KR20110131513A - Authentication method and apparatus for wireless communication - Google Patents

Abstract

PURPOSE: An authentication method and a device for wireless communication are provided to conveniently and rapidly perform authentication. CONSTITUTION: A security key generating unit(220) generates a security key. An authentication request transmission unit(240) transmits authentication request to the authentication response terminal. An SMS(Short Message Service) transmission unit(270) transmits a short message including the security key to the authentication response terminal. An authentication response receiving unit(250) receives the authentication response form the authentication response terminal which received the short message and authentication request. By using the authentication response and the security key, the authentication response terminal is authenticated.

Description

Authentication method and device for wireless communication {AUTHENTICATION METHOD AND APPARATUS FOR WIRELESS COMMUNICATION}

The present invention relates to an authentication method and apparatus for wireless communication, and more particularly, to a method and apparatus for configuring a wireless communication connection through a convenient authentication procedure.

In general, communication using radio waves as a transmission medium for information to exchange information between various information processing devices in close proximity is referred to as short-range wireless communication. Such short-range wireless communication technologies include Local Area Network (LAN), Mobile Access Point (AP), Ultra WideBand (UWB), Universal Serial Bus (UWB), ZigBee, Bluetooth, and Wi-Fi. Wibree), Near Field Communication (NFC), and the like. In conventional short-range wireless communication, a person directly sets a security key of a connection target device for authentication, directly views a corresponding security key, and directly inputs the security key to an opposite device (the device to be connected).

This authentication method is inconvenient to check the security key by directly accessing the target to be connected. In addition, there is a problem that an input error occurs in the process of inputting a randomly generated key. In addition, there is a problem that input is inconvenient, or a long time until the connection is completed.

The present invention has been proposed to solve the above problems, and an object thereof is to provide an authentication method and apparatus for easily and quickly performing authentication.

In order to achieve the above object, the authentication method for wireless communication performed by the authentication request terminal according to an embodiment of the present invention, generating a security key (Security Key), transmitting an authentication request to the authentication response terminal Transmitting a short message including the security key to the authentication response terminal; receiving an authentication response from the authentication response terminal receiving the short message and the authentication request; and using the authentication response and the security key. And authenticating the authentication response terminal.

In order to achieve the above object, the authentication method for wireless communication performed by the authentication response terminal according to an embodiment of the present invention, receiving an authentication request from the terminal, a short message including a security key from the authentication request terminal The method may include receiving a message, extracting the security key from the short message, and generating an authentication response using the security key and transmitting the authentication response to the authentication request terminal.

In order to achieve the above object, the authentication request terminal according to an embodiment of the present invention, a security key generation unit for generating a security key (Security Key), an authentication request transmission unit for transmitting an authentication request to the authentication response terminal, the authentication An SMS transmission unit for transmitting a short message including the security key to a response terminal, and an authentication response receiver for receiving an authentication response from the authentication response terminal receiving the short message and the authentication request. The authentication response terminal may be authenticated using the authentication response and the security key.

In order to achieve the above object, the authentication response terminal according to an embodiment of the present invention, authentication request receiving unit for receiving an authentication request from the terminal, SMS receiving unit for receiving a short message containing a security key from the authentication request terminal, It may include a security key extraction unit for extracting the security key from the short message and an authentication response transmitter for generating an authentication response using the security key to transmit the authentication response to the authentication request terminal.

Specific details of other embodiments are included in the detailed description and drawings.

According to an embodiment of the present invention, there is an effect capable of providing an authentication method and apparatus for performing authentication simply and quickly.

1 is a network diagram of an authentication system for wireless local area communication according to an embodiment of the present invention.
2 is a block diagram of an authentication request terminal 200 according to an embodiment of the present invention.
3 is a block diagram of an authentication response terminal 300 according to an embodiment of the present invention.
4 is a flowchart of an authentication process according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

In describing the embodiments, descriptions of technical contents that are well known in the technical field to which the present invention belongs and are not directly related to the present invention will be omitted. This is to more clearly communicate without obscure the subject matter of the present invention by omitting unnecessary description.

For the same reason, some of the components in the drawings are exaggerated, omitted, or schematically illustrated. In addition, the size of each component does not fully reflect the actual size. The same or corresponding components in each drawing are given the same reference numerals.

1 is a network diagram of an authentication system for wireless local area communication according to an embodiment of the present invention.

The terminals 120, 130, and 140 requesting the connection transmit a connection request to the connection target terminal 110, and thus the terminal 110 transmits an authentication request to the terminals 120, 130, and 140. In addition, the terminal 110 generates a security key and transmits the generated security key to the terminals 120, 130, and 140 through a short message. The terminals 120, 130, and 140 extract a security key from the received short message and use the same to transmit an authentication response to the terminal 110 as a response to the authentication request. The terminal 110 may complete authentication using the authentication response and the generated security key.

Terminals 120, 130, and 140 requesting a connection may include, for example, a notebook computer, a PDA, a mobile phone, and the like. Similarly, the connection target terminal 110 may include a notebook computer, a personal digital assistant (PDA), a mobile phone, and the like.

In this case, since the terminals 120, 130, and 140 requesting connection transmit an authentication response, they are called authentication response terminals. In addition, since the connection target terminal 110 transmits an authentication request, it is called an authentication request terminal.

2 is a block diagram of an authentication request terminal 200 according to an embodiment of the present invention.

2, the authentication request terminal according to an embodiment of the present invention includes a controller 210, a wireless communication unit 260, and an SMS transmitter 270. The controller 210 includes a security key generator 220 and an authentication request module 230. The authentication request module 230 includes an authentication request transmitter 240 and an authentication response receiver 250.

The wireless communication unit 260 receives a connection request from the authentication response terminal and transmits it to the control unit 210. In addition, the wireless communication unit 260 exchanges data with the authentication response terminal under the control of the controller 210 after the authentication is successful.

The controller 210 controls the overall operation of the authentication request terminal. In addition, the controller 210 performs authentication through a pairing process or a similar process by using the authentication response received by the authentication response receiver 250 and the security key generated by the security key generator 220.

The security key generation unit 220 generates a security key when the wireless communication unit 260 receives an access request from an authentication response terminal. It is assumed that configuration information such as a security key encryption method, key length, automatic generation, or input from a user, is set in advance. Such configuration information may be set by the producer, the software provider or the user of the terminal.

The authentication request transmitter 240 transmits an authentication request to the authentication response terminal. The authentication response terminal receiving the authentication request transmits the authentication response to the authentication request terminal using the security key. The security key is transmitted from the authentication request terminal to the authentication response terminal in the form of a short message.

The SMS transmitter 270 transmits a short message including the security key generated by the security key generator 220 to the authentication response terminal. The security key may be encrypted or transmitted in unencrypted form.

The authentication response receiver 250 receives an authentication response including security key information from the authentication response terminal. As described above, the controller 210 performs authentication through a pairing process or a similar process by using the received authentication response and the security key generated by the security key generator 220.

3 is a block diagram of an authentication response terminal according to an embodiment of the present invention.

Referring to FIG. 3, the authentication response terminal according to an embodiment of the present invention includes a control unit 310, a wireless communication unit 360, and an SMS receiving unit 370. The controller 310 includes a security key extracting unit 320 and an authentication response module 330. The authentication response module 330 includes an authentication request receiver 340 and an authentication response transmitter 350.

The wireless communication unit 360 transmits a connection request to the authentication request terminal under the control of the control unit 310. In addition, after the authentication is successful, the wireless communication unit 360 exchanges data with the authentication request terminal under the control of the controller 310.

The authentication request receiver 340 receives an authentication request from the authentication request terminal. When the authentication request receiver 340 receives the authentication request, the authentication response transmitter 350 transmits an authentication response corresponding thereto to the authentication request terminal. The authentication response is generated using the security key extracted by the security key extracting unit 320.

The SMS receiver 370 receives the short message including the security key from the authentication request terminal and transmits the short message to the controller 310. The security key extracting unit 320 extracts the security key from the short message received by the SMS receiving unit 370. The security key can be sent encrypted or unencrypted. The security key extracted by the security key extractor 320 is used when the authentication response transmitter 350 generates and transmits an authentication response.

4 is a flowchart of an authentication process according to an embodiment of the present invention.

In step 410, the authentication response terminal transmits a connection request to the authentication request terminal. The access request may be transmitted in a short range wireless communication scheme or a short message. The connection request may be sent when the user attempts to connect by controlling the authentication response terminal. In addition, the access request may be transmitted to the authentication request terminal according to a preset period. In addition, the authentication response terminal may scan the accessible terminal according to a preset period, and if it finds an accessible terminal, may transmit a connection request to the terminal. The access request may include a subscriber number of the authentication response terminal, for example, a telephone number. The telephone number is used to send a short message to the authentication response terminal in step 440. If the access request does not include the subscriber number of the authentication response terminal, the authentication request terminal may extract the subscriber number of the authentication response terminal through other means.

The authentication request terminal that receives the access request generates a security key in step 420. It is assumed that configuration information such as a security key encryption method, key length, automatic generation, or input from a user, is set in advance. Such configuration information may be set by the producer, the software provider or the user of the terminal.

After generating the security key, the authentication request terminal transmits an authentication request to the authentication response terminal in step 430. The authentication request may be delivered in a short range wireless communication scheme.

In addition, after generating the security key, in step 440, the authentication requesting terminal transmits a short message including the security key to the authentication response terminal. The subscriber number of the authentication response terminal for transmitting the short message may be transmitted in the connection request. Alternatively, the subscriber number of the authentication response terminal may be transmitted to the authentication request terminal through other means.

The security key may be included, for example, in the content (content) portion of the short message. Table 1 below is an example of the configuration of the content part of the short message including the security key.

Component Security key indicator Security key form security key (predefined string) 10-byte string in ascii format example [security key] # jhd93 @ VwD

According to the format of Table 1, the short message may be transmitted in the form of "[security key] # jhd93 @ VwD". The security key indicator is an indicator that indicates that the short message is for carrying a security key. The security key indicator is a predefined string. The security key can be a 10-byte string in ascii format. However, if more space is needed depending on the encryption or encoding process, a string of more than 10 bytes may be used.

In order to transmit the short message, the authentication request terminal should include a configuration capable of transmitting a short message, and the authentication response terminal should include a configuration capable of receiving a short message. If the authentication response terminal is a mobile phone, it will naturally be able to receive a short message. When the authentication response terminal is a personal computer, a module supported by a software method may receive a short message by communicating with a short message system of a telecommunication company through the Internet. In the case of other terminals, the present invention can be applied if it includes a configuration capable of receiving a short message.

The authentication response terminal receiving the authentication response and the short message extracts a security key from the short message in step 450. The method of including the security key in the short message will be in accordance with a method previously promised between the authentication response terminal and the authentication request terminal. If the security key encoded according to a certain encoding method is included in the short message, the authentication response terminal should know how to decode the security key included in the short message, it will be able to extract the security key accordingly. Therefore, the authentication response terminal can extract the correct security key from the received short message.

In step 460, the authentication response terminal transmits an authentication response to the authentication request using the security key extracted in step 450. The authentication response may include the security key extracted in step 450 or may be another key that can identify the key obtained from the original security key. The authentication request terminal receiving the authentication response compares the security key generated in step 420 with the authentication response to complete the authentication. The authentication request terminal may determine whether the authentication response is generated using the security key generated in step 420. If the authentication response was made using the security key generated in step 420, authentication succeeds. Conversely, if the authentication response was not made using the security key generated in step 420, authentication fails and the connection is terminated.

In step 470, if authentication is successful, then the connection procedure is completed to establish a connection between the authentication response terminal and the authentication request terminal, and data is transmitted through this connection.

According to the above-described configuration, when a wireless short-range communication connection is required, a security key can be transmitted in the form of a short message to automatically configure a connection, thereby conveniently connecting to a connection target device.

At this point, it will be understood that each block of the flowchart illustrations and combinations of flowchart illustrations may be performed by computer program instructions. Since these computer program instructions may be mounted on a processor of a general purpose computer, special purpose computer, or other programmable data processing equipment, those instructions executed through the processor of the computer or other programmable data processing equipment may be described in flow chart block (s). It creates a means to perform the functions. These computer program instructions may be stored in a computer usable or computer readable memory that can be directed to a computer or other programmable data processing equipment to implement functionality in a particular manner, and thus the computer usable or computer readable memory. It is also possible for the instructions stored in to produce an article of manufacture containing instruction means for performing the functions described in the flowchart block (s). Computer program instructions may also be mounted on a computer or other programmable data processing equipment, such that a series of operating steps may be performed on the computer or other programmable data processing equipment to create a computer-implemented process to create a computer or other programmable data. Instructions for performing the processing equipment may also provide steps for performing the functions described in the flowchart block (s).

In addition, each block may represent a portion of a module, segment, or code that includes one or more executable instructions for executing a specified logical function (s). It should also be noted that in some alternative implementations, the functions noted in the blocks may occur out of order. For example, the two blocks shown in succession may in fact be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending on the corresponding function.

Herein, the term " part " used in the present embodiment means a hardware component such as software or an FPGA or an ASIC, and 'part' performs certain roles. However, '~' is not meant to be limited to software or hardware. &Quot; to " may be configured to reside on an addressable storage medium and may be configured to play one or more processors. Thus, as an example, '~' means components such as software components, object-oriented software components, class components, and task components, and processes, functions, properties, procedures, and the like. Subroutines, segments of program code, drivers, firmware, microcode, circuits, data, databases, data structures, tables, arrays, and variables. The functionality provided within the components and the 'parts' may be combined into a smaller number of components and the 'parts' or further separated into additional components and the 'parts'. In addition, the components and '~' may be implemented to play one or more CPUs in the device or secure multimedia card.

Those skilled in the art will appreciate that the present invention can be embodied in other specific forms without changing the technical spirit or essential features of the present invention. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. The scope of the present invention is indicated by the scope of the following claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and the equivalent concept are included in the scope of the present invention. Should be interpreted.

On the other hand, the present specification and the drawings have been described with respect to the preferred embodiments of the present invention, although specific terms are used, it is merely used in a general sense to easily explain the technical details of the present invention and help the understanding of the invention, It is not intended to limit the scope of the invention. It will be apparent to those skilled in the art that other modifications based on the technical idea of the present invention can be carried out in addition to the embodiments disclosed herein.

110: connection target terminal
120, 130, 140: terminal requesting access

Claims (12)

In the authentication method for wireless communication performed by the authentication request terminal,
Generating a security key;
Sending an authentication request to the authentication response terminal;
Transmitting a short message including the security key to the authentication response terminal;
Receiving an authentication response from the authentication response terminal receiving the short message and the authentication request; And
Authenticating the authentication response terminal using the authentication response and the security key. The method of claim 1,
Generating a security key
Generating the security key upon receiving an access request from the authentication response terminal. The method of claim 1,
The short message includes a security key indicator and a security key. In the authentication method for wireless communication performed by the authentication response terminal,
Receiving an authentication request from an authentication request terminal;
Receiving a short message including a security key from the authentication requesting terminal;
Extracting the security key from the short message; And
Generating an authentication response using the security key and transmitting the authentication response to the authentication request terminal. The method of claim 4, wherein
Before the step of receiving the authentication request from the terminal,
And transmitting a connection request to the authentication request terminal. The method of claim 4, wherein
The short message includes a security key indicator and a security key. A security key generation unit generating a security key;
An authentication request transmitter for transmitting an authentication request to an authentication response terminal;
An SMS transmitter for transmitting a short message including the security key to the authentication response terminal;
And an authentication response receiver configured to receive an authentication response from the authentication response terminal receiving the short message and the authentication request.
Authentication request terminal, characterized in that for authenticating the authentication response terminal using the authentication response and the security key. The method of claim 7, wherein
Further comprising a wireless communication unit for receiving a connection request from the authentication response terminal,
The security key generation unit,
And receiving the access request from the authentication response terminal, generating the security key. The method of claim 7, wherein
The short message may include a security key indicator and a security key. An authentication request receiving unit which receives an authentication request from an authentication request terminal;
SMS receiving unit for receiving a short message containing a security key from the authentication request terminal;
A security key extraction unit for extracting the security key from the short message; And
And an authentication response transmitter for generating an authentication response using the security key and transmitting the authentication response to the authentication request terminal. The method of claim 10,
Authentication response terminal further comprising a wireless communication unit for transmitting a connection request to the authentication request terminal. The method of claim 10,
The short message includes an authentication response terminal, characterized in that it comprises a security key indicator and a security key.

Images