KR20140077681A - Caller authentication method - Google Patents

Abstract

The present invention relates to a caller authenticating method. The disclosed caller authenticating method includes the steps of: receiving an authentication request including call information; checking whether the calling number included in the calling information is identical to a call ID; and generating an authentication result according to an identical state. Therefore, a financial accident and the leakage of personnel information due to a malicious call like voice phishing are previously prevented.

Description

{CALLER AUTHENTICATION METHOD}

The present invention relates to a communication partner authentication method, and more particularly, to a communication partner authentication method for authenticating a normal user to a communication partner.

As is known, various non-facing services based on voice calls are being provided. These services are classified into inbound and outbound.

Inbound means that the user is directly called and serviced according to the needs such as inquiries, suggestions, and information modification.

Outbound, for example, is telemarketing, which means that the agent calls the customer for marketing purposes, such as selling products such as insurance or financial products, and adding additional services to the existing subscribed service.

When the telemarketing is successful, the agent performs a process of acquiring personal information such as a name, a resident registration number, a card, or an account number simply by going through a personal identification process through a resident registration number confirmation do.

However, in this outbound case, the customer simply can see the phone number that appears on the caller's number, and can not help but tell you what information is being asked without knowing exactly where the call came from.

Accordingly, in the case of a malicious telephone call such as voice phishing, personal information is leaked or a financial accident occurs.

An embodiment of the present invention provides a communication partner authentication method for authenticating whether or not a user is a normal user to the other party of a telephone call based on the calling call information.

The problems to be solved by the present invention are not limited to those mentioned above, and another problem to be solved can be clearly understood by those skilled in the art from the following description.

According to an aspect of the present invention, there is provided a communication partner authentication method including the steps of: receiving an authentication request including call call information; confirming whether a call number and a call ID (ID) And generating an authentication result according to the matching.

According to the embodiment of the present invention, it is possible to authenticate whether the user is a normal user to the other party of the telephone call based on the call call information.

Accordingly, it is possible to prevent personal information from being leaked or malpractice caused by a malicious phone call such as voice phishing, and it can be applied to a public institution telephone such as a post office or a prosecution office.

FIG. 1 is a flowchart illustrating a telemarketing process to which a communication partner authentication method according to an embodiment of the present invention can be applied.
2 is an illustration of a smartphone including a counterpart authentication menu according to an embodiment of the present invention.
3 is a flowchart illustrating a communication partner authentication method according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as being limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of the invention to those skilled in the art. Is provided to fully convey the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The following terms are defined in consideration of the functions in the embodiments of the present invention, which may vary depending on the intention of the user, the intention or the custom of the operator. Therefore, the definition should be based on the contents throughout this specification.

FIG. 1 illustrates a procedure for authenticating a calling party of a calling customer according to an exemplary embodiment of the present invention.

If the customer who received the telemarketing telephone requests the personal information (S102) during the telephone conversation (S101), the third party requests the counterpart authentication (S103).

At this time, the authentication request can be made through the call menu of the smartphone as shown in FIG. When the user selects the corresponding menu for the authentication request, the smartphone transmits the telephone call call information (call session information including the other party's telephone number) requested to be authenticated to the authentication server of the registered certification authority.

Further, it is possible to acquire partner company (institution) information from the user and transmit it to the authentication server. That is, the telephone can acquire from the user information indicating that the telephone is associated with "o" card ", and transmit the acquired information. This can be obtained by popping up a popup window asking for a company (institution).

When the authentication server of the certification authority receives the counterpart authentication request, the counterpart authentication is performed through the process shown in FIG. 3 (S104), and the authentication result is transmitted (S105).

Based on the result of the authentication process, the call customer can protect his / her information from attempts to acquire illegal personal information such as voice phishing by notifying the user of his / her personal information only when the other party is authenticated.

3 is a flowchart illustrating a method for a certification authority to perform authentication with respect to a communication partner according to an embodiment of the present invention.

As shown in the figure, the communication partner authentication method according to the embodiment includes a step S301 of receiving an authentication request including call call information, and a step of checking whether the call number and the call ID contained in the call call information are matched (S301) of generating an authentication result according to whether or not the authentication result is matched (S315, S317).

In the communication partner authentication method according to the embodiment, a step of performing authentication for a company to which the other party belongs (S307, S309), and a step of performing authentication for the sender (S311, S313) .

The communication partner authentication method according to the embodiment of the present invention will be described in more detail as follows.

First, the authentication server receives a counterpart authentication request message including call information from a communication customer's communication terminal. In this case, the counterpart authentication request message may include counterpart information (S301).

Then, the authentication server checks whether or not the calling number and the call ID (ID) included in the call call information coincide with each other. For example, the authentication server transmits a call ID and an origination number, which can be identified by the communication company, to the exchange server of the communication company that manages the line corresponding to the origination number, and requests the exchange server to confirm the match, The confirmation result can be returned (S303).

When it is determined that the call call information does not match the call ID (S305), an authentication result indicating a dangerous situation is generated, and an authentication result message is provided to the communication terminal of the calling customer (S317).

However, if the call call information matches the call ID, an authentication result indicating a normal situation may be generated and provided to the communication terminal (S315). Alternatively, the authentication procedure may be further performed as follows.

Next, authentication of the company to which the other party belongs can be performed. Here, the sender authentication corresponds to a company previously registered in the authentication server, and if it is not a registered company, the authentication process can be terminated after transmitting the business confirmation non-confirmation result to the user (S307, S309).

Registrants for issuer certification may include banks, card companies and telemarketing agencies that are commissioned by telemarketing companies. In addition, when a specific company conducts its marketing business through an agency, the company must register with which agent the business is requested.

As an example of registration for each vendor, each vendor can register the phone numbers that the vendor will use for marketing purposes. Also, when performing marketing with the telephone number, the computer, the terminal or the mobile phone number necessary for authenticating the call attendant can be registered together.

As an example of a company authentication method for a registered company, the certification body can determine whether the company to which the calling number belongs is the same as the company that the other party presents. Also, if the company proposed by the other party registers the agency, the other party can be authenticated by confirming that the calling number belongs to the agency.

If the partner company is authenticated, the authentication server authenticates the sender (S311, S313). For example, as an example of the authentication of the sender, the mobile phone can authenticate the mobile phone registered in the calling number. Or by sending a confirmation request message to the registered computer. At this time, if a response to the confirmation is made within a predetermined time, it can be determined that the person who belongs to the registered company is actually made and that the other party can be trusted. There are various methods of authentication of vendors and users according to the company registration procedure and registration information.

Combinations of the steps of the flowcharts appended to the present invention may be performed by computer program instructions. These computer program instructions may be loaded into a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus so that the instructions, which are executed via a processor of a computer or other programmable data processing apparatus, Lt; / RTI > These computer program instructions may also be stored in a computer usable or computer readable memory capable of directing a computer or other programmable data processing apparatus to implement the functionality in a particular manner so that the computer usable or computer readable memory It is also possible to produce manufacturing items that contain instruction means for performing the functions described in each step of the flowchart. Computer program instructions may also be stored on a computer or other programmable data processing equipment so that a series of operating steps may be performed on a computer or other programmable data processing equipment to create a computer- It is also possible for the instructions to perform the processing equipment to provide steps for executing the functions described in each step of the flowchart.

In addition, each step may represent a module, segment, or portion of code that includes one or more executable instructions for executing the specified logical function (s). It should also be noted that in some alternative embodiments, the functions mentioned in the steps may occur out of order. For example, the two steps shown in succession may in fact be performed substantially concurrently, or the steps may sometimes be performed in reverse order according to the corresponding function.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas within the scope of equivalents should be construed as falling within the scope of the present invention.

Claims (1)

Receiving an authentication request including call call information;
Confirming whether or not the call number and the call ID included in the call call information match;
And generating an authentication result in accordance with the match.

Images