KR20130084727A - Method for providing services of user identification processing - Google Patents

Abstract

PURPOSE: A user identification service providing method is provided to identify users without using a resident registration number in a user identification process and a personal authentication process online. CONSTITUTION: An authentication server receives the result of identification requested by a system (S103). If the provided information is coincided with the registered information, the authentication server determines as user identification success in respect to a corresponding user (S106). If the provided information is not coincided with the registered information, the authentication server determines as user identification failure in respect to a corresponding user (S108). If the final user identification success is determined, the authentication server generates a unique key in which a cell phone number and the identification information are assembled. The authentication server transmits the generated unique key to a node which requested the user identification. [Reference numerals] (AA) Start; (BB) End; (S100) Receive a user identification request signal; (S101) Extract user identification information (Cell phone number + Name); (S102) Request personal identification to a communication service provider; (S103) Receive the result of personal identification; (S104) Examine the identification of a user; (S105) Corresponded?; (S106) User identification success; (S107) Transmit a success message; (S108) User identification failure; (S109) Transmit a failure message

Description

Method for providing services of user identification processing

The present invention relates to a user identification processing technology online, and more particularly, to a method for providing a user identification and identity authentication processing service in conjunction with a mobile communication system.

Recently, as the use of credit information increases, the management of individual credit information becomes important. Such personal credit information is used in a wide range of fields, from simple daily life to economic life through financial institutions. Social security numbers, names and cell phone numbers that help identify individuals are often used online to provide anonymity. For example, in order to join a website as a member, a name and resident registration number are entered to go through a real name verification process, and financial institutions require a resident registration number and a name for the purpose of searching a user's credit information online. Therefore, simply knowing the individual's social security number and name, there is a problem that you can freely access the credit information that is important for economic life.

Among them, the resident registration number is most commonly used for user identification, identity verification, real name authentication, identity verification, and user authentication. That is, as described above, when using the online service, it is currently inevitable to use the social security number. This type of online service requires frequent input of personal information, and the hacking and spoofing of personal information (especially, resident registration number) is continuously increasing. Therefore, in order to prevent hacking and leakage damage, many service providers recently perform a complicated and cumbersome authentication procedure and security processing, and perform identification and authentication of users. Adding or implementing these complex procedures would require additional system changes and complex authentication procedures, increasing the cost and administrative burden of operating these procedures in the authentication system.

In addition, due to the recent legal restrictions on the use of personal information (resident numbers) on / offline in connection with the enactment of the Personal Information Protection Act, developments have been actively made on ways to identify a person without a social security number. In other words, as it becomes difficult to use the user identification or identity verification process using the social security number, there is a need for a change in other alternatives or authentication means that can perform user identification and identity verification.

The present invention has been made to solve the above problems, and an object thereof is to provide a method for performing user identification processing without using a social security number during online user identification and identity authentication processing.

Other objects and advantages of the invention will be described below and will be appreciated by the embodiments of the invention. Further, objects and advantages of the present invention can be realized by the means and the combination shown in the appended claims.

In order to achieve the above object, the method for providing a user identification processing service according to the present invention is a method for providing a user identification and identity authentication processing service in conjunction with a mobile communication system online, (a) in the authentication server, Receiving a user identification request signal including a user's mobile phone number and identification information; (b) the authentication server, transmitting the mobile phone number and the identification information of the user to the linked communication company system, and requesting identity verification whether the mobile phone number and the identification information registered in the communication company system match; (c) If the authentication server receives the identity verification result information according to the request from the telecommunication company system and matches the registered information, the authentication server judges that the user identification is successful for the user, and if it does not match the registered information, Determining that a user identification failed for; And (d) generating, by the authentication server, a unique key combining the mobile phone number and the identification information of the corresponding user, if it is determined that the user has finally succeeded in identifying the user, and delivering the unique key to the user identification requesting node.

According to another aspect of the present invention, there is provided a method of providing a user identification and authentication processing service in cooperation with a mobile communication system on-line, the method comprising the steps of: (a) ; (b) the authentication server, transmitting the mobile phone number and the identification information of the user to the linked communication company system, and requesting identity verification whether the mobile phone number and the identification information registered in the communication company system match; (c) The authentication server receives the identity verification result from the communication company system, determines whether the identity verification is successful, generates an authentication number for authentication of the user when the identity verification is successful for the user, Sending a number; (d) The authentication server requests the user to input the number of the input place corresponding to the mobile phone authentication code of the user registered in advance among the transmitted approval numbers; And (e) the authentication server compares the number input from the user with the number corresponding to the input place of the mobile phone authentication code registered in the corresponding user from the generated approval number to check whether they match or not, And determining that the user identification process is successful.

According to the present invention, when the user identification process online, by using the mobile phone number and identification information without the use of the social security number in conjunction with the mobile communication company system by performing the user identification process, provides the effect of personal information protection and identification by a simple procedure Processing can be performed, providing the effect of reducing costs and administrative burdens.

In addition, the user authentication process through the mobile phone number and identification information in conjunction with the mobile carrier system on the online, the authentication number processing through the authentication code input and authentication code verification process through the authentication code SMS registration and the entry number registered By doing so, it provides the effect of performing secure authentication with enhanced security while preventing theft of identity theft.

BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate preferred embodiments of the invention and, together with the description of the invention below, And should not be construed as limiting.
1 is a diagram illustrating a configuration of a system in which a method for providing a user identification processing service according to an embodiment of the present invention is implemented.
2 is a diagram illustrating a configuration of an authentication server on which a method for providing a user identification processing service according to an embodiment of the present invention is performed.
3 is a diagram illustrating a configuration of an authentication server on which a method for providing a user identification processing service according to another embodiment of the present invention is performed.
4 is a view showing an example of a mobile phone authentication code used in the method for providing a user identification processing service according to the present invention.
5 is a flowchart illustrating a procedure of a method for providing a user identification processing service according to an embodiment of the present invention.
6 is a signal flow diagram illustrating a procedure of a method for providing a user identification processing service according to another embodiment of the present invention for each node.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. Prior to this, terms and words used in the present specification and claims should not be construed as limited to ordinary or dictionary terms, and the inventor should appropriately interpret the concepts of the terms appropriately It should be interpreted in accordance with the meaning and concept consistent with the technical idea of the present invention based on the principle that it can be defined. Therefore, the embodiments described in this specification and the configurations shown in the drawings are merely the most preferred embodiments of the present invention and do not represent all the technical ideas of the present invention. Therefore, It is to be understood that equivalents and modifications are possible.

1 is a diagram illustrating a configuration of a system in which a method for providing a user identification processing service according to an embodiment of the present invention is implemented.

Referring to FIG. 1, a system in which the present invention is implemented includes an authentication server 100 that performs user identification and identity authentication, a telecommunication company system 200 that provides a user service of a communication service subscriber, and provides various services and users. The member server server 300 for requesting user identification processing, the user 400 performing service use through the member company server 300 and user identification and identity authentication using a mobile phone, and a communication network connecting them to the communication network and the user 400 It consists of a mobile communication network for providing a mobile communication service through a mobile phone.

First, the authentication server 100 is a service server that performs user identification and identity authentication without a social security number according to the present invention. The authentication server 100 is connected to the communication network and connected to the user 400 through the member company server 300 or the user terminal, receives a user identification service request from them to perform the user identification process and identity authentication process. In addition, the authentication server 100 uses the identity verification process through the mobile phone number and identification information when performing the user identification process in conjunction with the communication company system 200. In addition, the user may register the mobile phone authentication code, and transmits the approval number when the user authenticates, receive a number of the input digit corresponding to the authentication code and compare the information with the registered information to perform the process of authentication.

A more detailed description of the authentication server 100 and a description of various embodiments will be described later with reference to additional drawings.

The telecommunication company system 200 provides a mobile communication service through a mobile communication network, and provides an identification service through a mobile phone number and identification information in connection with the authentication server 100 based on information of users subscribed to the communication service. do. The communication company system 200 may exist in plurality according to a subject providing the communication service.

The member company server 300 is a service server that provides various services to users. The member company server 300 requests the authentication server 100 to perform a user identification process and a user authentication process for the user at the time of providing a service to a user or during a member registration process for providing a service of the user. That is, when providing a service and registering a member, real name authentication and identification of the user are required for the corresponding user, and the agent is acted on through the authentication server 100. Accordingly, the member company server 300 transmits a user identification service request message to the authentication server 100 when user identification processing is required to perform identification or authentication processing for the corresponding user.

The user 400 is an individual who receives various services by accessing the member company server 300 through a communication network and subscribes to a communication service and owns a mobile phone. The user 400 responds to a user identification process and an identity authentication process through the authentication server 100 according to a request from the member company server 300. Alternatively, the user 400 may access the direct authentication server 100 to request and respond to services such as direct user identification processing and identity authentication processing. In addition, the user 400 may receive a communication service through a mobile communication network through his own mobile phone, and receives the approval number SMS sent from the authentication server 100.

2 is a diagram illustrating a configuration of an authentication server on which a method for providing a user identification processing service according to an embodiment of the present invention is performed.

2, the authentication server 100 according to the present invention includes a request receiving module 110, a carrier identification module 120, a user identification determination module 130, a message processing module 140 and the like.

First, the authentication server 100 in which the user identification processing service providing method according to an embodiment of the present invention is performed provides a service for performing the identity verification process of a target user without using a social security number. That is, the mobile phone number and identification information of the target user serves to confirm whether or not the user.

The request receiving module 110 receives a user identification service request signal directly from a member company server or a user. The request receiving module 110 includes a service request receiving unit 112, an identification information input processing unit 114, an identification request processing unit 116, and the like.

The service request receiving unit 112 performs a role of receiving a user identification service request signal from an external node connected through a communication network. The external node includes a member company server or a user terminal. The service request receiving unit 112 receives the user identification request signal to recognize the request of the user identification service.

The identification information input processing unit 114 performs a role of requesting input of user identification information required for user identification processing to a node that has requested a user identification service and receiving corresponding information. As the user identification information, a mobile phone number, a name, a date of birth, and a gender of a user to be identified are used. The identification information input processing unit 114 provides an information input interface for inputting necessary information. The information input interface may be a pop-up window as an example. In addition, the information input interface may be provided directly to the user terminal or may be provided through a member company server.

The identification request processing unit 116 processes the received final identification request signal based on the received user identification information. That is, the reception processing of the user identification processing request signal including the mobile phone number and the identification information for the user of the user identification processing target is performed.

The communication company identity verification module 120 performs a user identification process of the user identification processing target user through the linked communication company system. That is, when the user identification request is received by the request receiving module 110, the user identification process is performed through the linked communication company. The communication company identity module 120 includes a communication company interworking unit 122, an information transmitting unit 124, and a result receiving unit 126.

The telecommunication company interworking unit 122 serves to determine a telecommunication company of the corresponding user with reference to the mobile phone number of the target user and prepare for an identity verification process with the corresponding telecommunication company system. That is, among the interworking telecommunication company systems, the telecommunication company of the target user is determined to prepare for authentication.

The information transmitter 124 transmits the mobile phone number and the identification information of the target user provided when the identification request signal is received to the telecommunication company system prepared for authentication, and requests the identity verification process. In addition, the information transmitting unit 124 selectively transmits the name, date of birth, and gender information of the user identification information received through the request receiving module 110 to the communication company system to match the information registered in the communication company system. You can ask. That is, the name, date of birth, and gender may be selectively used to perform identity verification processing of the telecommunication company system.

The result receiving unit 126 serves to receive the result information according to the identity verification processing request from the corresponding communication company system. The identity verification result information includes information on whether the transmitted mobile phone number and identification information match the mobile phone number and identification information registered in the telecommunication company system.

The user identification determination module 130 determines whether to identify the user for the user based on the identification result information through the communication company system. That is, it is determined whether the user identification (identification of identity) succeeds or fails. The user identification determination module 130 includes a result analysis unit 132, an identification determination unit 134, and the like.

The result analysis unit 132 analyzes the identity verification result information received through the communication company identity verification module 120 to extract information on whether the mobile phone number and identification information match.

The identification determiner 134 determines whether the user is identified based on the information analyzed by the result analyzer 132. Here, the user identification is a process of confirming whether or not the identification information of the user who is the object of the identification processing is the person. That is, in the past, the credit rating agency determined the real name of the name on the basis of the social security number, but the present invention determines the identity of the user based on the mobile phone number and identification information of the user name. If the identification determination unit 134 determines that the mobile phone number and the identification information match the information registered in the communication company system in the identification result information, the identification determination unit 134 determines that the user identification is successful, and if it does not match, the user identification failure is determined. .

The message processing module 140 processes a response message according to a user identification service request. That is, information on whether the user identification succeeds or fails as a result of the user identification processing is generated as a response message to be transmitted to the node that requested the identification service. The message processing module 140 includes a message generator 142, a message transmitter 144, and the like.

The message generator 142 serves to generate, as an identification confirmation information message, information on whether the identification succeeded by the user identification determination module 130. That is, in the case of identification success, identification success guide message is generated, and in case of identification failure, identification failure guide message is generated. In addition, the message generator 142 may generate a unique key combining the mobile phone number and the identification information of the corresponding user when it is determined that the identification is successful.

The message transmitter 144 transmits the identification confirmation information message generated by the message generator 142 to the node requesting the user identification service as a response message. That is, when a user identification service is requested from a member company server, a response message is transmitted to the corresponding member company server. The member company server receives the response message, so that the identification result of the user can be confirmed, and the subsequent procedure is performed according to the result. In addition, when the identification success is determined, the response message may be transmitted including the unique key generated by the message generator 142.

3 is a diagram illustrating a configuration of an authentication server on which a method for providing a user identification processing service according to another embodiment of the present invention is performed.

Referring to FIG. 3, the authentication server 100 ′ according to another embodiment of the present invention may include an authentication request receiving module 101, an identity verification module 102, an identity authentication module 103, and an authentication result processing module 104. And the like.

First, the authentication server 100 ′ in which the method for providing a user identification processing service according to another embodiment of the present invention is performed provides a service for performing identity verification and identity verification of a target user without using a social security number. That is, the mobile phone number and identification information of the target user plays a role of simultaneously verifying and authenticating the real name of the user and whether or not.

The authentication request receiving module 101 receives a user authentication request signal including a mobile phone number and identification information of a user name. Here, the user authentication means identifying and authenticating both the identity of the target user and the identity of the user. In addition, the information received here may be used after the automatic correction process through a purification procedure. That is, it is possible to use a more accurate information by performing a correction process such as correction of the wrong input of the mobile phone number and identification information, removal of spaces, removal of special characters and symbols, digit designation processing.

The identity verification module 102 is a module that performs identity verification processing that is performed first according to a user authentication request. The identity verification module 102 requests identity verification by transmitting the mobile phone number and identification information of the target user through an interoperable communication company system, and confirms the identity of the target user through the result information provided as the identity verification result. At this time, if the mobile phone number and identification information match the registered information in the result information, it is determined that the identity is confirmed.

The identity verification module 103 performs a process of confirming whether or not the identity of the target user is confirmed when the identity is verified through the identity verification module 102. The identity authentication module 103 first checks whether the target user has registered the mobile phone authentication code, and if not, induces the registration process. The mobile phone authentication code is information of an input digit designated or promised by the user. This input position may be designated or promised in one or more plural. For example, when a user registers a mobile phone authentication code by designating or promising '1', '2', '4', or '8' as an input digit, the user receives an authorization number to be described later, and a number for authentication confirmation. When entering, enter the 1st, 2nd, 4th, and 8th digits of the authorization number. Here, the approval number is given as an eight-digit number, and the input digit is given as an example of a four-digit number.

4 is a view showing an example of a mobile phone authentication code used in the method for providing a user identification processing service according to the present invention. Referring to the drawing, the target user's mobile phone number is '010-1234-5678', and the user's authentication code has four input digits, and as in the above example, '1', '2', '4' , '8' is specified as the input digit. Such a mobile phone authentication code can allow a user to register, and can be modified and changed. In addition, the registered mobile phone authentication code is stored and managed in the authentication server 100 ', and used to compare or not according to the user's approval number input.

Subsequently, when the identity authentication module 103 is registered by checking whether the mobile phone authentication code is registered, the identity authentication module 103 generates an approval number for identity authentication and performs a process of sending it to the mobile phone of the target user through the mobile communication network. Here, the approval number is randomly generated, it is generated in the form of a combination of letters and numbers. In addition, the total number of digits of the approval number can be applied in various ways, it is assumed in the example of the present invention to generate an eight-digit approval number.

When the approval number is generated and sent to the target user by SMS, the target user receives it and extracts and inputs the corresponding input digit number from the received approval number according to the authentication code registered by the user. When a number is received from the user, the generated approval number is compared with the input digits of the user's mobile phone authentication code, and then checked for a match. If the authorization numbers match, it is determined that the user's identity is successful. In addition, the identity authentication module 103 provides a user interface for entering the approval number sent. That is, by providing an input interface such as a pop-up window directly to the member company server or the user terminal, the user is prompted to enter and transmit the approval number.

Alternatively, as another example, an authorization number is generated and sent to the target user by SMS, and the user inputs the authorization number after confirming the information by providing information of an input digit to be entered in the authorization number input interface (input pop-up window) of the user. You can enter the number corresponding to the digit. That is, the information of the input digit registered in the mobile phone authentication code of the corresponding user may be provided to the corresponding user, so that the corresponding digit number may be input through the input of the approval number.

The authentication result processing module 104 determines that the user authentication is successful when both the identity verification and identity authentication through the identity verification module 102 and the identity authentication module 103, and the user authentication result information as a message It performs the role provided to the member company or user. Here, it is possible to determine that the user authentication is successful only if both the identity verification and identity authentication is successful, or if only one of the two successes can be determined to be a partial success. Alternatively, if either fails, it can be determined that the user authentication failed.

In addition, the user authentication result information is generated as a message and then transmitted to a member company or a user, and the user authentication success or user authentication information is generated and transmitted as a message. Alternatively, in the case of applying partial authentication, the result information may be transmitted in a message for each authentication process. That is, it is possible to individually provide the processing result information of each of the identity verification and identity verification.

5 is a flowchart illustrating a procedure of a method for providing a user identification processing service according to an embodiment of the present invention.

Hereinafter, a procedure of a method for providing a user identification processing service according to an embodiment of the present invention will be described with reference to FIG. 5.

First, as shown in the figure, the authentication server receives a user identification request signal. In this case, the user identification request signal may be directly received from the member company server or the user. In addition, the user identification request signal includes a mobile phone number and identification information of the user to be identified (S100).

After receiving the request signal, a procedure of extracting user identification information included in the request signal is performed. The user identification information is information for identifying and processing the target user, and includes the above-mentioned mobile phone number, name, date of birth, and gender information. Here, the social security number of the target user is not included in the identification processing according to the present invention. (S101)

On the basis of the extracted user identification information, the authentication server requests the identity verification processing from the linked telecommunication company system to request the identity verification. At this time, the information transmitted to the communication company system includes the mobile phone number and identification information of the target user. (S102)

Next, in the authentication server, a procedure for receiving identity verification result information, which is a request result from the telecommunication company system, is performed. The identity verification result information includes information on whether the requested mobile phone number and identification information match the information registered in the telecommunications company. (S103)

At the same time, the authentication server determines whether or not the user is identified based on the received identification information. That is, if it is determined that the identification of the mobile phone number and identification information registered in the carrier system after the analysis of the identity verification information is matched, it is determined that the identification information and the mobile phone number match, and if it is determined that they do not match, Since the identification information is not confirmed, it is determined that the identification information and the mobile phone number do not match. (S104, S105)

In the authentication server, when it is determined that the principal matches, a procedure for determining that the user identification processing is successful is performed. (S106)

If the user identification is successful, a user identification success confirmation message is generated and transmitted to the node that has requested the user identification and responds. In this case, a procedure of generating a unique key combining the user's mobile phone number and the identification information and transmitting the generated unique key may be included.

On the other hand, if the determination does not coincide with the user, a procedure for determining that the user identification processing has failed is performed (S108).

If the user identification fails, a process of generating a user identification failure confirmation message, transmitting the user identification request to the node for which the user identification is requested, and responding is performed (S109).

Through such a procedure, the authentication server may determine whether the user of the target user according to the user identification request is provided and provide a user verification and authentication process of the user's identity easily and quickly without using the social security number.

6 is a signal flow diagram illustrating a procedure of a method for providing a user identification processing service according to another embodiment of the present invention for each node.

Hereinafter, a procedure of a method for providing a user identification processing service according to another embodiment of the present invention will be described with reference to FIG. 6.

First, as shown in the figure, a user requests a service use by accessing a member company server through a user terminal.

Since the member company server requires user authentication of the corresponding user in order to provide the requested service, the member company server accesses an authentication server providing the user authentication service and requests user authentication for the target user. At this time, the user authentication request is made including the mobile phone number and identification information of the target user name. Of course, the mobile phone number and identification information of the target user to be provided from the user.

In addition, the authentication server may proceed with the procedure of verifying the data of the user authentication request information provided from the member company server. That is, the request information is automatically refined (filtered) in order to remove unnecessary correction and input procedures due to incorrect input of the request information.

The authentication server receives a user authentication request from a member company server, and confirms whether the target user's mobile phone authentication code is registered. At this time, the mobile phone number is checked whether the target user's mobile phone authentication code registration. In other words, it is checked whether an authentication code corresponding to the mobile phone number is set and whether registration is made. If the verification code is not registered, proceed with the user and mobile phone verification code registration procedure. In this embodiment, it is assumed that an example of using an 8-digit approval number and setting and registering an authentication code with a 4-digit input digit is registered. (3)

The authentication server first confirms that the cellular phone authentication code has been registered or after the cellular phone authentication code registration processing is performed, and firstly performs the identity verification process for the target user. In other words, the identity verification request is requested by transmitting the identity verification request signal including the mobile phone number and the identification information of the target user to the communication service provider system.

The communication company system performs the identity verification process according to the identity verification process request, and then transmits the identity verification result information to the authentication server. The identity verification result information at this time includes information on whether the mobile phone number and the identification information of the target user match the information registered in the telecommunication company system.

The authentication server receives the identity verification result information and analyzes it to determine whether the subject user is verified. As a result of the determination, if the identity is not verified, a identity verification failure message is generated and transmitted to the server of the member company which requested the user authentication.

On the other hand, if the identity is confirmed by the authentication server as a result of identity verification, the process of identity verification for the target user second. That is, to generate the authorization number to be sent to the target user's mobile phone. In this case, an 8-digit approval number is generated as assumed in this embodiment, and a random number is generated through a random combination of letters and numbers.

When the authorization number is generated, the authentication server sends the authorization number generated by the mobile phone of the user based on the mobile phone number of the target user by SMS. The SMS sent at this time includes an 8-digit authorization number.

The user receives the approval number through the user terminal (cellular phone), confirms the registered mobile phone authentication code, and confirms the number corresponding to the input location. In this embodiment, since it is assumed that the 4-digit input digit is set, the 4-digit number set and promised by the user is checked among the 8-digit approval numbers.

The user inputs the 4-digit number corresponding to the 4-digit position of the input digit of the authentication code confirmed from the received approval number, and transmits it to the authentication server. In this case, after entering the number using the approval number input interface provided by the member company server to transmit. As another example, the approval number may be inputted to the SMS received through the user's mobile phone in the form of a callback message, and may be directly transmitted to the authentication server. (10)

The authentication server receives the 4-digit authorization number input by the user, and compares the authorization code registered with the user with the generated authorization number. That is, check the input digit of the authentication code of the user, extract the 4-digit number of the corresponding input digits from the generated approval number, and compare with the 4-digit number entered and transmitted by the user.

If there is a match, it can be determined that the user has confirmed that he / she is in possession of his / her mobile phone. If not, the user can be determined that there is an error in entering the user's number or that the mobile phone has been stolen. have. As such, when the comparison of the authorization numbers does not match or the authorization number is not input, it is determined that the identity verification has failed, and a identity verification failure message is generated and transmitted to the member company server.

On the other hand, if the authentication server is matched with the result of the authorization number, it is determined that the identity verification is successful. In addition, the authentication server determines that the user authentication is successful as both identity verification and identity verification succeeds, and generates and transmits a user authentication success message to the member company server that requested user authentication.

In the authentication server, all of the user authentication processing is completed through this procedure.

In addition, as in this embodiment, instead of using the user's social security number for the user authentication service, using only the mobile phone number and identification information, it is possible to fundamentally block the risk of leaking social security numbers. Furthermore, by sending the approval number via SMS, and entering only the number of the input digit according to the pre-registered mobile phone authentication code, and comparing it to verify the identity of the user, it is easy to perform identity verification and identity verification process while strengthening security Can be.

The method of the present invention as described above may be embodied as a program and stored in a computer-readable recording medium (such as a CD-ROM, a RAM, a ROM, a floppy disk, a hard disk, or a magneto-optical disk).

While the specification contains many features, such features should not be construed as limiting the scope of the invention or the scope of the claims. In addition, the features described in the individual embodiments herein may be combined and implemented in a single embodiment. Conversely, various features described herein in a single embodiment may be implemented in various embodiments individually or in a suitable subcombination.

It is to be understood that, although the operations have been described in a particular order in the figures, it should be understood that such operations are performed in a particular order as shown, or that a series of sequential orders, or all described operations, . In some circumstances, multitasking and parallel processing may be advantageous. It should also be understood that the division of various system components in the above embodiments does not require such distinction in all embodiments. The above-described program components and systems can generally be implemented as a single software product or as a package in multiple software products.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention. The present invention is not limited to the drawings.

100: authentication server 200: communication company system
300: member company server 400: user

Claims (13)

As a method of providing a user identification and identity authentication service in connection with a mobile communication system online,
(a) receiving, at the authentication server, a user identification request signal including a user's mobile number and identification information;
(b) the authentication server, transmitting the mobile phone number and the identification information of the user to the linked communication company system, and requesting identity verification whether the mobile phone number and the identification information registered in the communication company system match;
(c) If the authentication server receives the identity verification result information from the communication company system and matches the registered information, the authentication server determines that the user identification is successful for the user. If the authentication server does not match the registered information, Determining that the user identification has failed; And
and (d) generating, by the authentication server, a unique key that combines the mobile phone number and the identification information of the user, and transmits the unique key to the user identification requesting node when determining that the user has finally succeeded in identifying the user. How to Provide. The method of claim 1,
The identification information includes any one of a name, date of birth, and gender information, or a combination thereof.
And the authentication server selectively transmits the information included in the identification information to the communication company system to request identity verification. The method of claim 1,
The step (a)
A user identification processing service providing method comprising receiving a user identification request signal directly from a user or from a member company server. The method of claim 1,
The step (a)
(1) receiving, at the authentication server, an identification service request for a particular user;
(2) the authentication server, requesting input of a mobile phone number and identification information of the corresponding user for user identification processing according to the request; And
And (3) receiving, at the authentication server, a user's mobile number and identification information, and receiving a user identification request signal. The method of claim 1,
After step (c),
The authentication server, the user identification processing service providing method further comprises the step of generating and transmitting a user identification confirmation information of whether the user identification success or failure in response to the user identification request. As a method of providing a user identification and identity authentication service in connection with a mobile communication system online,
(a) receiving, in an authentication server, a user authentication request signal including a user's mobile phone number and identification information;
(b) the authentication server, transmitting the mobile phone number and the identification information of the user to the linked communication company system, and requesting identity verification whether the mobile phone number and the identification information registered in the communication company system match;
(c) The authentication server receives the identity verification result from the communication company system, determines whether the identity verification is successful, generates an authentication number for authentication of the user when the identity verification is successful for the user, Sending a number;
(d) The authentication server requests the user to input the number of the input place corresponding to the mobile phone authentication code of the user registered in advance among the transmitted approval numbers; And
(e) The authentication server compares the number inputted from the user with the number corresponding to the input place of the mobile phone authentication code registered in the corresponding user from the generated approval number and confirms whether or not they match. If the authentication is successful, And determining that the user identification processing service is available. The method according to claim 6,
When the authentication process is performed, it is checked whether or not the mobile phone authentication code is registered based on the mobile phone number of the user to be authenticated. If it is confirmed that the mobile phone authentication code is not registered, Wherein the user identification processing service providing method comprises: The method of claim 7, wherein
Wherein at least one input location is registered in the input location registered in the mobile phone authentication code. The method according to claim 6,
After the step (e)
(f) The authentication server further comprises generating and transmitting user authentication result information indicating whether the user authentication succeeded or failed in response to the user authentication request, as a message. The method according to claim 6,
Wherein the approval number is randomly generated within a predetermined number of digits. The method according to claim 6,
The step (d)
Providing input position information corresponding to a mobile phone authentication code of a user registered in advance and requesting the user to input a number corresponding to the input position. The method according to claim 6,
Wherein the approval number is a string consisting of a combination of numbers and letters. The method according to claim 6,
Wherein the information included in the user authentication request signal is used after automatic correction processing through a refinement procedure.

Images