KR20170013848A - Apparatus and method for authentication, and computer program and recording medium applied to the same - Google Patents

Abstract

Disclosed are a device and a method for authentication, and a computer program and a recording medium applied thereto. The authentication device according to the present invention includes: a registration request unit for encrypting the changed screen information to request registration of the encrypted changed screen information as authentication information, when screen information displayed on a specific screen of a user device is changed by a users input or changed by a factor other than the users input; an authentication confirmation unit for receiving an authentication confirmation request from a communication network connected with the user device; and an authentication performing unit for extracting the screen information displayed on the specific screen according to a permission for the authentication confirmation request, encrypting the extracted screen information, and then transmitting the encrypted authentication screen information to the communication network in response to the authentication confirmation request.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication apparatus and method, and a computer program and a recording medium applicable to the authentication apparatus and method.

The present invention relates to an authentication apparatus and method, a computer program and a recording medium applied thereto, and more particularly to an authentication apparatus and method for user authentication, and a computer program and a recording medium applied thereto.

According to the developments of media and communication, financial service, message service, community service, shopping service, air service, and settlement service through communication connection are provided. These services include most services that can be accessed in real life .

To do so, it is necessary to authenticate the user using the service.

In the conventional authentication method, there is a method of inputting an ID and a password in a login step for accessing a corresponding service. In a service (for example, a payment service) which needs to further strengthen user authentication, And an authentication number input method for confirming and inputting the authentication number sent after the authentication number is sent to the message.

First, in the method of inputting the ID and the password, the case where the user's ID and password are exposed to the outside is very frequent due to the progress of the hacking technology, and accordingly, the change of the password is recommended. Due to these recommendations or the user's willingness, more and more users are changing their passwords frequently to access their services. However, it is not easy for the user to memorize the different passwords for each service, and it is also not appropriate for security to record them on the memo pad. In addition, it is not easy to connect and change login information for all the services used by the user at the time of password change, and it is very troublesome for a user.

In the case of the public certificate system, it is a security concern to store the public certificate in the user device (eg smart phone, PC, etc.). As an alternative to this, it is possible to store the public certificate in the USB and carry it separately. And the like. Also, in the case of the public certificate system, the password is required to be input, and is set to be different from the password used for the login. Accordingly, the user is required to store a password used for login and a different authorized certificate password together.

The telephone authentication method is an authentication method that is mainly used in payment such as bank transfer. In order to confirm the user himself / herself at the time of payment authentication, the telephone is dialed according to the ARS method to the registered user's telephone number, It is the way of inquiry. This is used as an auxiliary authentication means rather than a main authentication because it is possible to respond to a telephone call coming in ARS method by temporarily using the user apparatus.

On the other hand, the authentication number input method is used as various simple payment means. For example, when the user uses the PC to use the shopping service of the company A, and then performs settlement processing using the authentication number input method at the time of payment for the desired shopping item, the payment screen provided by the company A's shopping service displays the user's mobile phone number And so on. Thereafter, the user himself or herself confirms the authentication number provided to the user's cellular phone, and the authentication number is entered in the authentication number input window of the payment screen to perform authentication processing.

At this time, the user may feel the inconvenience of confirming the authentication number directly displayed on the mobile phone and inputting the authentication number into the authentication number input window, and the authentication number is limited to about 4 digits or 6 digits Even if the authentication number is encrypted, it may be exposed by hacking or the like. Due to such concerns, the settlement limit for simple handset payment according to the authentication number input method is set at 300,000 won to 500,000 won, and there is a limit to use for payment or remittance of an upward amount. This limitation of the authentication number input method can be a hindrance to the recent application to PINTECH authentication method.

Therefore, there is a need for a scheme that can overcome all the disadvantages of the above-described prior art authentication schemes.

Korean Registered Patent No. 10-1350342 (Apr. 201, 2014)

SUMMARY OF THE INVENTION The present invention has been made in order to solve the above problems, and it is an object of the present invention to provide an information processing apparatus, An authentication apparatus and method for automatically changing authentication information for automatically performing user authentication without user setting, and a computer program and a recording medium applied thereto.

The objects of the present invention are not limited to the above-mentioned problems, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

According to a first aspect of the present invention, there is provided an authentication apparatus based on a change of screen information, wherein screen information displayed on a specific screen of the user apparatus is changed by an input of a user, An authentication confirmation unit for receiving an authentication confirmation request from a communication network connected to the user apparatus, and a confirmation unit for receiving the authentication confirmation request, Extracting screen information displayed on the specific screen, encrypting the extracted screen information, and transmitting the encrypted authentication screen information to the communication network in response to the authentication confirmation request.

The screen information may include arrangement information for at least one application of the specific screen, notification detail information, background image, or information that can be combined based thereon.

The registration requesting unit and the authentication executing unit can encrypt the public key using a prime number greater than a predetermined number of digits.

The authentication device may be included in the user device, or may be connected to the user device.

And may be used for authentication of an offline settlement through the user device, authentication of an online settlement through the user device, or authentication of an online settlement through another user device of the user.

According to a second aspect of the present invention, there is provided an authentication method based on a change of screen information, wherein screen information displayed on a specific screen of a user apparatus is changed by an input of a user, A step of encrypting the changed screen information and requesting the encrypted change screen information to be registered as authentication information when receiving the authentication information, receiving an authentication confirmation request from the communication network connected to the user apparatus, Extracting screen information displayed on a specific screen, encrypting the extracted screen information, and transmitting the encrypted authentication screen information to the communication network in response to the authentication request.

The step of requesting the registration and the step of performing the transmission processing may include encrypting the public key using a decryption key having a predetermined number of digits or more.

According to a third aspect of the present invention, there is provided an authentication method based on change of screen information, wherein screen information displayed on a specific screen of the user device is changed by an input of a user, Receiving the authentication information registration request for the encrypted change screen information generated by the user device from the communication network when the authentication information is changed, registering the encrypted change screen information as the authentication information, or updating the already registered authentication information Receiving authentication request information for the user, receiving encrypted authentication screen information generated in the user device from the communication network, decrypting the received encrypted authentication screen information, decrypting the decrypted authentication screen information, Comparing the authentication result with the registered authentication information, and comparing the authentication result with the received authentication request Response may include the step of processing transmission.

And transmitting the authentication confirmation request corresponding to the received authentication request to the user device via the communication network between the step of receiving the authentication request and the step of receiving the authentication screen information.

The step of registering or updating the authentication information and the step of decrypting may include a step of decrypting the encrypted information according to a public key cryptography using prime numbers greater than a predetermined number of digits.

According to a fourth aspect of the present invention, there is provided a computer program which, when combined with an authentication apparatus, causes screen information displayed on a specific screen of a user apparatus to be changed by an input of a user, A step of encrypting the changed screen information and requesting the encrypted change screen information to be registered as authentication information when receiving the authentication information, receiving an authentication confirmation request from the communication network connected to the user apparatus, Extracting screen information to be displayed on a specific screen, encrypting the extracted screen information, and transmitting the encrypted authentication screen information to the communication network in response to the authentication request.

The registration requesting step and the transmission processing step may be stored in a recording medium to execute a step of encrypting the public key using a decryption key of a predetermined number of digits or more.

According to a fifth aspect of the present invention, there is provided a computer-readable recording medium which, when being executed by an authentication apparatus, changes screen information displayed on a specific screen of a user apparatus by an input of a user, Encrypting the changed screen information and requesting the encrypted change screen information to be registered as authentication information when the authentication information is changed to another factor; receiving an authentication confirmation request from the communication network connected to the user apparatus; And transmitting the encrypted authentication screen information to the communication network in response to the authentication request after executing the step of extracting the screen information displayed on the specific screen, encrypting the extracted screen information, and transmitting the encrypted authentication screen information.

The registration requesting step and the transmission processing step may include an instruction to execute the step of encrypting with a public key cryptography using prime numbers greater than or equal to a predetermined number of digits.

Accordingly, in the present invention,

Accordingly, in the present invention, when the screen information displayed on a specific screen of the user apparatus is changed by a user's input or changed to a factor other than the input of the user, the changed screen information is encrypted and the encrypted change screen information is transmitted as authentication information There is an advantage that it is possible to automatically change the authentication information of the user at any time.

In addition, in the present invention, when a user accesses a specific service and performs authentication, a terminal accessing a specific service performs a minimum input (e.g., one click for authentication request) for an authentication request, It is possible to carry out both the authentication start and the authentication completion based on a reliable level of security by making a minimum input (e.g., one click for authentication start confirmation) to confirm the authentication start via the authentication device, If the specific service to be accessed is an offline payment service, there is no user input for authentication and it is possible to carry out both the authentication start and the authentication completion based on a reliable level of security only by the user's selection of the payment means have.

Further, in the present invention, it is possible to substitute the password used at the time of login of a specific service, as well as to authenticate an offline settlement through a user device (e.g., a mobile phone) There is an advantage in that it is possible to provide a platform that can handle both authentication and authentication of an online settlement through a user's other user device (e.g., a PC).

The effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned can be clearly understood by those skilled in the art from the description of the claims.

1 is a block diagram showing an authentication apparatus according to an embodiment of the present invention.
Fig. 2 is a configuration diagram showing that the authentication apparatus of Fig. 1 is included in a user apparatus. Fig.
Fig. 3 is a configuration diagram showing that the authentication apparatus of Fig. 1 is connected to a user apparatus; Fig.
4 is an exemplary diagram illustrating a specific screen of a user device according to an embodiment of the present invention.
5 is an exemplary view showing a specific screen of a user apparatus according to another embodiment of the present invention.
FIG. 6 is an exemplary view showing a specific screen of a user apparatus according to another embodiment of the present invention.
FIG. 7 is an exemplary view showing a specific screen of a user apparatus according to another embodiment of the present invention.
FIG. 8 is an exemplary view showing a specific screen of a user apparatus according to another embodiment of the present invention.
9 is a diagram illustrating a specific screen of a user apparatus according to another embodiment of the present invention.
10 is an exemplary view showing a service connection screen according to an embodiment of the present invention.
11 is a diagram illustrating an authentication request message according to an exemplary embodiment of the present invention.
12 is a configuration diagram showing an authentication system according to an embodiment of the present invention.
13 is a configuration diagram showing an authentication system according to another embodiment of the present invention.
14 is a configuration diagram illustrating an authentication system according to another embodiment of the present invention.
15 is a configuration diagram showing an authentication system according to another embodiment of the present invention.
16 is a configuration diagram illustrating an authentication system according to another embodiment of the present invention.
17 is a configuration diagram illustrating an authentication system according to another embodiment of the present invention.
FIG. 18 is a configuration diagram showing the authentication system of FIG. 17 more specifically.
19 is a configuration diagram showing an authentication system according to another embodiment of the present invention.
20 is a flowchart showing an operation of the authentication apparatus of the present invention as an embodiment.
FIG. 21 is a flowchart showing an operation of the authentication server of the present invention as an embodiment.
22 is a flowchart illustrating an operation of a service server according to an embodiment of the present invention.
23 is a flowchart illustrating an example of a payment service to which the authentication system of the present invention is applied.
24 is a flowchart showing another embodiment of the settlement service to which the authentication system of the present invention is applied.
FIG. 25 is a flowchart illustrating another embodiment of a payment service to which the authentication system of the present invention is applied.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention, and the manner of achieving them, will be apparent from and elucidated with reference to the embodiments described hereinafter in conjunction with the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. To fully disclose the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

Further, the embodiments described herein will be described with reference to cross-sectional views and / or schematic drawings that are ideal illustrations of the present invention. Thus, the shape of the illustrations may be modified by manufacturing techniques and / or tolerances. In addition, in the drawings of the present invention, each component may be somewhat enlarged or reduced in view of convenience of explanation.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The authentication device of the present invention can replace the password used for login of a specific service, and can be used for authentication of an offline settlement through a user device (e.g., a mobile phone) or for an online settlement through a user device Or authentication of an online settlement through a user's other user device (e.g., a PC).

Further, the authentication apparatus of the present invention can automatically change the authentication information for user authentication without user setting and allow the user to access the specific service through the authentication process without memorizing or memorizing the changed authentication information .

To this end, the authentication apparatus of the present invention can automatically change the authentication information for user authentication without user setting by changing the screen information displayed on the specific screen of the user apparatus, changing the usage history of the user apparatus, May be changed from time to time.

Here, the screen information includes arrangement information, notification detail information, background image, or information that can be combined based on at least one application of a specific screen.

The usage history of the user device is a history of using the user device by the user (for example, 2015.07.28, 8:20 am to 2015.07.28, 8:35 am A game execution, 2015.07.28, 8:36 am B company message to 'a', from 9:02 am on May 27, 2008 to 9:16 am on May 28, 2015), the user device is not used by the user but the user device (For example, receiving a B message at 8:37 am on July 27, 2015, receiving a C notice application application notification of 9:01 am on May 27, 2015), or information that can be combined based thereon.

For example, in order to register the use history of the user device as the authentication information, and subsequently update the continuously registered authentication information, five of the last usage details used by the user device (e.g., 2015.07.28, From 20th to 2015.07.28 am 8:35 am A game run -> 2015.07.28 at 8:36 am Send a B message to 'A' -> 2015.07.28 at 8:37 am B message Receiving -> 2015.07.28. 9:01 am C Receiving notification of securities application application -> 2015.07.28 From 9:02 am to 2015.07.28 am 9:16 am D extracting securities news) is extracted and extracted The user can register the five use histories as authentication information or update the already registered authentication information. In other words, it is difficult for the user apparatus to continuously use the menu apparatus or to predict which menu or application is used at all, and to continuously update the authentication information.

As another example, it is possible to register not only five of the entire usage history of the user device but also the last usage history of the specific usage history (e.g., E-portal application) as the authentication information or to use the information as the information for updating the registered authentication information It is possible. Here, it is also possible to change the specific usage history (e.g., the portal application of the company E) to another specific usage history (e.g., a message application of the company B).

Hereinafter, the specific contents in which the authentication apparatus of the present invention executes the user authentication based on the change of the screen information will be described.

The authentication apparatus of the present invention is characterized in that screen information displayed on a specific screen of the user apparatus is changed by a user's input (e.g., when a user installs an E-company web to-do viewing application on his or her mobile phone, (For example, when the icon is added, the arrangement information for the application on the background screen is changed), or when a change is made to a factor other than the input of the user (for example, The notification history information of the background screen is changed as the display for informing the reception of the changed screen information is changed), the changed screen information is encrypted, the encrypted change screen information is registered as the authentication information, the already registered authentication information is updated, .

1 is a block diagram showing an authentication apparatus according to an embodiment of the present invention.

As shown in FIG. 1, when the screen information displayed on the specific screen of the user device 200 is changed by a user's input or is changed to a factor other than the user's input, the authentication device 100 displays the changed screen information An authentication confirmation unit for receiving an authentication confirmation request from a communication network connected to the user apparatus 200, and a display unit for displaying a specific screen And encrypts the extracted screen information, and transmits the encrypted authentication screen information to the communication network in response to the authentication confirmation request.

Here, the user device 200 may be any one of a mobile phone such as a smart phone, a personal computer (PC), and an electronic device frequently used by a user.

The specific screen of the user device 200 may be a screen mainly used by the user when the user device 200 is used. For example, when the user device 200 is a smart phone, And a background image of a smart phone as a main operation screen where various applications are located.

When the screen information for the specific screen of the user device 200 is changed, the registration request unit requests the encrypted screen information to be registered in the authentication server 400 as the authentication information. Here, the registration request includes not only requesting the initial registration but also requesting to update the already registered authentication information.

When the screen information for the specific screen of the user device 200 is changed, the changed screen information is encrypted and the encrypted change screen information is requested to be registered as the authentication information. That is, the screen information of the specific screen of the user device 200 It means that the authentication server 400 is requested to change the authentication information every time the authentication information is changed.

The screen information includes arrangement information, notification detail information, background image, or combination information for at least one application of a specific screen, and the information to be included in the screen information can be selected according to the authentication level.

For example, when the authentication level is the 'upper' level as in the financial service, the screen information includes the arrangement information, the notification detail information, and the background image for at least one application on the specific screen, You can extend the parameters.

On the other hand, when the authentication level is 'medium' as in the search service, the screen information may be included as array information or notification history information for at least one application on a specific screen, and parameters for changing the authentication information may be set to be reduced have.

Preferably, the authentication level is maintained at the 'up' level for all services accessible via the user device 200.

The registration request unit includes a configuration for detecting whether the screen information displayed on the specific screen of the user device 200 is changed by a user's input or changed to a factor other than the user's input. And requests the registration of the authentication information based on the change screen information.

Although it is possible to automatically change the authentication information in this way, in the case where the user intends to change the authentication information more frequently, the arbitrary application icon which is arranged on the specific screen of the user device 200 It is also possible to automatically change the authentication information by deliberately deleting an unnecessary application on a specific screen or intentionally sending a security message to another user.

The authentication confirmation unit receives an authentication confirmation request from the communication network connected to the user device 200. [

For example, when a user uses a shopping service using another user device (e.g., PC 300), the authentication service of the present invention can be used at the payment step of the shopping service in use. At this time, the user inputs a specific number (e.g., a telephone number) of the user device (e.g., mobile phone 200) including the authentication device 100 in the payment step of the shopping service, and then clicks the authentication request, In a state where a specific number (e.g., a telephone number) of a user device (e.g., mobile phone 200) including the device 100 is input, if the service server 500 of the shopping service only clicks the authentication request, The authentication server 400 delivers the user authentication request to the authentication server 400, and the authentication server 400 transmits the authentication confirmation request corresponding to the received authentication request to the user device (e.g., mobile phone 200). Then, the user device (e.g., the mobile phone 200) receives the received authentication confirmation request as a message and outputs the received message to the terminal screen so that the user can confirm the received message, thereby allowing the user to recognize the authentication progress status .

In the above example, when the user performs a one-touch input for authentication approval, the authentication execution unit extracts screen information displayed on a specific screen of the user device 200, encrypts the extracted screen information, Information can be transmitted to the authentication server 400 via the communication network in response to the authentication confirmation request.

As another example, when a user uses a payment service in an offline store using a user device (e.g., mobile phone, 200), one of the menus of the user device (e.g., mobile phone 200) . At this time, the authentication device 100 included in the user device (e.g., the mobile phone 200) automatically requests the authentication server 400 to authenticate the user in accordance with the selection of the registration card, It is possible to process encrypted screen information for the screen. That is, when the registration card is selected, the authentication apparatus 100 in this case receives the authentication confirmation request from the application for settlement in the off-line store, and in response to the received authentication confirmation request, The authentication server 400 can directly transmit the authentication request and the encrypted screen information for the specific screen of the user device (e.g., the mobile phone 200) without going through the process.

The communication network referred to in the present invention is a term including both an external network for connecting the user device 200 to an external server and an internal network for communication between the user device 200 and the authentication device 100. The external network includes a network that changes according to the location of the user device 200. The external network includes a communication network that is connected to the authentication server 400 at the time of registration request of the authentication device 100, May be the same or different from each other. The communication network in which the authentication apparatus 100 receives the authentication confirmation request is also a communication network having the same contents as the above.

The registration request unit encrypts the change screen information, and the authentication execution unit encrypts the extracted screen information.

At this time, at least one of the registration requesting unit and the authentication executing unit can encrypt with a public key cryptosystem using prime numbers greater than a predetermined number of digits.

The public key cryptosystem can easily obtain the product m (= pq) of two prime numbers (p and q) given two prime numbers (a natural number that can not be separated by a natural number other than 1 and its number itself) It is a method that draws from the fact that it is difficult to know which m is a product of two prime numbers when a m is given. In other words, the public key system is provided with a device such as a so-called trapdoor in which anyone can easily enter in one direction but can not come back except for a specific user.

When you expose m products of two prime numbers, you use a prime number with two prime numbers p and q, respectively, of 100 or more digits. In practice, the public key cryptosystem used in 1977 when it was first announced was as follows.

m = 114381625757888867669235779976146612010218296721242362562561842 935706935245733897830597123563958705058989075147599290026879543541

The factorization algorithm, which was supposed to take about 4 quadrillion years to factorize by using the known factorization algorithms at that time, was published in 1994, and the following two prime factors p and q of m were obtained.

p = 3490529510847650949147849619903898133417764638493387843990820577

q = 32769132993266709549961988190834461413177642967992942539798288533

Thus, the public key cryptosystem is preferably encrypted with prime numbers greater than the two prime factors p, q mentioned above. That is, the public key cryptosystem is a method that requires a minimum time (for example, several days) to decrypt even if it is exposed to a hacking program.

However, the authentication apparatus 100 of the present invention changes the authentication information every time the screen information displayed on the specific screen of the user apparatus 200 is changed. For example, when the user apparatus 200 is a mobile phone, May vary from user to user, but it may be changed every few seconds, or may be changed every few hours.

That is, since the frequently changed screen information is encrypted using the public key cryptosystem described above, even if it is exposed to hacking and decrypted, at the time when the decryption is completed, new authentication information . With this principle, the authentication apparatus 100 of the present invention can minimize user input (for example, by not inputting a password), thereby enhancing user convenience while providing strong security.

FIG. 2 is a configuration diagram showing that the authentication apparatus of FIG. 1 is included in a user apparatus, and FIG. 3 is a configuration diagram showing that the authentication apparatus of FIG. 1 is connected to a user apparatus.

As shown in FIG. 2, the authentication device 100 may be included in the user device 200. For example, by installing the downloaded authentication program in the user device 200 after the user device 200 downloads the authentication program via the authentication server 400 or other root, the memory of the user device 200 and at least one The authentication apparatus 100-1 may be provided as an operation of the processor.

Meanwhile, as shown in FIG. 3, the authentication apparatus 100 may be connected to the user apparatus 200. The authentication device 100 may be configured as a separate module 100-2 and the configured module may be connected to a specific port of the user device 200 to link the two devices together.

FIG. 4 is a diagram illustrating a specific screen of a user apparatus according to an exemplary embodiment of the present invention, FIG. 5 is an exemplary view illustrating a specific screen of a user apparatus according to another exemplary embodiment of the present invention, and FIG. 7 is a view illustrating a specific screen of a user apparatus according to another embodiment of the present invention, and FIG. 8 is a diagram illustrating a specific screen of a user apparatus according to another embodiment of the present invention FIG. 9 is a diagram illustrating a specific screen of a user apparatus according to another embodiment of the present invention. Referring to FIG.

As shown in FIG. 4, a specific screen of the user device 200 can be set as a background screen K which is a main control screen frequently accessed by the user. In the background screen K, a plurality of applications are arranged.

As shown in FIG. 5, a new application 1 can be added by a user's input to the specific screen K of the reference shown in FIG. As in this case, the addition of the new application 1 means that the arrangement information for at least one application of the specific screen K is changed. At this time, the authentication apparatus 100 detects the change of the screen information, and then proceeds to register the authentication information based on the changed screen information.

As shown in Fig. 6, an application 2 can be deleted by a user's input on the specific screen K of the reference shown in Fig.

In this case, the deletion of the existing application 2 from the specific screen K means that the arrangement information for at least one application of the specific screen K is changed. At this time, the authentication apparatus 100 also detects the change of the screen information, and then proceeds to register the authentication information based on the changed screen information.

As shown in FIG. 7, in the existing specific screen K shown in FIG. 6, a notification history 3 informing that a mail sent from another user has been received as a factor other than the user's input is displayed on the specific screen K, As shown in FIG.

As in this case, reception of new mail means that the notification history information displayed on the specific screen K is changed. At this time, the authentication apparatus 100 detects the change of the screen information according to the change of the notification history information, and then proceeds to register the authentication information based on the changed screen information.

8, a notification history 4 indicating that a message sent by another user is received as a factor other than the input of the user in the existing specific screen K shown in Fig. 7 corresponds to the specific screen K ) Of the application.

As in this case, reception of a new message means that the notification history information displayed on the specific screen K is changed. At this time, the authentication apparatus 100 detects the change of the screen information according to the change of the notification history information, and then proceeds to register the authentication information based on the changed screen information.

As shown in FIG. 9, after a folder 5 is created by a user's input in the existing specific screen K shown in FIG. 8, various applications are grouped and arranged in the created folder 5, The remaining applications can be rearranged according to the user's convenience.

As in this case, rearranging the applications in the array again means that the arrangement information for at least one application of the specific screen K is changed. At this time, the authentication apparatus 100 also detects the change of the screen information, and then proceeds to register the authentication information based on the changed screen information.

10 is an exemplary view showing a service connection screen according to an embodiment of the present invention.

The user accesses a service connection screen for providing a specific portal service using another user's device (e.g., PC 300), and displays the user's device (e.g., mobile phone, 200 "). Then, when the authentication request (N) is clicked, the service server 500 providing the specific portal service retransmits the received authentication request to the authentication server 400, and the user of the specific number input from the authentication server 400 And transmits an authentication confirmation request corresponding to the authentication request received by the device 200 so that the user can know whether or not the authentication is started.

The connected service access screen may be configured to allow a user to input a specific number of a user device (e.g., mobile phone 200) in which the authentication device 100 is installed in the ID field, It is also possible that the specific number of the device (e.g. mobile phone, 200) is entered by default.

11 is a diagram illustrating an authentication request message according to an exemplary embodiment of the present invention.

As shown in FIG. 11, the authentication device 100 of the user device (e.g., mobile phone 200) may receive a message for confirming the authentication request transmitted from the authentication server 400 and output the received message to the terminal screen. On the other hand, the user can select 'approval' or 'rejection' on the message being output on the terminal screen.

When the user selects 'approval', the authentication device 100 of the user device (for example, the mobile phone 200) extracts the screen information displayed on the specific screen K of the user device 200, And transmits the encrypted authentication screen information to the authentication server 400 in response to the authentication confirmation request.

12 is a configuration diagram showing an authentication system according to an embodiment of the present invention.

Referring to FIG. 12, the authentication system is a case in which a user uses a service on the web, as described in FIGS. 10 to 11, and includes an authentication server 400, a service server 500, And a user device (e.g., cellular phone, 200).

For example, when a user connects to a service server 500 providing a shopping service using another user's device (e.g., PC 300), the user may use the authentication service of the present invention The authentication request may be requested on the service connection screen. Thereafter, the service server 500 transmits an authentication request of the user request to the authentication server 400, and transmits an authentication confirmation request corresponding to the authentication request received by the authentication server 400 to the user device 200 to the user device 200 via a particular number. When the user makes an approval input to the authentication confirmation request message output on the terminal screen of the user device 200, the authentication device 100 included in the user device 200 or connected to the user device 200 transmits the authentication confirmation request message Extracts screen information displayed on a specific screen (K) of the apparatus (200), encrypts the extracted screen information, and transmits the encrypted authentication screen information to the authentication server (400). Then, the authentication server 400 decrypts the received encrypted authentication screen information, compares the decrypted authentication screen information with the authentication information being registered, and generates an authentication result. The authentication server 400 provides the generated authentication result to the service server 500.

The service server 500 completes the settlement through the user authentication step according to the authentication result provided.

13 is a configuration diagram showing an authentication system according to another embodiment of the present invention.

13, the authentication system includes an authentication server 400, a plurality of service servers, another user device (e.g., PC 300), and a user device (e.g., a mobile phone , 200). That is, a plurality of service servers 500 authenticate a user through the authentication service of the present invention, and another user device (e.g., PC 300) accesses one of a plurality of service servers 600 The authentication service of the present invention can be requested.

14 is a configuration diagram illustrating an authentication system according to another embodiment of the present invention.

As shown in FIG. 14, the authentication system may include an authentication server 400, a service server 700, and a user device (e.g., mobile phone 200) when the user uses a service on the mobile.

For example, when a user connects to a service server 700 that provides a shopping service for mobile using a user device (e.g., mobile phone 200), when the user authenticates at the payment step, the authentication service of the present invention is used A request for authentication can be requested on the mobile service connection screen. Thereafter, the service server 700 transmits an authentication request of the user request to the authentication server 400, and transmits an authentication confirmation request corresponding to the authentication request received by the authentication server 400 to the user device 200 to the user device 200 via a particular number. When the user makes an approval input to the authentication confirmation request message output on the terminal screen of the user device 200, the authentication device 100 included in the user device 200 or connected to the user device 200 transmits the authentication confirmation request message Extracts screen information displayed on a specific screen (K) of the apparatus (200), encrypts the extracted screen information, and transmits the encrypted authentication screen information to the authentication server (400). Then, the authentication server 400 decrypts the received encrypted authentication screen information, compares the decrypted authentication screen information with the authentication information being registered, and generates an authentication result. The authentication server (400) provides the generated authentication result to the service server (700).

The service server 700 completes the settlement through the user authentication step according to the provided authentication result.

Here, it is also possible to further input a password in order to prevent the user from habitually accepting the authentication confirmation request. Here, the password can be configured in a simple form such as a four-digit password.

15 is a configuration diagram showing an authentication system according to another embodiment of the present invention.

As shown in FIG. 15, the authentication system may include an authentication server 400, a plurality of service servers, and a user device (e.g., mobile phone 200) when the user uses a service on the mobile. That is, a plurality of service servers perform user authentication through the authentication service of the present invention, and a user device (e.g., mobile phone 200) accesses one of a plurality of service servers 800, Service can be requested.

16 is a configuration diagram illustrating an authentication system according to another embodiment of the present invention.

16, the service server 900 can further include an authentication module 910 capable of performing the authentication of the present invention, so that the authentication service of the present invention can be independently performed without accessing the authentication server 400 A structure that can be provided is also possible.

FIG. 17 is a configuration diagram showing an authentication system according to another embodiment of the present invention, and FIG. 18 is a configuration diagram showing the authentication system of FIG. 17 more specifically.

As shown in FIG. 17 and FIG. 18, the authentication service of the present invention can perform user authentication even when payment is made through the user device 200 in the off-line store.

The user can select any one of the registration cards as a payment means in the offline store in the user device (e.g., cellular phone 200). For example, when the screen of the user device (e.g., mobile phone 200) is swept upward from the bottom of the terminal screen, one of the registration cards is selected and moved to the center of the screen. At this time, the authentication device 100 included in the user device (e.g., mobile phone 200) receives the selection of the registration card as an instruction of the authentication request, and transmits an authentication request to the authentication server 400. [

Then, the authentication server 400 transmits an authentication confirmation request corresponding to the received authentication request to the user device 200 through the specific number of the user device 200 received together with the authentication request.

The authentication apparatus 100 of the user device 200 outputs a message of the received authentication confirmation request to the terminal screen so that the user can confirm whether or not the authentication is started.

The authentication device 100 of the user device 200 may display the screen information K displayed on the specific screen K of the user device 200. In this case, And transmits the encrypted authentication screen information to the authentication server 400 after encrypting the extracted screen information.

Thereafter, the authentication server 400 decrypts the received encrypted authentication screen information, compares the decrypted authentication screen information with the authentication information being registered, generates an authentication result, and transmits the generated authentication result to the user device 200 And returns it to the device 100.

Upon receiving the authentication result, the authentication device 100 of the user device 200 transmits the authentication completion to the corresponding payment program of the user device 200, and the payment program can use the selected registration card in the offline store Activate the state.

19 is a configuration diagram showing an authentication system according to another embodiment of the present invention.

As shown in FIG. 19, when the screen is swept upward from the lower end of the terminal screen of the user device (e.g., mobile phone 200), one registration card is selected and moved to the center of the screen. At this time, the authentication device 100 included in the user device (e.g., mobile phone 200) receives the selection of the registration card as an instruction for approval for the authentication request and authentication confirmation request, 200, encrypts the extracted screen information, and transmits the encrypted authentication screen information to the authentication server 400 together with the authentication request.

20 is a flowchart showing an operation of the authentication apparatus of the present invention as an embodiment.

20, when the screen information displayed on the specific screen K of the user device 200 is changed by a user's input or changed to a factor other than the input of the user S100), the changed screen information is encrypted and the encrypted change screen information is requested to be registered in the authentication server 400 as authentication information (S102 and S104).

Thereafter, when the user requests the authentication service of the present invention while using a specific service, the authentication device 100 included in the user device 200 transmits an authentication confirmation request (S106).

A message of the authentication confirmation request received in step S106 is output to the terminal screen of the user device 200 and the authentication process is continued by selecting 'approval' from among 'approval' or 'rejection' displayed together with the message S108).

Then, the authentication apparatus 100 extracts screen information displayed on the specific screen K (S110), encrypts the extracted screen information, and transmits the encrypted authentication screen information to the authentication server 400 (S112, S114).

Thereafter, when the authentication function in the user device 200 is terminated, the execution of the steps is also ended (S116).

Each of these steps of the authentication process is performed as a computer program stored in the recording medium in combination with the authentication device 100 or executed by the authentication device 100 when the computer program is executed. Lt; / RTI >

FIG. 21 is a flowchart showing an operation of the authentication server of the present invention as an embodiment.

As shown in FIG. 21, the authentication server 400 may receive a registration request of authentication information based on the changed screen information from the authentication device 100 included in or connected to the user device 200 (S200). At this time, in order for the authentication server 400 to register the authentication information based on the changed screen information, the authentication server 400 may proceed after the registration procedure for using the authentication service of the present invention has been performed in advance. The above subscription procedure is performed in accordance with a normal service subscription procedure, so that detailed description thereof will be omitted.

Thereafter, in accordance with the registration request received in step S200, authentication information is registered (S202). Here, registration is a concept that includes registration of the first authentication information or updating of already registered authentication information.

Thereafter, when the user requests the authentication service of the present invention while using a specific service, the authentication server receives the authentication request received from the service server 500 providing the specific service (S204).

Then, the authentication server 400 transmits an authentication confirmation request to the user device 200 via the specific number received together with the authentication request (S206).

Then, the authentication server 400 receives the screen information displayed on the specific screen K of the user device 200 from the authentication device of the user device 200 in an encrypted state (S208).

The encrypted authentication screen information received in step S208 is decrypted (S210).

The authentication screen information decrypted in step S201 is compared with the authentication information being registered (S212).

The authentication result is generated based on the comparison result in step S212 (S214), and the authentication result generated in step S214 is provided to the service server 500 (S216).

Thereafter, when the authentication service is terminated, the execution of the steps is also ended (S218).

22 is a flowchart illustrating an operation of a service server according to an embodiment of the present invention.

As shown in FIG. 22, the service server 500 executes a specific service such as a payment service in response to another user device (e.g., PC 300) (S300).

If the specific service executed in step S300 requires user authentication, the user is guided through the service connection screen (S302).

In step S302, the user inputs a specific number (e.g., a telephone number) and an authentication request of the user device 200 for user authentication on the service connection screen after receiving the service guidance in step S302.

The service server 500 provides the authentication request and the specific number received in step S304 to the authentication server 400 (S306).

Thereafter, when the authentication result is received as the execution of the authentication server 400 (S308), the service is continued according to the received authentication result (S310 to S314).

Thereafter, when the user's use of the service is terminated, execution of the steps is also terminated (S316).

23 is a flowchart illustrating an example of a payment service to which the authentication system of the present invention is applied.

23, the authentication apparatus 100 included in the user apparatus 200 may be configured such that the screen information displayed on the specific screen K of the user apparatus 200 is changed by the user's input, (S404), the changed screen information is encrypted and the encrypted change screen information is registered in the authentication server 400 as authentication information (S402).

In response to the registration request received in step S402, the authentication server 400 checks the existing subscription details and registers the encrypted change screen information as the authentication information (S404). Here, registration is a concept that includes registration of the first authentication information or updating of already registered authentication information.

Thereafter, when the user requests the authentication service of the present invention while using a specific web service through another user device 300 (PC) (S406 to S410), the authentication server 400 provides the specific service And receives the authentication request and the telephone number from the service server 500 (S412).

Then, the authentication server 400 transmits an authentication confirmation request for allowing the user to confirm whether or not the authentication is started, to the user device 200 through the received telephone number together with the authentication request (S414).

Thereafter, if there is a user approval input for the authentication confirmation request message received from the authentication device 100 included in the user device 200 (S416), the screen information displayed on the specific screen K of the user device 200 Extracts the extracted screen information, and transmits the encrypted authentication screen information to the authentication server 400 (S418).

The authentication server 400 decrypts the received encrypted authentication screen information, and generates an authentication result based on a result of comparing the decrypted authentication screen information with the authentication information being registered (S420).

Then, the authentication server 400 provides the authentication result generated in step S420 to the service server 500 (S422).

Thereafter, the service server 500 provides the service that can be provided after authentication to the other user device 300 (PC) (S424).

24 is a flowchart showing another embodiment of the settlement service to which the authentication system of the present invention is applied.

24, the authentication apparatus 100 included in the user apparatus 200 may be configured such that the screen information displayed on the specific screen K of the user apparatus 200 is changed by the user's input, (S500), the changed screen information is encrypted and the encrypted change screen information is requested to be registered in the authentication server 400 as authentication information (S502).

In response to the registration request received in step S502, the authentication server 400 checks the existing subscription history and registers the encrypted change screen information as authentication information (S504). Here, registration is a concept that includes registration of the first authentication information or updating of already registered authentication information.

Thereafter, when the user requests the authentication service of the present invention while using a specific mobile service through a user device (e.g., mobile phone 200) (S506 to S510), the authentication server 400 provides the specific service And receives the authentication request and the telephone number from the service server 500 (S512).

After that, the authentication server 400 transmits an authentication confirmation request for allowing the user to confirm whether or not the authentication is started, to the user device 200 through the received telephone number together with the authentication request (S514).

Thereafter, if there is a user approval input for the authentication confirmation request message received from the authentication device 100 included in the user device 200 (S516), the screen information displayed on the specific screen K of the user device 200 Extracts the extracted screen information, and transmits the encrypted authentication screen information to the authentication server 400 (S518).

The authentication server 400 decrypts the received encrypted authentication screen information, and generates an authentication result based on a result of comparing the decrypted authentication screen information with the authentication information being registered (S520).

Thereafter, the authentication server 400 provides the authentication result generated in step S520 to the service server 500 (S522).

Then, the service server 500 provides the service that can be provided after authentication to the user device (e.g., mobile phone 200) (S524).

FIG. 25 is a flowchart illustrating another embodiment of a payment service to which the authentication system of the present invention is applied.

25, the authentication apparatus 100 included in the user apparatus 200 may be configured such that the screen information displayed on the specific screen K of the user apparatus 200 is changed by the user's input, (S600), the changed screen information is encrypted and the encrypted change screen information is requested to be registered in the authentication server 400 as authentication information (S602).

In response to the registration request received in step S602, the authentication server 400 checks the existing subscription details and registers the encrypted change screen information as authentication information (S604). Here, registration is a concept that includes registration of the first authentication information or updating of already registered authentication information.

Thereafter, the user can select one of the registration cards for payment in the offline store at the user device (e.g., mobile phone 200) (S606).

The authentication apparatus 100 included in the user apparatus 200 receives the selection of the registration card in step S606 as an instruction of the authentication request and sends an authentication request to the authentication server 400 and an authentication request of the user apparatus 200 A telephone number is provided (S608).

Then, the authentication server 400 transmits an authentication confirmation request for allowing the user to confirm whether or not the authentication is started, to the user device 200 through the received telephone number together with the authentication request (S610).

If there is a user approval input for the authentication confirmation request message received from the authentication device 100 included in the user device 200 in operation S612, Extracts the extracted screen information, and transmits the encrypted authentication screen information to the authentication server 400 (S614).

The authentication server 400 decrypts the received encrypted authentication screen information, and generates an authentication result based on a result of comparing the decrypted authentication screen information with the authentication information being registered (S616).

Thereafter, the authentication server 400 provides the authentication result generated in step S616 to the user device 200 (S618).

When the authentication result is normal authentication, the selected registration card is activated in a usable state (S620). In the state of step S620, the user device 200 is connected to the off-line payment terminal 1000 in close proximity, (S622).

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, It will be understood. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

Further, according to the present invention, by changing the screen information displayed on a specific screen of the user device, changing the usage history of the user device, or using information that can be combined on the basis of these, authentication information for automatically performing user authentication And a computer program and a recording medium to which the present invention is applied. Therefore, the present invention is industrially applicable because it has a possibility of being commercially available or operating and is practically and practically possible.

100, 100-1, 100-2: authentication device
110: registration request unit 120: authentication confirmation unit
130: Authentication execution unit 200: User device
300: other user device 400: authentication server
500, 600, 700, 800, 900: service server
910: Authentication module 1000: Offline payment terminal

Claims (10)

When at least one of the screen information displayed on a specific screen of the user apparatus and the usage history of the user apparatus is changed by an input of the user or is changed to a factor other than the input of the user, part;
A second registration request unit for extracting transmission target information for a registration request of predetermined authentication information based on the changed information; And
And a third registration request unit for requesting registration of the authentication information through the extracted transmission target information. The method according to claim 1,
Wherein the screen information includes arrangement information, notification detail information, background image, or information that can be combined based on at least one application of the specific screen. The method according to claim 1,
And transmits the changed information or transmits a plurality of pieces of authentication related information including the changed information when requesting registration of the authentication information. The method according to claim 1,
Wherein the usage history includes at least one specific usage history of the user device or a predetermined usage history of the user device, and the specific usage history can be changed to another specific usage history. The method according to claim 1,
Wherein the authentication device is included in the user device or is connected to the user device. The method according to claim 1,
An authentication device used for authentication of an offline settlement through the user device, authentication for online settlement through the user device, authentication for online settlement through the user's other user device, or login service. In the authentication apparatus, when at least one of the screen information displayed on the specific screen of the user apparatus and the usage history of the user apparatus is changed by the user's input or is changed to a factor other than the input of the user, step;
Extracting information to be sent for registration request of predetermined authentication information based on the changed information; And
And requesting registration of the authentication information through the extracted information of the transmission destination. In the authentication server, when at least one of the screen information displayed on the specific screen of the user apparatus and the usage history of the user apparatus is changed by a user's input or is changed to a factor other than the input of the user, authentication based on the changed information Receiving a registration request of information from a communication network;
Executing preprocessing for registration of the authentication information in response to the registration request; And
And registering the authentication information. When the at least one of the screen information displayed on the specific screen of the user apparatus and the usage history of the user apparatus is changed by the user's input or is changed to a factor other than the input of the user in combination with the authentication apparatus, Specifying;
Extracting information to be sent for registration request of predetermined authentication information based on the changed information; And
And requesting registration of the authentication information through the extracted information of the transmission destination. When executed by the authentication apparatus, when at least one of the screen information displayed on the specific screen of the user apparatus and the usage history of the user apparatus is changed by the user's input or is changed to a factor other than the input of the user, ;
Extracting information to be sent for registration request of predetermined authentication information based on the changed information; And
And requesting registration of the authentication information through the extracted information of the transmission destination.

Images