KR20170109504A - Method for ipin-easy-certification based on application and method for providing supplementary service using ipin-easy-certification - Google Patents

Abstract

The present invention relates to a method for improving a conventional I-PIN certification method. More particularly, the purpose of the present invention is to perform certification with enhanced security and easily receive certification without a complicated input by a user at the same time by acquiring a certification code or other inputs through the application for I-PIN certification when the application for I-PIN certification is installed in a portable terminal of the user and enabling the application for I-PIN certification to provide the certification code or other inputs by interoperating with a certification server.

Description

TECHNICAL FIELD [0001] The present invention relates to an IP-based authentication method and a method of providing an IP-based authentication method using the IP-based authentication method,

The present invention relates to a conventional I / F authentication method. More specifically, the present invention relates to a method and system for acquiring a code or other input for authentication through the I / F authentication application while an application for I / F authentication is installed in a portable terminal of a user, Purpose application by interworking with an authentication server and providing a code or other input for the authentication so that the user can easily receive the authentication without complicated input and at the same time, do.

In the domestic online and offline environment, the method of authenticating a certain individual is performed through a very limited method and means in order to ensure the accuracy of identity verification and to prevent damage such as impersonation. These personal authentication methods and means basically have to go through several steps, and since a few security programs are installed, many users feel inconvenience to the authentication procedure itself. In addition, there are many technical and administrative burdens for the authentication providers.

In Korea, Ipin authentication is widely used as personal authentication means. The Ipin authentication is proposed to replace the authentication using the resident registration number, and the resident registration number of the user and the ID / password for the Ipin authentication are registered in the certification authority, so that when the user joins the website or performs financial transaction, So that individual authentication can be performed.

Ipin authentication essentially blocks ID / password from being an easy combination of characters. In particular, it intends to generate a password by combining special characters to maintain security. However, the induction of such a complicated ID / password generation causes the user who uses it to be unable to easily memorize his / her ID / password, thereby causing the problem of reluctance to authenticate the Ipin.

Furthermore, in recent years, it has been required to perform additional secondary authentication in addition to the primary authentication based on the ID / password in the case of the I / F authentication, and as a result, it has become inconvenient for the user to remember up to two passwords for the ID for authentication.

The present invention has been made to solve the above problems and it is an object of the present invention to allow a user to easily perform authentication without requiring the user to input a complicated character or number ID / It is aimed to minimize the risk of information leakage by installing and running an application for authentication of the Ipin on the Ippass by enabling Ipin authentication through it.

The present invention relates to an application-based IP-based simple authentication method, and the present invention not only satisfies the above-mentioned technical requirements, but also provides additional technical elements that can not be readily invented by those skilled in the art .

Korean Patent Publication No. 10-2014-0012335

In order to solve the above-mentioned problems, the present invention proposes an application-based simple IP fingerprint authentication method.

More specifically, the present invention enables a user to obtain a code or input for authentication through an application for authentication on an I-PIN on a portable terminal carried by the user, and directly transmits the code or input to the authentication server for verification, thereby inputting a complicated ID, It is aimed to enable authentication without using

According to an aspect of the present invention, there is provided an application-based IP-based simplified authentication method including: (a) transmitting an I-PIN authentication request for a specific user to an authentication server of a member company server; (b) the authentication server transmits a primary authentication code to a user's second terminal and outputs the primary authentication code to a display of the second terminal; (c) driving an application for Ipin authentication installed in the first terminal of the user; (d) the first terminal of the user inputs the primary authentication code outputted to the display of the second terminal using the code input means provided in the application for Ipin authentication, and receives the input primary authentication code again Transmitting to an authentication server; (e) verifying the first authentication code received by the authentication server, and transmitting a second authentication request to the first terminal of the user if the first authentication code is valid; (f) receiving a second authentication input from the first terminal and transmitting the input to the authentication server; And (g) verifying whether the input for the secondary authentication received by the authentication server is the same as the input previously registered by the first terminal, and transmitting an authentication result according to the verification to the member company server , The primary authentication code is a quail code or a numeric code, and the input for the secondary authentication is an input of a numeric input, a character input, a combination of a numeral and a character, a fingerprint input or a card touch input, , The first terminal further transmits an application ID for the i-PIN authentication and a user ipin account in addition to the primary authentication code, and in the step (f), the first terminal inputs the application ID for the i- And further transmitting the user's iPin account.

In one embodiment of the present invention, an application-based IPF simple authentication method further comprises, between the step (b) and the step (c), a step of, in the IFP authentication window called by the authentication server, Guiding the application installation; The first terminal installing the Ipin authentication application, setting a password required for driving the iFin authentication application, transmitting user identification information including an application ID for iFin authentication and a user iPin account to the authentication server ; The authentication server registers the received user identification information and requests the first terminal to register the second authentication means; Inputting second authentication means according to a second authentication means registration request of the authentication server and transmitting the second authentication means to the authentication server; And matching the secondary authentication means received from the first terminal with the user Ipfin account and storing the secondary authentication means.

In one embodiment, the I / F authentication application installation guide may be performed by transmitting a text message including an address from which the authentication server can download the application for I-PIN authentication to the first terminal of the user .

In one embodiment, the secondary authentication means may include a password input made up of letters or numbers, a combination of letters and numbers, a fingerprint input, or a card touch input.

In one embodiment, the authentication result in the step (g) may include an individual identification key, a date of birth, a gender, an age, an authentication time, a telephone number, or an e-mail address.

According to another aspect of the present invention, there is provided an authentication server comprising: a communication unit for transmitting and receiving data to and from a member company server, a first terminal of a user and a second terminal of a user; An authentication information registration unit for receiving and registering the user identification information from the user terminal and receiving and registering the secondary authentication means transmitted by the user terminal in response to the secondary authentication means registration request; Generates and transmits a first authentication code to the second terminal of the user, receives and verifies the first authentication code transmitted and received by the first terminal of the user from the second terminal, and verifies that the first authentication code is valid A second authentication request is transmitted to the first terminal of the user and the input for the second authentication is received from the first terminal to verify that the input for the second authentication is the same as the input previously registered by the first terminal An Ipin authentication unit; A storage unit for storing authentication information required for registration or secondary authentication means received from the user terminal; And a control unit for controlling the communication unit, the authentication information registration unit, the Ipin authentication unit, and the storage unit, wherein the primary authentication code is a squal code or a numeric code, and the secondary authentication input includes a numeric input, Fingerprint input or card touch input, the first terminal further transmits an application ID for the i-PIN authentication and a user's iPin account in addition to the primary authentication code, and the first terminal transmits the application ID and the user ipin account in addition to the secondary authentication input The application ID for Ipin authentication and the user's iPin account may be further transmitted.

In one embodiment, the authentication information registration unit may guide the first terminal of the user to install the application for the iFin authentication, and may acquire user identification information including an application ID for iFin authentication and a user Ipfin account from the first terminal The second terminal is registered in the storage unit, the second terminal is requested to register with the first terminal, and the secondary authentication unit input from the first terminal is registered in the storage unit by matching with the user's ipin account .

In one embodiment, the authentication information registration unit may transmit a text message including an address for downloading the application for the iFin authentication to the first terminal of the user for the installation guidance of the iFin authentication.

According to the present invention, the user does not need to input a complicated ID and password input in the conventional I / F authentication, and thus, it is possible to perform the I / F authentication more easily and quickly.

In addition, according to the present invention, the number of typing input by the user is reduced for authenticating the user, so that the time required for the input process is reduced and the inconvenience due to the wrong input is reduced.

According to the present invention, there is an effect of minimizing the risk of impersonation and the risk of dealing with authentication characters, since authentication is required at the initial stage of installation and an application for the Ipin authentication which can be driven only by a password after installation is used.

FIG. 1 illustrates a conventional Ip authentication process and an Ip authentication process according to an embodiment of the present invention.
FIG. 2 illustrates a process of installing an application for IPin authentication on a portable terminal of a user and registering an authentication means for IPin authentication.
FIG. 3 shows an application-based simple authentication method according to the present invention in order.
4 is a block diagram illustrating the configuration of an authentication server according to the present invention.

DETAILED DESCRIPTION OF THE EMBODIMENTS Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the like elements throughout. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment according to the present invention will be described in detail with reference to the accompanying drawings.

The embodiments disclosed herein should not be construed or interpreted as limiting the scope of the present invention. It will be apparent to those of ordinary skill in the art that the description including the embodiments of the present specification has various applications. Accordingly, any embodiment described in the Detailed Description of the Invention is illustrative for a better understanding of the invention and is not intended to limit the scope of the invention to embodiments.

A terminal is defined herein as a mobile station, a mobile terminal, a subscriber station, a portable subscriber station, a user equipment, an access terminal, a personal computer (Personal computer), a telephone, and the like, and may include all or some of the functions of the device.

The functional blocks shown in the drawings and described below are merely examples of possible implementations. In other implementations, other functional blocks may be used without departing from the spirit and scope of the following detailed description. Also, although one or more functional blocks of the present invention are represented as discrete blocks, one or more of the functional blocks of the present invention may be a combination of various hardware and software configurations that perform the same function.

Furthermore, the expression "including an element" is merely referred to as an "open" expression, and the element should not be understood as excluding the additional elements.

Further, when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, but it should be understood that other elements may be present in between do.

Hereinafter, a conventional I-PIN authentication method and an application-based simple authentication method according to the present invention will be compared with reference to the drawings.

First, the conventional Aipin authentication method includes a total of three steps of -stage authentication, prevention of unauthorized authentication attempts, and secondary authentication.

First, the primary authentication is a process of inputting the ID and password set by the user at the time of initial registration in order to use the Ipin authentication service. However, as mentioned above, the ID / password required for the first-time stock market needs to be created by a combination of complex letters, numbers, and special characters to prevent leakage, theft, and abuse by hacking and the like. Occurs. On the other hand, if the user can not remember the ID / password required for the first authentication, the user must perform ID / password search again through various stages of cell phone authentication, etc. Thus, even if the ID / password is found or reset, There is a problem that the ID / password is difficult to remember.

Second, prevention of fraudulent authentication attempts is to prevent a malicious person from driving a program or the like that automatically causes an arbitrary character to be input in order to find out the ID / password of another person. In this second step, Is displayed as an image and the user is allowed to input letters or numbers in the image so as to lower the risk as described above. However, even in this negative authentication attempt prevention step, characters or numbers are not clearly seen on the image displayed to the user, and the user often inputs the wrong characters.

Third, the secondary authentication attempts to increase the security by inputting another authentication means after passing through the steps of preventing the previous primary authentication and the unauthorized authentication attempt. Meanwhile, in the second authentication, an APP OP using an application or a password set separately by a user is inputted. As a user, it is inconvenient to pass the authentication process twice substantially. Further, It is also inconvenient to remember two passwords. In particular, a user who does not have APP OPT needs to input a separate password. In this case, the password is also required to be a combination of 6 to 30 alphanumeric characters, so that it is very difficult to memorize.

On the other hand, in contrast to the conventional Ip authentication process, the application-based simple authentication method according to the present invention includes only two step-first authentication and second authentication, and further includes inputting a complicated letter and number ID / password Are excluded.

First of all, according to the present invention, a user operates an application for authentication of the installed Ipin installed in a portable terminal and inputs a code or a numerical code through code input means provided in the application. On the other hand, at this time, the magic code or the numeric code is outputted through a display device (monitor) of another terminal on which a user is attempting to access a web site, for example, a desktop PC, The first authentication can be completed by capturing the quail code with the portable terminal or inputting the numeric code output on the monitor directly to the portable terminal.

Meanwhile, in the case of the simple authentication method according to the present invention, the step of preventing the illegal authentication attempt, which has been required in the conventional I / F authentication process, may be omitted. This can be omitted as the user inputs the code output on the monitor of the other terminal without directly inputting the ID / password. According to the present invention, when the user views the image which is difficult to recognize, There is no need to do so.

Finally, with respect to the secondary authentication, according to the present invention, the user can finally complete the entire authentication by inputting the secondary input means set in advance through the application for the IPIN authentication. At this time, the secondary input means may include a password having a small number of combinations or a fingerprint recognition or a card touch.

As described above, in the case of the application-based simple authentication method according to the present invention, the amount of characters or numbers to be memorized by the user is considerably smaller than that of the conventional method, and the steps required in the entire authentication process are also reduced to two steps.

Hereinafter, an application-based simple authentication method according to the present invention will be described in detail with reference to FIG. 2 and FIG. FIG. 2 is a flowchart illustrating a process of installing an application for authenticating an IP phone to a portable terminal of a user. FIG. 3 illustrates a process of performing actual IP network authentication using an application for IP network authentication.

Prior to the description of the full-scale process, an environment or system in which the present invention is operated will be described.

According to FIG. 2 or FIG. 3, the simple authentication method requires a plurality of configurations, for example, a configuration such as a user terminal, a member company server, and an authentication server.

The user terminal 100 is provided with an application for authentication of the i-pin and can receive a code for authentication. The user terminal of the present invention is assumed to be a portable terminal such as a smart phone, PMP, or laptop computer.

Meanwhile, a broad user terminal may include not only a portable terminal but also a non-portable terminal such as a fixed desktop PC. In the detailed description, the portable terminal capable of installing the application for the Ipin authentication is distinguished from the fixed terminal The portable terminal will be referred to as a first terminal and the fixed terminal as a second terminal separately.

Meanwhile, at this time, the user terminal 100 needs to have an input device so that the user can input a code for authentication or other authentication means. The input device can input characters, numbers, It should be understood that not only the means but also the camera for taking the code are included.

The authentication server 200 refers to a server operated by a certification authority. In this case, the certification authority refers to an authority that can perform authentication of a specific user. Such a certification authority can generate and manage an individual identification key or a resident number substitute key for each user, for example, CI (Connecting Information) and DI (Duplicate Information) And provides information and authentication result that can authenticate the CI, DI, and other specific users when there is an authentication request of the user.

The member company server 300 is a server managed by a company for providing goods or services to a user, and functions to manage information entered by a user in membership registration, login information, purchase history, and the like. An example of a member company server is a portal site, a shopping mall site, and the like.

Above, a brief description has been given of the configurations necessary for implementing the application-based simple authentication method of FIG. 2 or FIG. Hereinafter, the data flow for transmitting / receiving data among the respective components and the performing functions of the respective components will be described in order with reference to FIG. 2 and FIG.

FIG. 2 shows a process of requesting installation of an application for the Ipin authentication to the portable terminal 100 in which the application for the Ipin authentication is not installed and performing various settings after the installation, prior to performing the full authentication procedure.

According to FIG. 2, the installation of the application for the Ipin authentication starts from the user's installation in accordance with the application installation method guided in the Ip authentication window called by the authentication server 200 first. (S201) These installation instructions may be implemented in various forms. For example, the installation guide may be requested through a text message containing an address for downloading the application for Ipin authentication, or a web page of the address may be directly transferred to the portable terminal Installation instructions can also be provided by loading.

In step S201, when a user attempts to join a specific portal site while surfing the web using a desktop PC, the portal site server (member company server 300) transmits an iFin authentication request for the user to the authentication server 200 The authentication server 200 may transmit the uplink Ipin authentication request to the portable terminal 100 of the user. In this case, the authentication server 200 transmits the authentication request to the portable terminal 100 The address for downloading the application for the Ipin authentication may be included in the Ipin authentication request.

Meanwhile, the application for the i-PIN authentication is installed in the portable terminal 100 of the user, and after the installation, the user performs a step S203 such as setting a password to be input when the application for authentication of the upper i-pin is activated. On the other hand, when driving an application for authentication of the Ipin, the user can preferably operate by inputting a password consisting only of four to six small numbers.

After step S203, the portable terminal 100 transmits the user identification information to the authentication server 200 (S205). The user identification information refers to information for distinguishing a user of the portable terminal, or more precisely, a user who uses the Ip authentication application. Preferably, the user identification information includes an APP ID unique to the application for the Ip authentication, , And an iPin account of the user (an ID input at the time of Ipin authentication).

The authentication server 200 that received the user identification information matches and registers it (S207). In this way, when the application for the Ipin authentication is driven on any portable terminal in the future, That is, the user of the application for the Ipin authentication can be identified.

After step S207, the authentication server 200 requests the portable terminal 100 to register the secondary authentication means. (S209) The secondary authentication refers to another authentication that must be performed mandatory after the primary authentication (using a quail code or a numeric code) mentioned in FIG. 1, and the type of the secondary authentication means includes letters, numbers, A fingerprint input, a card touch input, or the like.

A user's fingerprint input may be input using a fingerprint recognition device provided in the portable terminal, or may be input in a state where an independent fingerprint recognition device is interlocked with the portable terminal as a separate device.

The card touch input means that a user accesses two devices (an IC card and a portable terminal) by using NFC technology. By this card touch input, one-time information (OTP ) To generate a one-time authentication value. At this time, the card used for the card touch input may be issued by the certification authority or an organization affiliated with the certification authority.

After the secondary authentication means is input to the portable terminal 100, the portable terminal 100 transmits the authentication result to the authentication server 200 and stores the matching result in the user's account. (S211, S213)

Through the above process, the application for the i-pin authentication is installed in the portable terminal of the user, and the secondary authentication means is also registered.

Hereinafter, an actual authentication process will be described with reference to FIG.

FIG. 3 illustrates a case where a user desires to subscribe to a specific web site by using a desktop PC (second terminal). For example, when a user wants to subscribe to a specific portal site, A simple authentication method according to the present invention can be utilized.

Referring to FIG. 3, the user first requests a membership registration to the member company server 300, and the member company server 300 that receives the request requests the authentication server 200 to authenticate the user. The authentication server 200 receiving the Ipin authentication request outputs a code for primary authentication, preferably a quail code or a numeric code, to the desktop PC (PC screen) to which the user is currently connected. (S301)

On the other hand, the user captures the quill code while driving the application for Ipin authentication in his / her portable terminal (first terminal) 100, or inputs the numeric code through the keypad to transmit an input for primary authentication do. (S303, S305) In the first authentication process, the portable terminal can transmit an APP ID including an application ID unique to an application for the i-PIN authentication to the authentication server, To identify whether they want to do so.

The authentication server 200 receiving the above-described quail code or numeric code performs verification of the input (S307). If it is determined that the above codes are valid ones issued by the authentication server, the authentication server 200 re- (S309). As described above, the secondary authentication means may include an input made of a combination of numbers or letters, numbers and letters, a fingerprint input, a card touch input, etc., and the authentication server 200 may include any one of the above- The second authentication can be performed by receiving the input of the second authentication. For example, the user inputs a password having a numerical value of 6 digits, inputs a fingerprint to a fingerprint recognition device provided in the portable terminal, or accesses a second authentication card owned by the user to an NFC recognition device provided in the portable terminal The second authentication can be performed. (S311)

The authentication server 200 receiving the input for the secondary authentication verifies whether the input is the same as the input previously registered by the user (S313), and after the verification is completed, And transmits the result to the member company server 300 (S315).

As a result, the user can complete the user authentication, and as a result, when viewing from the user's point of view, the user needs to memorize a separate complex ID / password since the user performs the primary authentication using the QAR code or the numeric code Also, when performing the second authentication, it is possible to easily perform the authentication without having to memorize the complex password since only the 6-digit number, the fingerprint or the card touch can be inputted.

Meanwhile, the simple authentication method according to the present invention can be used not only when a user tries to join a member company server by using a desktop PC, but also when he / she wants to join with a portable terminal such as a smart phone. That is, the user can access the member company server using the portable terminal, and in this case, application-based simple authentication according to the present invention can be utilized.

In this case, the authentication process follows the procedure of FIG. 3, but steps S301 to S307, that is, the step of performing the primary authentication may be omitted. This means that, as long as the user is accessing the member company server using the portable terminal, the authentication server can directly identify the application for the installed Ipmin authentication in the portable terminal and the portable terminal of the user. This is because it is not necessary to perform the primary authentication using the QAR code or the numeric code, that is, the process of interworking between the application for the IFP authentication and the authentication server. Therefore, in case of mobile authentication, it is sufficient to input only the secondary authentication, so that the user can finish authentication more easily than when using mobile.

On the other hand, the Ipiphone quick authentication method according to the present invention can be utilized not only for authentication when a user tries to join a specific site, but also when logging in a specific site. That is, instead of inputting the ID and the password at the time of login to the specific web site, the user can login the web site by driving the application for the i-pin authentication installed on the desktop computer or the portable terminal and inputting the secondary authentication means .

For example, a plurality of login methods may be displayed on an initial screen of a specific portal site so that a user can select a login method. When a user selects a login method according to the IP-BIN SIMILAR AUTHENTICATION METHOD, The login process is started by the simple authentication method. At this time, the application installed in the user terminal 100, more precisely the user terminal 100, transmits a QR code or numeric code to the authentication server 200, and the authentication server 200 verifies the above code After the verification, the user terminal 100 requests the secondary authentication again, verifies the input for the secondary authentication received from the user terminal 100, and finally verifies the verification result necessary for determining whether or not to approve the login to the member company server to provide.

In addition, the IP-PIN simple authentication method according to the present invention can also be utilized for integrating and managing user's membership information. In general, users are individually inputting personal information (name, telephone number, address, e-mail address, ID, password, etc.) while separately subscribing to a plurality of web sites. When utilizing the Ipip easy authentication method according to the present invention When accessing a plurality of sites, it is possible to collectively manage the member information stored in a plurality of sites by utilizing the fact that all sites can be accessed through a single medium of IPIN. Meanwhile, the member information collective management service may be provided by the authentication server 200 described above. The authentication server 200 may provide a web page or the like having its own interface to the user so that the user can easily access the member information And the like.

For example, if the user is subscribed to a plurality of portal sites and a shopping mall site using the IPF simple authentication method, the user can access the authentication server 200 and receive a list of his / Or you can be provided with a log of when you used each site. Furthermore, the user can collectively change the user's own member information stored in each site through the web page provided by the authentication server 200. [ When the user registers or logs in the sites that can be authenticated by the Ipin simple authentication method, the authentication server 200 can collectively manage the usage history and the user's membership information at the site, The user can enjoy the convenience of being able to browse his / her past site use history as a whole or to change the changed member information collectively.

Hereinafter, the detailed configuration of the authentication server according to the present invention will be described with reference to FIG.

4, the authentication server 200 according to the present invention includes a communication unit 210, an authentication information registration unit 220, an Aipin authentication unit 230, a storage unit 240, and a control unit 260 , And may further include a service providing unit.

The communication unit 210 is configured to allow the authentication server 200 to perform data communication with an external server or other terminals. The communication unit 210 may communicate with other servers or terminals via a wireless or wired network. Data can be transmitted and received. The communication unit 210 has a function of receiving an authentication request from a server, a function of transmitting an authentication request by an authentication server, and a function of receiving a code or input for authentication from user terminals.

Next, the authentication information registration unit 220 registers the user information and the authentication means required for the IPin authentication in the authentication server 200. The authentication information registration unit 220 functions when the user first wants to utilize the IPF simple authentication method by using the application for IPIF authentication. Specifically, the authentication information registration unit 220 receives the user identification information from the user terminal and registers the user identification information for the first time, When the user terminal transmits the secondary authentication means in response to the secondary authentication means registration request, the user terminal receives the secondary authentication means and stores the matched user identification information. At this time, the user identification information includes an APP ID for the i-PIN authentication and an ID / PASSWORD of the user installed in the user terminal.

Next, the IPin authentication unit 230 functions when the user wants to use the application-based IPin easy authentication method, and operates differently in the following two cases.

First, a case where a user intends to use the IPin simplified authentication method using a fixed terminal (second terminal) such as a PC and a portable terminal (first terminal) such as a smart phone will be described. In this case, the I / F authentication unit 230 first generates a code for primary authentication, and transmits the generated code to the second terminal. At this time, the code for the primary authentication may preferably include a QR code or a numeric code. Thereafter, the Ip authentication unit 230 receives the code acquired from the second terminal by the first terminal and performs the first authentication on the acquired code from the first terminal. When the first authentication is completed, the IFP authentication unit 230 transmits a second authentication request to the first terminal, and upon receiving an input for the second authentication from the first terminal, the second authentication is performed based on the input . At this time, the input for the secondary authentication may include a numeric input, a character input, a fingerprint input, or a card touch input.

Secondly, a case in which a user intends to use the IPF simple authentication method using only a portable terminal will be described. In this case, the Ip authentication unit 230 transmits an authentication request to the user terminal, and receives an input for authentication from the user terminal, and performs authentication thereon. As described above with reference to FIG. 3, the first authentication process is not required in the case of the IPF simple authentication using only the portable terminal, and only the authentication process by the second authentication, that is, the input by the number, letter, fingerprint or card touch input is performed.

Meanwhile, the storage unit 240 is a configuration for storing the authentication information required to be registered or the secondary authentication means received from the user terminal.

The control unit 260 controls each of the detailed configurations of the authentication server 200 such as the communication unit, the authentication information registration unit, the Ipin authentication unit, and the storage unit. The control unit 260 may include at least one computing device In this case, the computing device may be a general purpose central processing unit (CPU), a programmable device device (CPLD, FPGA), an application specific integrated circuit (ASIC), or a microcontroller chip.

Finally, the authentication server 200 may further include a service providing unit 250. The service providing unit 250 is a functional unit for providing an additional service other than authentication to the user in conjunction with the application-based IPin simple authentication method.

The service providing unit 250 can generate a web page including a list of services that the user can select and provide the web page to the user terminal. The service providing unit 250 includes a site login using the IPF simple authentication, Providing records, providing a list of sites to which the user has subscribed, viewing and managing member information of the subscribed sites, and the like. On the other hand, since the service provided by the authentication server 200 has already been described above, it will be omitted from this paragraph.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, It will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the present invention.

100 user terminal
200 authentication server
210 communication unit
220 Certification Information Register
230 Ipin certification department
240 storage unit
250 Service Offering
260 control unit
300 member company server

Claims (8)

(a) the member company server transmits an Ipin authentication request for a specific user to an authentication server;
(b) the authentication server transmits a primary authentication code to a user's second terminal and outputs the primary authentication code to a display of the second terminal;
(c) driving an application for Ipin authentication installed in the first terminal of the user;
(d) the first terminal of the user inputs the primary authentication code outputted to the display of the second terminal using the code input means provided in the application for Ipin authentication, and receives the input primary authentication code again Transmitting to an authentication server;
(e) verifying the first authentication code received by the authentication server, and transmitting a second authentication request to the first terminal of the user if the first authentication code is valid;
(f) receiving a second authentication input from the first terminal and transmitting the input to the authentication server; And
(g) verifying whether the input for the secondary authentication received by the authentication server is the same as the input previously registered by the first terminal, and transmitting the authentication result according to the verification to the member company server,
Wherein the primary authentication code is a squall code or a numeric code,
The input for the secondary authentication is a numeric input, a character input, an input made of a combination of numbers and characters, a fingerprint input or a card touch input,
Wherein the first terminal further transmits an application ID for i-PIN authentication and a user's ipin account in addition to the primary authentication code,
The method of claim 1, wherein the first terminal further transmits an application ID for i-PIN authentication and a user ipin account in addition to the second authentication input.
The method according to claim 1,
Between step (b) and step (c)
Guiding the installation of the application for the IPin authentication to the first terminal of the user in the ITP authentication window invoked by the authentication server;
The first terminal installing the Ipin authentication application, setting a password required for driving the iFin authentication application, and transmitting user identification information including an application ID for iFin authentication and a user iPin account to the authentication server ;
The authentication server registers the received user identification information and requests the first terminal to register the second authentication means;
Inputting second authentication means according to a second authentication means registration request of the authentication server and transmitting the second authentication means to the authentication server; And
And a step of matching the secondary authentication means received from the authentication server with the user Ipfin account and storing the same.
3. The method of claim 2,
Wherein the application installation guide for the Ipin authentication is performed by transmitting a text message including an address at which the authentication server can download the Ipin authentication application to the first terminal of the user, Authentication method.
3. The method of claim 2,
Wherein the secondary authentication means comprises:
A fingerprint input, or a card touch input, wherein the fingerprint input is a combination of letters, numerals, letters and numbers.
The method according to claim 1,
Wherein the authentication result of step (g) includes an individual identification key, a date of birth, a sex, an age, an authentication time, a telephone number, or an e-mail address.
A communication unit for transmitting and receiving data to and from a member company server, a first terminal of a user and a second terminal of a user;
An authentication information registration unit for receiving and registering the user identification information from the user terminal and receiving and registering the secondary authentication means transmitted by the user terminal in response to the secondary authentication means registration request;
Generates and transmits a first authentication code to the second terminal of the user, receives and verifies the first authentication code transmitted and received by the first terminal of the user from the second terminal, and verifies that the first authentication code is valid A second authentication request is transmitted to the first terminal of the user and the input for the second authentication is received from the first terminal to verify that the input for the second authentication is the same as the input previously registered by the first terminal An Ipin authentication unit;
A storage unit for storing authentication information required for registration or secondary authentication means received from the user terminal;
And a control unit for controlling the communication unit, the authentication information registration unit, the Ipin authentication unit, and the storage unit,
Wherein the primary authentication code is a squall code or a numeric code,
The input for the secondary authentication is a numeric input, a character input, an input made of a combination of numbers and characters, a fingerprint input or a card touch input,
The first terminal further transmits an application ID for Ipin authentication and a user IPin account in addition to the primary authentication code,
Wherein the first terminal further transmits an application ID for i-PIN authentication and a user ipin account in addition to an input for secondary authentication.
The method according to claim 6,
Wherein the authentication information registration unit registers,
The method comprising the steps of: guiding installation of the application for the iFin authentication to the first terminal of the user, receiving user identification information including an application ID for iFin authentication and a user IPin account from the first terminal and registering in the storage unit, Wherein the authentication server requests registration of the secondary authentication means to the terminal and registers the secondary authentication means input from the first terminal to the user IPin account and registers the secondary authentication means in the storage unit.
8. The method of claim 7,
Wherein the authentication information registration unit registers,
And transmits a text message including an address for downloading the application for the Ipin authentication to the first terminal of the user for the installation guide of the Ipin authentication application.

Images