KR20130107188A - Server and method for authentication using sound code - Google Patents

Abstract

PURPOSE: An authentication server using a sound code and an authentication method thereof are provided to ensure safety from keyboard hooking by removing the necessity for inputting an ID and a password. CONSTITUTION: An authentication server (100) includes an authentication key generator (110), an authentication key transmitter (120), an authentication confirm key receiver (130), an approving unit (140), and an approval processor (150). The authentication key generator generates an authentication key having a sound form. The authentication key transmitter transmits the generated authentication key to a service providing server. The authentication confirm key receiver receives an authentication confirm key from a terminal for authentication. The approving unit determines whether to approve authentication or not by determining whether the authentication confirm key corresponds to the authentication key or not. According to the determination result, the approval processor transmits authentication approval information to the service providing server. [Reference numerals] (110) Authentication key generator; (120) Authentication key transmitter; (130) Authentication confirm key receiver; (140) Approving unit; (150) Approval processor

Description

Authentication server and authentication method using sound code {SERVER AND METHOD FOR AUTHENTICATION USING SOUND CODE}

The present invention relates to a sound code authentication server and an authentication method, and more particularly, to a sound code authentication server and an authentication method in which a user is authenticated and can be paid in an electronic terminal connected to an authentication server.

In general, online user authentication is performed by entering an ID and password in a user terminal. The ID and password entered in the terminal are transmitted to the authentication system, and the authentication system authenticates the user by determining whether the input ID and password match the ID and password stored in the database. This ID-password authentication method is used in most online sites because of the simplicity of the authentication process.

However, this ID-password authentication method has a disadvantage in that it is vulnerable to hacking of the user terminal. For example, a hacker can find out the user's ID and password by breaking into the user terminal and intercepting the keyboard input of the user terminal. In addition, many users don't periodically change their username and password, and because many online sites use the same username and password, it's important to know that if one user's username and password is compromised, the other one is the same. And additional damage that exposes the password.

The risk of the authentication method of the ID-password input method is widely known through various damage cases. Accordingly, financial transaction sites such as banks and credit card companies, which are very sensitive to ID-password exposure, require the installation of a keyboard hook prevention program, and in addition, it recommends the use of an accredited certificate and OTP (One time password). . However, in order to use the authentication method using the public certificate and the OTP, the user has to carry the public certificate and the OTP generator, which is cumbersome to use.

In addition, the use of public certificates and OTP generators does not fundamentally block keyboard hooking, so the possibility of hacking remains.

SUMMARY OF THE INVENTION An object of the present invention is to provide a sound code authentication server and an authentication method secured from keyboard hooking since there is no need to enter an ID and password.

Another problem to be solved by the present invention is to provide a sound code authentication server and an authentication method capable of safe and simple user authentication.

It is another object of the present invention to provide a sound code authentication server and an authentication method in which an authentication server provides authentication of each user terminal user to at least two service providing servers, so that each service providing server can be free from the risk of authentication error. will be.

It is still another object of the present invention to provide a sound code authentication server and an authentication method capable of minimizing resources for authentication by clearly separating the roles of the service providing server and the authentication server.

It is still another object of the present invention to provide a sound code authentication server and an authentication method capable of selecting a user identifier to be authenticated among a plurality of user identifiers associated with an authentication terminal.

Another object of the present invention is to provide an authentication server for providing authentication to the service providing server as an independent web service to provide a sound code authentication server and authentication method that can be easily interworked with any kind or type of service providing server. will be.

As a technical means for achieving the above technical problem, the sound code authentication system according to the first aspect of the present invention, the authentication key generation unit for generating an authentication key in the form of a sound containing data, and the service providing server to generate the An authentication key transmission unit for transmitting the authenticated authentication key, an authentication confirmation key receiving unit for receiving an authentication confirmation key from the authentication terminal, and an approval unit for determining whether to approve by determining whether the authentication confirmation key corresponds to the authentication key. And an approval processing unit which transmits authentication approval information to the service providing server according to the approval decision.

The authentication method using the sound code according to the second aspect of the present invention, in the authentication method of the authentication server connected to the service providing server and the authentication terminal, performed by the authentication server, (a) sound form containing data Generating an authentication key of (b) transmitting the authentication key to a service providing server, (c) receiving an authentication confirmation key from an authentication terminal, and (d) the authentication confirmation key is Determining whether it corresponds to an authentication key, and (e) transmitting authentication approval information according to the determination result to the service providing server.

According to one embodiment of the present invention having the above configuration, it is not necessary to enter the ID and password can be safe from keyboard hooking.

In addition, according to an embodiment of the present invention, it is possible to securely and simply user authentication.

Further, according to an embodiment of the present invention, the authentication server provides authentication of each user terminal user to at least two service providing servers, so that each service providing server can be free from the risk of authentication error.

In addition, according to an embodiment of the present invention, by clearly separating the roles of the service providing server and the authentication server, the service providing server may minimize resources for authentication.

In addition, according to an embodiment of the present invention, it is possible to select a user identifier to be authenticated from among a plurality of user identifiers associated with the authentication terminal.

In addition, according to an embodiment of the present invention, by providing an authentication server for providing authentication to the service providing server as an independent web service can be easily linked to any kind or type of service providing server.

1 is a view schematically showing a sound code authentication system according to a first embodiment of the present invention.
2 is a functional block diagram showing an authentication server of a sound code authentication system according to a first embodiment of the present invention.
3 is a flowchart illustrating a sound code authentication method according to a first embodiment of the present invention.
4 is a diagram schematically illustrating a sound code authentication system according to a second embodiment of the present invention.
5 is a flowchart illustrating a sound code authentication method according to a second embodiment of the present invention.
6 is a diagram schematically showing a sound code authentication system according to a third embodiment of the present invention.
7 is a flowchart illustrating a sound code authentication method according to a third embodiment of the present invention.
8 is a diagram schematically illustrating a sound code authentication system according to a fourth embodiment of the present invention.
9 is a diagram schematically illustrating a sound code authentication system according to a fifth embodiment of the present invention.
10 is a block diagram showing a configuration of an authentication server in a sound code authentication system according to a fifth embodiment of the present invention.
11A and 11B illustrate examples of a sound code authentication method according to a fifth embodiment of the present invention.
12 is a flowchart illustrating a sound code authentication method according to a sixth embodiment of the present invention.
13 is a flowchart illustrating a sound code authentication method according to a seventh embodiment of the present invention.
14 is a flowchart illustrating a sound code authentication method according to an eighth embodiment of the present invention.

Advantages and features of the present invention and methods for achieving them will be apparent with reference to the embodiments described below in detail with the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. To fully disclose the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout. Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Hereinafter, a first embodiment of the present invention will be described with reference to Figs. 1 to 3. Fig.

1 is a view schematically showing a sound code authentication system according to a first embodiment of the present invention, Figure 2 is a functional block diagram showing an authentication server of the sound code authentication system according to a first embodiment of the present invention. 3 is a flowchart illustrating a sound code authentication method according to a first embodiment of the present invention.

The sound code authentication system according to the first embodiment of the present invention includes an authentication server 100, a service providing server 200, a client terminal 400 and the authentication terminal 500. The authentication server 100 is wired or wirelessly connected to the service providing server 200 and the authentication terminal 500 to transmit and receive data, and an authentication key generation unit 110 to generate an authentication key, and the service providing server 200. Authentication key transmission unit 120 for transmitting the authentication key generated by the authentication, authentication confirmation key receiving unit 130 for receiving the authentication confirmation key from the authentication terminal 500, the approval to determine whether the authentication confirmation key and the authentication key correspond to The unit 140 and the approval processing unit 150 for transmitting the authentication approval information to the service providing server 200.

The service providing server 200 is a server that forms a user authentication session in the client terminal 400 and provides a service. For example, the service providing server 200 may be a game server. However, it is apparent to those skilled in the art that the service providing server of the present invention is not limited thereto, and may be applied to any type of server that provides a service requiring user authentication, such as an online banking server, an online shopping mall server, a portal service providing server, and the like. .

The client terminal 400 is a terminal that communicates with the service providing server 200 and enables the user to use a service provided by the service providing server 200. In this embodiment, For example. However, the client terminal of the present invention can be applied to any type of terminal that receives a service through user authentication from a service providing server 200 such as a laptop computer, a mobile phone, a PDA, a smart phone, a smart TV, as well as a PC.

Authentication terminal 500 is a terminal capable of data communication with the authentication server 100 is separated from the client terminal 400, the authentication terminal 500 in the present embodiment will be described by way of example as a smartphone will be. However, the authentication terminal of the present invention can be applied to any type of terminal capable of data transmission and reception with an authentication server such as a mobile phone, PDA, notebook computer, PC, and the like.

The service providing server 200 may make an authentication request to the authentication server 100 when receiving a user authentication request from the client terminal 400. A user authentication request may occur, for example, when a user clicks a login button. However, when the user performs an action that requires user authentication, such as clicking a 'start game' button while the user is not logged in, the service providing server 200 requests the authentication server 100 even if there is no user authentication request. can do.

The authentication key generation unit 110 generates an authentication key according to the authentication request of the service providing server 200. The authentication key may be any code that is randomly formed. In this case, when the authentication key is in the form of a sound (for example, a sound QR code), the authentication key is output as a sound through a microphone of the authentication terminal 500. The authentication key may be input. In addition, the authentication key may further include a validity check code for determining the validity of the code, such as a checksum.

The authentication key transmission unit 120 transmits the generated authentication key to the service providing server 200, and the service providing server 200 transmits the received authentication key to the client terminal 400.

The client terminal 400 outputs the received authentication key. The client terminal 400 may output the authentication key in the form of a sound through the speaker. The authentication key may be generated and transmitted in the form of an audio file from the authentication key generation unit 110, and the client terminal 400 converts the code of the authentication key sent from the authentication server 100 into a sound form and outputs it through the speaker. You may.

When the client terminal 400 outputs the authentication key, the user may proceed with the authentication procedure by inputting the authentication confirmation key to the authentication terminal 500. The authentication confirmation key is a key input to the authentication terminal of the user to inform the authentication server that the user has received the authentication key, and is a key corresponding to the authentication key generated by the authentication server 100.

The authentication confirmation key corresponds to the authentication key, the authentication confirmation key may be the same as the authentication key generated by the authentication server 100, or the authentication confirmation key is determined by a predetermined rule for the authentication key generated by the authentication server 100. Modifications may be matched with each other.

In this embodiment, the authentication terminal 500 may receive the sound QR code output through the speaker of the client terminal 400 as an authentication confirmation key through the microphone. As the authentication key generated by the authentication server 100 is converted into a sound QR code according to the QR code conversion rule, the same authentication verification key as the authentication key generated by the authentication server 100 is input to the authentication terminal 500. Can be.

That is, when the authentication key output from the client terminal 400 is a sound, the authentication terminal 500 may receive an authentication confirmation key through a microphone attached to the authentication terminal. For example, if the authentication key is a sound QR code, if the authentication server 100 generates an audio file corresponding to the authentication key and delivers it to the client terminal 400, the generated audio file is output from the speaker of the client terminal 400. In addition, in the authentication terminal 500, the authentication server 100 may receive the authentication confirmation key from the authentication terminal 500 in response to receiving the authentication key through the microphone.

The authentication terminal 500 transmits the received authentication confirmation key to the authentication server 100. The authentication confirmation key receiver 130 may receive an authentication confirmation key from the authentication terminal 500, and the approval unit 140 may determine whether the received authentication confirmation key is valid. When the authentication key includes a validation code, it is possible to determine whether the authentication validation key is valid by determining whether the validation code included in the authentication validation key conforms to a predetermined rule such as a checksum rule.

If the authentication confirmation key is valid, the approval unit 140 determines whether the authentication confirmation key corresponds to the generated authentication key. If the authentication confirmation key is the same as the generated authentication key or the authentication key is converted by a predetermined rule, it is determined that the authentication confirmation key corresponds to the authentication key.

If the authentication confirmation key corresponds to the authentication key, the approval processing unit 150 transmits the authentication approval information to the service providing server 200. The certification approval information may include a result code indicating that the certification is approved.

When the service providing server 200 receives the authentication approval information, the service providing server 200 forms an authentication session in the client terminal 400 so that the user can use the service. This completes the authentication procedure for the user to use the service of the service providing server 200.

According to this embodiment, the user enters an authentication key into a separate authentication terminal 500 without directly entering an ID-password into the client terminal 400 which may be exposed to the risk of keyboard hooking. ) Can be provided. In addition, since the authentication key is transmitted in the form of a sound QR code and inputs the authentication key through the microphone of the authentication terminal 500, the authentication procedure can be performed more conveniently than the conventional ID-password method.

Hereinafter, a second embodiment of the present invention will be described with reference to FIGS. 4 to 5. FIG. The description overlapping with the first embodiment will be omitted. 4 is a diagram schematically illustrating a sound code authentication system according to a second embodiment of the present invention, and FIG. 5 is a flowchart illustrating a sound code authentication method according to a second embodiment of the present invention.

Sound code authentication system according to a second embodiment of the authentication server 100, a user information database 600 connected to the authentication server 100, a plurality of service providing server 200a, 200b, 200c connected to the authentication server 100 ), A plurality of client terminals 400a, 400b, 400c and an authentication terminal 500 connected to the service providing server 200a.

The user information database 600 stores a user identifier and a terminal identifier for authentication. The user identifier and the authentication terminal identifier may be input and stored when the user registers for the authentication system. The user identifier is an identifier for distinguishing an individual from another user, and may be, for example, a social security number, an i-PIN (Internet Personal Identification Number), or a personal ID. The authentication terminal identifier refers to an identifier for distinguishing it from other authentication terminals, and may be a unique value assigned to a terminal such as, for example, a serial number (SN) and a MAC address of the authentication terminal. .

However, the present invention is not limited thereto. The authentication terminal identifier may be an identifier that can be distinguished from other authentication terminals even though it is not a unique value assigned to the terminal. For example, in the case of a mobile phone or a smartphone, the authentication terminal identifier may be a universal subscriber identity module (USIM) card number or a mobile communication phone number, or the authentication terminal 500 is connected to the authentication server 100. It may be the ID you need. Alternatively, the authentication terminal identifier may be a combination of at least two or more of the serial number, the MAC address, the USIM card number, the mobile communication number, and the ID.

For example, one authentication terminal identifier may be generated by combining the smartphone's serial number, USIM card number, and mobile communication number, and stored in the user information data. By generating a terminal identifier for authentication by combining a plurality of identifiers, it is possible to reduce the possibility of theft even if any one of the serial number, USIM card number, and mobile communication number of the terminal is exposed to others.

Since the user information database 600 matches and stores the user identifier and the terminal identifier for authentication, the user identifier may be extracted using the terminal identifier for authentication.

The service providing server 200a may make an authentication request to the authentication server 100 when a user authentication request is received from the client terminal 400a or when other user authentication is required. At this time, the service providing server 200a may transmit the identifier of the client terminal 400a to the authentication server 100.

When there is a user authentication request from the service providing server 200a, the authentication key generation unit 110 generates an authentication key in the form of a sound. The authentication key may be any code randomly generated, and may include a validity check code for determining the validity of the code. In addition, the authentication key may include an identifier of the client terminal 400a requesting the authentication key and an identifier of the service providing server 200a. The authentication server 100 or the service providing server 200a may determine a path to which the authentication key should be transmitted from the identifier of the client terminal 400a included in the authentication key and the identifier of the service providing server 200a.

The authentication key generation unit 110 may store the generated authentication key in the authentication key storage 700. The authentication key transmission unit 120 transmits the generated authentication key to the service providing server 200a, and the service providing server 200a transmits the received authentication key to the client terminal 400a.

The client terminal 400a may output the received authentication key in the form of a sound QR code. When the client terminal 400a outputs an authentication key, the user authenticates the authentication terminal 500 by inputting an authentication key in the form of a sound QR code output to the client terminal 400a using the microphone of the authentication terminal 500a. You can enter a confirmation key.

The authentication terminal 500 may perform the authentication procedure by transmitting the received authentication confirmation key to the authentication server 100. The authentication terminal 500 may transmit the authentication terminal identifier to the authentication server 100 together with the authentication confirmation key.

The terminal identifier for authentication may be transmitted at the same time as the authentication confirmation key, but is not necessarily limited thereto. For example, the authentication terminal 500 forms a session with the authentication server 100 in advance by logging in to the authentication server 100 before transmitting the authentication confirmation key, and transmits the authentication terminal identifier to the authentication server 100. You can also do it.

The authentication confirmation key receiving unit 130 receives the authentication key and the authentication terminal identifier from the authentication terminal 500, and the approval unit 140 receives the authentication key corresponding to the authentication confirmation key from the authentication key storage 700. Search and determine whether a corresponding authentication key exists. When the authentication key corresponding to the authentication confirmation key is not stored in the authentication key storage 700, the authentication request may be rejected and the authentication procedure may be terminated.

In addition, the approval unit 140 may extract a user identifier stored in matching with the authentication terminal identifier from the user information database 600. If there is no user identifier matching the received authentication terminal identifier in the user information database 600, it may be determined that the authentication terminal 500 is not registered in the authentication server. Therefore, the authentication request may be rejected and the authentication process may be terminated.

When the authentication key corresponding to the authentication confirmation key is extracted from the authentication key storage 700, the approval processing unit 150 transmits the authentication approval information to the service providing server 200a corresponding to the extracted service providing server identifier. The authentication approval information may include a result code indicating a result that the authentication is approved, and may further include the extracted user identifier. In addition, the authentication approval information may further include the authentication key.

The service providing server 200a may receive authentication approval information, and may know the client terminal 400a that needs to establish an authentication session from the authentication key included in the authentication approval information. In addition, the user account of the service providing server 200a may be known from the user identifier included in the authentication approval information. Accordingly, the service providing server 200a may form an authentication session with the user account in the client terminal 400a to enable the user to use the service.

In addition, the approval processing unit 150 of the authentication server 100 may transmit authentication success information to the authentication terminal 500, the authentication terminal 500 may display the authentication success information. The authentication process report may include an identifier and a user identifier of the service providing server 200a, and may be, for example, a message indicating that the user's authentication request has been approved, such as "User A has connected to the B server." . The authenticity process information may enable the user to confirm again that the authentication is in progress, thereby protecting the user from the theft of another person.

For example, it may be assumed that the information of the authentication terminal is stolen. The hijacker may proceed with an authentication procedure with the hijacker's authentication terminal information to form an authentication session of the hijacker's account on the hijacker's PC. When the authentication server 100 is successful, the authentication server 100 may notify the victim of the theft by transmitting authentication success information to the user's authentication terminal. The employee may request for the authentication cancellation, such as "logout", to the authentication server 100 using the authentication terminal 500. The authentication terminal 500 may request the authentication cancellation from the authentication server 100, and the approval processing unit 150 may transmit the authentication cancellation information to the service providing server 200a in response to the authentication cancellation request. The authentication cancellation information may include an identifier of the user requesting the authentication cancellation. When the service providing server 200a receives the authentication cancellation information, the authentication session formed with the account of the user who requested the authentication cancellation may be terminated. Therefore, by transmitting the authentication success information to the authentication terminal 500, it is possible to further prevent that the user does not want to be authenticated.

In the second embodiment of the present invention, the authentication key includes an identifier of the client terminal 400a and the service providing server 200a that requested the authentication, so that the authentication key can be transmitted. However, one of ordinary skill in the art will appreciate that the authentication key may be transmitted in other ways.

For example, the service providing server 200a stores the identifier of the client terminal 400a that has requested the authentication, and the authentication key transmitting unit 120 matches the generated authentication key with the identifier of the service providing server 200a. By doing so, it is possible to determine the path through which the authentication key is transmitted.

Hereinafter, a third embodiment of the present invention will be described with reference to FIGS. 6 and 7. 6 is a diagram schematically illustrating a sound code authentication system according to a third embodiment of the present invention, and FIG. 7 is a flowchart illustrating a sound code authentication method according to a third embodiment of the present invention.

In the first and second embodiments of the present invention, the authentication server and the service providing server are described as being separated, but the authentication server and the service providing server may be integrally formed. The third embodiment of the present invention describes an authentication system in which an authentication server and a service providing server are integrated. In describing the third embodiment of the present invention, descriptions overlapping with the first embodiment or the second embodiment will be omitted.

Sound code authentication system according to a third embodiment of the present invention is the integrated authentication server 300, the user information database 600 connected to the integrated authentication server 300, a plurality of client terminals (communication connected to the integrated authentication server 300) 400a, 400b, 400c) and an authentication terminal 500. The integrated authentication server 300 is an authentication key generation unit 310 for generating an authentication key in a sound form, an authentication key transmission unit 320 for transmitting the authentication key generated by the client terminal 400, authentication terminal 500 An authentication confirmation key receiving unit 330 for receiving an authentication confirmation key from the authentication unit, an approval unit 340 for determining whether the authentication confirmation key and the authentication key correspond to, and an approval processing unit 350 for transmitting the authentication approval information to the client terminal 400. It includes.

When the first client terminal 400a requests user authentication to the integrated authentication server 300, the authentication key generator 310 generates an authentication key in the form of a sound and generates the identifier and the generated authentication of the first client terminal 400a. The keys may be matched with each other and stored in the authentication key storage 700. The authentication key transmission unit 320 transmits the generated authentication key to the client terminal 400a.

Since the authentication key storage 700 stores the identifier of the client terminal 400a, it is possible to know which client terminal has transmitted the authentication key from the plurality of client terminals 400a to 400c. Alternatively, the generated authentication key may include an identifier of the client terminal 400a requesting authentication. In this case, even if the identifier of the client terminal 400a is not stored in the authentication key storage 700, the path to which the authentication key is transmitted can be known.

The client terminal 400a may output the received authentication key in the form of a sound QR code. When the client terminal 400a outputs the authentication key, the user inputs the authentication key by inputting the authentication key in the form of a sound QR code output to the client terminal 400a using the microphone of the authentication terminal 500 to perform the authentication procedure. You can proceed. The authentication terminal 500 transmits the authentication terminal identifier together with the authentication confirmation key to the integrated authentication server 300.

The authentication confirmation key receiving unit 330 receives an authentication terminal identifier together with the authentication confirmation key, and the approval unit 340 retrieves an authentication key corresponding to the authentication confirmation key from the authentication key storage 700 and responds with the authentication confirmation key. It may be determined whether an authentication key exists, and the identifier of the client terminal 400a that requested the authentication key may be extracted from the found authentication key.

In addition, the approval unit 340 may extract the user identifier stored in matching with the authentication terminal identifier from the user information database 600.

When the authentication key corresponding to the authentication confirmation key is extracted from the authentication key storage 700, the approval processing unit 350 is a user account corresponding to the extracted user identifier in the client terminal 400a corresponding to the extracted client terminal identifier. You can set up an authentication session so that users can use the service.

Hereinafter, a fourth embodiment of the present invention will be described with reference to FIG. 8. 8 is a diagram schematically illustrating a sound code authentication system according to a fourth embodiment of the present invention.

The fourth embodiment of the present invention shows user authentication in the vending machine of the present invention.

Sound code authentication system according to a fourth embodiment of the present invention is the integrated authentication server 300, a user information database 600 connected to the integrated authentication server 300, a plurality of vending machines connected to the integrated authentication server 300 ( 410a, 410b, and 410c) and an authentication terminal 500. That is, the vending machines 410a, 410b, and 410c correspond to client terminals of the third embodiment.

When the user selects a desired product in the vending machine 410a, the vending machine 410a requests user authentication from the integrated authentication server 300. The integrated authentication server 300 may generate an authentication key and match the identifier of the first vending machine 410a with the generated authentication key to each other and store the authentication key in the authentication key database. The integrated authentication server 300 transmits the generated authentication key to the first vending machine 410a. Since the integrated authentication server 300 stores the identifier of the first vending machine 410a, it can know which vending machine has transmitted the authentication key from the plurality of vending machines 410a to 410c.

The first vending machine 410a may output the received authentication key in the form of a sound QR code. When the first vending machine 410a outputs the authentication key, the user inputs the authentication key in the form of a sound QR code output to the first vending machine 410a using the microphone of the authentication terminal 500 to proceed with the authentication procedure. Can be. The authentication terminal 500 transmits the authentication terminal identifier together with the authentication confirmation key to the integrated authentication server 300.

The integrated authentication server 300 may retrieve an authentication key corresponding to the authentication confirmation key from the authentication key storage 700 and extract an identifier of the vending machine that requested the authentication key from the retrieved authentication key.

In addition, the integrated authentication server 300 may extract the user identifier stored in matching with the terminal identifier for authentication from the user information database 600.

When the authentication key corresponding to the authentication confirmation key is extracted from the authentication key storage 700, the integrated authentication server 300 may transmit the authentication approval information to the vending machine 410a corresponding to the extracted vending machine identifier. Therefore, the vending machine 410a that has received the authentication approval information may pay the product to the user.

Meanwhile, the user information database 600 may store payment information corresponding to the user identifier. The integrated authentication server 300 may transmit authentication approval information to the vending machine 410a, and transmit approval information including the user identifier and payment information to a third party server such as a payment server. Therefore, the user can authenticate himself / herself using the authentication terminal without carrying any extra cash, so that payment of the product price can be made easily.

Hereinafter, a fifth embodiment of the present invention will be described with reference to FIG. 9. 9 is a diagram schematically showing a sound code authentication system according to a fifth embodiment of the present invention;

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

FIG. 9 is a diagram illustrating a sound code authentication system according to a fifth embodiment of the present invention. FIG. 10 illustrates a configuration of an authentication server in the sound code authentication system according to a fifth embodiment of the present invention. 11A and 11B are diagrams showing an example of a sound code authentication method according to a fifth embodiment of the present invention.

The sound code authentication system according to the fifth embodiment of the present invention may include a client terminal 100 connected to a network, an authentication terminal 200, an authentication server 300, and a service providing server 400. 300 includes an authentication request receiver 310, an authentication key generator 320, an authentication key transmitter 330, an authentication confirmation key receiver 340, an authentication performer 350, and an authentication approval processor 360. can do.

The authentication request receiver 310 receives an authentication request from the client terminal 100.

The authentication request may include one or more of a service identifier, a client identifier, and a user identifier.

The service identifier is identification information that can identify the service providing server 400 and the other service providing server 400 and may include, for example, a host address, a serial number, a uniform resource identifier (URI) .

The service identifier may be included in the authentication request of the client terminal 100 and may identify a target to which a service providing session is to be formed with the client terminal 100 according to the authentication performance result. For example, when a user performs authentication at the authentication server 300 and needs to log in to NAVER, for example, the authentication server 300 may determine a service identifier of the service providing server 400 providing a service of NAVER. Will need.

The client identifier refers to identification information for identifying the client terminal 100 and another client terminal that transmits the authentication request. For example, an IP address, a serial number (SN), and a Mac address (Mac Address) may be used. And the like. However, the client identifier is not limited thereto, and may include both identification information that can identify the client terminal to other client terminals.

The user identifier is an identifier that allows an individual to be distinguished from other users, and may be, for example, a resident registration number, an i-PIN (Internet Personal Identification Number), or a personal ID.

According to the fifth embodiment of the present invention, the user identifier is a personal ID (ID) in the authentication server 300 or the service providing server 400 or corresponds to a personal ID (ID) in the service providing server 400. It may be an identifier. For example, when a user needs to perform authentication through the authentication server 300 in order to use a web service provided by the service providing server 400, the authentication server 300 may require an ID of the user. .

In this case, the service providing server 400 may not provide the user's ID to the authentication server 300 as it is for the protection of personal information of the corresponding web service user, but may provide the user's ID as an alias. For example, if the ID of the user's web service is 'abcd1234', the service providing server 400 does not provide 'abcd1234' to the authentication server 300, but the authentication management ID corresponding to 'abcd1234'. 'id_000001' may be provided to the authentication server 300.

Thereafter, the service providing server 400 receives authentication approval information for 'id_000001' from the authentication server 300, and forms an authentication session, for example, for the actual ID 'abcd1234' in the web service corresponding to 'id_000001'. can do.

The authentication key generation unit 320 generates an authentication key in response to the authentication request received from the client terminal 100.

In addition, the authentication key may include a client identifier or a service identifier of the client terminal 100 requesting authentication.

The authentication key generation unit 320 may extract, for example, one or more of a service identifier, a client identifier, and a user identifier from the authentication request and use the same to generate the authentication key.

The authentication key generator 320 may store the generated authentication key in an authentication key storage (not shown). In addition, the authentication key generation unit 320 may store a service identifier, a client identifier, a user identifier, and the like together with the authentication key. The service identifier or client identifier included in the authentication key may be extracted again from the authentication key. For example, the authentication performing unit 350, which will be described later, may extract a service identifier, a client identifier, etc. from the authentication key and use it in the authentication process. have.

The authentication key transmitter 330 transmits the authentication key to the client terminal 100.

The authentication key transmitted to the client terminal 100 by the authentication key transmission unit 330 is displayed on the client terminal 100, and the client terminal 100 receives the received authentication key, for example, a sound QR code. It can output through the speaker of (100). If the received authentication key is not in the form of a sound QR code, the authentication key may be converted into a sound QR code and output.

The authentication confirmation key receiving unit 340 receives the authentication confirmation key from the authentication terminal 200.

According to the fifth embodiment of the present invention, the user may proceed with the authentication procedure by inputting the authentication confirmation key to the authentication terminal 200 based on the authentication key displayed on the client terminal 100.

The authentication confirmation key is a key corresponding to the authentication key displayed on the client terminal 100 and is a key input to the authentication terminal 200 to inform the authentication server 300 that the user has received the authentication key.

The authentication confirmation key may be the same as the authentication key generated by the authentication server 300, or may be modified by a certain rule. According to an embodiment of the present invention, the authentication terminal 200 may receive an authentication confirmation key by outputting an authentication key, for example, a sound QR code, output through the speaker of the client terminal 100.

Also, for example, if the authentication key generated by the authentication server 300 is converted into a sound QR code on the client terminal 100 and outputted, the authentication terminal 200 inputs the sound QR code and inverts the sound QR code. Can be used as a verification key. In this case, the authentication confirmation key receiving unit 340 may receive the same authentication confirmation key as the authentication key.

In the above example, the authentication key is output as a sound QR code as an example, but is not limited thereto.

The authentication confirmation key receiving unit 340 may receive an authentication confirmation key and an authentication terminal identifier together from the authentication terminal 200. Here, the authentication terminal identifier refers to identification information for identifying the authentication terminal 200 with another authentication terminal 200, and is matched with the authentication terminal 200 in the authentication performing unit 350 to be described later. It may be utilized in tasks such as selecting a user to be authenticated among a plurality of users.

Meanwhile, the terminal identifier for authentication may be transmitted to the authentication server 300 at the same time as the authentication confirmation key, but is not necessarily limited thereto. For example, before the authentication terminal 200 logs in to the authentication server 300 before transmitting the authentication confirmation key, it forms a session with the authentication server 300 in advance and transmits the terminal identifier for authentication to the authentication server 300. You can also do it.

The authentication performing unit 350 performs authentication on the user identifier associated with the authentication terminal 200 based on the authentication key transmitted to the client terminal 100 and the authentication confirmation key received from the authentication terminal 200.

The authentication performing unit 350 may perform authentication on a user identifier associated with the authentication terminal 200.

According to the fifth embodiment of the present invention, the authentication performing unit 350 may request a user identifier stored in the authentication terminal 200 from the authentication terminal 200. The authentication performing unit 350 may receive a user identifier from the authentication terminal 200 and perform authentication on the received user identifier. For example, if a user identifier 'patent_1234' is stored in the local storage of the authentication terminal 200, the authentication performing unit 350 may call the user identifier to utilize the authentication. In addition, when receiving a plurality of user identifiers from the authentication terminal 200, the authentication performing unit 350 may request the authentication terminal 200 to select any one of the plurality of user identifiers, and the user authenticates. The user terminal 200 may perform authentication on the selected user identifier.

According to the fifth embodiment of the present invention, the authentication performing unit 350 transmits a plurality of user identifiers associated with the authentication terminal 200 to the authentication terminal 200, and the plurality of users from the authentication terminal 200. Any one of the identifiers may be received. For example, when a user uses the authentication terminal 200 to use a mail service, and a user identifier, for example, has a plurality of mail accounts of a user, select one of the plurality of accounts as an authentication target. Can be.

Referring to the example illustrated in FIG. 11A, the authentication performing unit 350 converts 'patent_1234', 'goodman', and 'tm_0123' as the user identifier 31 associated with the authentication terminal 200 to the authentication terminal 200. Can transmit

The authentication performing unit 350 may transmit the user identifier and the service identifier together in the process of transmitting the plurality of user identifiers associated with the authentication terminal 200 to the authentication terminal 200. That is, the service identifier and the user identifier may be associated with each other and transmitted to the authentication terminal 200. For example, the service identifier and the service identifier may be transmitted as' naver '-' patent_1234 ',' naver-'goodman', 'daum-tm_0123'. User identifiers can be sent together.

For example, in order for a user to use a predetermined service in the client terminal 100, the user performs authentication through the authentication server 300 without accessing the service providing server 400 providing the corresponding service and performing authentication. In the case of accessing the service providing server 400 afterwards, since the authentication server 300 does not know which service the user intends to use, the user identifier and service identifier associated with the authentication terminal 200 used for authentication are used. All of them may be provided, and authentication of a corresponding service may be performed by selecting an authentication target service identifier from a user.

According to the fifth embodiment of the present invention, the authentication performing unit 350 may extract a plurality of user identifiers matching the terminal identifier for authentication from the user information database 390 and use them to perform authentication. For example, the authentication performing unit 350 transmits the extracted plurality of user identifiers to the authentication terminal 200, receives an authentication confirmation key through a microphone of the authentication terminal 200, and transmits the authentication confirmation key to the corresponding authentication confirmation key. Authentication can be performed.

Here, the authentication terminal identifier may be received through, for example, the authentication confirmation key receiver 340 described above, or may be received from the authentication server 300 before the authentication confirmation key is received.

When there is no user identifier matching the terminal identifier for authentication in the user information database 390, the terminal for authentication 200 may be determined not to be registered in the authentication server 300. In this case, the sound code authentication system may reject the authentication request and terminate the authentication process, or may register a user identifier for authentication from the authentication terminal 200.

According to another embodiment of the present invention, the authentication performing unit 350 transmits a user identifier 33 associated with the authentication terminal 200 to the authentication terminal 200, and from the authentication terminal 200, the user identifier. Whether or not can be received.

Referring to the example illustrated in FIG. 11B, the authentication performing unit 350 transmits 'patent_1234' as the user identifier 31 associated with the authentication terminal 200 to the authentication terminal 200, and the authentication terminal 200. ), Whether or not to perform a login, for example, with the corresponding user identifier.

According to the example of FIG. 11B, when the user 'patent_1234', which is the user identifier 33 received from the sound code authentication system, is a user identifier to log in with, for example, authentication confirmation through a microphone of the authentication terminal 200. The key can be input to perform authentication with the corresponding authentication confirmation key.

The authentication performing unit 350 corresponds to the authentication key if the authentication confirmation key received from the authentication terminal 200 is the same as the authentication key transmitted to the client terminal 100 or is converted according to a predetermined rule. You can judge that.

When the authentication server 300 stores the authentication key in the authentication key store (not shown) before transmitting the authentication key to the client terminal 100, the authentication performing unit 350 is provided with an authentication key corresponding to the authentication confirmation key. The authentication may be performed based on the existence of the authentication key by searching from the authentication key store.

That is, when the authentication key and the corresponding authentication key is not stored in the authentication key store, it may be determined that the authentication key is not issued. Thus, the authentication request can be rejected and the authentication procedure can be terminated.

The authentication performing unit 350 may determine the validity of the authentication confirmation key before performing authentication. For example, when the authentication key includes a validation code, the authentication performing unit 350 determines whether the validation code included in the authentication confirmation key conforms to a predetermined rule, such as a checksum rule, for authentication. The validity of the confirmation key can be determined.

The authentication approval processing unit 360 according to the fifth embodiment of the present invention transmits the authentication approval information according to the authentication performance result to one or more of the client terminal 100 and the service providing server 400.

The certification approval information may include a result code indicating that the certification has been approved or that the certification has failed. In addition, the authentication approval information may include one or more of a client identifier and a user identifier. Here, the user identifier may be a user identifier selected for authentication by the authentication performing unit 350.

The authentication approval processing unit 360 may transmit the authentication approval information to one or more of the client terminal 100 and the service providing server 400. The transmission target of the authentication approval information may vary depending on the configuration of the sound code authentication system.

For example, when the authentication server 300 and the service providing server 400 in the sound code authentication system are separated, the subject performing authentication is the authentication server 300, but the service is provided to the user according to the authentication result. Since the providing subject is the service providing server 400, the authentication server 300 may transmit authentication approval information according to a result of performing authentication to the service providing server 400.

According to the fifth embodiment of the present invention, the authentication approval processing unit 360 may provide authentication approval information to both the client terminal 100 and the service providing server 400. Through this, the sound code authentication system can reduce the risk of authentication error and can perform authentication with more security.

For example, when the client terminal 100 requests a service from the service providing server 400 based on the authentication approval information, if the service providing server 400 knows in advance whether the client terminal 100 has approved the authentication, The client terminal 100 may, for example, control requesting a service based on false authentication authorization information.

According to the fifth embodiment of the present invention, the authentication approval processing unit 360 may transmit the authentication approval information to the authentication terminal 200 in addition to the client terminal 100 and the service providing server 400. Through this, the authentication terminal 200 may perform additional operations based on authentication with one or more of the client terminal 100 and the service providing server 400 based on the authentication approval information. For example, the authentication terminal 200 may perform a session release request between the client terminal 100 and the service providing server 400 based on the authentication approval information.

According to the fifth embodiment of the present invention, the service providing server 400 may be a set of a plurality of servers providing the same service, in which case the authentication approval processing unit 360 provides authentication approval information to all of the plurality of servers. Alternatively, the authentication approval information may be provided to only one of the plurality of servers, and the server provided with the authentication approval information may share the authentication approval information by broadcasting to the remaining servers.

The authentication approval processor 360 may determine the service providing server 400 to which the authentication approval information is transmitted based on the service identifier included in the authentication request.

According to the fifth embodiment of the present invention, the service providing server 400 receives authentication approval information from the authentication server 300, and establishes, for example, an authentication session on the client terminal 100 so that the user can use the service. To be able. This completes the authentication procedure for the user to use the service of the service providing server 400.

As another example, when the authentication server 300 and the service providing server 400 are integrally configured to form an integrated authentication server, for example, since the integrated authentication server performs authentication and service provision together, the integrated authentication server May transmit the authentication approval information according to the authentication performance result to the client terminal 100.

The user information database 390 may store user information including a user identifier and a terminal identifier for authentication.

The user identifier and the terminal identifier for authentication may be input and stored when the user registers for the authentication system according to an embodiment of the present invention. The authentication terminal identifier refers to an identifier for distinguishing it from other authentication terminals, and may be, for example, a unique value assigned to a terminal such as a serial number (SN) and a MAC address of the authentication terminal. .

However, the present invention is not limited thereto, and the terminal identifier for authentication may be an identifier that can be distinguished from other terminals for authentication, even if it is not a unique value assigned to the terminal. For example, in the case of a mobile phone or a smartphone, the terminal identifier for authentication may be a Universal Subscriber Identity Module (USIM) card number or a mobile phone number, or the terminal for authentication 200 accesses the authentication server 300. It may be the ID you need.

Alternatively, the authentication terminal identifier may be a combination of at least two or more of the above-listed serial number, Mac address, USIM card number, mobile communication number and ID. For example, a serial terminal, a USIM card number, and a mobile communication number of the smartphone may be combined to generate one terminal identifier for authentication, and may be stored in the user information database 390.

By generating a terminal identifier for authentication by combining a plurality of identifiers, even if any one of the serial number, USIM card number, mobile communication number of the authentication terminal 200 is exposed to others can reduce the possibility of theft.

In addition, the terminal identifier for authentication may include a soft key. The soft key may be granted by the authentication terminal 200 from the authentication server 300 or the service providing server 400, and the authentication terminal 200 may be previously provided with the authentication server 300 or the service providing server 400. You can also create and use a shared algorithm. For example, in the process of the user performing authentication through the authentication terminal 200, the soft terminal synchronized with each other between the authentication terminal 200 and the authentication server 300, the authentication terminal 200 and the authentication server. Each of the 300 records can be utilized.

The user information database 390 may match and store the user identifier and the authentication terminal identifier, and thus may extract a user identifier matching the authentication terminal identifier from the user information database 390.

Hereinafter, a sound code authentication method using a sound code authentication system according to a fifth embodiment of the present invention will be described in detail.

12 is a flowchart illustrating a sound code authentication method according to a sixth embodiment of the present invention.

The sound code authentication method according to the embodiment shown in FIG. 12 includes steps that are processed in time series on the authentication server 300 shown in FIG. 10, and provides a client terminal 100, an authentication terminal 200, and a service. And processing on the server 400.

Therefore, the following descriptions regarding the authentication server 300 shown in FIG. 10 may be applied to the authentication method according to the embodiment shown in FIG. .

In this regard, the sound code authentication system receives an authentication request from the client terminal 100 (S4100).

In addition, the sound code authentication system transmits an authentication key in the form of a sound to the client terminal 100 in response to the authentication request (S4200).

In addition, the sound code authentication system receives an authentication confirmation key from the authentication terminal 200 (S4300).

In addition, the sound code authentication system performs authentication on the user identifier associated with the authentication terminal 200 based on the authentication key transmitted to the client terminal 100 and the authentication confirmation key received from the authentication terminal 200 ( S4400).

In addition, the sound code authentication system transmits the authentication approval information according to the authentication result to the service providing server 400 (S4500).

Here, the step S4500 may include a method indirectly provided in addition to the method in which the authentication server 300 directly transmits the authentication approval information to the service providing server 400.

For example, in step S4500, the authentication server 300 transmits the authentication approval information to the client terminal 100, and the client terminal 100 requests or authenticates the service to the service providing server 400 based on the authentication approval information. Performing a verification request, requesting confirmation of whether the corresponding client terminal 100 is authenticated by the service providing server 400 to the authentication server 300, and authenticating the authentication server 300 to the service providing server 400. The method may include transmitting authentication approval information for the corresponding client terminal 100.

As such, the authentication server 300 indirectly transmits the authentication approval information to the service providing server 400, so that, for example, the client terminal 100 receives the service from the service providing server 400 based on the false authentication approval information. It can be prevented from being provided.

In addition, in a financial service, for example, after a predetermined time elapses after the client terminal 100 receives an authentication approval through the authentication server 300, it is necessary to perform re-authentication due to security problems. As described above, a method of indirectly providing authentication approval information may be utilized.

That is, when the authentication server 300 transmits the authentication approval information to the client terminal 100 and the service providing server 400 confirms the request to the authentication server 300 as to whether the client terminal 100 performs authentication. Normal service may be provided only when the time difference is within a preset time.

In addition, the authentication server 300 may transmit the authentication approval information to the client terminal 100 as well as the service providing server 400 in step S4500.

The authentication server 300 may provide authentication approval information to both the client terminal 100 and the service providing server 400. Through this, the sound code authentication system can reduce the risk of authentication error and can perform authentication with more security.

For example, when the client terminal 100 requests a service from the service providing server 400 based on the authentication approval information, if the service providing server 400 knows in advance whether the client terminal 100 has approved the authentication, The client terminal 100 may, for example, control requesting a service based on false authentication authorization information.

In the sound code authentication method according to the sixth embodiment of the present invention, the service providing server 400 of the client terminal 100 is authenticated through the above process, and if the authentication is successful, the service providing server 400 performs a client An authentication session may be established with the terminal 100.

For example, when the authentication server 300 transmits the authentication approval information to the service providing server 400 in step S4500, the service providing server 400 forms an authentication session with the specific client terminal 100 on which authentication has been performed. You are ready to go. Thereafter, when the client terminal 100 makes a service request or an authentication confirmation request to the service providing server 400, the service providing server 400 may form an authentication session with the corresponding client terminal 100.

According to the sixth embodiment of the present invention, the client terminal 100 may include a service providing server from a predetermined time point such as a time point at which an authentication request is transmitted to the authentication server 300 or a time point at which an authentication key is received from the authentication server 300. In step 400, a confirmation request for authentication may be periodically performed.

For example, when the authentication server 300 provides the authentication approval information only to the service providing server 400, the client terminal 100 may not know when the authentication is completed.

In addition, even from the perspective of the service providing server 400, although the specific client terminal 100 can receive authentication approval information from the authentication server 300 that the authentication is completed, depending on the configuration of the system with the client terminal 100 This is because it may be necessary to receive a request from the client terminal 100 to establish an authentication session.

13 is a flowchart illustrating an authentication method according to a seventh embodiment of the present invention.

The authentication method according to the embodiment shown in FIG. 13 includes steps that are processed in time series on the authentication server 300 shown in FIG. 10, and includes a client terminal 100, an authentication terminal 200, and a service providing server ( And processing on 400). Therefore, the following descriptions regarding the authentication server 300 shown in FIG. 13 may be applied to the authentication method according to the embodiment shown in FIG. .

In this regard, the sound code authentication system receives an authentication key request from the service providing server 400 (S5100).

In addition, the sound code authentication system transmits the authentication key to the service providing server 400 in response to the authentication key request (S5200).

In addition, the sound code authentication system receives an authentication confirmation key from the authentication terminal 200 (S5300).

In addition, the sound code authentication system performs authentication on the user identifier associated with the authentication terminal 200 based on the authentication key transmitted to the service providing server 400 and the authentication confirmation key received from the authentication terminal 200. (S5400).

In addition, the sound code authentication system transmits the authentication approval information according to the authentication result to the service providing server 400 (S5500).

Here, step S5500 may include a method indirectly provided in addition to the method in which the authentication server 300 directly transmits the authentication approval information to the service providing server 400. The description thereof has been given above in the description of FIG. 12 and therefore will be omitted.

14 is a flowchart illustrating an authentication method according to an eighth embodiment of the present invention.

The authentication method according to the embodiment shown in FIG. 14 includes steps processed in time series on the authentication server 300 shown in FIG. 10, and includes a client terminal 100, an authentication terminal 200, and a service providing server ( And processing on 400).

Therefore, the following descriptions regarding the authentication server 300 shown in FIG. 10 may be applied to the authentication method according to the embodiment shown in FIG. .

In this regard, the sound code authentication system receives an authentication request from the client terminal (S6100).

In addition, the sound code authentication system transmits an authentication key in the form of a sound to the client terminal 100 in response to the authentication request (S6200).

In addition, the sound code authentication system receives an authentication confirmation key from the authentication terminal 200 (S6300).

In addition, the sound code authentication system performs authentication on the user identifier associated with the authentication terminal 200 based on the authentication key transmitted to the client terminal 100 and the authentication confirmation key received from the authentication terminal 200 ( S6400).

In addition, the sound code authentication system transmits authentication approval information according to the authentication result to the client terminal 100 (S6500).

Here, the step S6500 may include a method indirectly provided in addition to the method in which the authentication server 300 directly transmits the authentication approval information to the service providing server 400. The description thereof will be omitted in the above description in the description of FIG.

After operation S6500, the client terminal 100 according to an embodiment of the present invention may perform an authentication confirmation request to the service providing server 400 based on the authentication approval information.

Subsequently, the service providing server 400 according to an embodiment of the present invention makes a verification request to the authentication server 300 as to whether or not the client terminal 100 that has made an authentication verification request is authenticated, and receives the verification request. 300 may provide the service providing server 400 with whether the client terminal 100 is authenticated.

When the client terminal 100 is a terminal successfully authenticated by the authentication server 300, the service providing server 400 may form an authentication session with the corresponding client terminal 100.

In the entire embodiment, the client terminal 100 notifies the user of the authentication key output before outputting the authentication key in the form of a sound, and outputs the authentication key and the generated authentication key again according to a reprint command or the authentication server. A request may be made to the authentication key 300 to output the newly generated authentication key.

The sound code authentication method according to the embodiments described with reference to FIGS. 3, 5, 7, 12, 13, and 14 includes a recording medium including instructions executable by a computer, such as a program module executed by the computer. It can also be implemented in the form of. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, the computer-readable medium may include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes any information delivery media, including computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism.

It will be understood by those skilled in the art that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. The scope of the present invention is defined by the appended claims rather than the foregoing detailed description, and all changes or modifications derived from the meaning and scope of the claims and the equivalents thereof are included in the scope of the present invention Should be interpreted.

100: authentication server 100 200: service providing server
400: client terminal 500: authentication terminal

Claims (14)

In the authentication method of the authentication server connected to the service providing server and the authentication terminal, it is performed by the authentication server,
(a) generating an authentication key in the form of a sound;
(b) transmitting the authentication key to a service providing server;
(c) receiving an authentication confirmation key from the authentication terminal;
(d) determining whether the authentication confirmation key corresponds to the authentication key; And
(e) transmitting the authentication approval information according to the determination result to the service providing server. (a) the authentication server generating an authentication key;
(b) the authentication server transmitting the authentication key to a client terminal;
(c) the client terminal outputting an authentication key in the form of sound;
(d) an authentication terminal receiving an authentication confirmation key and transmitting the authentication confirmation key to the authentication server;
(e) the authentication server determining whether the authentication confirmation key corresponds to the authentication key; And
(f) the authentication server transmitting the authentication approval information according to the determination result to the client terminal. Authentication key generation unit for generating an authentication key of the sound form;
An authentication key transmission unit for transmitting the generated authentication key to a service providing server;
An authentication confirmation key receiving unit for receiving an authentication confirmation key from the authentication terminal;
An approval unit which determines whether to approve by determining whether the authentication confirmation key corresponds to the authentication key; And
And an approval processing unit for transmitting authentication approval information to the service providing server according to the approval decision. Authentication key generation unit for generating an authentication key of the sound form;
An authentication key transmission unit for transmitting the authentication key to a client terminal;
An authentication confirmation key receiving unit for receiving an authentication confirmation key from the authentication terminal;
An approval unit which determines whether to approve by determining whether the authentication confirmation key corresponds to the authentication key; And
And an approval processing unit for transmitting authentication approval information to the client terminal according to the approval decision of the approval unit. (a) the authentication server generating an authentication key;
(b) the authentication server transmitting the authentication key to a service providing server;
(c) the service providing server transmitting the authentication key to a client terminal;
(d) the client terminal outputting the authentication key in sound form;
(e) an authentication terminal receiving an authentication confirmation key, and transmitting the authentication confirmation key and the authentication terminal identifier to the authentication server;
(f) extracting, by the authentication server, a user identifier matching the authentication terminal identifier;
(g) determining, by the authentication server, whether the authentication confirmation key corresponds to the authentication key;
(h) transmitting, by the authentication server, the authentication approval information and the user identifier according to the determination result to the service providing server; And
(i) the service providing server forming an authentication session with the client terminal using a user account corresponding to the user identifier. In the authentication method of the authentication server connected to the communication between the client terminal and the authentication terminal, performed by the authentication server,
(a) generating an authentication key in the form of a sound;
(b) transmitting the authentication key to a client terminal;
(c) receiving an authentication confirmation key and an authentication terminal identifier from the authentication terminal;
(d) determining whether the authentication confirmation key corresponds to the authentication key;
(e) extracting a user identifier matching the authentication terminal identifier from a user information database; And
and (f) forming an authentication session on the client terminal with a user account corresponding to the extracted user identifier according to the determination result of step (d). A user information database that matches and stores an authentication terminal identifier and a user identifier;
Authentication key generation unit for generating an authentication key of the sound form;
An authentication key transmission unit for transmitting the authentication key to a client terminal;
An authentication confirmation key receiving unit for receiving an authentication confirmation key and an authentication terminal identifier from an authentication terminal;
An approval unit which determines whether to approve by determining whether the authentication confirmation key corresponds to the authentication key, and extracts a user identifier matching the authentication terminal identifier from the user information database; And
And an approval processing unit configured to form an authentication session of the user account corresponding to the user identifier in the client terminal with a user account corresponding to the user identifier according to the approval decision of the approval unit. In the method for performing authentication, the authentication server connected to the service providing server and the terminal for authentication,
(a) receiving an authentication key request from a service providing server;
(b) transmitting an authentication key in the form of a sound to the service providing server;
(c) receiving an authentication confirmation key from the authentication terminal;
(d) performing authentication on a user identifier associated with the authentication terminal based on the authentication key and the authentication confirmation key; And
(e) transmitting authentication approval information according to a result of performing the authentication to a service providing server,
The step (d)
(d-1) transmitting a plurality of user identifiers associated with the authentication terminal to the authentication terminal;
(d-2) receiving one of the plurality of user identifiers from the authentication terminal; And
(d-3) performing authentication for any one of the user identifiers. In the method for the authentication server to perform authentication,
(a) receiving an authentication request from a client terminal;
(b) transmitting an authentication key in the form of a sound to the client terminal in response to the authentication request;
(c) receiving an authentication confirmation key from the authentication terminal;
(d) performing authentication on a user identifier associated with the authentication terminal based on the authentication key and the authentication confirmation key; And
(e) transmitting authentication approval information according to the authentication performance result to the client terminal,
The step (d)
(d-1) transmitting a plurality of user identifiers associated with the authentication terminal to the authentication terminal;
(d-2) receiving one of the plurality of user identifiers from the authentication terminal; And
(d-3) performing authentication for any one of the user identifiers. In the authentication system,
An authentication request receiving unit receiving an authentication request from a client terminal;
Authentication key generation unit for generating an authentication key of the sound form;
An authentication key transmitter for transmitting an authentication key to the client terminal in response to the authentication request;
An authentication confirmation key receiving unit for receiving an authentication confirmation key from an authentication terminal;
An authentication performing unit configured to perform authentication on a user identifier associated with the authentication terminal based on the authentication key and the authentication confirmation key; And
The client terminal and the authentication approval information according to the authentication performed result;
An authentication approval processing unit for transmitting to one or more of the service providing server,
Wherein the authentication performing unit comprises:
Transmit a plurality of user identifiers associated with the authentication terminal to the authentication terminal, Receive any one of the plurality of user identifiers from the authentication terminal, and perform authentication on any one user identifier Authentication server. In the authentication system,
An authentication request receiver for receiving an authentication key request from a service providing server;
Authentication key generation unit for generating an authentication key of the sound form;
An authentication key transmission unit for transmitting an authentication key to the service providing server;
An authentication confirmation key receiving unit for receiving an authentication confirmation key from an authentication terminal;
An authentication performing unit configured to perform authentication on a user identifier associated with the authentication terminal based on the authentication key and the authentication confirmation key; And
An authentication approval processing unit which transmits authentication approval information according to a result of performing the authentication to the service providing server,
Wherein the authentication performing unit comprises:
Transmit a plurality of user identifiers associated with the authentication terminal to the authentication terminal, Receive any one of the plurality of user identifiers from the authentication terminal, and perform authentication on any one user identifier Authentication server. In the method for the authentication server to perform authentication,
(a) receiving an authentication request from a client terminal;
(b) transmitting an authentication key in the form of a sound to the client terminal in response to the authentication request;
(c) receiving an authentication confirmation key from the authentication terminal;
(d) performing authentication based on the authentication key and the authentication confirmation key; And
(e) transmitting authentication approval information according to a result of the authentication to a service providing server,
The step (c)
Receiving an authentication terminal identifier from the authentication terminal,
The step (d)
Extracting a user identifier matching the terminal identifier for authentication from a user information database,
And the authentication approval information includes the user identifier. (a) providing, by the service providing server, the authentication code to the client terminal;
(b) the client terminal requesting an authentication key in the form of a sound from an authentication server based on the authentication code;
(c) the client terminal receiving the authentication key from the authentication server;
(d) the client terminal outputting the authentication key in a sound form;
(e) an authentication terminal transmitting an authentication confirmation key based on the authentication key to the authentication server;
(f) the authentication server performing authentication based on the authentication key and the authentication confirmation key; And
(g) transmitting, by the authentication server, authentication approval information to the service providing server according to a result of performing authentication. An authentication request receiving unit receiving an authentication request from a client terminal;
Authentication key generation unit for generating an authentication key of the sound form;
An authentication key transmitter for transmitting the authentication key to the client terminal in response to the authentication request;
An authentication confirmation key receiving unit for receiving an authentication confirmation key from an authentication terminal;
An authentication performing unit configured to perform authentication based on the authentication key and the authentication confirmation key; And
An authentication server including an authentication approval processing unit for transmitting authentication approval information according to a result of performing authentication to a service providing server,
The authentication confirmation key receiving unit,
Further receiving an authentication terminal identifier from the authentication terminal,
The authentication performing unit,
Extracting a user identifier matching the terminal identifier for authentication from a user information database,
And the authentication approval information includes the extracted user identifier.

Images