Check the unique information (700), and after confirming the server-side OTP generation information associated with the unique information of the wireless terminal 200 from the storage medium 265 (705), the N-digit OTP 'in the server The wireless terminal 200 determines location information for determining a dynamic seed value to generate (710).

When OTP medium authentication information including the location information of the wireless terminal 200 generating the N-digit OTP is received according to an exemplary embodiment of the present invention, the server includes the wireless terminal 200 included in the OTP medium authentication information. ) Check the location information.

According to another exemplary embodiment of the present invention, when transmitting the location information of the wireless terminal 200 obtained by positioning the wireless terminal 200 in the wireless terminal 200 generating the N-digit OTP, the server may The wireless terminal 200 receives location information from the wireless terminal 200.

For example, when the N-digit OTP is received from the user terminal 205, the server checks the unique information of the wireless terminal 200 generating the N-digit OTP, and the unique information of the wireless terminal 200. It is preferable to receive the location information of the wireless terminal 200 from the wireless terminal 200 through.

Alternatively, when the N-digit OTP is received from the wireless terminal 200, the server receives the N-digit OTP and the unique information of the wireless terminal 200 together, or before receiving the N-digit OTP. It is preferable to receive the location information of the wireless terminal 200 later.

According to another exemplary embodiment of the present invention, the server checks the location information of the wireless terminal 200 using the user terminal 205 information transmitted by inputting and transmitting the N-digit OTP.

For example, when the user terminal 205 is a terminal device connected to a communication network, the server checks an IP address of the user terminal 205 and provides a communication network (eg, providing a communication network to the user terminal 205). Internet service provider) preferably checks the location information of the wireless terminal 200 including a location value corresponding to any one of address information, landmark information, and location code corresponding to the IP address.

Alternatively, when the user terminal 205 is a terminal device managed by a specific terminal management institution such as a merchant terminal or a financial terminal, the server checks terminal information corresponding to the user terminal 205 and manages the terminal. It is preferable to check the location information of the wireless terminal 200 including a location value corresponding to any one of address information, landmark information, and location code corresponding to the terminal information in association with an organization.

According to another exemplary embodiment of the present invention, the server checks the location information of the wireless terminal 200 for the terrestrial or cell ID method in a positioning server provided in a wireless communication network, and wirelessly performs the terrestrial or cell ID method. Processing of the terminal 200 location information so that the dynamic seed value equal to the dynamic seed value determined from the radio terminal 200 location information for the radio terminal 200 is determined (the radio terminal 200 to determine the same seed value) If location information is confirmed, it can be omitted).

If the server-side OTP generation information and the wireless terminal 200 unique information are confirmed (715), the server combines (or links) the location information of the wireless terminal 200 and the server-side OTP generation information to the wireless terminal ( 200) The OTP generation information including the location information as the dynamic seed value is confirmed / configured (720).

According to the embodiment of the present invention, if the server-side OTP generation information includes the wireless terminal 200 location information as a dynamic seed value, the server generates the server-side OTP generation information as the N-digit OTP '. It is preferable to confirm with the OTP generation information.

Thereafter, the server confirms one or more fixed seed values for generating the N-digit OTP 'from the OTP generation information, determines one or more dynamic seed values through the parameters included in the OTP generation information, and the identification. At least one fixed seed value and a dynamic seed value are substituted into a predetermined OTP generation algorithm to generate an N-digit OTP '(725).

If the N-digit OTP 'is generated (730), the server compares (or verifies) the received N-digit OTP' to verify the OTP validity (735).

According to the exemplary embodiment of the present invention, if the result of the comparison between the OTP and the OTP 'is matched (or matched) or a pre-predicted result is obtained through a verification operation, the server verifies the validity of the OTP. Treat it as done.

If the OTP validity is not confirmed (740), the server receives a predetermined OTP authentication result receiving means (for example, OTP authentication request server 215, user terminal 205, wireless) One or more of the terminal 200) (745).

On the other hand, if the OTP validity is confirmed (740), the server receives the OTP authentication result corresponding to the OTP validity check means (for example, OTP authentication request server 215, user terminal 205, wireless terminal) (Including one or more of 200) (750).

According to the present invention, when generating an OTP in a wireless terminal having a positioning function, the OTP is generated using the wireless terminal position information obtained through the positioning function in the wireless terminal as a seed value of the OTP, and the OTP When the OTP is authenticated by the server that authenticates the server, after confirming the location of the wireless terminal that generated the OTP, the wireless terminal is authenticated by using the identified wireless terminal location information as the same seed value. It has the advantage of being stolen / deprived from being used maliciously by a third party in any place, and of eliminating the two-factor authentication limit for OTP.

Claims (12)

When creating a One Time Password (OTP) in a wireless terminal, Positioning the location of the radio terminal to obtain radio terminal location information corresponding to the location of the radio terminal; Configuring OTP generation information including the wireless terminal location information as a seed value; And And generating and outputting an OTP using at least one fixed seed value included in the OTP generation information and a dynamic seed value determined dynamically. 2. Receiving OTP generated through OTP generation information including radio terminal location information as a seed value; Confirming location information of the wireless terminal that has generated the OTP; Configuring OTP generation information including the identified radio terminal location information as a seed value; Generating OTP 'through the OTP generation information, and comparing (or verifying) the received OTP with the generated OTP' and authenticating the received OTP validity; Wireless OTP operation method. The method according to claim 1 or 2, And hashing the wireless terminal location information into a seed value data structure of the OTP generation information, and processing the wireless terminal location information. The method of claim 2, wherein the checking of the location information of the wireless terminal that has generated the OTP comprises: Receive the wireless terminal location information from the wireless terminal that generated the OTP, or Confirm the location information of the wireless terminal through a positioning server on a communication network connected to the wireless terminal, or When the OTP is input and transmitted through the user terminal, the communication address information of the user terminal is provided to the communication company server connected to the user terminal to confirm the address of the user terminal as the location information of the wireless terminal, or In the case where the user terminal to which the OTP is input is a terminal-merchant terminal or a financial terminal managed by a terminal management institution, the location of the wireless terminal is determined by providing the user terminal information to the terminal management institution. Wireless OTP operation method using the location information, characterized in that for confirming the information. The method of claim 1 or 2, wherein the radio terminal location information, Or a coordinate value including a longitude value and a latitude value at which the wireless terminal is located, or And a location value including any one of address information, landmark information, and location code of the location where the wireless terminal is located. The method of claim 1 or 2, wherein the radio terminal location information, Wireless OTP operation method using the location information, characterized in that it is included as a dynamic seed value of the OTP generation information dynamically determined according to the location of the wireless terminal. The method according to claim 1 or 2, wherein the OTP generation information, Wireless OTP operating method using the location information, characterized in that it comprises a unique seed information of the radio terminal as a fixed seed value. The method of claim 1, wherein the OTP generation information, And a terminal side OTP generation information including at least one fixed seed value and a parameter for determining a dynamic seed value and the location information of the radio terminal. The method of claim 2, wherein the OTP generation information, And a server side OTP generation information including at least one fixed seed value and a parameter for determining a dynamic seed value and the location information of the radio terminal. A computer-readable recording medium having recorded thereon a program for executing the method of claim 1. When creating a One Time Password (OTP) in a wireless terminal, A location positioning unit for positioning the location of the radio terminal to obtain radio terminal location information corresponding to the location of the radio terminal; An information constructing unit configured to generate OTP generation information including the wireless terminal position information as a seed value; And And an OTP generator for generating an OTP using at least one fixed seed value included in the OTP generation information and a dynamic seed value dynamically determined. Information receiving means for receiving an OTP generated through OTP generation information including radio terminal location information as a seed value; Location checking means for confirming location information of the wireless terminal that has generated the OTP; Information constructing means for constructing OTP generation information including the identified radio terminal location information as a seed value; And And OTP authentication means for generating OTP 'through the OTP generation information, and comparing (or verifying) the received OTP and the generated OTP' to authenticate the received OTP validity. Wireless OTP operating system using location information.

Images