KR20150141784A - Behavior questions authorization system and its method - Google Patents

Abstract

The present invention relates to a behavior question authorizing system and a method thereof. The behavior question authorizing system comprises: a communications terminal which requests first authentication and second authentication and uses a service when the second authentication is completed; a service providing server which performs the first authentication, requests the performance of the second authentication when the first authentication is completed, and provides the service through the communications terminal when the second authentication is completed; and a question authentication server which completes the second authentication and informs the service providing server of the completion of the second authentication.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to an authentication system,

The present invention relates to an behavior query authentication system and a method thereof, which can clearly authenticate a service user through a user's response to an behavior query transmitted from a query authentication server.

As is well known, most web services use an id and password method to identify and authenticate users who are connected, and when a high level of security, such as Internet banking, is required, In some cases, authentication is performed using a certificate, but in most cases, a password is directly input on the keyboard in response to a user's memory, thereby performing authentication.

Such an ID and password method has been recognized as a convenient and safe authentication method because it is easy to implement from the viewpoint of a service provider, and it is not easy to find out unless a user records a password somewhere or discloses it directly to another person.

Since most of the devices that can access web pages such as personal computers and smart phones have keyboards, there is no inconvenience in inputting alphanumeric characters and numbers. Therefore, most of the web services use the present method Authentication is performed.

However, the development of computer performance has increased the threat of brute force attacks, and as hackers accumulate more and more sophisticated dictionary sets, passwords that are simple or heavily used In a short time, an attacker can find out, and service providers adopting an ID and password scheme should encourage users not to set up passwords that are too simple, and recommend or force them to do so, for example, A method of including a special character (characters except for alphabets and numbers such as!, @, #, Etc.), a method of lengthening a password length, and a method of periodically changing a password.

Here, to force a combination of alphabetic and numeric characters to prevent a common word from being used as a password, the paradox is that a password must be able to be easily remembered by the user, It is necessary for the user to create a password by combining a plurality of combinations of words or numbers that can be easily memorized by the user.

However, if you use English combination, you often select one English word. If you use only numbers, you often set your birthday or anniversary as a password, and soon others can guess easily.

And, the length of the password is to cope with a random attack. In case of 4 digit PIN, if you enter all the numbers from 0000 to 9999, you may be exposed sometime. When you combine alphabet and numbers and distinguish between upper and lower case, If the length is too short, it is still vulnerable to random attacks. In the past, more than six letters were common, but it is increasingly becoming a trend. Nowadays, Is also increasing.

On the other hand, there is a service that requests to change the password periodically, which requires changing to a different password every 3 months or 6 months, and creating a new security password is a burden for users. It is difficult to get the effect of induction because users usually use two or three passwords in this policy.

For the above reasons, current Web services force users to set passwords that are quite difficult to combine. Creating and remembering passwords in difficult combinations is a burdensome task for users, The same password is used in many cases. As a result, if a service exposes a password inadvertently by server management, an attacker can easily login to another service using the obtained information.

As described above, the ID and password method are excellent in terms of convenience, so there is no complaints from the viewpoint of the user, and it is widely used because it is easy to implement from the viewpoint of the service provider. However, Although increasingly strong passwords are required for users, there is a limit to the memory capacity of the users, and the security requirements can not be satisfied. Therefore, it is required to develop a simple, easy and reliable authentication method.

Open Patent Publication No. 10-2002-0088023 (November 25, 2002): Authentication system through question and answer of personal information and method thereof

The present invention relates to a method and system for authenticating service users, which performs primary authentication using user information in a service providing server and secondary authentication through a user's response to an operation query, System and method therefor.

In addition, the present invention stores user information including an ID and a password corresponding to a service user in a service providing server, and separates the behavior authentication information including the behavior query and the response corresponding to the behavior information of the service user into the query authentication server The behavior information and the behavior authentication information can be managed by different servers, thereby reducing the risk of hacking, and a method thereof.

The present invention also provides an behavior query authentication system and method that can more clearly authenticate a service user by providing secondary authentication through an action query corresponding to a provided service.

The objects of the embodiments of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description .

According to an embodiment of the present invention, a membership is made using user information about a service to be used, a membership application for query authentication is performed while downloading and installing an action query authentication application, And transmits the behavior information as a response corresponding to the behavioral inquiry through the authentication application. When the user wants to receive the service, he or she inputs the user information to request the primary authentication, and transmits the behavioral inquiry A communication terminal for receiving the corresponding response and requesting the secondary authentication, and using the service when the secondary authentication is completed; and a communication terminal for establishing and registering the membership using the user information transmitted through the communication network from the communication terminal. And if the primary authentication is requested, Wherein the first authentication is performed in comparison with the member information, and when the first authentication is completed, the second authentication is requested, and when the second authentication is completed, a service providing the service through the communication terminal A server, periodically collecting the behavior information from the communication terminal through the behavior query authentication application, storing behavior authentication information including the behavior query and response corresponding to the behavior information, and performing the secondary authentication Extracts the behavior authentication information, generates a query response input screen, transmits the response message to the communication terminal, extracts and compares the behavior authentication information to determine whether the response transmitted from the communication terminal is correct, And a query authentication server that completes authentication and notifies the service providing server System can be provided.

According to another embodiment of the present invention, there is provided a method for providing a service, comprising the steps of: joining a service and behavior query authentication service to be used, respectively; registering the behavior information as a response corresponding to the behavior query from the communication terminal, A step of requesting primary authentication by inputting user information including an ID and a password after accessing the service providing server through a communication network when the communication terminal desires to receive the service, A step of requesting the query authentication server to perform a secondary authentication after the primary authentication is completed by comparing the stored member information with the member information stored in the service providing server when the secondary authentication is requested; After the authentication server generates the behavior query using the behavior authentication information, Generating a query response input screen including the query response input screen and transmitting the query response input screen to the communication terminal; and inputting a response corresponding to the behavior query presented on the query response input screen in the communication terminal, Comparing the response sent from the query authentication server with the behavioral authentication information, if the response is correct, notifying the service providing server of the completion of the secondary authentication, and if the secondary authentication is completed And providing the service to the communication terminal at the service providing server.

In the present invention, the service providing server can perform the primary authentication with the user information and the secondary authentication through the user's response to the behavior query, so that the service user can be clearly authenticated while maintaining the existing authentication method.

In addition, the present invention stores user information including an ID and a pass corresponding to a service user in a service providing server, and also includes a behavior query including an action query and a response corresponding to the service user's behavior information, By separately storing the authentication information, the user information and the behavior authentication information can be managed by the different servers, respectively, so that the risk of hacking can be significantly reduced, and the secondary authentication through the behavior query corresponding to the provided service can be provided, The service user can be more clearly authenticated.

1 is a block diagram of an behavior query authentication system according to an embodiment of the present invention;
FIG. 2 is a flowchart showing a process of joining a membership according to another embodiment of the present invention;
3 is a flowchart illustrating a process of performing authentication using an action query according to another embodiment of the present invention.

Advantages and features of embodiments of the present invention and methods of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. To fully disclose the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The following terms are defined in consideration of the functions in the embodiments of the present invention, which may vary depending on the intention of the user, the intention or the custom of the operator. Therefore, the definition should be based on the contents throughout this specification.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of an behavior query authentication system according to an embodiment of the present invention.

1, the behavior query authentication system according to an embodiment of the present invention includes a communication terminal 110, a communication network 120, a service providing server 130, a service information database 140, a query authentication server 150, A query authentication information database 160, and the like.

The communication terminal 110 includes a PC, a notebook PC, a tablet PC, and a mobile communication terminal. When the user wants to use the service, the communication terminal 110 accesses the service providing server 130 through the communication network 120, The user can input member information including an ID, a password, an address, a phone number, and the like to the service providing server 130 through a membership subscription screen provided from the service providing server 130. Of course, the secondary authentication using the behavior query can be performed through the behavior query authentication server 150 only after the secondary authentication using the behavior query at the time of membership is set to be performed.

In addition, the communication terminal 110 downloads and installs an action query application provided from the query authentication server 150, and performs membership registration for query authentication, and then periodically (for example, 1 Day, 2 days, 7 days, etc.) of the user's behavior to the query authentication server 150.

Here, the behavior information means a response corresponding to an action query including a registration behavior query, an action record query, a trap query, and the like. The registration behavior query is used as an initial behavior query before accumulating user behavior information Means a query for storing a user response (answer) to a general-purpose query (for example, nickname?, Favorite food ?, etc.) arbitrarily selected by the user.

In addition, the behavior record query is a general-purpose behavior in which a value of behavior authentication information in which time-series user behavior information (e.g., position, currency, memo, photograph, image, Queries (for example, where is the appointment with May 29th ?, and what website did you visit on May 29th?).

The traps query does not indicate that an incorrect answer is selected in the registration behavior query or the behavior record query, but does not indicate that the user is not the correct user (i.e., a query with no correct answers) .

When the communication terminal 110 is a member of the service providing server 130 through the process described above and wants to receive a service through the service providing server 130, And then request the service providing server 130 for the primary authentication by inputting the user information including the ID and the password on the login screen.

In addition, when the primary authentication is completed, the communication terminal 110 inputs a response (answer) corresponding to the behavior query presented through the query response input screen provided from the query authentication server 150, And may request the server 150. The question-and-answer input screen may be provided for inputting a subjective response or a multiple choice response, and may include an action query and a plurality of responses (e.g., four, five, etc.) when presented to input a multiple choice response .

Then, the communication terminal 110 can use the service provided by the service providing server 130 when the secondary authentication through the response corresponding to the behavior query is completed.

On the other hand, when the secondary authentication fails (for example, the response to the behavior query is an incorrect answer), the communication terminal 110 displays a query response input screen corresponding to the trap query provided again from the query authentication server 150 A response can be input and transmitted depending on whether the query is a question or not.

Accordingly, if the communication terminal 110 is a trap query, the communication terminal 110 can re-request the secondary authentication through the query response input screen corresponding to the behavior query provided again from the query authentication server 150, A message informing that the secondary authentication corresponding to the user's behavior information has failed from the service providing server 130 can be received.

The communication network 120 includes a wired communication network and a wireless communication network and can provide a wired / wireless communication environment between the communication terminal 110, the service providing server 130 and the query authentication server 150.

The service providing server 130 creates a membership subscription screen and transmits the membership subscription screen to the communication terminal 110. When member information is transmitted from the communication terminal 110 to the communication terminal 110, And stores it in the service information database 140, and registers and registers the user's membership with respect to the service to be used. At this time, when the setting of the secondary authentication using the behavior inquiry is requested from the communication terminal 110 together with the member information, the member registration for the service can be set and registered.

When the user information for the primary authentication is transmitted from the communication terminal 110, the service providing server 130 performs the primary authentication by comparing the transmitted user information with the member information extracted from the service information database 140 . If the user information and the membership information match, the second authentication of the user can be requested to the inquiry authentication server 150. In this case, either of the ID and the password may be transmitted together during the secondary authentication, and the reason why only one of them is transmitted is that the risk of hacking is reduced by separately managing the user information and the behavior authentication information.

When the secondary authentication is completed through the query authentication server 150, the service providing server 130 can provide a service to the corresponding user through the communication terminal 110. [

Of course, if the secondary authentication failure is notified through the inquiry server 150, the service providing server 130 may transmit a message to the communication terminal 110 indicating that the behavior authentication has failed. Here, the service providing server 130 extracts the corresponding member information and notifies the user of the failure of the behavioral authentication with the user's contact, and the contact of the user may include a main contact, an auxiliary contact, and the like.

In the service information database 140, service information and data, service providing record, member information, and the like are stored in the form of a database, and they can be respectively extracted and provided to the service providing server 130.

The query authentication server 150 extracts the behavior query authentication application and transmits the behavior query authentication application to the communication terminal 110 when the behavior query authentication application is requested to download the behavior query authentication application from the connected communication terminal 110, 110 as a member who can use the behavior query authentication application by using the member information transmitted from the user. Of course, the ID and password included in the member information may be the same as the member information set and registered in the service providing server 130, and may be set and registered differently from each other.

Here, the query authentication server 150 generates an action query including a registration behavior query, an action record query, a trap query, and the like to perform the secondary authentication using the behavior information of the user, and provides the generated query to the communication terminal 110 The registration behavior query is a user response (response) to a general query (for example, nickname?, Favorite food?) That the user arbitrarily selected to utilize as an initial behavior query before accumulating user behavior information Quot;). ≪ / RTI >

In addition, the behavior record query is a general-purpose behavior in which a value of behavior authentication information in which time-series user behavior information (e.g., position, currency, memo, photograph, image, Queries (for example, where is the appointment with May 29th ?, and what website did you visit on May 29th?).

The traps query does not indicate that an incorrect answer is selected in the registration behavior query or the behavior record query, but does not indicate that the user is not the correct user (i.e., a query with no correct answers) .

The query authentication server 150 periodically collects the behavior information of the user from the communication terminal 110 and stores the behavior authentication information including the corresponding behavior query and response in the query authentication information database 160 .

On the other hand, when the secondary authentication through the behavior query is requested from the service providing server 130, the query authentication server 150 extracts the behavior authentication information corresponding to the corresponding ID or password from the query authentication information database 160, Generates an action query using the authentication information, generates a query response input screen including the query message, and transmits the query response input screen to the communication terminal 110. This query response input screen can be generated so as to input a subjective response or a multiple choice response to the behavior query.

Then, the query authentication server 150 extracts and compares the behavior authentication information corresponding to the response to the behavior query transmitted from the communication terminal 110, and if the authentication is successful, completes the secondary authentication and notifies the service provision server 130 can do.

Here, if the response corresponding to the transmitted behavior query is not correct, the query authentication server 150 generates a query query, generates a query response input screen including the query query, and transmits the query query input screen to the communication terminal 110.

On the other hand, the query authentication server 150 transmits a response for confirming that the query is a query through a response to the query query (for example, a response to the query query or a wrong error) from the communication terminal 110 And generates a query response input screen including the behavior query input message using the behavior authentication information and transmits the query response input screen to the communication terminal 110. In response to the behavior query transmitted from the communication terminal 110, The car authentication can be re-executed.

Of course, the query authentication server 150 can notify the service providing server 130 that the secondary authentication fails if the response transmitted from the communication terminal 110 is an incorrect answer.

This secondary authentication is preferably limited to a predetermined number of times (for example, three times, five times, etc.).

In the query authentication information database 160, an example sentence of an action query including a registration behavior query, an action record query, a trap query, and the like is stored in a database and stored. And may be provided to the query authentication server 150.

Therefore, by performing the primary authentication with the user information at the service providing server, and the secondary authentication using the behavioral authentication information including the behavior query and the response provided from the query authentication server, the service user can be clearly identified .

In addition, the present invention stores user information including an ID and a password corresponding to a service user in a service providing server, separately stores behavior authentication information including a query and a response corresponding to a service user in a query authentication server Thus, it is possible to manage the user information and the behavior authentication information in different servers, respectively, so that the risk of hacking can be remarkably reduced, and by providing the second authentication through the query response according to the provided service, And can be more clearly authenticated.

Next, a description will be given of a process of membership in an authentication service using the behavior query through the behavior query authentication application, using the user information including the ID and the password in the behavior query authentication system having the above-described configuration, do.

2 is a flowchart illustrating a process of joining a membership according to another embodiment of the present invention.

2, when the communication terminal 110 wants to use a service, the service providing server 130 may access the service providing server 130 through the communication network 120 and request membership of a service to be used (step 202) .

When the service providing server 130 requests the member registration through the communication network 120 from the communication terminal 110, the service providing server 130 may generate a membership registration screen and transmit the membership registration screen to the communication terminal 110 (step 204).

In the communication terminal 110, member information including an ID, a password, an address, a phone number, and the like may be input and transmitted to the service providing server 130 through a membership subscription screen provided from the service providing server 130 Step 206). Of course, the secondary authentication using the behavior query can be performed through the behavior query authentication server 150 only after the secondary authentication using the behavior query at the time of membership is set to be performed.

Accordingly, when the member information is transmitted from the communication terminal 110, the service providing server 130 stores the member information in the service information database 140, and registers and registers the user's membership with respect to the service to be used ( Step 208). At this time, when the setting of the secondary authentication using the behavior inquiry is requested from the communication terminal 110 together with the member information, the member registration for the service can be set and registered.

Meanwhile, the communication terminal 110 accesses the query authentication server 150 and downloads and installs an action query authentication application provided therefrom (step 210).

Then, the communication terminal 110 executes the installed behavioral authentication application and performs member registration for the query authentication. Then, the communication terminal 110 periodically (for example, 1 day, 2 days, 7 days, etc.) through the behavioral query authentication application The behavior information of the user can be transmitted to the query authentication server 150 (step 212).

Here, the behavior information means a response corresponding to an behavior query including a registration behavior query, an behavior record query, a trap query, and the like.

Next, in the query authentication server 150, using the member information (for example, ID and password) transmitted from the communication terminal 110, the setting is registered as a member who can use the behavior query authentication service through the behavior query authentication application And periodically collect the behavior information of the user from the communication terminal 110 to generate and store the behavior authentication information including the behavior query and the response (step 214). Of course, the ID and password included in the member information may be the same as the member information set and registered in the service providing server 130, and may be set and registered differently from each other.

Here, in the query authentication server 150, an action query including a registration behavior query, an action record query, a trap query, and the like is generated in order to perform the secondary authentication using the behavior information of the user, The behavioral inquiry can be generated and stored before the user's behavior information is accumulated. The user can select the general-purpose query (for example, nickname?, Favorite food? Quot;) < / RTI > to the user.

In addition, the behavior record query is a general-purpose behavior in which a value of behavior authentication information in which time-series user behavior information (e.g., position, currency, memo, photograph, image, Queries (for example, where is the appointment with May 29th ?, and what website did you visit on May 29th?).

The traps query does not indicate that an incorrect answer is selected in the registration behavior query or the behavior record query, but does not indicate that the user is not the correct user (i.e., a query with no correct answers) .

Next, in the behavioral inquiry authentication system having the above-described configuration, in a state in which the user is registered in the service providing server and is registered in the behavioral inquiry application, the behavioral authentication process includes user information including an ID and a password, Describe the process of authenticating using information.

3 is a flowchart illustrating a process of performing authentication using an action query according to another embodiment of the present invention.

3, in the query authentication server 150, an action query including a registration behavior query, an action record query, a trap query, and the like is generated to perform secondary authentication using the behavior information of the user, (E.g., nickname?, Favorite food?, Etc.) that the user arbitrarily selected to utilize as the initial behavior query before storing the behavior information of the user. Means a query for storing a response.

In addition, the behavior record query is a general-purpose behavior in which a value of behavior authentication information in which time-series user behavior information (e.g., position, currency, memo, photograph, image, Queries (for example, where is the appointment with May 29th ?, and what website did you visit on May 29th?).

The traps query does not indicate that an incorrect answer is selected in the registration behavior query or the behavior record query, but does not indicate that the user is not the correct user (i.e., a query with no correct answers) .

The query authentication server 150 periodically collects the behavior information of the user corresponding to the behavior query from the communication terminal 130 and sends the behavior authentication information including the behavior query and the response to the query authentication information database 160 (Step 302).

When the communication terminal 110 is a member of the service providing server 130 and wants to receive a service through the service providing server 130, the communication terminal 110 accesses the service providing server 130 through the communication network 120 Then, user information including an ID and a password may be input to the login screen to request the service providing server 130 for the primary authentication (step 304).

When the user information for the primary authentication is transmitted from the communication terminal 110, the service providing server 130 performs primary authentication by comparing the transmitted user information with the member information extracted from the service information database 140 If the user information and the membership information match, the second authentication of the user can be requested to the query authentication server 150 (step 306).

In this case, either of the ID and the password may be transmitted together during the secondary authentication, and the reason why only one of them is transmitted is that the risk of hacking is reduced by separately managing the user information and the behavior authentication information.

If the secondary authentication through the behavior query is requested from the service providing server 130, the query authentication server 150 extracts the behavior authentication information corresponding to the corresponding ID or password from the query authentication information database 160, Generates an action query using the authentication information, generates a query response input screen including the query query message, and transmits the query query input screen to the communication terminal 110 (step 308).

This query response input screen can be generated so as to input a subjective response or a multiple choice response to the behavior query.

In addition, the communication terminal 110 can input a response (answer) corresponding to the behavior query presented through the query response input screen provided from the query authentication server 150 to request the query authentication server 150 for the secondary authentication (Step 310).

The question-and-answer input screen may be provided for inputting a subjective response or a multiple choice response, and may include an action query and a plurality of responses (e.g., four, five, etc.) when presented to input a multiple choice response .

Then, the query authentication server 150 extracts and compares the behavioral authentication information with a response corresponding to the behavioral query transmitted from the communication terminal 110, and if the authentication is successful, completes the secondary authentication and notifies the service providing server 130 (Step 312).

When the secondary authentication is completed through the query authentication server 150, the service providing server 130 may provide the service to the corresponding user through the communication terminal 110 (314).

On the other hand, if the response corresponding to the sentence query is not correct, the query authentication server 150 generates a query query, generates a query response input screen including the query query message, and transmits the query query response screen to the communication terminal 110 (step 316) . Here, if the response corresponding to the behavior query is not matched, the query authentication server 150 generates an action query according to a preset number of times (for example, three times, five times, etc.) and transmits a response thereto to the communication terminal 110 . If the response is not matched by the predetermined number of times, a trap query can be generated and transmitted to the communication terminal 110.

When the secondary authentication fails (for example, the response to the behavior query is an incorrect answer), the communication terminal 110 displays a query response input screen corresponding to the trap query provided again from the query authentication server 150 A response may be entered and transmitted (step 318) depending on whether it is a traps query.

Also, in the query authentication server 150, a response is transmitted from the communication terminal 110 to confirm that the query is a response through a response to the query (for example, whether the query is a query query or a wrong error) And generates a query response input screen including the behavior query input message using the behavior authentication information and transmits the query response input screen to the communication terminal 110. In response to the behavior query transmitted from the communication terminal 110, The authentication can be re-executed (step 320).

Meanwhile, if the response transmitted from the communication terminal 110 is an incorrect answer, the query authentication server 150 may notify the service providing server 130 that the secondary authentication has failed (step 322).

This secondary authentication is preferably limited to a predetermined number of times (for example, three times, five times, etc.).

Of course, when the secondary authentication failure is notified through the inquiry server 150, the service providing server 130 restricts the use of the service of the communication terminal 110 and transmits a message indicating that the communication terminal 110 has failed in the behavior authentication (Step 324). Here, the service providing server 130 may extract the corresponding member information and notify the user of the failure of the behavioral authentication by the contact of the user. The contact information of the user may be a main contact, an auxiliary contact (for example, Number, other mobile communication telephone number), and the like.

Therefore, according to the present invention, the service providing server can perform the primary authentication with the user information and the secondary authentication through the user's response to the behavior query, thereby clearly authenticating the service user while maintaining the existing authentication method.

The present invention also provides a method and system for storing user information including an ID and a password corresponding to a service user in a service providing server, By separating and storing the information, the user information and the behavior authentication information can be managed by different servers, respectively, so that the risk of hacking can be significantly reduced, and by providing the secondary authentication through the behavior query corresponding to the provided service, The user can be more clearly authenticated.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, It will be readily apparent that such substitutions, modifications, and alterations are possible.

110: communication terminal 120: communication network
130: service providing server 140: service information database
150: query authentication server 160: query authentication information database

Claims (10)

A member registration using the user information is performed for a service to be used, a member registration for query authentication is performed while downloading and installing an action query authentication application, and then periodically accesses the behavior query application corresponding to the behavior query Transmits the behavior information as a response, requests the primary authentication by inputting user information when receiving the service, inputs the response corresponding to the behavior query presented through the transmitted query response input screen, A communication terminal for requesting authentication and using the service when the secondary authentication is completed,
Wherein the first authentication is performed by comparing the user information with the member information when the first authentication is requested, and when the first authentication is requested, A service providing server for requesting the execution of the secondary authentication when the authentication is completed and providing the service through the communication terminal when the secondary authentication is completed;
Wherein the behavior inquiry application periodically collects the behavior information from the communication terminal through the behavior query authentication application and stores behavior authentication information including the behavior query and the response corresponding to the behavior information, Extracts the behavior authentication information, creates a query response input screen, and transmits the response message to the communication terminal, extracts the behavior authentication information to determine whether the response transmitted from the communication terminal is correct, and if the response is correct, To the service providing server
And an authentication server.
The method according to claim 1,
Wherein the behavior query includes a registration behavior query, an behavior record query, and a trap query.
3. The method of claim 2,
Wherein the inquiry authentication server generates the inquiry response input screen so that the communication terminal inputs a cooperative answer or a multiple choice response.
The method according to claim 1,
Wherein the service providing server notifies that the authentication has failed through the primary contact and the secondary contact due to the membership when the secondary authentication fails.
The method according to claim 1,
Wherein the query authentication server generates a trap query when the response transmitted from the communication terminal is not correct and provides the query to the communication terminal and selectively transmits the secondary authentication in accordance with the response corresponding to the trap query from the communication terminal Behavioral query authentication system re - executed.
Joining a service and behavior query authentication service to be used respectively,
Periodically collecting behavior information from the query authentication server as a response corresponding to the behavior query from the communication terminal and storing the behavior information as behavior authentication information;
When receiving the service from the communication terminal, accessing the service providing server through a communication network, requesting primary authentication by inputting user information including an ID and a password,
When the primary authentication is requested, requesting the query authentication server to perform secondary authentication after the primary authentication is completed by comparing the member information stored in the service providing server with the stored member information;
Generating a query response using the behavioral authentication information in the query authentication server, generating a query response input screen including the behavior query, and transmitting the query response input screen to the communication terminal,
Inputting a response corresponding to the behavior query presented through the query response input screen in the communication terminal, and requesting the query authentication server for secondary authentication;
Comparing the response sent from the query authentication server with the behavioral authentication information; if the response is correct, completing the secondary authentication and notifying the service providing server;
When the secondary authentication is completed, providing the service to the communication terminal at the service providing server
And an authentication method.
The method according to claim 6,
Wherein the behavior query includes a registration behavior query, an behavior record query, and a trap query.
8. The method of claim 7,
Wherein the inquiry authentication server generates the inquiry response input screen so that the communication terminal inputs a supporting response or a multiple choice response.
The method according to claim 6,
Wherein the service providing server notifies that the authentication has failed through the primary contact and the secondary contact among the member information upon joining the service when the secondary authentication fails.
The method according to claim 6,
Wherein the query authentication server generates a trap query when the response transmitted from the communication terminal is not correct and provides the query to the communication terminal, and when a response corresponding to the trap query is transmitted from the communication terminal, Or notifies the service providing server that the secondary authentication has failed,
Wherein the service providing server notifies the failure of the authentication through the primary contact and the secondary contact among the member information of the subscription of the service when the failure of the secondary authentication is notified.

Images