KR20120010036A - Certification service Apparatus and Method for Mobile Terminal, Access Control Server and Method for Registering Authentication Information of Mobile Terminal - Google Patents

Abstract

PURPOSE: An authentication service device of a mobile terminal, a method thereof, an access control server, and an authentication information registration method thereof are provided to simply authenticate a user through a mobile terminal of a user when electronic commerce transaction is performed. CONSTITUTION: A communication network(120) receives authentication information and card information about a payment card within a USIM card. A mall server(130) determines whether to authenticate a mobile communication terminal through card information. The mall server transmits an authentication request according to a determination result. The mole server receives an authentication result about authentication. An access control server(140) supplies the authentication result to the mall server.

Description

Authentication service Apparatus and Method for Mobile Terminal, Access Control Server and Method for Registering Authentication Information of Mobile Terminal}

An embodiment of the present invention relates to an authentication service apparatus and method for a mobile communication terminal, an access control server, and a method for registering authentication information of a mobile communication terminal. More specifically, when the user conducts e-commerce online, the user can easily authenticate the user by using the user's mobile communication terminal, thereby overcoming the limitation of the place where the user can use the e-commerce online. In addition, the present invention relates to an authentication service apparatus and method for accessing a mobile communication terminal, an access control server, and a method for registering authentication information of a mobile communication terminal by utilizing a USIM card mounted in a mobile communication terminal as an authentication means.

As the spread of the Internet spreads, the scale of online e-commerce is exploding. In the case of e-commerce, unlike actual transactions in the offline market, it is common to purchase goods or use the service online, and pay or pay for it online. It is important.

To this end, in the prior art, a buyer joins a web site of a seller where a product transaction is made, registers an ID and a password, and confirms the identity of the user by checking a registered ID and password when purchasing a product by the buyer.

However, since user authentication by ID and password is easy to hack online, there is a security problem to use as a means of authenticating a customer's transaction.

As a solution to this problem, a certificate, that is, a digital signature, is used to verify the identity of the user. A certificate, also known as a digital ID, is installed on the user's terminal and, if necessary, submitted to the certification authority. How to check. The certificate is issued by an accredited certification body such as Korea Information Security, KFTC and Korea Computer Securities, and consists of a pair of electronic keys for digital encryption and signing of personal information. When signed and submitted to a certification body, the certification body verifies this to ensure the authenticity of the user.

However, the method using such a certificate has a problem in that the user can authenticate himself only at the terminal where the certificate is installed, and thus there is a limitation in place where the user can perform electronic commerce through online.

In the embodiment of the present invention, when a user makes an e-commerce online, the user can easily authenticate the user by using the user's mobile communication terminal, thereby overcoming the limitation of the place where the e-commerce can be used online. An object of the present invention is to provide an authentication service device and method for a mobile communication terminal, an access control server, and a method for registering authentication information of a mobile communication terminal.

An authentication service apparatus for a mobile communication terminal according to an embodiment of the present invention includes card information for a payment card in the USIM or the SIM card provided by a mobile communication terminal equipped with a USIM or SIM card when a payment is requested according to a product purchase; A communication network for receiving authentication information granted for authentication of the payment card; A mall server that determines whether to perform authentication with the mobile communication terminal by using the card information provided by the communication network, makes an authentication request according to a determination result of whether the authentication is performed, and receives an authentication result for the authentication; And an access control server that provides a result of determining whether to perform the authentication, generates an authentication result by performing authentication with the mobile communication terminal according to the authentication request, and provides the authentication result to the mall server. It is characterized by.

In addition, the access control server according to an embodiment of the present invention is a card information for the payment card and the payment card in the USIM or SIM card to make a payment according to the purchase of a product of a mobile communication terminal equipped with a USIM or SIM card A database for storing authentication information for authentication as a comparison value, respectively; Card information provided from the mobile communication terminal to receive the card information provided in the payment request according to the purchase of the product, compare with the comparison value, determine the validity of the payment card, and provides a response to the mall server to the mall server Verification unit; And an authentication performing unit configured to receive an authentication request provided according to the response, perform authentication with the mobile communication terminal, and provide an authentication result for the authentication to the mall server.

Authentication service method for a mobile communication terminal according to an embodiment of the present invention receives the card information for the payment card in the USIM or SIM card provided when the payment request according to the purchase of the product of the mobile communication terminal equipped with a USIM or SIM card Making; Requesting confirmation of the received card information, receiving a response to the confirmation request, and requesting to perform authentication with the mobile communication terminal according to a result of the response; And receiving an authentication result according to performing authentication with the mobile communication terminal, receiving the approval of payment according to the purchase of the product according to the authentication result, and terminating the payment process.

In addition, the authentication information registration method of the mobile communication terminal according to an embodiment of the present invention by running an application for performing the payment authentication according to the purchase of the product of the mobile terminal provides the card information for the payment card registered in the USIM or SIM card Receiving step; Verifying validity of the payment card using the card information; And when the validity of the payment card is verified, verifying the validity of the authentication information by receiving authentication information provided for payment of the product purchase from the mobile communication terminal. And when the validity of the authentication information is verified, registering the authentication information so that the mobile communication terminal performs payment of the purchase of the product using the authentication information.

As described above, according to an exemplary embodiment of the present invention, when a user conducts electronic commerce online, the user may use a mobile communication terminal to authenticate the user, thereby limiting a location limit for using electronic commerce online. It is possible to overcome, and by using the USIM card mounted in the mobile communication terminal as an authentication means it is possible to increase the reliability of the user's authentication.

1 is a view showing the structure of an authentication service apparatus for a mobile communication terminal according to an embodiment of the present invention;
2 is a view showing the structure of an access control server of FIG.
3 is a diagram illustrating an authentication service process performed by the authentication service device of FIG. 1;
4 is a view showing a secure click payment main screen of the mobile communication terminal of FIG.
5A to 5L are diagrams illustrating a key input safe click registration process;
6A to 6D are diagrams illustrating modified examples of the screen of FIG. 5E;
7A to 7H are diagrams illustrating a USIM secure click registration process;
8a to 8c are views illustrating a safe click delete process;
9A to 9D are diagrams illustrating a safe click password change process;
10A to 10G illustrate a card payment process.

Hereinafter, some embodiments of the present invention will be described in detail through exemplary drawings. In adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used to refer to the same components as much as possible even if displayed on different drawings. In describing the embodiments of the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

In addition, in describing the components of the embodiment of the present invention, terms such as first, second, A, B, (a), and (b) may be used. These terms are only for distinguishing the components from other components, and the nature, order or order of the components are not limited by the terms. If a component is described as being "connected", "coupled" or "connected" to another component, that component may be directly connected or connected to that other component, but between components It will be understood that may be "connected", "coupled" or "connected".

1 is a diagram showing the structure of an authentication service apparatus for a mobile communication terminal according to an embodiment of the present invention, Figure 2 is a diagram showing the structure of the access control server of FIG.

1 and 2, the authentication service device for a mobile communication terminal according to an embodiment of the present invention includes a communication network 120, a mall server 130 and an access control server 140. Here, the mall server 130 may include some or all of the shopping mall server 131, the payment server 133, and the Merchant Plug-In (MPI) 135. In addition, the authentication service device may further include a mobile communication terminal 110 and a value added network (VAN) server 150.

The mobile communication terminal 110 may be applied to various wired and wireless environments, and may be classified into PDA (Personal Digital Assistant), cellular phone, and smart phone, which are classified according to terminal types, PCS (Personal Communication Service) phone, GSM ( This includes all Global System for Mobile (WD) phones, wideband CDMA (W-CDMA) phones, CDMA-2000 phones, and Mobile Broadband System (MBS) phones. In the embodiment of the present invention, it is preferable to apply a smartphone among them, but it is not particularly limited thereto.

The mobile communication terminal 110 may include a wireless communication module, a WLAN module, and a Global Positioning System (GPS) module. As the wireless communication module is provided, the mobile communication terminal 110 connects to the communication network 120 to perform normal voice and data communication with the other party. In addition, the mobile communication terminal 110 receives a variety of web page data by connecting to the communication network 120 via an access point (Access Point) that is recognized as a peripheral to the wireless LAN module, GPS by providing a GPS module It can receive data provided via satellite.

The mobile communication terminal 110 includes a wireless application protocol (WAP), which is an Internet access protocol, a Microsoft Internet Explorer (MIE) based on HTML using an HTTP protocol, and a handheld device transport protocol (HDPT). To connect to the Internet via the communication network 120, using NTT DoKoMo's i-Mode or a specific communication company's wireless Internet browser. Among the Internet access protocols used by the mobile communication terminal 110, the MIE uses m-HTML, which is shortened by slightly modifying HTML, and in the case of i-Mode, a language called compact HTML (c-HTML), which is a subset of HTML. Use

Recently, a mobile communication terminal 110 such as a smartphone uses a browser for accessing a wireless Internet of a specific communication company such as Opera Mini for the iPhone to provide a faster wireless Internet, or in connection with the mobile communication terminal 110 ) Is also using Wi-Fi and WiBro, which are local area networks, to provide wireless high-speed Internet.

In addition, the mobile communication terminal 110 according to the embodiment of the present invention carries a USIM or Subscriber Identity Module (SIM) card. The USIM card is a card installed in a terminal for 3G mobile communication, for example, Wideband Code Division Multiple Access (WCDMA), and combines a SIM card with subscriber information and a Universal IC Card (UICC). , A variety of features such as global roaming, e-commerce, etc. in one card.

USIM is also known as a universal subscriber identification module, while SIM is a card type module that stores personal information so that SIM can provide various services such as authentication, charging, and security functions to subscribers of the mobile communication terminal 110. It combines the role of SIM to authenticate subscribers in a more advanced way than SIM and the universal IC card (UICC) with various functions such as transportation card and credit card. At this time, the universal IC card ensures the integrity and security of all personal information data through the security support of various multiple applications.

The USIM consists of a small central processing unit (CPU) and memory. The CPU identifies a user with encryption and decryption functions, and the memory is used as a storage space for additional services. The memory may store information about the user's account, credit card, transportation card, or membership card. In particular, when a user signs up for a debit account or credit card at a bank window, the bank or credit card company approves the card issue, and then overwrites the user's USIM card or SIM card using OTA (Over The Air) technology. Since the information or credit card information can be stored, the card issuing procedure can be shortened by omitting the offline issuance procedure by mail or the like.

Furthermore, the mobile communication terminal 110 according to an embodiment of the present invention may further include a driving module, an antivirus module, an encryption session generation module, and the like for driving an application. For example, the mobile communication terminal 110 may store an authentication application so as to access a specific shopping mall server 131 to purchase a product, request a payment for the purchased product, and perform authentication, authentication and transmission. The antivirus program or the security program may be further stored to perform encryption for the security of the data to be secured or to securely transmit a sensitive program for key input such as a password.

The communication network 120 refers to a wired network and a wireless network that are connected to each other around the Internet to transmit and receive data. Here, the wireless network may be a short-range wireless network such as Wi-Fi, Bluetooth, or Infrared Data Association (IrDA), a mobile communication network using Code Division Multiple Access (CDMA), Wideband CDMA (WCDMA), or WiBro (Wireless). It may include all wireless Internet networks such as Broadband.

The shopping mall server 131 is an operator server of a shopping mall site. When the mobile communication terminal 110 requests a payment for a purchased product by accessing the shopping mall site, the shopping mall server 131 receives card information for payment through the payment server 133. Receive and forward to MPI 135. In this case, the information received by the payment server 133 may further include information such as, for example, an affiliate store name, an amount, an affiliate store URL, etc. together with the card information.

The payment server 133 may be, for example, an agency (Payment Gateway (PG)) server that performs online payments made at a shopping mall site, and may receive an authentication result from the MPI 135. Here, the authentication result represents the result of the authentication made between the mobile communication terminal 110 and the access control server 140. Upon receiving the authentication result, the payment server 133 requests the approval of the payment from the access control server 140 to the access control server 140 through the VAN server 150, and requests the approval from the access control server 140 through the VAN server 150. Receive an acknowledgment for the request. In this way, the payment server 133 receives the approval response to terminate the transaction for the payment.

MPI 135 is a module required for the merchant to authenticate, using the card information provided by the payment server 133 to request confirmation to the access control server 140 to confirm whether the payment card is a valid card and Receive a response In this case, the MPI 135 determines that the card information provided by the mobile communication terminal 110 is valid information in response to the request for confirmation of the card information received from the access control server 140, the mobile communication terminal 110. ) Requests authentication to the access control server 140 to perform the payment. At this time, the MPI 135 verifies the Verification Enrollment Request (VEReq) defined in the format of ViSa 3-D Secure in order to receive the confirmation request and response for the access control server 140 and the card information, and the authentication request and the authentication result. Verify Enrollment Response (VERes) messages, and Payer Authentication Request (PAReq) and Payer Authentication Response (PARes) messages are available, and the VERes messages can include a URL address and the unique ID of the transaction, and the PARes messages can be authenticated. And may include CAVV or ECI values. Here, 3-D Secure is an electronic commerce standard adapted to the domestic situation according to international standards.

As illustrated in FIG. 2, the access control server 140 may include a card information verification unit 200, an authentication performing unit 210, and a database 220. The card information verification unit 200 receives a confirmation request for the card information of the payment card, etc. provided by the mobile communication terminal 110 when the payment request for the purchased goods is received from the server 130, more precisely, the MPI 135. The response to the MPI 135 is provided, and the authentication performing unit 210 performs an authentication process for payment with the mobile terminal 110 according to the authentication request of the MPI 135 and transmits the authentication result to the MPI 135. To provide. For example, since the access control server 140 may store the card information and the authentication information in the database 220 as a comparison value, the card information and the authentication information provided at the time of the payment request or authentication at the mobile communication terminal 110. And the comparison values such as card information and authentication information stored in the database 220 may be compared with each other to verify the card information and authenticate the authentication information. At this time, if there is no authentication application for performing authentication, the access control server 140 allows the related application to be downloaded, and during the authentication process, the vaccine can be driven by the backgrinding. Let them know and act

The access control server 140 may perform card information verification or authentication using card information such as a card number, a CVC number of the payment card, an expiration date of the card, and authentication information such as a secure click password. In this case, the authentication information is information provided after signing up for a service, for example, assured click service, for a payment card subscribed to a bank or card company. For example, the assured click password is a payment account password or a credit card password. It may be made of numbers, but may be made of letters such as Korean or alphabet, or a combination of numbers and letters.

Further, the access control server 140 checks whether the corresponding mobile communication terminal 110 is equipped with a normal USIM card or a SIM card when verifying or authenticating card information or authentication information, and account information on the USIM card or SIM card. Or more or less, whether or not you have credit card information, and whether you have a mobile payment service with a bank or card company that corresponds to your account or credit card information stored on your SIM card or SIM card. You will also be able to see if you have signed up for the Verified by Click Service.

The VAN server 150 is a server that performs or acts on payment or transfer of payment, and relays an authorization request from the payment server 133 to the access control server 140, and access control server ( The approval response provided by 140 is transmitted to the payment server 133 to help the payment server 133 terminate the corresponding payment process.

3 is a diagram illustrating an authentication service process performed by the authentication service device of FIG. 1.

Referring to FIG. 3 together with FIG. 1, the mobile communication terminal 110 requests a payment for a product purchased from a shopping mall site by accessing the shopping mall server 131 (S301). For example, when a payment card or a credit card is issued inside a USIM or SIM card of the mobile communication terminal 110, a payment card selected by a user from a card list, or a card of a payment card that is automatically selected for a specific card. Information can be transmitted. At this time, the type of the product purchased by the user and the user information may be encrypted and transmitted.

Mall server 130 receives the card information for the payment card provided when the payment request of the mobile communication terminal 110, and requests the access control server 140 to confirm the card information (S303).

The access control server 140 verifies the validity of the payment card using the card information provided by the mall server 130 and provides a response to the request to the mall server 130 (S305). In this case, the response may be a result of verification of validity.

After receiving the response from the access control server 140, the mall server 130 requests the access control server 140 to perform authentication for the payment again when it is determined that the card information for the payment card is valid (S307). .

Subsequently, the access control server 140 drives the authentication application in the mobile communication terminal 110 to perform authentication and receives authentication information associated with the card information and the card information provided by the mobile communication terminal 110 to perform authentication. It is performed (S309).

For example, when the access control server 140 performs authentication with the mobile communication terminal 110, the card information for the payment card is displayed so that an authentication window appears on the screen of the mobile communication terminal 110, and the mobile communication terminal ( The user of 110 may input authentication information, for example, assured click password, and then transmit the related information to the access control server 140.

Thereafter, the access control server 140 provides an authentication result for authentication with the mobile communication terminal 110 to the mall server 130 (S311).

When the mall server 130 receives an authentication result indicating that authentication has been successfully performed by the access control server 140, the mall server 130 requests the approval from the VAN server 150 and receives a response from the VAN server 150 ( S313).

In addition, the VAN server 150 forwards or requests a new authorization request from the mall server 130 to the access control server 140, and forwards or renews an authorization response from the access control server 140 to the mall server 130. In response (S315).

Of course, in FIG. 3, the mall server 130 performs an approval request to the access control server 140 through the VAN server 150 and receives an approval response from the access control server 140 (S313 and S315). Although shown as being, it will not be particularly limited to such a process as it may be substantially made of one such process.

FIG. 4 is a diagram illustrating a secure click payment main screen of the mobile communication terminal of FIG. 1. Hereinafter, the operation process in each mode will be described taking credit card information and secure click password of the USIM card as an example.

Referring to Figure 4 in conjunction with Figure 1, according to an embodiment of the present invention, the application for secure click payment of the mobile communication terminal 110 is key-in (safe) click registration, USIM secure click registration, secure click delete It can operate in about five modes such as secure click password change and card payment. Here, the key input safe click registration may be applied when a card for payment is not registered on the safe click application of the USIM card, and the USIM safe click registration is a card for payment registration on the safe click application of the USIM card. Where applicable.

5A to 5L illustrate a key input safe click registration process.

Referring to FIGS. 5A to 5L together with FIG. 1, for example, a user of a mobile communication terminal 110 using a smartphone or the like may use his or her mobile communication terminal 110 as a payment means on a mobile web. If the payment is requested for the purchased product, if the card is not registered in the assured click application screen as shown in Figure 5a may be output.

In the screen of FIG. 5A, for example, if a user of the mobile communication terminal 110 clicks a card number input key for registering a secure click, the screen moves to a screen for inputting a card number as shown in FIG. If you click, you will be able to move to the safe click main screen as shown in FIG. 4.

The user of the mobile communication terminal 110 enters the card number on the screen of FIG. 5B and clicks the confirmation key to perform a process of checking the card number validity as shown in FIG. 5C. For example, the card number is transmitted to the access control server 140 to be validated. In this case, by clicking the upper key, you can move to the secure click main screen.

After inputting the card number and verifying the validity, if the credit card does not support the safe click service, a screen as shown in FIG. 5D may be output. At this time, when the confirmation key is clicked, the screen returns to the card number input screen of FIG. 5B.

If the validity after inputting the card number, if there is a credit card that supports the assured click service, the screen as shown in Figure 5e is output. At this time, the user of the mobile communication terminal 110 through the screen of Figure 5e can sequentially enter the card information, such as the expiration date of the card, including the card password. For example, when the card password is input, the user moves to the key for inputting the CVC number. After the user enters the CVC number, the user moves to the key for inputting the validity period of the card.

As such, when the user of the mobile communication terminal 110 inputs all the information about the card on the screen of FIG. 5E and clicks an input key, the card information including the pin value of the USIM card is controlled by the access control server. It is transmitted to the 140, and the access control server 140 is checked whether the assured click subscription.

As a result of the inspection, if the user is not subscribed to the secure click service, for example, the screen of the mobile communication terminal 110 is notified that the secure click service is not subscribed to as shown in FIG. You may be advised to do this.

On the other hand, when the card information is input through the screen of FIG. 5E and the corresponding information is checked, when it is determined that the card information is incorrectly input, the screen as shown in FIG. 5G is output, and the card information is input incorrectly. At this time, if the confirmation key is clicked, the screen of FIG. 5E may be moved again.

However, as a result of checking the corresponding information in the access control server 140 by inputting the card information on the screen of FIG. 5E, if the user is subscribed to the safe click service, the procedure for confirming the safe click password is performed as shown in FIG. 5H. Can be. At this time, if you click the upper key, you will be able to move to the main screen.

When the key for inputting the safe click password is clicked on the screen of FIG. 5H, a screen as shown in FIG. 5I may be output. In this case, through the key input unit, for example, a safe click password composed of a combination of numbers and alphabets may be input. In the case of an incorrectly input number or alphabet, it may be deleted by clicking an arrow key. Alternatively, the CLOSE key may be clicked to move to the secure click password screen as shown in FIG. 5H. The Shift key and the like represent keys for converting alphabets or numbers.

After the user of the mobile communication terminal 110 enters the secure click password on the screen of FIG. 5I and clicks the confirmation key while the secure click password is input as shown on the screen of FIG. 5J, the secure click password is accessed. It is sent to the server 140 is checked the validity of the assured click password. At this time, if you click the upper key, you will be able to move to the main screen.

As a result of the validation, for example, when the assured click service is normally completed, a screen as shown in FIG. 5K may be output. For example, when a certain financial company is subscribed to the assured click service, since the assured click password may be stored in the access control server 140 of the corresponding financial company, the user of the mobile communication terminal 110 inputs the assured click password. After transmitting the relevant information, the access control server 140 may check the validity of the assured click password by comparing the assured click password received and the assured click password stored in the database.

If the access control server 140 checks the secure click password as a result of not matching each other, the screen as shown in FIG. 5L may be output. In other words, the screen will be notified that the assured click password does not match and may be recommended to confirm and enter again. At this time, if the confirmation key is clicked, the screen of FIG. 5I for inputting the safe click password may be moved back.

6A through 6D are diagrams illustrating modified examples of the screen of FIG. 5E.

Referring to FIGS. 6A to 6D together with FIG. 1, for example, when a user of the mobile communication terminal 110 inputs a card number through the screen of FIG. 5C and checks the validity, it is determined that the card can be used. Instead of forming a window for inputting card information including a card password as one screen as shown in FIG. 5E, each screen may be formed as shown in FIGS. 6A to 6D.

As described above, when determining whether to register assured click by forming each screen, since only the inconsistent information in a specific part such as a card password is corrected, for example, as shown in FIG. In the process of determining whether or not information can be processed faster than when inconsistent information occurs.

Therefore, in the embodiment of the present invention, since the screen of the mobile communication terminal 110 may be variously changed in order to receive card information or safe click information through key input, the present invention will not be limited to the above-described contents.

7A to 7H illustrate a USIM secure click registration process.

Referring to FIGS. 7A to 7H together with FIG. 1, a user of a mobile communication terminal 110 using a smartphone or the like purchases a product on a mobile web to use the mobile communication terminal 110 possessed by him as a payment method. You can request payment.

At this time, for example, if there is a card list registered in the USIM, a screen including the card list is output as shown in FIG. 7A.

When the user selects the desired credit card on the screen of FIG. 7A and presses the confirmation key, for example, as shown on the screen of FIG. 7B, card information for the corresponding card is output, and a window is formed to input a card password.

Subsequently, after the user of the mobile communication terminal 110 enters the card password as shown in FIG. 7B and clicks the confirmation key, the corresponding card password is transmitted to the access control server 140 to verify the validity of the card. do. Clicking the Cancel key will take you to the card list screen.

If the access control server 140 checks the corresponding card password, if the card passwords do not match with each other, as shown in FIG. 7C, the screen for inputting again may be output. In this case, when the confirmation key is clicked, the screen for inputting the card password can be moved as shown in FIG.

For example, when the card passwords match each other and the validity of the corresponding card is verified, a window for inputting the safe click password may be output on the screen of the mobile communication terminal 110 as shown in FIG. 7D. At this time, if you click the upper key, you can go to the main screen of safe click.

When the corresponding key is clicked to input the safe click password on the screen of FIG. 7D, the screen as shown in FIG. 7E may be output. At this time, through the key input unit, for example, a safe click password composed of a combination of numbers and alphabets may be input, and in the case of an incorrectly entered number or alphabet, it may be deleted. Alternatively, as shown in FIG. 7B, a screen for inputting a card password may be moved or a screen for assured click password as shown in FIG. 7D may be moved.

When the user of the mobile communication terminal 110 clicks the confirmation key while the assured click password is input as shown in the screen of FIG. 7F, the assured click password is transmitted to the access control server 140 to verify the validity of the assured click password. Will receive. At this time, if you click the upper key, you will be able to move to the main screen.

As a result of the verification of the validity, for example, when the safe click service is normally completed, a screen as shown in FIG. 7G may be output. For example, when a certain financial company is subscribed to the assured click service, the assured click password may be stored in a database of the access control server 140 such as the financial company, so that the user of the mobile terminal 110 may use the assured click password. After inputting and transmitting related information, the access control server 140 may check the validity of the assured click password by comparing the assured click password received with the assured click password stored in the database.

If the access control server 140 checks the secure click password as a result of inconsistency, the screen as shown in FIG. 7H may be output. In other words, the screen will be notified that the assured click password does not match and may be recommended to confirm and enter again. At this time, if the confirmation key is clicked, the screen of FIG. 7E for inputting the safe click password may be moved back.

8A to 8C are diagrams illustrating a safe click delete process.

Referring to FIGS. 8A to 8C together with FIGS. 1 and 4, when a user of the mobile communication terminal 110 using a smartphone or the like clicks a corresponding key for deleting a safe click on the main screen of FIG. 4, FIG. 8A A screen as in may be output. At this time, if you click the upper key, you can move to the main screen of safe click.

If a specific card is selected from the card list of FIG. 8A and the delete key is clicked, a window (hereinafter, a deletion screen) for confirming whether or not to delete the safe click may be output as shown in FIG. 8B. At this time, if you click Cancel, you can cancel the mobile assured click service deletion.If you click the upper key, you can move to the main relief click screen.If you click the delete key, you can move to the delete screen or activate the delete screen than other screens. Will be. In this case, the expression that is activated indicates that the deletion screen is pushed out.

In addition, when confirm is clicked on the deletion screen of FIG. 8B, the assured click service for the corresponding card is deleted, and a screen for notifying the assured click deletion result is output as shown in FIG. 8C. At this time, if you click the OK key, you can move to the main screen of Reliable Click.

9A to 9D are diagrams illustrating a safe click password change process.

Referring to FIGS. 9A to 9D together with FIGS. 1 and 4, the user of the mobile communication terminal 110 using a smart phone or the like may change the safe click password to change the safe click password as shown in FIG. 4. Click on the mode.

Accordingly, as shown in FIG. 9A, the card list subscribed to the safe click service is output on the screen of the mobile communication terminal 110. In this case, if the upper key is selected, the user can move to the safe click main screen as shown in FIG. 4.

If the user of the mobile communication terminal 110 in Figure 9a selects a specific card to change the assured click password, and clicks the confirmation key, a screen that allows you to enter and re-enter the password as shown in Figure 9b Is output. At this time, if you click the upper key, you can go to the main screen of safe click.

The screen shown in FIG. 9C may be output both when the key for inputting the safe click password and when the key for re-enter the safe click password is clicked on in FIG. 9B.

In FIG. 9B, for example, when the password is changed by re-entering and re-entering the password, the screen indicating that the password has been changed may be output to the mobile communication terminal 110 as shown in FIG. 9D. At this time, if the confirmation key is clicked, the user can move to the main screen of the secure click as shown in FIG. 4.

10A to 10G illustrate a card payment process.

Referring to FIGS. 10A to 10G together with FIGS. 1 and 4, the card payment process illustrated in FIGS. 10A to 10G may be performed by a user of the mobile communication terminal 110 using a smartphone, for example. It is assumed that the user has subscribed to the secure click service through the same process as in FIG. 5L or 7A to 7H.

When a user of the mobile communication terminal 110 purchases a product and requests a card payment for the purchased product, a screen including purchased product information is output as shown in FIG. 10A.

If the user of the mobile communication terminal 110 clicks the cancel key on the screen of FIG. 10A, a screen indicating that the payment request is canceled is output as shown in FIG. 10B.

However, when the user of the mobile communication terminal 110 checks the product information on the screen of FIG. 10A and clicks the confirmation key, a screen including the card list is output so that the user can select a desired card as shown in FIG. 10B. .

When the user of the mobile communication terminal 110 selects a certain card subscribed to the assured click service for payment on the screen of FIG. 10C, information about the selected card is displayed as shown in FIG. 10D, and the assured click on the corresponding card is performed. A screen that allows you to enter a password is displayed. At this time, if you click the cancel key, you will be able to go to the secure click main screen or close the mobile application.

If a key for inputting an assured click password is clicked in FIG. 10D, a screen for inputting an assured click password is output as shown in FIG. 10E. Since other contents related to this have been described above, a separate description will be omitted.

After inputting the assured click password through the screen of FIG. 10E, when the input key is clicked, the assured click password is input as shown in FIG. 10F. In this case, when the cancel key is clicked, the mobile application may be terminated.

If the confirmation key is clicked on the screen of FIG. 10F, for example, the card information for the card subscribed to the secure click service and the corresponding information for the password or the secure click password for the payment card are transmitted to the access control server 140. Authentication is performed.

After the authentication is performed in the access control server 140, if all of the relevant information is matched, a screen for notifying that the payment is normally made as shown in Figure 10g is output to the screen of the mobile communication terminal 110.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. In other words, within the scope of the present invention, all of the components may be selectively operated in combination with one or more. In addition, although all of the components may be implemented in one independent hardware, each or all of the components may be selectively combined to perform some or all functions combined in one or a plurality of hardware. It may be implemented as a computer program having a. Codes and code segments constituting the computer program may be easily inferred by those skilled in the art. Such a computer program may be stored in a computer readable storage medium and read and executed by a computer, thereby implementing embodiments of the present invention. The storage medium of the computer program may include a magnetic recording medium, an optical recording medium, a carrier wave medium, and the like.

In addition, the terms "comprise", "comprise" or "having" described above mean that the corresponding component may be inherent unless specifically stated otherwise, and thus excludes other components. It should be construed that it may further include other components instead. All terms, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. Terms used generally, such as terms defined in a dictionary, should be interpreted to coincide with the contextual meaning of the related art, and shall not be interpreted in an ideal or excessively formal sense unless explicitly defined in the present invention.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

An embodiment of the present invention is applicable to an authentication service apparatus and method for a mobile communication terminal, an access control server, and a method for registering authentication information of a mobile communication terminal, and when a user conducts electronic commerce online, the user's mobile communication terminal By simply performing authentication for the user, it is possible to overcome the limitation of the place where the electronic commerce can be used online, and by using the USIM card mounted in the mobile communication terminal as an authentication means You can increase the reliability.

110: mobile communication terminal 120: communication network
130: mall server 131: shopping mall server
133: Payment Server 135: MPI
140: access control server 150: VAN server
200: card information verification unit 210: authentication performing unit
220: database

Claims (5)

A communication network configured to receive card information on the USIM or payment card in the SIM card and authentication information granted for authentication of the payment card, which the mobile communication terminal equipped with the USIM or SIM card provides when requesting payment according to a product purchase;
A mall server that determines whether to perform authentication with the mobile communication terminal by using the card information provided by the communication network, makes an authentication request according to a determination result of whether the authentication is performed, and receives an authentication result for the authentication; And
Providing an access control server for determining whether to perform the authentication, generating an authentication result by performing authentication with the mobile communication terminal according to the authentication request, and providing the authentication result to the mall server;
Authentication service device for a mobile communication terminal comprising a. The method of claim 1,
The card information includes a part or all of the card number, expiration date and CVC number of the credit card, and the authentication information includes some or all of the numbers and letters that are given when you subscribe to the secure click service for the payment card Authentication service device for a mobile communication terminal. Storing card information on the payment card in the USIM or the SIM card and authentication information for authentication on the payment card, respectively, as a comparison value so that payment can be made according to the purchase of a product of the mobile communication terminal equipped with the USIM or SIM card. Database;
Card information provided from the mobile communication terminal to receive the card information provided in the payment request according to the purchase of the product, compare with the comparison value, determine the validity of the payment card, and provides a response to the mall server to the mall server Verification unit; And
An authentication performing unit configured to receive an authentication request provided according to the response, perform authentication with the mobile communication terminal, and provide an authentication result for the authentication to the mall server
Access control server comprising a. Receiving card information on a payment card in the USIM or SIM card provided when a payment request is made according to a purchase of a product of a mobile communication terminal equipped with a USIM or SIM card;
Requesting confirmation of the received card information, receiving a response to the confirmation request, and requesting to perform authentication with the mobile communication terminal according to a result of the response; And
Receiving an authentication result according to performing authentication with the mobile communication terminal, and receiving the approval of the payment according to the purchase of the product according to the authentication result to terminate the payment process;
Authentication service method for a mobile communication terminal comprising a. Receiving card information on a payment card registered in a USIM or SIM card by driving an application for performing payment authentication according to a product purchase of a mobile communication terminal;
Verifying validity of the payment card using the card information; And
When the validity of the payment card is verified, verifying the validity of the authentication information by receiving authentication information provided for payment of the product purchase from the mobile communication terminal; And
If the validity of the authentication information is verified, registering the authentication information so that the mobile communication terminal performs the payment of the purchase of the product using the authentication information.
Authentication information registration method of a mobile communication terminal comprising a.

Images