KR20170124993A - Method for Operating One-Time Authentication Code - Google Patents

Abstract

A method for operating a disposable authentication code of the present invention is performed through a server communicating with a user wireless terminal in which a program for implementing a wireless communications-based disposable authenticator is installed. The method comprises: a step in which the server confirms unique information of the user wireless terminal by communicating with the program of the user wireless terminal, and confirming unique index information determined not to overlap; a step in which the server connectively stores the unique information of the user wireless terminal and the confirmed index information, and providing the confirmed index information to the program of the user wireless terminal; a step in which the server receives the index information from the program of the user wireless terminal when the program of the user wireless terminal is used as a wireless communications-based disposable authenticator; and a step in which the server approves a use of the program of the user wireless terminal through the wireless communications-based disposable authenticator by authenticating the received index information through the stored index information. The index information is provided to the user wireless terminal, and is stored in a storage region assigned through the program. Next, whenever the program is implemented in the user wireless terminal to be used as a disposable authenticator, the index information is extracted from the assigned storage region to be transmitted to the server through the program.

Description

Method for Operating One-Time Authentication Code}

The present invention relates to a method executed by a server communicating with a user wireless terminal installed with a program for implementing a wireless communication based disposable authenticator, the method comprising the steps of: the server communicating with a program of the user wireless terminal, Confirms unique index information that is determined not to be duplicated, and the server stores the unique information of the user wireless terminal and the identified index information in association with each other, and stores the identified index information in a program of the user wireless terminal And when the server uses the program of the user wireless terminal as a wireless communication based disposable authenticator, the server receives the index information from the program of the user wireless terminal, and the server notifies the received index Authenticating the information, And the index information is provided to the user wireless terminal and stored in a designated storage area through the program, and then the user wireless terminal executes the program to use the program as a disposable authenticator And extracting from the designated storage area through the program and transmitting the retrieved authentication code to the server.

The disposable authentication number can be generated through the wireless terminal to provide the one-time authentication. However, since the disposable authenticator issued by the bank in the past is securely secured as a first-class medium because it is issued in a sealed state so as not to be interlocked with the outside, when the disposable authentication number is generated through the wireless terminal, Unlike the authenticator, it not only has a feature of being connected to wireless communication but also has a problem of being vulnerable to security such as hacking at any time when connected to an open network such as the Internet.

It is an object of the present invention to provide a method that is executed through a server communicating with a user wireless terminal installed with a program implementing a wireless communication based disposable authenticator, A first step of confirming unique information and confirming unique index information determined not to be duplicated; and a step of associating and storing the unique information of the user wireless terminal with the identified index information, A third step in which the server receives the index information from the program of the user wireless terminal when the program of the user wireless terminal is used as a wireless communication based disposable authenticator, Through the stored index information, And a fourth step of authenticating the user and using the program of the user wireless terminal as a wireless communication based disposable authenticator, wherein the index information is provided to the user wireless terminal and stored in a designated storage area through the program, And a method of operating the disposable authentication code, which is extracted from the designated storage area through the program and transmitted to the server whenever the program is executed by the user wireless terminal and used as a disposable authenticator.

A method of operating a disposable authentication code according to the present invention is a method executed by a server communicating with a user wireless terminal installed with a program for implementing a wireless communication based disposable authenticator, A first step of checking the unique information of the user wireless terminal and confirming unique index information determined not to be duplicated; and a step of associating and storing the unique information of the user wireless terminal with the identified index information, A second step of providing the identified index information to a program of the terminal and a second step of providing the index information to the user wireless terminal when the server uses the program of the user wireless terminal as a wireless communication based disposable authenticator, 3 < / RTI > And a fourth step of authenticating the received index information through the use of the user authentication information and authenticating the received user authentication information using the program of the user wireless terminal as a wireless communication based disposable authenticator, wherein the index information is provided to the user wireless terminal, After the program is stored in the storage area and the user wireless terminal executes the program and is used as a disposable authenticator, the program is extracted from the designated storage area and transmitted to the server.

In the second method of operating the disposable authentication code according to the present invention, the server checks authentication code generation information corresponding to the disposable authentication code to be generated and approved for use as a wireless communication-based disposable authenticator through the index information Further comprising the step of storing the authentication code in association with the index information and providing at least a part of the verified authentication code generation information to the user wireless terminal, wherein at least a part of the authentication code generation information is stored in a designated storage area of the user wireless terminal Is stored.

In the method of operating a disposable authentication code according to the present invention, the third step may further include the step of the server receiving unique information of the user wireless terminal through a program of the user wireless terminal, And allowing the server to use the user wireless terminal installed with the program through the index information and the unique information as a wireless communication based disposable authenticator.

In the method of operating the disposable authentication code according to the present invention, when the program of the user wireless terminal is approved to be used as a wireless communication based disposable authenticator, the server transmits an authentication code for generating a disposable authentication code through the wireless communication- And providing another part of the generated information to the user wireless terminal.

A method of operating a disposable authentication code according to the present invention is a method executed by a server communicating with a user wireless terminal installed with a program implementing a wireless communication based disposable authenticator, the method comprising: communicating with a user wireless terminal A first step of checking unique information of the user wireless terminal, a second step of checking index information determined not to be duplicated to provide to the user wireless terminal corresponding to the unique information, a second step of checking unique information of the user wireless terminal, And providing the identified index information to the user wireless terminal; and a third step of, when using the user wireless terminal as a wireless communication based disposable authenticator, using the program of the user wireless terminal A fourth step of receiving the index information, And a fifth step of allowing the user wireless terminal, which has installed the program through the Dex information, to use the user wireless terminal as a wireless communication based disposable authenticator, wherein the index information is provided to the user wireless terminal, The program is executed by the user wireless terminal and is extracted from the designated storage area through the program and transmitted to the server whenever the program is used as a disposable authenticator.

In the method of operating the disposable authentication code according to the present invention, the third step is to check the authentication code generation information corresponding to the disposable authentication code to be generated and approved for use as a wireless communication based disposable authenticator through the index information, And providing at least a part of the verified authentication code generation information to the user wireless terminal, wherein at least a part of the authentication code generation information is stored in a designated storage area of the user wireless terminal .

In the method of operating a disposable authentication code according to the present invention, the fourth step may further include receiving unique information of the user wireless terminal through a program of the user wireless terminal, And allowing the user wireless terminal, which has installed the program through information and unique information, to use the wireless wireless terminal as a wireless communication based disposable authenticator.

In the method of operating the disposable authentication code according to the present invention, when a user wireless terminal installed with the program is approved to be used as a wireless communication-based disposable authenticator, an authentication code for generating a disposable authentication code through the wireless communication- And providing another portion of the information to the user wireless terminal.

A method of operating a disposable authentication code according to the present invention is a method executed by a server communicating with a wireless terminal of a user having a program implementing a wireless communication based disposable authenticator, When the validity of the wireless terminal is authenticated through a communication company to which the wireless terminal is subscribed using the wireless terminal information and the wireless terminal information and the customer information when registering the client information, A first wireless terminal for authenticating separately generated unique information for authenticating a wireless terminal that has executed the program based on the communication between the program and the server executed by the wireless terminal using the wireless communication based disposable authenticator, And the program is executed in the wireless terminal of the user, When a request for using a wireless terminal that has executed a program as a wireless communication-based disposable authenticator of the user is received, authenticating the unique information in a process of communicating with a program executed by the wireless terminal of the user, The method comprising the steps of: a step of authenticating the disposable authentication code using the wireless communication based disposable authenticator of the user and a second step of using the disposable authentication code of the user as the wireless communication based disposable authenticator of the user; And a third step.

The method of operating a disposable authentication code according to the present invention includes the steps of determining a part of one or more authentication code generation information or authentication code generation information to be used for dynamically generating a disposable authentication code through a program of the wireless terminal, Further comprising the step of assigning and storing index information to a part of the authentication code generation information or the authentication code generation information, respectively.

In the method of operating the disposable authentication code according to the present invention, when the wireless terminal that executes the program is authenticated as the wireless communication-based disposable authenticator of the user, And providing at least one index information for selectively determining a part of the code generation information or the authentication code generation information to the program of the authenticated wireless terminal.

In the method of operating a disposable authentication code according to the present invention, the second step may include: receiving unique information transmitted from a program of a wireless terminal requested to be used as the wireless communication based disposable authenticator; And authenticating the program of the wireless terminal requested to be used as the wireless communication-based disposable authenticator.

The method for operating the disposable authentication code according to the present invention is characterized by comprising the steps of: when requesting to use the wireless terminal that has executed the program as the wireless communication-based disposable authenticator of the user, A step 2-2 of confirming a part of authentication code generation information or authentication code generation information matched with the received index information and a step 2-2 of confirming a part of the verified authentication code generation information or authentication code generation information, And a step (2-3) of providing the data to the terminal.

In the method of operating the disposable authentication code according to the present invention, the step (2-3) is characterized in that the data structure of the authentication code generation information is reconstructively reconfigured or rearranged through the program .

In the method of operating the disposable authentication code according to the present invention, the third step may include storing the index information received from the program of the wireless terminal, and transmitting the verification code generated through the authentication code generation information matched with the stored index information And a step of controlling the disposable authentication code to be authenticated via the disposable authentication code.

In the method of operating a disposable authentication code according to the present invention, the third step may include storing authentication code generation information provided as a program of the wireless terminal in correspondence with index information received from a program of the wireless terminal, And controlling the disposable authentication code to be authenticated through a verification code generated using the authentication code generation information provided as a program of the program.

The one-time authentication method using the index exchange according to the present invention comprises the steps of: providing authentication code index information associated with disposable authentication code generation information to a wireless terminal to be used as a disposable authenticator; receiving authentication code index information from the wireless terminal Identifying a wireless terminal unique to the wireless terminal in association with a server of a communication company to which the wireless terminal is connected; and transmitting the wireless terminal to the disposable authenticator through the authentication code index information and wireless terminal unique information And providing the wireless terminal with disposable authentication code generation information associated with the authentication code index information when the wireless terminal is approved for use as a disposable authentication unit.

According to the present invention, the one-time authentication method using the index exchange further includes storing the one or more authentication code index information and the one-time authentication code generation information in association with the wireless terminal unique information to be used as the one- .

According to the present invention, the one-time authentication method using the index exchange includes: receiving N (N> = 2) number of one-time authentication codes (N) generated through the one-time authentication code generation information from the terminal; The method comprising: generating an N-digit number of one-time verification codes (N) through the one-time verification code generation information provided to the terminal; comparing the received one-time verification code (N) with the one-time verification code (N) Outputting (or storing) the comparison result of the code (N) and the disposable verification code (N).

According to the present invention, the step of receiving the authentication code index information from the wireless terminal may include decrypting (or restoring the data structure) the authentication code index information when the authentication code index information is encrypted (or the data structure is changed) And restoring the authentication code index information through the authentication code index information.

According to the present invention, providing the disposable authentication code generation information associated with the authentication code index information to the wireless terminal may include encrypting the disposable authentication code generation information, or changing the data structure of the disposable authentication code generation information To the wireless terminal.

Meanwhile, the one-time authentication method using the index exchange according to the present invention includes the steps of storing authentication code index information in a memory unit, and transmitting authentication code index information stored in the memory unit to a communication company server when using the wireless terminal as a disposable authentication unit (N > = 2) digit number of disposable authentication codes (N) through the use of the one-time authentication code generation information; And outputting the generated disposable authentication code (N).

According to the present invention, in the case where two or more pieces of authentication code index information are stored in the memory unit, the one-time authentication method using the index exchange is characterized in that any one of the two or more pieces of authentication code index information stored in the memory unit The method comprising the steps of:

According to the present invention, the step of transmitting the authentication code index information stored in the memory unit to the communication company server is characterized in that the authentication code index information is encrypted or the data structure of the authentication code index information is changed and transmitted .

On the other hand, the present invention includes a computer-readable recording medium storing a program for executing the above-described one-time authentication method through exchange of indexes.

Meanwhile, the disposable authentication system using the index exchange according to the present invention comprises authentication code index providing means for providing authentication code index information associated with disposable authentication code generation information to a wireless terminal to be used as a disposable authenticator, A wireless terminal unique information confirmation means for confirming wireless terminal unique information for the wireless terminal in association with a server of a communication company to which the wireless terminal is connected; A wireless terminal authentication means for allowing the wireless terminal to use the wireless terminal as a disposable authenticator through the wireless terminal specific information and a wireless terminal authentication means for transmitting the disposable authentication code generation information associated with the authentication code index information to the wireless terminal And a disposable authentication code generation information providing means .

According to the present invention, the one-time authentication system through the index exchange further comprises a storage medium for storing one or more pieces of authentication code index information and disposable authentication code generation information in association with wireless terminal unique information to be used as a disposable authenticator .

According to the present invention, the wireless terminal authentication unit compares the received wireless terminal unique information with the wireless terminal unique information stored in the storage medium, and associates the authentication code index information stored in the storage medium with the wireless terminal unique information, And compares the received authentication code index information to allow the wireless terminal to be used as a disposable authenticator.

According to the present invention, the wireless communication disposable authentication function provided in the wireless terminal is activated through the user authentication information, the wireless terminal is allowed to use the wireless terminal as the wireless communication disposable authenticator through the wireless terminal specific information and the authentication code index information, There is an advantage of solving the problem that the wireless terminal is connected to the wireless communication network and the security function becomes weak by generating the disposable authentication code through the wireless terminal and the problem that the wireless terminal can be used as the disposable authenticator through the communication network, However, the disposable authentication code generation method activates the wireless communication disposable authentication function provided in the wireless terminal through the user authentication information and is automatically processed without any additional user authentication processing, which is advantageous in that the disposable authentication is conveniently provided without complication have.

FIG. 1 is a diagram illustrating a system configuration for providing a one-time authentication code-based security authentication function using an index associated with one-time-use authentication code generation information.
2 is a diagram illustrating an information registration system for registering wireless terminal registration information according to an embodiment of the present invention.
3 is a diagram illustrating a process of registering wireless terminal registration information according to an embodiment of the present invention.
4 is a diagram illustrating a process of registering wireless terminal registration information according to another embodiment of the present invention.
5 is a diagram illustrating a configuration of a system for providing an authentication code index according to an embodiment of the present invention.
6 is a diagram illustrating a process of providing an authentication code index according to an embodiment of the present invention.
7 is a diagram illustrating a process of providing a part of the one-time authentication code generation information associated with the authentication code index information according to an embodiment of the present invention.
8 is a diagram illustrating a configuration of a disposable authentication code authentication system that implements a disposable authentication code through an authentication code index according to an embodiment of the present invention.
9 is a diagram illustrating a configuration of a wireless terminal function for implementing a disposable authentication code through an authentication code index according to an embodiment of the present invention.
10 is a diagram illustrating a process of transmitting an authentication code index in a wireless terminal according to an embodiment of the present invention.
11 is a diagram illustrating a process of providing disposable authentication code generation information after the wireless terminal is used as a wireless communication disposable authenticator according to an embodiment of the present invention.
FIG. 12 is a diagram illustrating a process of providing disposable authentication code generation information after approval of use of a wireless terminal as a wireless communication disposable authenticator according to another embodiment of the present invention.
FIG. 13 is a diagram illustrating a process of providing disposable authentication code generation information after approval of use of a wireless terminal as a wireless communication disposable authenticator according to another embodiment of the present invention.
14 is a diagram illustrating a process of generating a disposable authentication code according to an embodiment of the present invention.
15 is a diagram illustrating a process of generating a disposable authentication code according to another embodiment of the present invention.
FIG. 16 is a diagram illustrating a disposable authentication code authentication process according to an embodiment of the present invention.
17 is a diagram showing an information registration system for registering wireless terminal registration information according to an embodiment of the present invention.
18 is a diagram illustrating a process of registering wireless terminal registration information according to an embodiment of the present invention.
19 is a diagram illustrating a process of registering wireless terminal registration information according to another embodiment of the present invention.
20 is a diagram showing a configuration of an authentication code index providing system according to an embodiment of the present invention.
21 is a diagram illustrating a process of providing an authentication code index according to an embodiment of the present invention.
22 is a diagram illustrating a process of providing a part of the one-time authentication code generation information associated with the authentication code index information according to an embodiment of the present invention.
23 is a diagram illustrating a configuration of a disposable authentication code authentication system that implements a disposable authentication code through an authentication code index according to an embodiment of the present invention.
24 is a diagram illustrating a configuration of a wireless terminal function for implementing a disposable authentication code through an authentication code index according to an embodiment of the present invention.
25 is a diagram illustrating a process of transmitting an authentication code index in a wireless terminal according to an embodiment of the present invention.
26A and 26B are diagrams illustrating a process of providing disposable authentication code generation information after the wireless terminal is used as a wireless communication disposable authenticator according to an embodiment of the present invention.
27A and 27B illustrate a process of providing disposable authentication code generation information after the wireless terminal is used as a wireless communication disposable authenticator according to another embodiment of the present invention.
28A and 28B illustrate a process of providing disposable authentication code generation information after the wireless terminal is used as a wireless communication disposable authenticator according to another embodiment of the present invention.
29 is a diagram illustrating a process of generating a disposable authentication code according to an embodiment of the present invention.
30 is a diagram illustrating a process of generating a disposable authentication code according to another embodiment of the present invention.
31 is a diagram illustrating a disposable authentication code authentication process according to an embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

It is to be understood that both the foregoing general description and the following detailed description of the present invention are exemplary and explanatory and are intended to provide further explanation of the invention as claimed. The configuration is omitted as much as possible, and a functional configuration that should be additionally provided for the present invention is mainly described. Those skilled in the art will readily understand the functions of components that have been used in the prior art among the functional configurations that are not shown in the following description, The relationship between the elements and the components added for the present invention will also be clearly understood.

In order to efficiently explain the essential technical features of the present invention, the following embodiments will appropriately modify, integrate, or separate terms to be understood by those skilled in the art to which the present invention belongs , And the present invention is by no means thereby limited. That is, each means constituting the present invention may be a server (or terminal) provided on the system shown in the following embodiments, or a predetermined function constituent part provided in at least one server (or terminal) Or may be a combination of at least two or more function units included in one or more servers (or terminals). In addition, although the server (or terminal) shown in the following embodiments includes at least two or more functional components for the sake of convenience of the present invention, the functional components shown in the server (or terminal) The present invention can be applied to two or more servers (or terminals) that are matched with the above-described means and are different depending on the role and function of each function configuration unit and the operator (or operating agency) of the server (or terminal) No.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

FIG. 1 is a diagram illustrating a system configuration for providing a one-time authentication code-based security authentication function using an index associated with one-time authentication code generation information.

Referring to FIG. 1, a disposable authentication code-based security system using an index associated with the disposable authentication code generation information includes a wireless terminal 145 used as a wireless communication disposable authenticator, a client's client using the wireless terminal 145 (Or the wireless terminal 145-specific information) corresponding to the wireless terminal 145, one or more authentication code index information, and one or more one-time authentication information associated with the authentication code index A storage medium 135 for storing code generation information (e.g., a seed value) in association with each other, and an authentication code providing authentication code index information associated with one or more one- And an index providing means (100).

In addition, when the wireless terminal 145 is used as a wireless communication disposable authenticator, the disposable authentication code based security system that uses the index associated with the disposable authentication code generation information can notify the wireless terminal 145 to be used as the wireless communication disposable authenticator, And a communication company server (140) for confirming unique information of the terminal (145).

In addition, the disposable authentication code-based security system using the index associated with the disposable authentication code generation information may be configured to transmit the authentication code index providing means 100 (100) from the wireless terminal 145 when the wireless terminal 145 is used as a wireless communication disposable authenticator. An index information receiving means (105) for receiving any one of the authentication code indexes provided by the communication server (140) and the wireless terminal (145) to be used as the wireless communication disposable authenticator in cooperation with the communication company server A wireless terminal 145 unique information confirmation means 110 for authenticating wireless terminal 145 unique information and wireless terminal 145 wireless communication disposable authentication (145) authenticating the wireless terminal (145) when the wireless terminal (145) is authenticated as a wireless communication disposable authenticator; A one-time authentication code generation information checking means (120) for checking the one-time authentication code generation information associated with the registered authentication code index, a disposable authentication code generation information confirming means (120) for verifying the one- (N> = 2) number of disposable authentication codes (N) through the disposable authentication code generation information at the wireless terminal (145), and transmits the disposable authentication code (N) to the authentication request terminal And authentication means (130) for providing a security authentication function through the N-number of one-time authentication codes (N) in cooperation with the authentication request terminal (150).

2 is a diagram showing an information registration system for registering wireless terminal registration information according to an embodiment of the present invention.

In more detail, FIG. 2 illustrates an example of a wireless terminal discovery authentication system in which a customer wireless terminal is used as a wireless communication disposable authenticator that implements a disposable authentication code through an authentication code index, a wireless terminal including at least one of customer information, wireless terminal information, A wireless communication disposable authenticator for implementing the disposable authentication code through the authentication code index based on the customer information, the wireless terminal information, and the communication company information included in the wireless terminal registration information in the information registration system, (Or creates) the customer's wireless terminal specific information for authenticating the use of the wireless terminal, and associates the customer information with the wireless terminal unique information and the communication company information to store the customer's wireless terminal specific information in the storage medium 245 (e.g., Databases linked to financial statements, and authentication via one-off authorization codes. (Eg, a storage medium 245 including at least one database installed in a system for storing data in the system), and those skilled in the art will be able to refer to FIG. 2 and / or FIG. The present invention can be applied to all of the above-mentioned embodiments, and the present invention is not limited to the method shown in FIG.

Hereinafter, the wireless terminal registration information provided from the customer on the information registration system shown in FIG. 2 may be stored in the storage medium 245 (for example, a database linked to a financial institution or financial ledger provided in a financial institution, (A storage medium 245 including one or more databases provided in a system for processing authentication through a network) is referred to as "information registration server 200" for the sake of convenience .

Referring to FIG. 2 according to an embodiment of the present invention, the information registration system includes a window terminal 255 provided at one or more branches of a financial institution, a wired terminal used by the customer, The information registration terminal 260 includes an information registration server 260 provided on the information registration system through a financial network (or a communication network) ) And a communication channel are connected.

According to an embodiment of the present invention, the customer visits the financial institution branch, and one or more application forms for registering the wireless terminal registration information through a window provided at the financial institution branch (or through a counter staff) (For example, a document having a form for filling one or more information items), and when the completed application is submitted to the counter staff, the counter staff inputs the information written in the application through the window terminal 255 And the window terminal 255 transmits the input (or selected) information to the information registration server 200 provided on the information registration system through the financial network.

It is preferable that the counter terminal 255 includes an employee terminal used by a counter staff provided at the financial institution branch office. The information registration server 200 connected to the counter terminal terminal 255 may be a financial institution The financial network connecting the window terminal 255 and the information registration server 200 may be configured to include a server (e.g., an information system) And an access network for connecting the channels.

According to another embodiment of the present invention, the customer accesses the information registration server 200 through one or more client terminals of a wired terminal connected to a wired communication network or a wireless terminal connected to a wireless communication network, and the information registration server 200 (Or selects) the wireless terminal registration information through one or more information registration interfaces provided by the wireless terminal, the client terminal transmits the wireless terminal registration information to the information registration server 200 provided on the information registration system through the communication network It is desirable to transmit information.

Here, the wired terminal connected to the wired communication network is a collective term for all terminal devices connected to the TCP / IP based communication network, and is a desktop computer or a notebook connected to the TCP / IP based communication network. (KIOSK) connected to a TCP / IP based communication network, or the like, or a home terminal (e.g., a set top box) connected to the TCP / IP based communication network.

Further, the wireless terminal connected to the wireless communication network may be any terminal device connected to a CDMA (Code Division Multiple Access) -based mobile communication network, or all terminal devices connected to the IEEE 802.16x based portable Internet, all generic devices connected to the HSDPA- A mobile phone connected to the CDMA-based mobile communication network, a portable Internet terminal connected to the IEEE 802.16x-based portable Internet, or a wireless communication terminal connected to the HSDPA-based wireless data communication network.

According to an embodiment of the present invention, the client terminal outputs one or more information registration interfaces provided by the information registration server 200, and transmits one or more pieces of information constituting the wireless terminal registration information through the information registration interface (For example, a browser program and a communication function, or a communication program and a communication function for communicating with the information registration server 200) for inputting (or selecting) .

According to another embodiment of the present invention, the information registration terminal 260 may include an automatic teller machine connected to a financial network (for example, a financial joint network) in addition to the window terminal 255 to the client terminal. ATM), a cash dispenser (CD), a cash dispenser (not shown), a public switched telephone network (PSTN), a call terminal connected to a wired telephone network such as a Voice over IP (Not shown) connected to a wireless telephone network such as a mobile communication network or a wireless VoIP network, and a terminal (or server) (not shown) provided in one or more affiliated organizations affiliated with the financial institution The present invention is not limited thereto.

The information registration server 200 provided on the information registration system is connected to the information registration terminal 260 through a financial network (or a communication network) (Or devices) provided in a financial institution, or one or more servers (or devices) provided in a system for processing authentication through a disposable authentication code, or a recording medium provided in the server (or apparatus) And the present invention is not limited thereto. According to the embodiment of the present invention, the information registration server 200 confirms (or transmits) the wireless terminal unique information to be used as the wireless communication disposable authenticator and the disposable authentication code generation information to be provided to the wireless terminal to be used as the wireless communication disposable authenticator And storing the authentication code index information in the storage medium 245 in association with each other.

According to an embodiment of the present invention, the information registration server 200 includes an interface unit 205 for connecting and managing a communication channel with the information registration terminal 260 through the financial network (or a communication network) .

According to an embodiment of the present invention, when the information registration terminal 260 is a window terminal 255 connected to a financial network, the interface unit 205 analyzes the protocol stack defined in the financial network, (Or data) transmission / reception using a communication protocol defined in a financial transaction related program provided in the window terminal 255 by connecting a communication channel to the communication terminal 255 and the communication channel.

According to another embodiment of the present invention, when the information registration terminal 260 is a client terminal including a wired terminal connected to a wired communication network, the interface unit 205 may be configured to receive, based on a protocol stack defined in the wired communication network It is preferable to provide a communication interface for connecting the client terminal with a communication channel and transmitting and receiving one or more information (or data) using a communication protocol defined in a communication program provided in the client terminal.

For example, when the client terminal is provided with a browser program corresponding to HTTP (Hyper-Text Transfer Protocol) protocol, the interface unit 205 connects a communication channel with the client terminal based on the TCP / IP protocol, (E.g., a Hyper-Text Markup Language (HTML) compliant web page) or a communication interface for transmitting and receiving information using the HTPP protocol defined in the browser program.

Alternatively, when the client terminal is provided with a communication program for communicating with the information registration server 200, the interface unit 205 connects a communication channel with the client terminal based on the TCP / IP protocol, And provides a communication interface for information (or data) transmission and reception using the communication protocol defined in the communication program.

Alternatively, if the information registration terminal 260 is a client terminal including a wireless terminal connected to a wireless communication network, the interface unit 205 may communicate with the client terminal based on a protocol stack defined in the wireless communication network And provides a communication interface for transmitting and receiving one or more information (or data) using a communication protocol defined in a communication program provided in the client terminal.

For example, when the client terminal is provided with a browser program corresponding to a wireless application protocol (WAP) or an HTTP protocol, or a wireless protocol compatible with the WAP / HTTP, the interface unit 205 transmits a wireless (E.g., an HTML compatible web page, a WML (Wireless Compatible Web), a WML (Wireless Internet Protocol), or the like) using a WAP / HTTP protocol (or a WAP / HTTP compatible protocol) defined in the browser program, Markup Language) compatible web page) or a communication interface for transmitting and receiving information.

Alternatively, when the client terminal is provided with a communication program for communicating with the information registration server 200, the interface unit 205 connects the communication channel with the client terminal based on the wireless communication protocol, And provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the program.

Referring to FIG. 2, the information registration server 200 may be configured such that the information registration terminal 260 connects a communication channel with the information registration server 200 through the interface unit 205, (Or extracts) an information registration interface for inputting (or selecting) the wireless terminal registration information from the information registration terminal 260 in cooperation with the interface unit 205 when the wireless terminal registration information registration is requested And an interface providing unit (210) for providing the information to the information registering terminal (260).

The interface providing unit 210 connects the communication channel with the information registration server 200 through the interface unit 205 and requests registration of the wireless terminal registration information through the communication channel (Or selects) the wireless terminal registration information using the function configuration provided in the information registration terminal 260 and transmits the information registration information to the information registration server 200 through the financial network (Or extracts) the information registration interface from the information registration terminal 260 (or the communication network) through the financial network (or communication network) in cooperation with the interface unit 205, ).

A program having one or more information registration interfaces for inputting (or selecting) the wireless terminal registration information to the information registration terminal 260 and transmitting the registration information to the information registration server 200 via the financial network (or communication network) The function of the interface providing unit 210 in which the interface providing unit 210 provides the information registration interface to the information registering terminal 260 may be omitted and the present invention is not limited thereto.

Then, the information registration terminal 260 inputs (or selects) wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information based on the information registration interface, And transmits the registered wireless terminal registration information to the information registration server 200 through the financial network (or communication network).

2, the information registration server 200 inputs (or selects) the wireless terminal registration information through the information registration interface in the information registration terminal 260 and transmits the registration information to the interface unit 205 An information receiving unit (215) for receiving the wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information in cooperation with each other; A verification unit 240 for verifying the validity of a wireless terminal for use as a wireless communication disposable authenticator for implementing a disposable authentication code through the wireless communication terminal, A wireless terminal unique information confirmation / generation unit 220 for confirming (or generating) the wireless terminal specific information, (E.g., a database linked to a financial institute or a financial institute provided in a financial institution, and a database provided in a system for processing authentication using a disposable authentication code) And an information storage unit 235 for storing the information in the storage medium 245 (including the storage medium 245).

*

When the wireless terminal registration information is input (or selected) by the information registration terminal 260 through the information registration interface, the information receiving unit 215 interworks with the interface unit 205, And wireless terminal registration information including at least one of information and communication company information.

The customer information includes at least one of customer's personal information (e.g., name, resident registration number, address, contact information), member information (e.g., member ID / PW information), and customer number registered in the storage medium 245 .

According to an embodiment of the present invention, when the storage medium 245 is a financial ledger, the customer information preferably includes at least one customer specific information for identifying the customer through a customer ledger registered in the financial ledger And at least one customer unique information matching the subscriber information registered in the communication company to which the customer wireless terminal is subscribed.

The wireless terminal information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, (For example, an electronic serial number (ESN)), and a wireless terminal opening number.

The communication company information is information for identifying a wireless communication company to which the wireless terminal corresponding to the wireless terminal unique information is subscribed, and may include information on the communication company server 250 provided in the communication company.

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 8 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, Preferably, the wireless terminal registration information further includes user authentication information for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal in the disposable authentication code authentication system.

When the wireless terminal registration information is received, the validity checking unit 240 reads the received wireless terminal registration information and transmits the wireless wireless terminal discovery authentication code And the terminal validity is confirmed.

According to an embodiment of the present invention, the wireless terminal validation includes checking whether one or more ledger information matching the wireless terminal registration information is registered in the ledger D / B on the financial system associated with the information registration system .

For example, the wireless terminal validation check includes checking whether the customer information included in the wireless terminal registration information is registered in the customer ledger provided in the ledger D / B on the financial system associated with the information registration system desirable.

Also, the wireless terminal validity check may be performed by providing the customer information and the wireless terminal information to the communication company server 250 corresponding to the communication company information (or wireless terminal information) based on the customer information, the wireless terminal information, and the communication company information , And checking whether the subscriber information including the customer information and the wireless terminal information is subscribed to the communication company.

When the validity of the wireless terminal is confirmed, the wireless terminal unique information verification / generation unit 220 implements the one-time authentication code through the authentication code index on the basis of the wireless terminal information included in the wireless terminal registration information Characterized in that the unique information of the customer wireless terminal for authenticating the use as the wireless communication disposable authenticator is confirmed or the unique information of the customer wireless terminal is generated.

According to the embodiment of the present invention, the wireless terminal unique information verification / generation unit 220 may include a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (E.g., an electronic serial number (ESN) assigned to the wireless terminal, and a wireless terminal opening number, to the customer wireless terminal via the authentication code index, It is preferable to confirm the customer wireless terminal unique information for authenticating the use as the wireless communication disposable authenticator for implementing the authentication code as the wireless terminal unique information.

Alternatively, the wireless terminal unique information verification / generation unit 220 may generate unique combination (s) generated by combining one or more (or all) of the wireless terminal telephone number, the UICC / USIM serial number, the terminal serial number, It is preferable to process the customer wireless terminal unique information for authenticating that the customer wireless terminal is used as a wireless communication disposable authenticator for implementing the disposable authentication code through the authentication code index.

Then, the information storage unit 235 associates the customer information included in the wireless terminal registration information with the confirmed (or generated) wireless terminal unique information and the communication company information, and stores the combined information in the storage medium 245 (for example, A database associated with a financial director or a financial director, and a storage medium 245 including at least one database provided in a system for processing authentication through a disposable authentication code).

According to an embodiment of the present invention, when the storage medium 245 is a financial ledger, the customer information is included in the customer ledger, and the wireless terminal unique information and the communication company information are stored in the form of an additional information ledger And is preferably registered in the ledger D / B.

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 8 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, The information storage unit 235 preferably stores the user authentication information in the storage medium 245 (not shown), and thus the present invention is not limited thereto.

Referring to FIG. 2, when the wireless terminal unique information is confirmed (or generated), the information registration server 200 generates an authentication code index And an information storage unit (235) for storing the wireless terminal unique information and the authentication code index information confirmed (or generated) in association with each other in the storage medium (245) .

When the wireless terminal specific information is confirmed (or generated), the authentication code index information check / generation unit 225 checks the authentication code index D / B (Not shown), or generates new authentication code index information that does not overlap with the previously authenticated (or generated) authentication code index. The information storage unit 235 stores the authentication code index information 245) and the authentication code index information confirmed (or generated) in association with each other.

Referring to FIG. 2, when the information registration server 200 registers the disposable authentication code generation information for using the customer wireless terminal as a wireless communication disposable authenticator with the authentication code index information and registers it on the ledger, A disposable authentication code generation information confirmation / generation unit 230 for confirming (or generating) the one-time authentication code generation information to be associated with the authentication code index information, And an information storage unit (235) for storing the generated information in the storage medium (245) in association with each other.

When disposable authentication code generation information for using the customer wireless terminal as a wireless communication disposable authenticator is pre-registered in the ledger in connection with the authentication code index information, the disposable authentication code generation information confirmation / When the customer wireless terminal is used as a wireless communication disposable authenticator, the disposable authentication code generation information to be provided to the customer wireless terminal is checked from the disposable authentication code generation information management D / B (not shown) so as not to be duplicated, And generates new one-time authentication code generation information that does not overlap with the authentication code index (or generated authentication code index) stored in the storage medium 245. The information storage unit 235 stores the authentication code index information Terminal unique information) and the authentication code index information confirmed (or generated) are stored in association with each other .

When disposable authentication code generation information corresponding to the authentication code index information is dynamically generated in real time in the course of using the customer wireless terminal as a wireless communication disposable authenticator according to another embodiment of the present invention, (Or generating) the data to be stored in the storage medium 245 may be omitted, and thus the present invention is not limited thereto.

FIG. 3 is a diagram illustrating a process of registering wireless terminal registration information according to an embodiment of the present invention.

In more detail, FIG. 3 illustrates a case where a program having an information registration interface is provided in the information registration terminal shown in FIG. 2, the information registration terminal drives the program so that the customer information, the wireless terminal information, (Or selecting) the wireless terminal registration information including the wireless terminal registration information including the wireless terminal registration information and the wireless terminal registration information, the client wireless terminal is authenticated using the wireless terminal as the wireless disposable authentication unit implementing the one- (Or generating) the wireless terminal specific information, associating the wireless terminal specific information with the wireless terminal specific information and the communication company information, and storing the wireless terminal specific information in the storage medium, wherein the authentication code index information associated with the wireless terminal unique information, (Or generates) the one-time authentication code generation information associated with the storage medium As the process for storing in, for example, if the information registering terminal to the service area terminal, showing the exemplary method for registering the mobile station registration information through the window terminal.

Those skilled in the art will be able to conceive of various methods of registering the wireless terminal registration information by referring to and / or modifying FIG. 3, but the present invention is not limited to the above- The present invention is not limited to the method shown in FIG.

For example, when the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated in real time in the course of using the customer wireless terminal as a wireless communication disposable authenticator, the disposable authentication code generation information is confirmed (or generated) The process of storing the data in the storage medium may be omitted, and thus the present invention is not limited thereto.

Hereinafter, in FIG. 3, the information registration terminal shown in FIG. 2 is referred to as a "terminal" for convenience sake, and the information registration server shown in FIG.

Referring to FIG. 3, a terminal equipped with a program having the information registration interface authenticates an information registration right (for example, a teller authority) by connecting a communication channel with the server, and transmits the client information, And outputs an information registration interface for inputting (or selecting) wireless terminal registration information including at least one piece of information (300).

Then, the terminal inputs (or selects) wireless terminal registration information including one or more client information, wireless terminal information, and communication company information through the information registration interface (305).

If the terminal inputs (or selects) wireless terminal registration information including the customer information, the wireless terminal information, and the communication company information through the information registration interface (310), the terminal accesses the input Or selected wireless terminal registration information including wireless terminal information and communication company information to the server (315).

The customer information preferably includes at least one of the customer's personal information (e.g., name, resident registration number, address, contact information), member information (e.g., member ID / PW information) .

According to an embodiment of the present invention, when the storage medium is a financial ledger, the customer information preferably includes at least one customer-specific information for identifying the customer through a customer ledger registered in the financial ledger, And at least one customer specific information matching the subscriber information registered in the communication company to which the customer wireless terminal is subscribed.

The wireless terminal information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, (For example, an electronic serial number (ESN)), and a wireless terminal opening number.

The communication company information is information for identifying a wireless communication company to which the wireless terminal corresponding to the wireless terminal unique information is subscribed, and it preferably includes the communication company server information provided in the communication company.

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 5 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, Preferably, the wireless terminal registration information further includes user authentication information for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal in the disposable authentication code authentication system.

Then, the server receives and reads the wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information, and confirms the validity of the wireless terminal (320).

According to an embodiment of the present invention, the wireless terminal validation includes checking whether one or more ledger information matching the wireless terminal registration information is registered in the ledger D / B on the financial system associated with the information registration system .

For example, the wireless terminal validation check includes checking whether the customer information included in the wireless terminal registration information is registered in the customer ledger provided in the ledger D / B on the financial system associated with the information registration system desirable.

Also, the wireless terminal validity check may be performed by providing the customer information and the wireless terminal information to a communication company server corresponding to the communication company information (or wireless terminal information) based on the customer information, the wireless terminal information, and the communication company information, And checking whether subscriber information including the customer information and the wireless terminal information is subscribed to.

If the validity of the wireless terminal is not authenticated (325), the server generates and transmits information registration error information to the terminal (330), and does not perform the wireless terminal registration information registration procedure.

On the other hand, if the validity of the wireless terminal is verified (325), the server uses the wireless wireless terminal as a wireless communication disposable authenticator for implementing the disposable authentication code through the authentication code index based on the wireless terminal information included in the wireless terminal registration information (335), or the customer wireless terminal unique information is generated (335).

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the wireless terminal unique information is confirmed (or generated) (340), the server concatenates the client information included in the wireless terminal registration information with the confirmed (or generated) wireless terminal unique information and the communication company information and stores And stores it in the medium (345).

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 5 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, The server preferably stores the user authentication information in the storage medium (not shown), and thus the present invention is not limited thereto.

The server confirms (or generates) the disposable authentication code generation information associated with the authentication code index information and the authentication code index information associated with the wireless terminal unique information (350) Index information is stored in the storage medium, and the authentication code index information and the one-time authentication code generation information are associated with each other and stored in the storage medium (355). Then, the information registration history information is generated and transmitted to the terminal 360, and completes the registration procedure for the wireless terminal registration information.

4 is a diagram illustrating a process of registering wireless terminal registration information according to another embodiment of the present invention.

In more detail, FIG. 4 is a flowchart illustrating a method of connecting a communication channel to the information registration server shown in FIG. 2 through a communication network in the information registration terminal shown in FIG. 2, (Or selecting) wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information to the information registration terminal, wherein the information registration terminal provides the information registration interface with the information registration interface (Or selects) wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information, and transmits the selected wireless terminal registration information to the information registration server through the wireless terminal registration information A disposable authentication code is a wireless communication disposable authenticator that implements the use of authentication (Or generating) the wireless terminal specific information, and associating the wireless terminal specific information and the wireless terminal specific information with the wireless terminal specific information and storing the wireless terminal specific information in a storage medium, wherein the authentication code index information associated with the wireless terminal unique information, (Or creating) the one-time authentication code generation information associated with the information, and storing the information in the storage medium. For example, when the information registration terminal is a client terminal, And shows the method of registering registration information.

Those skilled in the art will be able to conceive of various methods of registering the wireless terminal registration information by referring to and / or modifying FIG. 4, but the present invention is not limited to the above- The present invention is not limited to the method shown in FIG.

For example, when the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated in real time in the course of using the customer wireless terminal as a wireless communication disposable authenticator, the disposable authentication code generation information is confirmed (or generated) The process of storing the data in the storage medium may be omitted, and thus the present invention is not limited thereto.

Hereinafter, in FIG. 4, the information registration terminal shown in FIG. 2 is referred to as a "terminal" for convenience sake, and the information registration server shown in FIG.

Referring to FIG. 4, when the terminal requests a registration of a wireless terminal registration information by connecting a communication channel with the server, the server generates a web page including an information registration interface for registering the wireless terminal registration information (Or extracts) (step 405), and transmits a web page including the information registration interface to the terminal through the communication channel and outputs the web page.

Then, the terminal inputs (or selects) the wireless terminal registration information including one or more client information, wireless terminal information, and communication company information through the information registration interface (step 415).

If the terminal inputs (or selects) the wireless terminal registration information including the customer information, the wireless terminal information, and the communication company information through the information registration interface (420), the terminal accesses the input And transmits wireless terminal registration information including wireless terminal information and communication company information to the server (425).

The customer information preferably includes at least one of the customer's personal information (e.g., name, resident registration number, address, contact information), member information (e.g., member ID / PW information) .

According to an embodiment of the present invention, when the storage medium is a financial ledger, the customer information preferably includes at least one customer-specific information for identifying the customer through a customer ledger registered in the financial ledger, And at least one customer specific information matching the subscriber information registered in the communication company to which the customer wireless terminal is subscribed.

The wireless terminal information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, (For example, an electronic serial number (ESN)), and a wireless terminal opening number.

The communication company information is information for identifying a wireless communication company to which the wireless terminal corresponding to the wireless terminal unique information is subscribed, and it preferably includes the communication company server information provided in the communication company.

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 5 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, Preferably, the wireless terminal registration information further includes user authentication information for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal in the disposable authentication code authentication system.

Then, the server receives and reads the wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information, and confirms the validity of the wireless terminal (430).

According to an embodiment of the present invention, the wireless terminal validation includes checking whether one or more ledger information matching the wireless terminal registration information is registered in the ledger D / B on the financial system associated with the information registration system .

For example, the wireless terminal validation check includes checking whether the customer information included in the wireless terminal registration information is registered in the customer ledger provided in the ledger D / B on the financial system associated with the information registration system desirable.

Also, the wireless terminal validity check may be performed by providing the customer information and the wireless terminal information to a communication company server corresponding to the communication company information (or wireless terminal information) based on the customer information, the wireless terminal information, and the communication company information, And checking whether subscriber information including the customer information and the wireless terminal information is subscribed to.

If the validity of the wireless terminal is not authenticated (435), the server performs a disposable authentication code for implementing the disposable authentication code through the authentication code index on the basis of the wireless terminal information included in the wireless terminal registration information (445) whether the wireless wireless terminal unique information is to be authenticated or the wireless wireless terminal unique information is generated.

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the wireless terminal unique information is confirmed (or generated) (450), the server concatenates the client information included in the wireless terminal registration information with the confirmed (or generated) wireless terminal unique information and the communication company information and stores And stores it in the medium (455).

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 5 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, The server preferably stores the user authentication information in the storage medium (not shown), and thus the present invention is not limited thereto.

In addition, the server confirms (or generates) (460) the authentication code index information associated with the wireless terminal unique information and the one-time authentication code generation information associated with the authentication code index information (460) Index information is stored in the storage medium, and the authentication code index information is associated with the disposable authentication code generation information and stored in the storage medium (465).

FIG. 5 is a diagram illustrating a configuration of a system for providing an authentication code index according to an embodiment of the present invention.

5 is a flowchart illustrating a method of authenticating the use of the customer wireless terminal 535 as a wireless communication disposable authenticator in the storage medium 530 through the information registration system shown in FIG. And provides the authentication code index information to the wireless terminal 535 corresponding to the unique information of the customer wireless terminal 535 after the authentication code index information is registered. In the technical field of the present invention, Those skilled in the art will be able to refer to and / or modify this FIG. 5 to derive various implementations of the authentication code index providing system configuration (e.g., some configuration portions omitted, or broken down, or combined implementation methods) However, the present invention is not limited to the above-described embodiments, This is not limited.

Hereinafter, the components corresponding to one or more means and / or functional configurations for providing the authentication code index information to the customer wireless terminal 535 on the index providing system shown in FIG. 5 will be referred to as "index providing server 500 & "

Referring to FIG. 5 according to an embodiment of the present invention, the authentication code index providing system includes a wireless terminal 535 that is provided with the authentication code index information and is used as the wireless communication disposable authenticator, And confirms the unique information of the wireless terminal 535 and the authentication code index information registered in the storage medium 530 through the index providing system shown in FIG. 2 and communicates with the wireless terminal 535 through the wireless communication network And an index providing server 500 for providing the authentication code index information to the client terminal.

The wireless terminal 535 to be used as the wireless communication disposable authenticator includes a memory for storing authentication code index information provided from the index providing server 500 and a memory for storing the authentication code index information provided from the index providing server 500. When the wireless terminal 535 is used as a wireless communication disposable authenticator, The authentication code index information stored in the memory is provided to the disposable authentication code authentication system shown in FIG. 8, and after the disposable authentication code authentication system approves the use of the wireless terminal 535 as a wireless communication disposable authenticator, And transmits the disposable authentication code generation information (or the first partial disposable authentication code generation information including a part of the disposable authentication code generation information) corresponding to the authentication code index information through the wireless communication network And transmits the received one-time authentication code generation information (or the one-time authentication code (N > = 2) digits of the wireless communication terminal apparatus through a wireless communication network (a part of the wireless network information), the detailed description of the functional configuration of the wireless terminal 535 Referring to FIG.

The index providing server 500 provided on the authentication code index providing system is connected to the wireless terminal 535 to be used as the wireless communication disposable authenticator through the wireless communication network and the disposable authentication code authentication system side authentication code Generically refers to one or more servers (or devices) provided in a financial institution, or one or more servers (or devices) provided in a system for processing authentication via a disposable authentication code, or the server (or device) The present invention can be embodied as one or more programs recorded on a recording medium provided, and thus the present invention is not limited thereto.

5, the index providing server 500 includes a wireless terminal 535 confirmation unit 505 (or a wireless terminal 535) that confirms the unique information of the wireless terminal 535 to be used as the wireless communication disposable authenticator And an authentication code index information verifying unit 510 for verifying authentication code index information to be provided to the wireless terminal 535 corresponding to the unique information of the wireless terminal 535 in association with the storage medium 530 (For example, a wireless communication network corresponding to the communication company information stored in the storage medium 530) to which the wireless terminal 535 is connected, And an authentication code index information providing unit 515 (or an authentication code index information providing unit) for providing the identified authentication code index information to the authentication code index information providing unit 535.

The wireless terminal 535 identification unit 505 identifies the wireless terminal 535 unique to the wireless terminal 535 registered in the storage medium 530 through the information registration system shown in FIG. The authentication code index information verifying unit 510 verifies the authentication code index information of the wireless terminal 535 in association with the storage medium 530, (Or extracts) the authentication code index information to be provided to the wireless terminal 535 corresponding to the unique ID information 535. If the authentication code index information is not stored in the storage medium 530 , The authentication code index information verification unit 510 generates authentication code index information to be provided to the wireless terminal 535 so as not to be duplicated.

When the authentication code index information to be provided to the wireless terminal 535 is confirmed, the authentication code index information providing unit 515 transmits the authentication code index information to the wireless communication network (for example, the storage medium 530) And provides the verified authentication code index information to the wireless terminal 535 to be used as the wireless communication disposable authenticator through the wireless communication network corresponding to the stored communication company information. And the like.

5, the index providing server 500 may associate with the authentication code index information provided to the wireless terminal 535 corresponding to the unique information of the wireless terminal 535 in association with the storage medium 530 A partial disposable authentication code generation information confirmation unit 520 (or partial disposable authentication code generation information confirmation means) for confirming the first partial disposable authentication code generation information including a part of the disposable authentication code generation information, ) To the wireless terminal 535 to be used as the wireless communication disposable authenticator through the wireless communication network (for example, the wireless communication network corresponding to the communication company information stored in the storage medium 530) The partial disposable authentication code generation information providing unit 525 (or the partial disposable authentication code generation information providing unit 525) for providing the first partial disposable authentication code generation information including the partial disposable authentication code The disposable authentication code generation information corresponding to the authentication code index information is not stored in the storage medium 530. Alternatively, in the disposable authentication code authentication system shown in FIG. 8, A function of providing the first partial disposable authentication code generation information including a part of the disposable authentication code generation information to the wireless terminal 535 when the entirety of the disposable authentication code generation information is provided to the wireless terminal 535 May be omitted, and the present invention is not limited thereto.

When the disposable authentication code generation information corresponding to the authentication code index information is generated and stored in the storage medium 530, the partial disposable authentication code generation information confirmation unit 520 checks whether the one- A first partial disposable authentication code including a part of disposable authentication code generation information to be provided to the wireless terminal 535 in association with authentication code index information provided to the wireless terminal 535 corresponding to the unique information of the wireless terminal 535 And the authentication code generation information is confirmed.

Here, when the wireless terminal 535 is used as a wireless communication disposable authenticator, the first partial disposable authentication code generation information includes a disposable authentication code to be provided to the wireless terminal 535 in the disposable authentication code authentication system shown in FIG. 8, When the wireless terminal 535 is used as a wireless communication disposable authenticator, a portion of the generated information includes a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal 535 in the disposable authentication code authentication system shown in FIG. 8, When the wireless terminal 535 is used as a wireless communication disposable authenticator, one or more verification values for verifying the one-time authentication code generation information provided to the wireless terminal 535 in the one-time authentication code authentication system shown in FIG. 8 .

When the first partial disposable authentication code generation information to be provided to the wireless terminal 535 is confirmed, the partial disposable authentication code generation information providing unit 525 transmits the partial disposable authentication code generation information to the wireless communication network (for example, A first partial disposable authentication code including a part of the verified one-off authentication code generation information to the wireless terminal 535 to be used as the wireless communication disposable authenticator through a wireless communication network corresponding to the communication company information stored in the storage medium 530 It is preferable that a part of the disposable authentication code generation information is stored in a memory unit provided in the wireless terminal 535. [

6 is a diagram illustrating a process of providing an authentication code index according to an embodiment of the present invention.

6 illustrates a process of providing authentication code index information to a wireless terminal that uses a wireless terminal as a wireless communication disposable authenticator in the authentication code index providing system shown in FIG. 5. Referring to FIG. 6, It will be understood by those skilled in the art that various changes and modifications may be made in the present invention without departing from the spirit and scope of the invention as defined in the appended claims. And the technical characteristics thereof are not limited only by the method shown in FIG.

Hereinafter, in FIG. 6, the index providing server shown in FIG. 5 is referred to as a "server" for the sake of convenience.

6, the server confirms (600) a wireless terminal to provide authentication code index information corresponding to wireless terminal unique information registered through the information registration system shown in FIG. 2, And confirms the authentication code index information associated with the wireless terminal unique information corresponding to the wireless terminal providing the authentication code index information (605).

If the authentication code index information to be provided to the wireless terminal to be used as the wireless communication disposable authenticator is confirmed (610), the server transmits the authentication code index information to the wireless communication network (e.g., wireless communication network (615) the authentication code index information to the wireless terminal to be used as the wireless communication disposable authenticator through the wireless network, and the authentication code index information is stored in the memory unit provided in the wireless terminal.

7 is a diagram illustrating a process of providing a part of the one-time authentication code generation information associated with the authentication code index information according to an embodiment of the present invention.

FIG. 7 is a flowchart illustrating a method of providing authentication code index information according to an exemplary embodiment of the present invention. Referring to FIG. 7, 1 partial disposable authentication code generation information is provided to the wireless terminal. Those skilled in the art will be able to refer to and / or modify the FIG. 7 to identify the authentication code index information The present invention can be applied to all of the above-described embodiments, and it is to be understood that the present invention is not limited to the above-described embodiment Its technical characteristics are not limited.

Hereinafter, in FIG. 7, the index providing server shown in FIG. 2 is referred to as a "server" for the sake of convenience.

Referring to FIG. 7, the server, in association with a storage medium, generates a disposable authentication code associated with authentication code index information provided to a wireless terminal to be used as the wireless communication disposable authenticator through the process of providing authentication code index information shown in FIG. The first part disposable authentication code generation information corresponding to a part of the information is confirmed (700).

Here, when the wireless terminal is used as a wireless communication disposable authenticator, the first disposable authentication code generation information includes a part of the disposable authentication code generation information to be provided to the wireless terminal in the disposable authentication code authentication system shown in FIG. 8, When the terminal is used as a wireless communication disposable authenticator, a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal in the disposable authentication code authentication system shown in FIG. 8, It is preferable that the one-time authentication code authentication system shown in FIG. 1 includes at least one verification value for verifying the one-time authentication code generation information provided to the wireless terminal.

If the first partial disposable authentication code generation information corresponding to a part of the one-time authentication code generation information associated with the authentication code index information provided to the wireless terminal to be used as the wireless communication disposable authentication unit is confirmed (705) A first part corresponding to a part of the one-time authentication code generation information confirmed to the wireless terminal to be used as the wireless communication disposable authenticator through a wireless communication network (e.g., a wireless communication network corresponding to the communication company information stored in the storage medium) The disposable authentication code generation information is provided 710, and the first disposable authentication code generation information is preferably stored in the memory unit included in the wireless terminal.

8 is a diagram illustrating a configuration of a disposable authentication code authentication system that implements a disposable authentication code through an authentication code index according to an embodiment of the present invention.

8 illustrates an example of the authentication code index information provided to the wireless terminal 865 to be used as a wireless communication disposable authenticator through the authentication code index providing system shown in FIG. 5 and wireless unique information of the wireless terminal 865 Disposable authentication code generation information (or second partial disposable authentication code generation information) corresponding to the authentication code index information to the wireless terminal 865 after approving the use of the wireless terminal 865 as a wireless communication disposable authenticator (N> = 2) digits of disposable authentication code (N) through the disposable authentication code generation information (or the second partial disposable authentication code generation information) by the wireless terminal 865, And authenticates the generated disposable authentication code N. It should be noted that if the person skilled in the art is familiar with the present invention, (E.g., some components may be omitted, or broken down, or aggregated) for a one-time-use authentication code authentication system that implements the one-time authentication code through the authentication code index by referring to and / However, the present invention includes all of the above-mentioned embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Hereinafter, the authentication code index information transmitted from the customer wireless terminal 865 on the disposable authentication code authentication system shown in FIG. 8 is received, and the wireless terminal 865 transmitting the authentication code index information is referred to as a wireless communication disposable Authentication code generation information corresponding to the authentication code index information to the wireless terminal 865 and transmits the disposable authentication code generation information to the wireless terminal 865. The wireless terminal 865 transmits the disposable authentication code generation information to the wireless terminal 865, One or more means for authenticating the number of single-use authentication codes N and / or a component corresponding to the functional configuration is referred to as "index providing server" for convenience.

Referring to FIG. 8 according to an embodiment of the present invention, the authentication code index providing system includes a wireless terminal 865 to be used as the wireless communication disposable authenticator, an authentication code index And transmits the disposable authentication code generation information corresponding to the authentication code index information to the wireless terminal 865 after approving the use of the wireless terminal 865 transmitting the authentication code index information as the wireless communication disposable authenticator And an authentication server 800 for authenticating the N-odd number of one-time authentication codes N generated by the wireless terminal 865 through the one-time authentication code generation information.

The wireless terminal 865 to be used as the wireless communication disposable authenticator stores authentication code index information provided through the authentication code index providing system shown in FIG. 5, and when using the wireless terminal 865 as a wireless communication disposable authenticator, After providing the authentication code index information to the authentication server 800 through the wireless communication network and allowing the authentication server 800 to use the wireless terminal 865 as a wireless communication disposable authenticator, (Or the second partial disposable authentication code generation information including the remaining part of the disposable authentication code generation information) corresponding to the index information is received, the disposable authentication code generation information is received via the wireless communication network , The received one-time-use authentication code generation information (or the remaining one part of the one-time-use authentication code generation information (2-part disposable authentication code generation information) of the wireless terminal 865, the detailed description of the functional configuration of the wireless terminal 865 is given in FIG. 9 .

The authentication server 800 provided on the authentication code index providing system receives the authentication code index information from the wireless terminal 865 to be used as the wireless communication disposable authenticator through the wireless communication network and transmits the authentication code index information After providing the wireless terminal 865 with the disposable authentication code generation information corresponding to the authentication code index information after approving the use of the wireless terminal 865 as the wireless communication disposable authenticator, One or more servers (or devices) provided in a financial institution as a collective term of the disposable authentication code authentication system side component that authenticates the N-digit disposable authentication code (N) generated through the authentication code generation information, or a disposable authentication code One or more servers (or devices) provided in a system for processing authentication, or a recording medium provided in the server (or apparatus) It may be implemented as one or more programs, which the present invention is not limited.

8, the authentication server 800 receives the authentication code index information from the wireless terminal 865 to be used as the wireless communication disposable authenticator, and provides the disposable authentication code generation information to the wireless terminal 865 And a wireless interface unit 805 for connecting a wireless data communication communication channel for wireless communication or exchanging a wireless message.

According to an embodiment of the present invention, when the wireless communication network provides a data communication channel, the wireless interface unit 805 may transmit the data communication channel from the wireless terminal 865 to be used as the wireless communication disposable authenticator according to the data communication protocol of the wireless communication network It is preferable to connect the wireless communication channel for receiving the authentication code index information and providing the wireless terminal 865 with the disposable authentication code generation information.

According to another embodiment of the present invention, when the wireless communication network provides a message exchange protocol, the wireless interface unit 805 transmits a message exchange protocol to the wireless terminal 865 to be used as the wireless communication disposable authenticator according to the message exchange protocol of the wireless communication network, It is preferable to provide a message exchange interface for receiving the authentication code index information from the wireless terminal 865 and providing the disposable authentication code generation information to the wireless terminal 865. [

8, when the authentication server 800 transmits authentication code index information to the wireless terminal 865 to be used as the wireless communication disposable authenticator, the authentication server 800 transmits the authentication code index information through the wireless interface 805 And a wireless terminal 865 unique information verifying unit 815 for verifying unique information of the wireless terminal 865 that has transmitted the authentication code index information 865 corresponding to the unique information of the wireless terminal 865 through the authentication code index information and the unique information of the wireless terminal 865 in association with the storage medium 855, (Or wireless terminal 865) authentication means for authenticating the wireless terminal 865 as a wireless communication disposable authenticator and a wireless terminal 865 authenticating unit 820 Information A disposable authentication code generation information confirmation / generation unit 825 (or disposable authentication code generation information confirmation / generation means) for confirming (or generating) the one-time authentication code generation information corresponding to the one- And a disposable authentication code generation information providing unit 830 (or disposable authentication code generation information providing unit) for providing the information to the wireless terminal 865. If the received authentication code index information is encrypted (Or a data structure change), the authentication code index information is restored by decrypting the secure authentication code index information (or data structure restoration), and the authentication code generation information 2-part disposable authentication code generation information) to the wireless terminal 865, (Or security processing means) for performing security processing through encryption (or data structure modification) of the first part information (or the second part disposable authentication code generation information). According to the intention of those skilled in the art, A user authentication unit (or a user authentication unit, for example, a user authentication unit) that authenticates the user authentication information and provides the authentication result for the user authentication information to the wireless terminal 865 when the user authentication information is transmitted from the wireless terminal 865 It is preferable to further include the above-mentioned information.

The wireless terminal 865 provided with the authentication code index information through the authentication code index providing system shown in FIG. 5 transmits the authentication code index information to the wireless communication network 865 in order to use the wireless terminal 865 as the wireless communication disposable authenticator. The index information receiving unit 810 receives the authentication code index information through the wireless interface unit 805.

The wireless terminal 865 unique information of the wireless terminal 865 (for example, the wireless terminal 865 to be used as the wireless communication disposable authenticator) that transmitted the authentication code index information according to an embodiment of the present invention, The index information receiving unit 810 receives the authentication code from the wireless terminal 865 through the wireless interface unit 805 when it can be confirmed through the data communication protocol or the message exchange protocol of the wireless communication network provided by the wireless communication unit 805, It is preferable to receive the index information.

According to another embodiment of the present invention, the communication company server 860 verifies the authentication code index information transmitted from the wireless terminal 865 (for example, the wireless terminal 865 to be used as the wireless communication disposable authenticator) The communication company server 860 confirms the unique information of the wireless terminal 865 of the wireless terminal 865 and attaches the identified wireless terminal 865 specific information to the authentication code index information , The index information receiving unit 810 receives the authentication code index information transmitted from the wireless terminal 865 through the wireless interface unit 805 and the unique information of the wireless terminal 865 attached from the communication company server 860 .

In accordance with another embodiment of the present invention, the authentication server 860 checks the authentication code index information transmitted from the wireless terminal 865 (for example, the wireless terminal 865 to be used as the wireless communication disposable authenticator) When the communication company server 860 confirms the unique information of the wireless terminal 865 of the wireless terminal 865 and then transmits the identified wireless terminal 865 unique information from the communication company server 860 The index information receiving unit 810 preferably receives authentication code index information from the wireless terminal 865 through the wireless interface unit 805 and the unique information of the wireless terminal 865 is transmitted to the wireless terminal 865 ) Unique information confirmation unit 815, as shown in FIG.

If the received authentication code index information and the unique information of the wireless terminal 865 are encrypted and received, the security processor decrypts the secured authentication code index information and the unique information of the wireless terminal 865, And restores the information and the unique information of the wireless terminal (865).

The wireless terminal 865 unique information of the wireless terminal 865 (for example, the wireless terminal 865 to be used as the wireless communication disposable authenticator) that transmitted the authentication code index information according to an embodiment of the present invention, When the authentication code index information is received through the index information receiving unit 810 in the case where it can be confirmed through the data communication protocol or the message exchange protocol of the wireless communication network provided by the wireless terminal 805, Unit 815 analyzes the data communication protocol or the message exchange protocol of the wireless communication network through the wireless interface unit 805 and transmits the unique information of the wireless terminal 865 of the wireless terminal 865 transmitting the authentication code index information Is confirmed.

According to another embodiment of the present invention, the communication company server 860 verifies the authentication code index information transmitted from the wireless terminal 865 (for example, the wireless terminal 865 to be used as the wireless communication disposable authenticator) The communication company server 860 confirms the unique information of the wireless terminal 865 of the wireless terminal 865 and attaches the identified wireless terminal 865 specific information to the authentication code index information . When the authentication code index information attached with the unique information of the wireless terminal 865 is received through the index information receiving unit 810, the wireless terminal 865 unique information verifying unit 815 reads the authentication code index information And confirms the unique information of the wireless terminal 865 attached to the authentication code index information.

In accordance with another embodiment of the present invention, the authentication server 860 checks the authentication code index information transmitted from the wireless terminal 865 (for example, the wireless terminal 865 to be used as the wireless communication disposable authenticator) When the communication company server 860 confirms the unique information of the wireless terminal 865 of the wireless terminal 865 and then transmits the identified wireless terminal 865 unique information from the communication company server 860 The identification information of the wireless terminal 865 is transmitted to the wireless terminal 865 that has transmitted the authentication code index information from the communication company server 860. Upon receiving the authentication code index information through the index information receiving unit 810, 865 specific information of the wireless terminal (865).

The authentication unit 820 of the wireless terminal 865 registers the unique information of the wireless terminal 865 on the storage medium 855 that stores the unique information of the wireless terminal 865 in association with the storage medium 855 And confirms the authentication code index information associated with the unique information of the wireless terminal 865 from the storage medium 855 when the unique information of the wireless terminal 865 is registered in the storage medium 855, Compares the authentication code index information identified from the storage medium 855 with the authentication code index information received from the wireless terminal 865 and stores the received authentication code index information and the unique information of the wireless terminal 865 in the storage medium (865) corresponding to the unique information of the wireless terminal (865) as a wireless communication disposable authenticator when it is confirmed that the wireless terminal (865) is stored in the wireless communication terminal (855).

If the wireless terminal 865 is approved as a wireless communication disposable authenticator, the disposable authentication code generation information check / generation unit 825 receives from the storage medium 855 the disposable authentication code generation information corresponding to the authentication code index information , Or dynamically generates disposable authentication code generation information corresponding to the authentication code index information.

According to an embodiment of the present invention, a disposable authentication code corresponding to the authentication code index information is generated in the storage medium 855 through the information registration system shown in FIG. 2 or the authentication code index providing system shown in FIG. If the information is stored, the disposable authentication code generation information confirmation / generation unit 825 preferably confirms the disposable authentication code generation information corresponding to the authentication code index information from the storage medium 855.

When the disposable authentication code generation information is not stored in the storage medium 855 according to another embodiment of the present invention and the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated, The generation information confirmation / generation unit 825 preferably generates the disposable authentication code generation information corresponding to the authentication code index information approved by the wireless terminal 865 as a wireless communication disposable authenticator in a dynamic manner in real time.

(E.g., a wireless terminal 865 to be used as the wireless communication disposable authenticator) through the authentication code index providing system shown in FIG. 5, a first portion including a part of the disposable authentication code generation information When the disposable authentication code generation information is provided in advance, the disposable authentication code generation information check / generation unit 825 checks whether the disposable authentication code generation information matches the partial disposable authentication code generation information provided to the wireless terminal 865 (Or generates) the second partial disposable authentication code generation information including the second partial disposal authentication code generation information.

If the first partial disposable authentication code generation information provided to the wireless terminal 865 according to an embodiment of the present invention is a part of the one-time authentication code generation information to be provided to the wireless terminal 865, The information confirmation / generation unit 825 preferably confirms (or generates) the remaining part of the disposable authentication code generation information with the second partial disposable authentication code generation information to be provided to the wireless terminal 865.

When the first partial disposable authentication code generation information previously provided to the wireless terminal 865 is a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal 865 according to another embodiment of the present invention, The disposable authentication code generation information confirmation / generation unit 825 confirms (or generates) the disposable authentication code generation information to be combined with the combination code with the second partial disposable authentication code generation information to be provided to the wireless terminal 865 desirable.

According to another embodiment of the present invention, when the first partial disposable authentication code generation information provided to the wireless terminal 865 is a verification value for verifying the disposable authentication code generation information, the disposable authentication code generation information confirmation / It is preferable that the unit 825 confirms (or generates) the disposable authentication code generation information verifiable by the verification value with the second partial disposable authentication code generation information to be provided to the wireless terminal 865. [

If the authentication code generation information (or the second partial disposable authentication code generation information) is provided to the wireless terminal 865 by the security processing, the disposable authentication code generation information confirmation / When the one-time authentication code generation information corresponding to the code index information is confirmed (or generated), the security processing unit encrypts the authentication code generation information (or the second partial disposal authentication code generation information) .

According to the embodiment of the present invention, when the data structure of the authentication code generation information (or the second partial disposable authentication code generation information) is changed to perform the security processing, the security processing unit transmits the authentication code generation information (or the second partial disposable authentication code (Or reordering) the data combination (or arrangement) of the first partial disposal authentication code (or the code generation information) according to a preset method or a predetermined method, and the authentication code generation information (Or rearranged) according to a combination (or arrangement) scheme, the security processing unit adds the reconfigured (or rearranged) authentication code generation information (or second partial disposal authentication code generation information) to the authentication server 800 ) For restoring the original data structure for the original authentication code generation information (or the second partial disposal authentication code generation information) Source to include information (e.g., a recombinant (or reorder) the identifier (or index identifying the type)) is preferred.

Here, the data recombination (or rearrangement) for the authentication code generation information (or the second partial disposable authentication code generation information) may be performed by a nibble unit, a specific digit unit, a byte unit, a word unit, Recombination (or rearrangement) is preferable.

According to the method of the present invention, the security processing unit can selectively process any one of the authentication code generation information (or the second partial disposal authentication code generation information), and the present invention can be applied to the security processing And that all such modifications are possible in light of the above teachings.

If the disposable authentication code generation information is confirmed (or generated) or secured, the disposable authentication code generation information providing unit 830 transmits the disposable authentication code generation information to the wireless terminal 865 via the wireless communication unit 805 (For example, the wireless terminal 865 to be used as the wireless communication disposable authenticator).

Alternatively, if the second partial disposable authentication code generation information is confirmed (or generated) or security-processed, the disposable authentication code generation information providing unit 830 transmits the disposable authentication code generation information to the wireless interface unit 805 via the wireless communication network It is desirable to transmit the remaining portion of the disposable authentication code generation information to the wireless terminal 865 (e.g., the wireless terminal 865 to be used as the wireless communication disposable authenticator).

The one-time authentication code generation information (or the second partial disposable authentication code) is generated by the wireless terminal 865 (for example, the wireless terminal 865 to be used as the wireless communication disposable authenticator) The wireless terminal 865 transmits the disposable authentication code generation information (or the first partial disposable authentication code generation information provided by the wireless terminal 865) and the disposable authentication code generation information providing unit 830, (One-time authentication code generation information) that is combined (or verified) on the basis of the second partial one-time authentication code generation information provided by the first partial authentication code generation information provided by the one- The code N is a disposable authentication code input that is output to the authentication request terminal 870 (for example, a wired terminal requesting authentication via the disposable authentication code or the wireless terminal) Is input through the interface is characterized in that the transmission through a communications network.

Referring to FIG. 8, the authentication server 800 transmits an N-digit number of one-time authentication code (hereinafter referred to as " N-digit number ") generated by the wireless terminal 865 to be used as the wireless communication disposable authenticator through the disposable authentication code input interface at the authentication request terminal 870 N), receives the disposable authentication code (N) from the authentication request terminal (870) via the communication network, and transmits the disposable authentication code (N) through the communication network to the disposable authentication code receiving unit 835 A verification code generation unit 840 (or verification code generation means) that generates an N-digit number of one-time verification codes N through the one-time authentication code generation information provided to the wireless terminal 865, A disposable authentication code authentication unit 845 (or disposable authentication code authentication unit) for comparing the received disposable authentication code N with the generated disposable verification code N; That obtained by having a code (N) authentication result processing unit 850 (or the authentication result processing unit) to store the comparison result output by the authentication request, the terminal 870, or based on a set of media features.

When the authentication request terminal 870 receives an N-digit disposable authentication code (N) generated by the wireless terminal 865 to be used as the wireless communication disposable authenticator through the disposable authentication code input interface and transmits the disposable authentication code N through the communication network, The code receiving unit 835 receives N-digit disposable authentication codes N from the authentication request terminal 870 through the communication network.

When the disposable authentication code N is received, the verification code generator 840 generates disposable authentication code N provided to the wireless terminal 865 to be used as a wireless communication disposable authenticator to generate the disposable authentication code N And generates an N-digit number of one-time verification code (N) through the disposable authentication code generation information in the same manner as the method of generating the disposable authentication code (N) at the wireless terminal (865).

If the disposable authentication code N is received and the disposable verification code N is generated, the disposable authentication code authenticator 845 transmits the disposable authentication code N received from the authentication request terminal 870 and the one- And authenticates the received disposable authentication code (N) by comparing the generated disposable verification code (N) with the disposable authentication code (N). The authentication result processing unit (850) ) And the disposable verification code N to the authentication request terminal 870 and outputs the comparison result to the authentication request terminal 870 or stores the comparison result in a predetermined medium so that the post processing according to the authentication result of the disposable authentication code N is provided .

9 is a diagram illustrating a functional configuration of a wireless terminal 900 that implements a one-time authentication code through an authentication code index according to an embodiment of the present invention.

In more detail, FIG. 9 illustrates a case where a wireless terminal 900 accessing a mobile communication network operating based on a Code Division Multiple Access (WCDMA) / Wideband Code Division Multiple Access (WCDMA) is used as the wireless communication disposable authenticator, 900 receives the one-time authentication code generation information through the one-time authentication code authentication system shown in FIG. 8 through the authentication code index information provided through the authentication code index providing system shown in FIG. 5, And generates and transmits an N-digit number of one-time authentication code (N) through information. Referring to FIG. 9 and / or modified by the person skilled in the art, (For example, a wireless terminal device connected to a HSDPA-based wireless network, or an IEEE 802 A wireless terminal device that connects to a 16x-based portable Internet, etc.), and various functional configurations corresponding to each terminal device characteristic. However, the present invention includes all of the above- The technical features thereof are not limited only by the method shown in FIG.

The wireless terminal 900 that provides CDMA / WCDMA based mobile communication services according to an embodiment of the present invention includes an outer body in a hardware aspect, a speaker and a microphone, a keypad, an LCD (Liquid Crystal Display) A battery 925 and the like and internally includes a modem chip (for example, a modem chip) including a CDMA (Code Division Multiple Access) modem, a CPU / MPU (Central Processing Unit / Micro Processing Unit) A duplexer filter for separating transmission signals from one antenna, a power amplifier for amplifying a transmission signal, a high power amplifier (HPA), a high-power transmission signal An RF / IF SAW filter for eliminating the desired out-of-band spurious signals, a frequency upstream circuit of the transmission path, a frequency of the reception path A VCTCXO (Voltage Controlled Temperature Compensated X-tal Oscillator) corresponding to a reference clock source, a UHF frequency synthesizer used as a local signal of frequency up-down conversion, and a codec chip for converting an analog voice signal into a digital signal The internal components are gradually integrated into the modem chip. In addition to the core components for the mobile communication service, the modem chip may include various multimedia services or additional services. Various functions are being integrated together.

Referring to FIG. 9, a wireless terminal 900 that implements a disposable authentication code through the authentication code index includes a controller 905 corresponding to the modem chip, a screen output unit 905 corresponding to an LCD (Liquid Crystal Display) A sound processing unit 915 corresponding to the microphone / speaker, a key input unit 920 corresponding to the keypad, a radio processing unit 930 corresponding to the antenna and various RF modules, A memory unit 940 and a battery 925 for power supply.

The wireless terminal 900 may further include a camera unit (not shown) for reading image information for providing various multimedia services or various additional services corresponding thereto, or may be connected to a local area communication channel It is preferable to further include a local communication unit (not shown).

The wireless terminal 900 may include an IC chip (for example, a financial IC (Integrated Circuit)) mounted or detached from the wireless terminal 900 for providing various financial (or settlement) services or various additional services corresponding thereto, Chip or a Universal Subscriber Identity Module (USIM)), and an IC chip reader 935 for reading / writing information (or data) from / to the IC chip.

*

The control unit 905 includes a processor including a CPU / MPU provided in the modem chip and an execution memory, and includes a program routine for providing a function specific to the wireless terminal 900 from the memory device, (Or an integrated circuit) provided for the bus (BUS) for inputting and outputting program data, and an electronic circuit (or an integrated circuit) provided for the bus. The memory unit 940 or the memory device A program routine loaded into the execution memory and operated through the processor to perform a specific function, or a generic term of the program data (thus, the record of the wireless terminal 900 to implement the disposable authentication code via the authentication code index) The program routine recorded on the medium will be described as being provided in the control unit 905 for convenience.) (Not shown) and at least one or more system management routines (e.g., power management routines, channel (forward / backward) management routines, handoff routines, etc.) And the control unit 905 realizes various functional configurations to be implemented in the wireless terminal 900. [0033] FIG.

According to the method of the present invention, after power is supplied to the wireless terminal 900, the operating system routine (not shown), at least one or more system management routines (not shown) and various system variables corresponding thereto, 905, and the mobile terminal 900 is operated by the processor so that the wireless terminal 900 can determine the system setting detailed state, the pilot channel obtaining detailed state, the synchronous channel obtaining detailed state, and the timing conversion detailed state Quot; mobile station initialization state "

(Not shown), at least one or more system management routines (not shown) and various system variables corresponding thereto are loaded into the execution memory provided in the controller 905, The mobile terminal 900 is set to the operation mode corresponding to the "mobile station call waiting state ", the" system access state ", or the " Call Processing) procedure.

According to the embodiment of the present invention, the function of implementing the disposable authentication code through the authentication code index is such that the wireless terminal 900 starts (or realizes) via key input in the operation mode corresponding to the " ).

The screen output unit 910 is a function configuration unit for screening operation modes of the wireless terminal 900 and corresponding operation states of the wireless terminal 900. The screen output unit 910 includes one or more LCDs And a driver for driving the screen output device. The control unit 905 may output at least one key data input through the key input unit 920, A function processing screen and a function processing result screen corresponding to at least one function (or program) included in the wireless terminal 900 or a function menu And outputs one or more contents (e.g., text contents, image contents, multimedia contents).

According to an embodiment of the present invention, the screen output unit 910 displays a menu screen corresponding to the function of implementing the disposable authentication code through the authentication code index, a function processing screen for implementing the disposable authentication code (N) It is preferable to perform a function of screen output means for outputting a function processing result screen for outputting the disposable authentication code (N).

The sound processing unit 915 is a functional unit for processing input and output of sound in each operation mode of the wireless terminal 900. The sound processing unit 915 decodes at least one or more encoded sound data and supplies the decoded sound data to the wireless terminal 900 And a vocoder and a codec for encoding a sound signal input through a microphone provided in the wireless terminal 900 and encoding the sound signal.

According to the embodiment of the present invention, the sound processing unit 915 receives sound data corresponding to a ring back tone through the speaker in an operation mode corresponding to the "system access state" among the operation modes of the mobile terminal 900 It is preferable to decode and output the voice signal, or to encode and input the voice signal through the microphone in the operation mode corresponding to the "call channel state ", or to decode and output the voice signal through the speaker.

In addition, the sound processing unit 915 may reproduce at least one or more sound contents or multimedia contents provided in (or downloaded from) the mobile terminal 900 in at least one operation mode including the "mobile station call waiting state & It is preferable that the sound data corresponding to the content to be reproduced is decoded and output.

The key input unit 920 includes a key input device having at least one key button including a number key, a character key, and a function key, And a driver for driving the key input device. Accordingly, the key input device detects at least one key input signal generated by clicking (or inputting) the key button.

According to the present invention, when a key input signal is detected from a key button included in the key input device in an input mode controlled by the control unit 905 or at least one or more operation modes, the key input unit 920 detects (E.g., MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, and MH_KEY_RELEASEEVENT) corresponding to the received key input signal, and provides the generated key event to the controller 905. The controller 905 controls the wireless terminal (For example, storing (managing) at least one key data corresponding to a specific key event in each input mode, or an operation mode) in the current input mode or the operation mode of the key input unit 900, Or reading the key data from the key table to the key event), or executing a function defined by matching with the key event And the characterized in that the shipping dock.

According to an embodiment of the present invention, the key input unit 920 inputs a telephone number in an operation mode corresponding to the "mobile station call waiting state" among the operation modes of the mobile terminal 900, It is preferable to change the operation mode of the wireless terminal 900 to the operation mode corresponding to the "system access state ".

The key input unit 920 inputs a function key (e.g., a menu key) in an operation mode corresponding to the "mobile station call standby state" among the operation modes of the mobile terminal 900, It is preferable to execute various functions provided in the mobile terminal.

According to the embodiment of the present invention, the key input unit 920 performs a function of key input means for inputting at least one key data corresponding to the function of implementing the disposable authentication code through the authentication code index .

The radio processing unit 930 is a functional unit for the radio terminal 900 to connect a radio channel to a base station on a mobile communication network based on CDMA / WCDMA. The radio processing unit 930 includes a CDMA modem and various RF modules (e.g., a duplexer filter, Amplifier, a high power amplifier (HPA), an isolator, an RF / IF SAW filter, a frequency upstream circuit, a frequency downconversion circuit, a VCTCXO corresponding to a reference clock source, a UHF frequency synthesizer, A Slot Mode, or a Power Control in response to each operation mode of the mobile terminal 900 in cooperation with the controller 905, Hand-off, or a call processing procedure according to an embodiment of the present invention.

According to an embodiment of the present invention, the radio processing unit 930 performs radio frequency signal transmission / reception (e.g., antenna control, modulation, synthesis, and transmission of radio frequency signals) corresponding to the function of implementing the disposable authentication code through the authentication code index, Amplification, filtering, and the like).

In particular, the radio processor 930 processes the information or signal transmitted from the radio terminal 900 to the base station in order to implement the one-time authentication code through the authentication code index into the CDMA stack, And a function of reading information or signals from the CDMA stack.

According to another embodiment of the present invention, if the wireless terminal 900 shown in FIG. 9 is a wireless terminal device connected to a HSDPA-based wireless network, the wireless processor 930 accesses the HSDPA-based wireless network, Or if the wireless terminal 900 is a wireless terminal device that accesses an IEEE 802.16x-based wireless network, the wireless processing unit 930 may include a wireless communication function configuration that implements a one- And a wireless communication function for accessing the IEEE 802.16x-based wireless network and implementing the disposable authentication code through the authentication code index, thereby not limiting the present invention.

The IC chip reader unit 935 is connected to an IC chip (for example, a financial IC chip or a USIM) mounted on or removed from the wireless terminal 900 through an IC chip standard including ISO / IEC 7816 or ISO / IEC 14443, IEC 7816 standard, or a noncontact IC card corresponding to the above ISO / IEC 14443 standard, for exchanging at least one piece of information (or data or command) And the IC card reader exchanges at least one piece of information (or data or command) with the IC chip through an APDU (Application Protocol Data Unit).

Referring to the specification including ISO / IEC 7816 or ISO / IEC 14443, an IC chip mounted or detached from a customer's wireless terminal receives power supply VCC, a reset signal RST, a clock signal CLK, An input / output interface (not shown) for communicating (e.g., command or data exchange) with the IC chip reader unit 935 through contact points such as ground (GND), programming power supply (VPP), or input / output (I / O) A ROM (Read Only Memory), a RAM (random access memory), and a random access memory (RAM), each of which is composed of at least one computing element including a central processing unit (CPU), a microprocessor A memory (not shown) made up of at least one memory element including an access memory (EEPROM), an electrically erasable and programmable read only memory (EEPROM), and a flash memory (FM) (E.g., ROM stores a chip operating system (COS) for managing and operating internal resources of an IC card. Power is supplied from an IC chip reader 935 through a power supply (VCC) contact point of the input / output interface The COS stored in the memory is loaded into the execution memory to control the overall operation of the IC chip and the application protocol data unit (APDU), such as an APDU (Application Protocol Data Unit ) To control the exchange of information or data between the IC chip and the IC chip reader unit 935.

According to the present invention, IC chip storage information (for example, IC chip program code and data) for implementing a disposable authentication code is stored in the memory of the IC chip through an authentication code index, A storage unit (not shown) for storing a data set corresponding to information or data read out and read and / or used by a processor provided in a customer wireless terminal; and a storage unit (not shown) (E.g., a JAVA Applet in the case of a Javacard) used by a processor of the customer wireless terminal to interact with the instruction set of the COS Processing corresponding to the application including the calling code and the execution code processed by the processor unit The processor (not shown) is provided with a processor (not shown). The processor (not shown) reads an instruction from a processor provided in the customer wireless terminal via the input / output interface through an APDU, (Not shown), and provides the result or the read information or data to the processor provided in the customer wireless terminal via the input / output interface through the APDU .

Here, the memory of the IC chip includes a security structure based on ISO / IEC 10202. According to this, the memory includes a protection area in which secret information such as a chip serial number (CSN) is stored, a COS control area, The IC chip storage information for the present invention is stored in an area excluding the protection area and the COS control area. desirable.

According to the ISO / IEC 7816 or ISO / IEC 14443 ICC standard, the memory has one master file (MF) corresponding to a root file and at least one storage An ATR (Answer To Reset) including function information on information, at least one Dedicated File (DF) corresponding to each ICC storage information, and a Smart Card service And a file structure including an element file (EF) containing substantial information or data. The IC chip storage information for the present invention also includes the above-described file structure.

According to the embodiment of the present invention, it is preferable that the IC chip includes at least one of user authentication IC chip storing information for authenticating the validity of the user of the mobile terminal 900, or terminal authentication IC chip storing information.

The user authentication IC chip storage information or the terminal authentication IC chip storage information may be generated by using the user authentication information input through the key input unit 920 as an IC chip authentication code (e.g., a PIN (Personal Identification Number) It is preferable to return the user authentication result information after authenticating the terminal 900 user (or the wireless terminal 900), and if it is known to those skilled in the art, (Or a wireless terminal 900) by using an IC chip authentication code and a technique for authenticating the user of the wireless terminal 900 (or the wireless terminal 900) to a user corresponding to the authentication result Since the technical characteristics of returning the authentication result information are known, a detailed description thereof will be omitted for the sake of convenience.

The memory unit 940 may include a storage medium that stores at least one piece of information (or data) in the wireless terminal 900, or a nonvolatile memory corresponding to a recording medium that records a program code corresponding to at least one program routine A ROM (Read Only Memory) corresponding to the read-only memory, a flash memory (FM) capable of reading / writing, and an EEPROM (Electrically Erasable and Programmable Read Only Memory) .

According to an embodiment of the present invention, system information of the non-volatile memory that should not be erased is stored in the non-volatile memory, and the flash memory is provided with an operating system routine, a call processing program routine, Program routines and information or data therefor are stored in the EEPROM, and the EEPROM includes at least one or more of terminal registration related parameters and telephone numbers (e.g., address book) Information (or data) is preferably stored.

According to the embodiment of the present invention, the memory unit 940 stores the authentication code index information provided through the authentication code index providing system shown in FIG. 5 to implement the one-time authentication code through the authentication code index An authentication server 980 for transmitting the authentication code index information to use the wireless terminal 900 as a wireless communication disposable authenticator or an authentication server 980 for receiving the disposable authentication code generation information corresponding to the authentication code index information, It is preferable that the authentication server 980 information corresponding to the authentication server 980 is stored.

If the first partial disposable authentication code generation information is provided to the wireless terminal 900 through the authentication code index providing system shown in FIG. 5, the memory unit 940 transmits the disposable authentication code through the authentication code index It is desirable to further store the first partial disposable authentication code generation information provided through the authentication code index providing system shown in FIG.

Referring to FIG. 9, the wireless terminal 900 implementing the disposable authentication code through the authentication code index includes an information input unit 945 for receiving user authentication information through the key input unit 920 .

In order to implement the disposable authentication code through the authentication code index, the information input unit 945 outputs a user authentication information input interface in cooperation with the screen output unit 910, and transmits the authentication code The authentication processing unit 950 requests the user to input the user authentication information into the user authentication information interface through the key input unit 920 .

The user authentication information includes at least one of a personal identification number (PIN) for authenticating and activating the wireless communication disposable authenticator function of the wireless terminal 900 in the authentication server 980, Or more.

Alternatively, the user authentication information may be used to authenticate the wireless communication disposable authenticator function of the wireless terminal 900 through the user authentication IC chip storage information or the terminal authentication IC chip storage information provided in the IC chip (or USIM) And a personal identification number (PIN) for activating the personal identification number, or a password.

Alternatively, the user authentication information may include a password for authenticating and activating the wireless communication disposable authenticator function of the wireless terminal 900 in the wireless terminal 900. In this case, Is preferably stored in the memory unit 940 (not shown).

9, in order to implement the disposable authentication code through the authentication code index, the wireless terminal 900 may access the wireless terminal 900 based on the user authentication information input through the information input unit 945, (950) for authenticating and activating the wireless communication disposable authenticator function provided in the wireless communication disposable authentication function, and when the wireless communication disposable authentication function is activated, transmitting the transmission authentication code index information to the authentication server (980) securely And an index transmission unit 955 for transmitting the authentication code index information to the authentication server 980 through the wireless processing unit 930 And the security processing unit 960 may be omitted according to the intention of a person skilled in the art.

When the user authentication information for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal 900 is input through the information input unit 945, the authentication processing unit 950 transmits the authentication information to the information input unit 945 And authenticates and activates the wireless communication disposable authenticator function included in the wireless terminal 900 based on the user authentication information input through the wireless terminal 900.

When the authentication server 980 receives and authenticates the user authentication information according to an embodiment of the present invention, the authentication processing unit 950 may communicate with the radio processing unit 930 via the information input unit 945 Transmits the input user authentication information to the authentication server 980 and receives user authentication result information for authenticating and activating the wireless communication disposable authentication function provided in the wireless terminal 900 from the authentication server 980 .

According to another embodiment of the present invention, when authenticating the user authentication information through an IC chip (or a USIM) provided in the wireless terminal 900, the authentication processing unit 950 may include an IC chip reader unit 935, (Or a USIM), which is input through the information input unit 945 in connection with the wireless terminal 900, to the IC chip (or USIM), and transmits a wireless communication disposable authentication It is preferable to receive the user authentication result for authenticating and activating the base function.

According to another embodiment of the present invention, when authenticating the user authentication information at the wireless terminal 900, the authentication processing unit 950 may associate the user authentication information input through the information input unit 945 with the user authentication information, (Or generates) a user authentication result for authenticating and activating the wireless communication disposable authenticator function included in the wireless terminal 900 by comparing the user authentication information (not shown) stored in the authentication unit 940. [

According to another embodiment of the present invention, the function of authenticating the user authentication information is performed by the authentication server 980 (or a separate user authentication server) according to the type of the user authentication information (e.g., password, ID / In this case, the authentication processing unit 950 transmits the user authentication information to the authentication server 980 (or a separate user authentication server), and the authentication server 980 (or a separate user authentication It is possible to receive and read the authentication result of the user authentication information from the server and activate it.

If the wireless communication disposable authenticator function included in the wireless terminal 900 is activated based on the user authentication information, the security processing unit 960 securely transmits the transmission subject authentication code index information to the authentication server 980 And the key for encryption is stored in the memory unit 940 or is stored in the USIM.

Alternatively, the security processing unit 960 may change the data structure of the transmission target authentication code index information to securely transmit the transmission target authentication code index information to the authentication server 980, It is preferable to include a preset method or a predetermined method.

According to an embodiment of the present invention, the security processing unit 960 preferably recombines (or rearranges) the data combination (or array) of the transmission subject authentication code index information according to a preset method or a predetermined method, When the transmission target authentication code index information is recombined (or rearranged) in accordance with an arbitrary combination (or arrangement) scheme, the security processing unit 960 adds the transmission target authentication code index information to the reassembled It is preferable that the server 980 include data restoration information (for example, an identifier (or index) identifying the recombination (or rearrangement) method) for restoring the original data structure of the original transmission subject authentication code index information Do.

The data recombination (or rearrangement) with respect to the transmission subject authentication code index information is preferably recombined (or rearranged) by nibble unit, specific digit unit, byte unit, word unit, or specific block unit Do.

If the transmission target authentication code index information is encrypted or the data structure is changed by the security processing unit 960, the index transmission unit 955 transmits the authentication code index information stored in the memory unit 940 to the authentication server 980 and transmits the authentication code index information to the authentication server 980 corresponding to the authentication server 980 information through the wireless processor 930. [

Upon receiving the authentication code index information, the authentication server 980 reads the protocol between the wireless terminal 900 and the authentication server 980 to confirm the unique information of the wireless terminal 900, And confirms the unique information of the wireless terminal 900 in association with the communication company server on the wireless communication network through which the wireless terminal 900 is transmitted and received and transmits the wireless terminal 900 to the wireless communication disposable authentication unit through the authentication code index information and the unique information of the wireless terminal 900 (Or the second partial disposable authentication code generation information) corresponding to the authentication code index information is confirmed when the wireless terminal 900 is approved to use the wireless terminal 900 as a wireless communication disposable authenticator (Or generates) the data to the wireless terminal 900.

9, in order to implement the disposable authentication code through the authentication code index, the wireless terminal 900 transmits the authentication code index information from the authentication server 980 in association with the wireless processing unit 930 And a receiving unit 965 for receiving corresponding one-time-use authentication code generation information (or second partial disposal-use authentication code generation information).

When the authentication server 980 approves the use of the wireless terminal 900 as a wireless communication disposable authenticator, the receiving unit 965 receives the authentication code index 910 from the authentication server 980 in cooperation with the wireless processor 930, The disposable authentication code generation information corresponding to the information is stored in the memory unit 940. If the first partial disposable authentication code generation information is stored in the memory unit 940, It is preferable to receive the second partial disposable authentication code generation information.

According to the method of the present invention, the disposable authentication code generation information (or the second partial disposable authentication code generation information) can be encrypted in the authentication server 980 or transmitted in a changed data structure. In this case It is preferable that the security processing unit 960 decrypts the security-processed disposable authentication code generation information (or the second partial disposable authentication code generation information) or restores the original data structure.

9, the wireless terminal 900 transmits the disposable authentication code generation information (or the second partial disposable authentication code generation information) from the authentication server 980 in order to implement the disposable authentication code through the authentication code index, (Or the first partial disposable authentication code generation information stored in the memory unit 940 and the received second partial disposable authentication code generation information) An authentication code generation unit 970 for generating an N-digit number of one-time authentication code (N) through the one-time authentication code generation information generated by the one-time authentication code generation unit And an output processing unit (975) for outputting the output signal (N).

According to an embodiment of the present invention, when the disposable authentication code generation information is received from the authentication server 980, the authentication code generation unit 970 transmits the received disposable authentication code generation information to the disposable authentication code (N) And generates an N-digit disposable authentication code (N) according to a predetermined one-time authentication code generation standard.

When the second partial disposable authentication code generation information is received from the authentication server 980 according to another embodiment of the present invention, the authentication code generation unit 970 generates the first partial disposable authentication code 940 stored in the memory unit 940, Generating disposable authentication code generation information corresponding to the seed value for generating the disposable authentication code (N) by combining (or concatenating) the authentication code generation information and the second disposable authentication code generation information, or generating the disposable authentication code The disposable authentication code generation information is confirmed as a seed value for generating the disposable authentication code (N) through the authentication code generation information, and the generated (or confirmed) As the seed value for generating the disposable authentication code N, and generating the N-digit disposable authentication code (N) according to the predetermined disposable authentication code generation standard The.

If the first partial disposable authentication code generation information stored in the memory unit 940 is stored, the authentication code generation unit 970 generates an N-digit disposable authentication code N through the first partial disposable authentication code generation information, (1 < n < N) digit of the disposable authentication code (N), generates a disposable authentication code (Nn) of (Nn) digits through the received second partial disposable authentication code generation information, It is possible to combine (or concatenate) the disposable authentication code n and the disposable authentication code Nn to generate an N-digit disposable authentication code N, so that the present invention is not limited thereto.

When the N-digit disposable authentication code N is generated by the authentication code generation unit 970, the output processing unit 975 outputs the generated N-digit disposable authentication code N to a predetermined area on the screen of the wireless terminal 900. [

According to one embodiment of the present invention, the output processing unit 975 outputs a disposable authentication code output screen on the screen of the wireless terminal 900 in cooperation with the screen output unit 910, It is preferable to output the generated N-digit disposable authentication code (N).

According to another embodiment of the present invention, the output processing unit 975 outputs the disposable authentication code output area to the screen area currently output on the screen of the wireless terminal 900 in association with the screen output unit 910 And outputs the generated N-digit disposable authentication code (N) to the disposable authentication code output area.

According to another embodiment of the present invention, when the wireless terminal 900 is provided with a local communication unit (not shown) and a local communication channel is connected to an authentication request terminal located near by the local communication unit, 900 can output the N-digit disposable authentication code (N) to the authentication request terminal through the local communication unit, and thus the present invention is not limited thereto.

FIG. 10 is a diagram illustrating a process of transmitting an authentication code index in a wireless terminal according to an embodiment of the present invention.

In more detail, in FIG. 10, the wireless terminal shown in FIG. 9 receives approval to use the wireless terminal as a wireless communication disposable authenticator through the disposable authentication code authentication system shown in FIG. 8, 2 partial disposable authentication code generation information) to the authentication server shown in FIG. 8, the authentication code index information provided from the authentication code index providing system shown in FIG. 5 is transmitted to the authentication server shown in FIG. Those skilled in the art will appreciate that various implementations of the process of transmitting an authentication code index at the wireless terminal, such as by omitting some steps, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. And the technical characteristics thereof are not limited only by the method shown in FIG.

Referring to FIG. 10, the wireless terminal checks whether a menu (or a key button) for implementing a disposable authentication code is input through an authentication code index 1000, and if the menu (or key Button is input 1005, the wireless terminal outputs a user authentication information input interface on the wireless terminal screen and confirms whether user authentication information is inputted through the user authentication information input interface (1010).

Here, the user authentication information preferably includes at least one or more personal identification numbers (PINs) or passwords for authenticating and activating the wireless communication disposable authentication function of the wireless terminal in the authentication server Do.

Alternatively, the user authentication information may be generated by authenticating and activating the wireless communication disposable authenticator function of the wireless terminal through the user authentication IC chip storage information or the terminal authentication IC chip storage information provided in the IC chip (or USIM) The personal identification number (PIN), or the password.

Alternatively, the user authentication information may include a password for authenticating and activating the wireless communication disposable authenticator function of the wireless terminal in the wireless terminal. In this case, the user authentication information may be stored in the memory unit (Not shown) is preferable.

If it is confirmed that the user authentication information is input (1015), the wireless terminal authenticates and activates the wireless communication disposable authentication function provided in the wireless terminal based on the user authentication information (1020).

According to an embodiment of the present invention, when the authentication server receives and authenticates the user authentication information, the wireless terminal transmits the inputted user authentication information to the authentication server in cooperation with the wireless processing unit, It is preferable that the server receives user authentication result information for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal.

According to another embodiment of the present invention, when the user authentication information is authenticated through an IC chip (or USIM) provided in the wireless terminal, the wireless terminal transmits the user authentication information Information to the IC chip (or USIM), and receives a user authentication result for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal from the IC chip (or USIM).

According to another embodiment of the present invention, when the wireless terminal authenticates the user authentication information, the wireless terminal compares the inputted user authentication information with user authentication information (not shown) stored in the memory unit (Or generates) a user authentication result for activating and activating the wireless communication disposable authenticator function provided in the wireless terminal.

If the wireless communication disposable authenticator function of the wireless terminal is not activated (1025), the wireless terminal disables (or initializes) the wireless communication disposable authenticator function of the wireless terminal (1030).

Meanwhile, when the wireless communication disposable authenticator function of the wireless terminal is activated (1025), the wireless terminal confirms (or extracts) the authentication code index information provided through the disposable authentication code authentication system shown in FIG. 8 from the memory unit (1035), and transmits the confirmed (or extracted) authentication code index information to the authentication server through a wireless communication network (1040).

FIG. 11 is a diagram illustrating a process of providing disposable authentication code generation information after approval of use of a wireless terminal as a wireless communication disposable authenticator according to an embodiment of the present invention.

In more detail, FIG. 11 shows the case where the authentication code index information is transmitted from the wireless terminal shown in FIG. 9 through the authentication code index transmission process shown in FIG. 10, and the authentication code index And after confirming the wireless terminal specific information corresponding to the wireless terminal transmitting the authentication code index information, the wireless terminal is allowed to use the wireless terminal as a wireless communication disposable authenticator through the authentication code index information and the wireless terminal specific information (Or second partial disposable authentication code generation information) to the wireless terminal, and more specifically, a method of confirming the wireless terminal specific information through protocol reading will be.

Those skilled in the art will appreciate that various modifications and changes may be made to the process of providing the disposable authentication code generation information after the use of the wireless terminal as the wireless communication disposable authenticator by referring and / or modifying FIG. It is to be understood that the invention may be practiced otherwise than as specifically described herein, but it is to be understood that the invention is not limited to the particular embodiments set forth herein, Features are not limited.

Referring to FIG. 11, when the authentication code index information is transmitted from the wireless terminal shown in FIG. 9 through the authentication code index transmission process shown in FIG. 10, the authentication server transmits the authentication code index information transmitted from the wireless terminal The authentication code index information is received (1100), the protocol used to receive the authentication code index information (e.g., a data communication protocol or a message exchange protocol provided in the wireless communication network) is read and the authentication code index information is transmitted And confirms the wireless terminal specific information corresponding to one wireless terminal (1105).

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the wireless terminal specific information is confirmed (1110), the authentication server checks whether the wireless terminal specific information is registered on the storage medium, and if the wireless terminal specific information is registered in the storage medium, The authentication code index information correlated with the wireless terminal unique information from the medium, compares the authentication code index information confirmed from the storage medium with the authentication code index information received from the wireless terminal, And confirms that the wireless terminal unique information is stored in the storage medium, the wireless terminal corresponding to the wireless terminal unique information is approved as a wireless communication disposable authenticator (1115).

If the wireless terminal is not approved for use as a wireless communication disposable authenticator (1120), the authentication server transmits wireless terminal validity error information to the wireless terminal through a wireless communication network and outputs the wireless terminal validity error information (1125).

Meanwhile, if the wireless terminal is approved for use as a wireless communication disposable authenticator (1120), the authentication server generates disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator, (1130).

If the disposable authentication code generation information corresponding to the authentication code index information is stored in the storage medium according to an embodiment of the present invention, the authentication server extracts the disposable authentication code generation information corresponding to the authentication code index information . &Lt; / RTI &gt;

According to another embodiment of the present invention, when the disposable authentication code generation information is not stored in the storage medium and the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated, It is preferable that the disposable authentication code generation information corresponding to the authentication code index information approved as the wireless communication disposable authenticator is dynamically generated in real time.

The first partial disposable authentication code generation information including a part of the one-time authentication code generation information is transmitted to the wireless terminal (for example, the wireless terminal to be used as the wireless communication disposable authentication unit) through the authentication code index providing system shown in FIG. 5 The authentication server confirms (or generates) the second partial disposable authentication code generation information including the remaining part of the one-time authentication code generation information matched with the partial disposable authentication code generation information previously provided to the wireless terminal desirable.

According to an embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a part of the disposable authentication code generation information to be provided to the wireless terminal, the authentication server generates the disposable authentication code It is preferable to confirm (or generate) the remaining part with the second partial disposable authentication code generation information to be provided to the wireless terminal.

According to another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal, (Or generates) the disposable authentication code generation information to be combined with the first partial disposable authentication code generation information to be provided to the wireless terminal.

According to still another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a verification value for verifying the disposable authentication code generation information, It is preferable that the authentication code generation information is confirmed (or generated) by the second partial disposable authentication code generation information to be provided to the wireless terminal.

If the disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator is confirmed (or generated) (1135), the authentication server transmits Transmits the disposable authentication code generation information (or second disposable authentication code generation information) to the wireless terminal (1140).

FIG. 12 is a diagram illustrating a process of providing disposable authentication code generation information after approval of use of a wireless terminal as a wireless communication disposable authenticator according to another embodiment of the present invention.

In more detail, FIG. 12 shows a case where the authentication code index information is transmitted from the wireless terminal shown in FIG. 9 through the authentication code index transmission process shown in FIG. 10, the communication company server checks the authentication code index information If the authentication code index information is attached to the authentication code index information and relayed to the authentication server shown in FIG. 8 by attaching the wireless terminal unique information, the authentication server receives the authentication code index information with the wireless terminal unique information attached thereto (Or second part disposable authentication code generation information) to the wireless terminal after approving the use of the wireless terminal as a wireless communication disposable authenticator through the authentication code index information and the wireless terminal unique information If the person skilled in the art is familiar with the present invention, (For example, omitting some steps or changing the sequence) for providing the disposable authentication code generation information after the use and approval of the wireless terminal as the wireless communication disposable authenticator by referencing and / However, the present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Referring to FIG. 12, when the authentication code index information is transmitted from the wireless terminal shown in FIG. 9 through the authentication code index transmission process shown in FIG. 10, the communication company server on the wireless communication network, The authentication code index information transmitted from the terminal is checked or intercepted (1200), and the wireless terminal specific information corresponding to the wireless terminal transmitting the authentication code index information is checked (1205).

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the wireless terminal unique information is confirmed 1210, the communication company server attaches the confirmed wireless terminal unique information to the authentication code index information, and transmits it to the authentication server 1215, Receives the authentication code index information to which the wireless terminal unique information is attached from the communication company server, and checks the wireless terminal specific information attached to the authentication code index information (1220).

If the wireless terminal specific information attached to the authentication code index information is confirmed 1225, the authentication server checks whether the wireless terminal specific information is registered on the storage medium, The authentication code index information correlated with the wireless terminal unique information is checked from the storage medium and the authentication code index information confirmed from the storage medium is compared with the authentication code index information received from the wireless terminal, When it is confirmed that the received authentication code index information and the wireless terminal specific information are stored in the storage medium, the wireless terminal corresponding to the wireless terminal specific information is approved as a wireless communication disposable authenticator in operation 1230.

If the wireless terminal is not approved for use as a wireless communication disposable authenticator 1235, the authentication server transmits wireless terminal validity error information to the wireless terminal through a wireless communication network and then outputs 1260 the wireless terminal validity error information.

If the wireless terminal is approved for use as a wireless communication disposable authenticator 1235, the authentication server generates disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator, (1245).

If the disposable authentication code generation information corresponding to the authentication code index information is stored in the storage medium according to an embodiment of the present invention, the authentication server extracts the disposable authentication code generation information corresponding to the authentication code index information . &Lt; / RTI &gt;

According to another embodiment of the present invention, when the disposable authentication code generation information is not stored in the storage medium and the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated, It is preferable that the disposable authentication code generation information corresponding to the authentication code index information approved as the wireless communication disposable authenticator is dynamically generated in real time.

The first partial disposable authentication code generation information including a part of the one-time authentication code generation information is transmitted to the wireless terminal (for example, the wireless terminal to be used as the wireless communication disposable authentication unit) through the authentication code index providing system shown in FIG. 5 The authentication server confirms (or generates) the second partial disposable authentication code generation information including the remaining part of the one-time authentication code generation information matched with the partial disposable authentication code generation information previously provided to the wireless terminal desirable.

According to an embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a part of the disposable authentication code generation information to be provided to the wireless terminal, the authentication server generates the disposable authentication code It is preferable to confirm (or generate) the remaining part with the second partial disposable authentication code generation information to be provided to the wireless terminal.

According to another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal, (Or generates) the disposable authentication code generation information to be combined with the first partial disposable authentication code generation information to be provided to the wireless terminal.

According to still another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a verification value for verifying the disposable authentication code generation information, It is preferable that the authentication code generation information is confirmed (or generated) by the second partial disposable authentication code generation information to be provided to the wireless terminal.

If the disposable authentication code generation information (or the second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator is confirmed (or generated) (1250), the authentication server transmits Transmits the disposable authentication code generation information (or second disposable authentication code generation information) to the wireless terminal (1255).

FIG. 13 is a diagram illustrating a process of providing disposable authentication code generation information after approval of use of a wireless terminal as a wireless communication disposable authenticator according to another embodiment of the present invention.

*

In more detail, FIG. 13 shows a case where the authentication code index information is transmitted from the wireless terminal shown in FIG. 9 through the authentication code index transmission process shown in FIG. 10, and the authentication code index And after receiving the wireless terminal information corresponding to the wireless terminal transmitting the authentication code index information from the communication company server, the wireless terminal is used as the wireless communication disposable authenticator through the authentication code index information and the wireless terminal unique information (Or the second partial disposable authentication code generation information) to the wireless terminal after confirming the wireless terminal information. More specifically, after the authentication server confirms the wireless terminal information through the protocol reading, Requesting and receiving wireless terminal specific information corresponding to the wireless terminal information through a server It illustrates an exemplary method.

Those skilled in the art will appreciate that various modifications and changes to the process of providing the disposable authentication code generation information after the wireless terminal is approved and used as a wireless communication disposable authenticator by referring to and / It will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit or scope of the invention as defined by the appended claims. Features are not limited.

For example, the wireless terminal specific information can be transmitted to the authentication server by confirming data communication or message exchange between the wireless terminal and the authentication server in the communication company server without a request from the authentication server. And that all possible embodiments are encompassed.

Referring to FIG. 13, when the authentication code index information is transmitted from the wireless terminal shown in FIG. 9 through the authentication code index transmission process shown in FIG. 10, the authentication server transmits the authentication code index information transmitted from the wireless terminal The authentication code index information is received (1300), the protocol used to receive the authentication code index information (for example, a data communication protocol or a message exchange protocol provided in the wireless communication network) is read and the authentication code index information is transmitted And confirms the wireless terminal information corresponding to one wireless terminal (1305).

If the wireless terminal information is confirmed (1310), the authentication server requests and receives wireless terminal specific information corresponding to the wireless terminal information to the communication company server (1315).

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the wireless terminal specific information is received from the communication company server (1320), the authentication server checks whether the wireless terminal specific information is registered on the storage medium, and if the wireless terminal specific information is registered in the storage medium The authentication code index information correlated with the wireless terminal unique information from the storage medium and compares the authentication code index information confirmed from the storage medium with the authentication code index information received from the wireless terminal, When it is confirmed that the authentication code index information and the wireless terminal specific information are stored in the storage medium, the wireless terminal corresponding to the wireless terminal specific information is approved as a wireless communication disposable authenticator (1325).

If the wireless terminal is not approved for use as a wireless communication disposable authenticator (1330), the authentication server transmits wireless terminal validity error information to the wireless terminal through a wireless communication network and outputs the wireless terminal validity error information (1335).

Meanwhile, when the wireless terminal is approved for use as a wireless communication disposable authenticator (1330), the authentication server generates disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator, (1340).

If the disposable authentication code generation information corresponding to the authentication code index information is stored in the storage medium according to an embodiment of the present invention, the authentication server extracts the disposable authentication code generation information corresponding to the authentication code index information . &Lt; / RTI &gt;

According to another embodiment of the present invention, when the disposable authentication code generation information is not stored in the storage medium and the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated, It is preferable that the disposable authentication code generation information corresponding to the authentication code index information approved as the wireless communication disposable authenticator is dynamically generated in real time.

The first partial disposable authentication code generation information including a part of the one-time authentication code generation information is transmitted to the wireless terminal (for example, the wireless terminal to be used as the wireless communication disposable authentication unit) through the authentication code index providing system shown in FIG. 5 The authentication server confirms (or generates) the second partial disposable authentication code generation information including the remaining part of the one-time authentication code generation information matched with the partial disposable authentication code generation information previously provided to the wireless terminal desirable.

According to an embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a part of the disposable authentication code generation information to be provided to the wireless terminal, the authentication server generates the disposable authentication code It is preferable to confirm (or generate) the remaining part with the second partial disposable authentication code generation information to be provided to the wireless terminal.

According to another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal, (Or generates) the disposable authentication code generation information to be combined with the first partial disposable authentication code generation information to be provided to the wireless terminal.

According to still another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a verification value for verifying the disposable authentication code generation information, It is preferable that the authentication code generation information is confirmed (or generated) by the second partial disposable authentication code generation information to be provided to the wireless terminal.

If the disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator is confirmed (or generated) (1345), the authentication server transmits The disposable authentication code generation information (or second disposable authentication code generation information) is transmitted to the wireless terminal (1350).

FIG. 14 is a diagram illustrating a process of generating a disposable authentication code according to an embodiment of the present invention.

In more detail, FIG. 14 is a flowchart illustrating a method of generating disposable authentication code by providing disposable authentication code generation information to the wireless terminal shown in FIG. 9 through the process of providing disposable authentication code generation information shown in FIG. 11, FIG. 12, (N) by using the disposable authentication code generation information, and it is understood that those skilled in the art can refer to and refer to FIG. 14 and / (For example, some steps may be omitted or the procedure may be changed), the present invention may include all of the above-described embodiments. And the technical features thereof are not limited only by the method shown in FIG.

Referring to FIG. 14, if the disposable authentication code generation information is provided to the wireless terminal shown in FIG. 9 through the process of providing the disposable authentication code generation information shown in FIG. 11, FIG. 12 or FIG. 13, The disposable authentication code generation information is received from the authentication server (1400). If the disposable authentication code generation information is received (1405), the wireless terminal transmits the received disposable authentication code generation information to the disposable authentication code (N) And generates an N-digit disposable authentication code N (1410) according to a predetermined disposable authentication code generation standard by using the generated disposable authentication code as a seed value for generating a disposable authentication code.

If the disposable authentication code N is generated 1415, the wireless terminal outputs the generated N-digit disposable authentication code N to a predetermined area on the screen of the wireless terminal 1420.

FIG. 15 is a diagram illustrating a process of generating a disposable authentication code according to another embodiment of the present invention.

In more detail, FIG. 15 is a flowchart illustrating a method of generating disposable authentication code according to an exemplary embodiment of the present invention when the second partial disposable authentication code generation information is provided to the wireless terminal illustrated in FIG. 9 through the process of providing the disposable authentication code generation information shown in FIG. 11, FIG. 12, The wireless terminal generates an N-digit disposable authentication code (N) based on the first partial disposable authentication code generation information and the second partial disposable authentication code generation information stored in the memory unit. Those skilled in the art will appreciate that various ways of practicing the process of generating the disposable authentication code (e.g., omitting some of the steps or changing the order) by referring to and / It will be understood that the invention is not limited to the embodiments shown in the drawings, The technical features are not limited to.

Referring to FIG. 15, if the second partial disposable authentication code generation information is provided to the wireless terminal shown in FIG. 9 through the process of providing the disposable authentication code generation information shown in FIG. 11, FIG. 12 or FIG. 13, The wireless terminal receives (1500) the second partial disposable authentication code generation information from the authentication server (1500), and if the second partial disposable authentication code generation information is received (1505), the wireless terminal Generating one-time authentication code generation information corresponding to the seed value for generating the one-time authentication code (N) by combining (or concatenating) the one-time one-time authentication code generation information and the second one-time authentication code generation information, The first disposable authentication code generation information is identified as a seed value for generating the disposable authentication code (N) through the one-time disposable authentication code generation information (1510).

If the disposable authentication code generation information is not generated (or confirmed) through the first partial disposable authentication code generation information and the second partial disposable authentication code generation information 1515, the wireless terminal outputs the disposable authentication code generation error information (1520).

Meanwhile, if the one-time authentication code generation information is generated (or confirmed) through the first partial disposable authentication code generation information and the second partial disposable authentication code generation information 1515, the wireless terminal generates the one- (1525) an N-digit disposable authentication code (N) in accordance with a predetermined one-time authentication code generation standard using the code generation information as a seed value for generating the one-time authentication code (N).

*

If the first partial disposable authentication code generation information stored in the memory unit is stored, the wireless terminal generates n (1 < = n < N) number of digits of the disposable authentication code (n), generating a disposable authentication code (n) of the number of digits (N) It is possible to combine (or concatenate) the disposable authentication codes Nn to generate an N-digit disposable authentication code N, and thus the present invention is not limited thereto.

If the disposable authentication code N is generated 1530, the wireless terminal outputs the generated N-digit disposable authentication code N to a predetermined area on the screen of the wireless terminal 1535.

FIG. 16 is a diagram illustrating a process of authenticating a disposable authentication code according to an embodiment of the present invention.

In more detail, FIG. 16 is a flowchart illustrating a process of generating the disposable authentication code (N) in the wireless terminal shown in FIG. 9 through the process of generating the disposable authentication code shown in FIG. 14 or FIG. The disposable authentication code N is transmitted to the authentication server shown in FIG. 8. In response to the disposable authentication code N, the authentication server generates a disposable verification code N matching the disposable authentication code N, Code N. It will be understood by those skilled in the art that references to and / or variations on the above-described FIG. 16 may be applied to various embodiments of the disposable authentication code authentication process It is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, The technical features thereof are not limited only by the implementation method shown in FIG.

Referring to FIG. 16, when an N-digit number of one-time authentication code N is generated in the wireless terminal shown in FIG. 9 through the process of generating the one-time authentication code shown in FIG. 14 or FIG. 15, (N) generated by the wireless terminal through the disposable authentication code input interface (1605), and transmits the disposable authentication code to the authentication server via the communication network Transmits the input disposable authentication code N (1610).

The authentication server receives the disposable authentication code N through the communication network, and confirms the disposable authentication code generation information corresponding to the received disposable authentication code N (1615).

If the disposable authentication code generation information is confirmed (1620), the authentication server generates an N-digit disposable verification code (N) through the confirmed disposable authentication code generation information (1625).

If the disposable verification code generation information is generated (1620), the authentication server compares the disposable authentication code (N) with the disposable verification code (N) to authenticate the disposable authentication code (1635).

If the disposable authentication code is not authenticated (1640), the authentication server provides the disposable authentication code authentication error information to the authentication request terminal (1645).

If the disposable authentication code is authenticated (1640), the authentication server provides the disposable authentication code authentication result to the authentication request terminal and outputs the disposable authentication code authentication result to the terminal, The result is output or stored (1650).

17 is a diagram illustrating an information registration system for registering wireless terminal registration information according to an embodiment of the present invention.

In more detail, FIG. 17 is a flowchart illustrating a method for using a wireless mobile terminal as a wireless communication disposable authenticator for implementing a disposable authentication code through an authentication code index using a wireless terminal including at least one of customer information, wireless terminal information, A wireless communication disposable authenticator for implementing the disposable authentication code through the authentication code index based on the customer information, the wireless terminal information, and the communication company information included in the wireless terminal registration information in the information registration system, (Or creates) the customer's wireless terminal unique information for authenticating the use of the wireless terminal, and associates the customer information with the wireless terminal unique information and the communication company information to generate a storage medium 1745 (for example, Databases linked to financial statements, and authentication via one-off authorization codes. (E.g., a storage medium 1745 including one or more databases included in the system for processing data), and those skilled in the art will be able to refer to FIG. 17 and / or FIG. The present invention can be applied to all of the above-mentioned embodiments, and the present invention is not limited to the method shown in FIG.

Hereinafter, the wireless terminal registration information provided by the customer on the information registration system shown in FIG. 17 may be stored in the storage medium 1745 (e.g., a database linked to a financial institution or financial ledger provided in a financial institution, Components corresponding to one or more means and / or functional configurations for storing the authentication information in a storage medium 1745 including one or more databases included in the system for processing authentication are referred to as "information registration server 1700" .

Referring to FIG. 17 according to an embodiment of the present invention, the information registration system includes a window terminal 1755 provided at one or more financial institution branches, a wire terminal used by the customer or a client terminal including one or more wireless terminals The information registration terminal 1760 includes an information registration server 1760 provided on the information registration system through a financial network (or a communication network) ) And a communication channel are connected.

According to an embodiment of the present invention, the customer visits the financial institution branch, and one or more application forms for registering the wireless terminal registration information through a window provided at the financial institution branch (or through a counter staff) (For example, a document having a form for filling one or more information items), and when the completed application is submitted to the counter staff, the counter staff inputs the information written in the application through the window terminal 1755 Or the like), and the window terminal 1755 transmits the input (or selected) information to the information registration server 1700 provided on the information registration system through the financial network.

It is preferable that the counter terminal 1755 includes an employee terminal used by a counter staff provided at the financial institution branch office. An information registration server 1700 connected to the counter terminal 1755 may include an information registration server The financial network connecting the window terminal 1755 and the information registration server 1700 preferably includes a server (for example, an information system), and the financial network for communication between the window terminal 1755 and the information registration server 1700 And an access network for connecting the channels.

According to another embodiment of the present invention, the customer accesses the information registration server 1700 through one or more client terminals of a wired terminal connected to a wired communication network or a wireless terminal connected to a wireless communication network, and the information registration server 1700 (Or selects) the wireless terminal registration information through one or more information registration interfaces provided by the wireless terminal, the client terminal transmits the wireless terminal registration information to the information registration server 1700 provided on the information registration system through the communication network, It is desirable to transmit information.

Here, the wired terminal connected to the wired communication network is a collective term for all terminal devices connected to the TCP / IP based communication network, and is a desktop computer or a notebook connected to the TCP / IP based communication network. (KIOSK) connected to a TCP / IP based communication network, or the like, or a home terminal (e.g., a set top box) connected to the TCP / IP based communication network.

Further, the wireless terminal connected to the wireless communication network may be any terminal device connected to a CDMA (Code Division Multiple Access) -based mobile communication network, or all terminal devices connected to the IEEE 802.16x based portable Internet, all generic devices connected to the HSDPA- A mobile phone connected to the CDMA-based mobile communication network, a portable Internet terminal connected to the IEEE 802.16x-based portable Internet, or a wireless communication terminal connected to the HSDPA-based wireless data communication network.

According to the embodiment of the present invention, the client terminal outputs one or more information registration interfaces provided by the information registration server 1700, and transmits one or more pieces of information constituting the wireless terminal registration information through the information registration interface (For example, a browser program and a communication function, or a communication program and a communication function for communicating with the information registration server 1700) for inputting (or selecting) the input information to the information registration server 1700 .

According to another embodiment of the present invention, the information registration terminal 1760 may include an automatic teller machine (ATM) connected to a financial network (for example, a financial joint network) in addition to the window terminal 1755 to the client terminal. ATM), a cash dispenser (CD), a cash dispenser (not shown), a public switched telephone network (PSTN), a call terminal connected to a wired telephone network such as a Voice over IP (Not shown) connected to a wireless telephone network such as a mobile communication network or a wireless VoIP network, and a terminal (or server) (not shown) provided in one or more affiliated organizations affiliated with the financial institution The present invention is not limited thereto.

The information registration server 1700 provided on the information registration system is connected to the information registration terminal 1760 via a financial network (or a communication network). The disposable authentication code authentication system side information registration component 1700 shown in FIG. (Or devices) provided in a financial institution, or one or more servers (or devices) provided in a system for processing authentication through a disposable authentication code, or a recording medium provided in the server (or apparatus) And the present invention is not limited thereto. According to the embodiment of the present invention, the information registration server 1700 confirms (i) the wireless terminal unique information to be used as the wireless communication disposable authenticator and the disposable authentication code generation information to be provided to the wireless terminal to be used as the wireless communication disposable authenticator And storing the authentication code index information in the storage medium 1745 in association with each other.

According to an embodiment of the present invention, the information registration server 1700 includes an interface unit 1705 for connecting and managing a communication channel with the information registration terminal 1760 through the financial network (or a communication network) .

According to an embodiment of the present invention, when the information registration terminal 1760 is a window terminal 1755 connected to a financial network, the interface unit 1705 analyzes the protocol stack, which is defined in the financial network, (Or data) transmission / reception using a communication protocol defined in a financial transaction related program provided in the window terminal 1755. The communication terminal 1755 may be connected to the communication terminal 1755 through a communication interface.

According to another embodiment of the present invention, when the information registration terminal 1760 is a client terminal including a wired terminal connected to a wired communication network, the interface unit 1705 may be configured to receive, based on a protocol stack defined in the wired communication network It is preferable to provide a communication interface for connecting the client terminal with a communication channel and transmitting and receiving one or more information (or data) using a communication protocol defined in a communication program provided in the client terminal.

For example, when the client terminal is provided with a browser program corresponding to HTTP (Hyper-Text Transfer Protocol) protocol, the interface unit 1705 connects a communication channel with the client terminal based on the TCP / IP protocol, (E.g., a Hyper-Text Markup Language (HTML) compliant web page) or a communication interface for transmitting and receiving information using the HTPP protocol defined in the browser program.

Alternatively, when the client terminal is provided with a communication program for communicating with the information registration server 1700, the interface unit 1705 connects a communication channel with the client terminal based on the TCP / IP protocol, And provides a communication interface for information (or data) transmission and reception using the communication protocol defined in the communication program.

Alternatively, if the information registration terminal 1760 is a client terminal including a wireless terminal connected to a wireless communication network, the interface unit 1705 may transmit a communication channel with the client terminal based on a protocol stack defined in the wireless communication network And provides a communication interface for transmitting and receiving one or more information (or data) using a communication protocol defined in a communication program provided in the client terminal.

For example, when the client terminal is provided with a browser program corresponding to a wireless application protocol (WAP) or an HTTP protocol, or a wireless protocol compatible with the WAP / HTTP, the interface unit 1705 transmits a wireless (E.g., an HTML compatible web page, a WML (Wireless Compatible Web), a WML (Wireless Internet Protocol), or the like) using a WAP / HTTP protocol (or a WAP / HTTP compatible protocol) defined in the browser program, Markup Language) compatible web page) or a communication interface for transmitting and receiving information.

Alternatively, when the client terminal is provided with a communication program for communicating with the information registration server 1700, the interface unit 1705 connects a communication channel with the client terminal based on the wireless communication protocol, And provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the program.

17, the information registration server 1700 may be configured such that the information registration terminal 1760 connects a communication channel with the information registration server 1700 via the interface unit 1705, (Or extracts) an information registration interface for inputting (or selecting) the wireless terminal registration information from the information registration terminal 1760 in cooperation with the interface unit 1705 when the wireless terminal registration information registration is requested And an interface providing unit 1710 for providing the information to the information registering terminal 1760.

The interface providing unit 1710 connects the communication channel with the information registering server 1700 through the interface unit 1705 and requests registration of the wireless terminal registration information through the communication channel (Or selects) the wireless terminal registration information using the function configuration provided in the information registration terminal 1760 and transmits the information registration information to the information registration server 1700 through the financial network (Or extracts) the information registration interface from the information registration terminal 1760 (or the communication network) through the financial network (or communication network) in cooperation with the interface unit 1705, ).

A program having one or more information registration interfaces for inputting (or selecting) the wireless terminal registration information to the information registration terminal 1760 and transmitting the registration information to the information registration server 1700 through the financial network (or communication network) The function of the interface providing unit 1710 for providing the information registering interface to the information providing terminal 1760 may be omitted and the present invention is not limited thereto.

Then, the information registration terminal 1760 inputs (or selects) the wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information based on the information registration interface, And transmits the registered wireless terminal registration information to the information registration server 1700 through the financial network (or communication network).

17, the information registration server 1700 inputs (or selects) the wireless terminal registration information through the information registration interface at the information registration terminal 1760 and transmits the registration information to the interface unit 1705 An information receiving unit (1715) for receiving wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information in cooperation with each other, A validation unit 1740 for verifying the validity of the wireless terminal for use as a wireless communication disposable authenticator for implementing the disposable authentication code through the wireless communication terminal registration information, A wireless terminal unique information confirmation / generation unit 1720 for confirming (or generating) the wireless terminal specific information, (For example, a database linked to a financial institution or a financial institute provided in a financial institution, and a database provided in a system for processing authentication through a disposable authentication code) in a storage medium 1745 (Or a storage medium 1745 including the above-mentioned storage medium 1745).

When the information registration terminal 1760 inputs (or selects) the wireless terminal registration information through the information registration interface, the information receiving unit 1715 interworks with the interface unit 1705, And wireless terminal registration information including at least one of information and communication company information.

The customer information includes at least one of the customer's personal information (e.g., name, resident registration number, address, contact information), member information (e.g., member ID / PW information), and customer number registered in the storage medium 1745 .

According to an embodiment of the present invention, when the storage medium 1745 is a financial ledger, the customer information preferably includes at least one customer specific information for identifying the customer through the customer ledger registered in the financial ledger And at least one customer unique information matching the subscriber information registered in the communication company to which the customer wireless terminal is subscribed.

The wireless terminal information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, (For example, an electronic serial number (ESN)), and a wireless terminal opening number.

The communication company information is information for identifying a wireless communication company to which the wireless terminal corresponding to the wireless terminal specific information is subscribed, and may include information on the communication company server 1750 included in the communication company.

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 23 authenticates and activates the wireless communication disposable authentication function provided in the wireless terminal provided with the authentication code index information through the user authentication information, Preferably, the wireless terminal registration information further includes user authentication information for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal in the disposable authentication code authentication system.

When the wireless terminal registration information is received, the validity checking unit 1740 reads the received wireless terminal registration information, and transmits the wireless wireless terminal discovery authentication code to the wireless wireless terminal for use as a wireless communication disposable authenticator to implement the disposable authentication code through the authentication code index And the terminal validity is confirmed.

According to an embodiment of the present invention, the wireless terminal validation includes checking whether one or more ledger information matching the wireless terminal registration information is registered in the ledger D / B on the financial system associated with the information registration system .

For example, the wireless terminal validation check includes checking whether the customer information included in the wireless terminal registration information is registered in the customer ledger provided in the ledger D / B on the financial system associated with the information registration system desirable.

Also, the wireless terminal validity check may be performed by providing the customer information and the wireless terminal information to the communication company server 1750 corresponding to the communication company information (or wireless terminal information) based on the customer information, the wireless terminal information, and the communication company information , And checking whether the subscriber information including the customer information and the wireless terminal information is subscribed to the communication company.

When the validity of the wireless terminal is confirmed, the wireless terminal unique information verification / generation unit 1720 implements the one-time authentication code through the authentication code index on the basis of the wireless terminal information included in the wireless terminal registration information Characterized in that the unique information of the customer wireless terminal for authenticating the use as the wireless communication disposable authenticator is confirmed or the unique information of the customer wireless terminal is generated.

According to an embodiment of the present invention, the wireless terminal unique information check / generation unit 1720 determines a wireless terminal number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (E.g., an electronic serial number (ESN) assigned to the wireless terminal, and a wireless terminal opening number, to the customer wireless terminal via the authentication code index, It is preferable to confirm the customer wireless terminal unique information for authenticating the use as the wireless communication disposable authenticator for implementing the authentication code as the wireless terminal unique information.

Alternatively, the wireless terminal unique information verification / generation unit 1720 may generate the wireless terminal unique information verification / generation unit 1720 and the wireless terminal specific information verification / It is preferable to generate the combination number and process it as the customer wireless terminal unique information for authenticating that the customer wireless terminal is used as a wireless communication disposable authenticator for implementing the disposable authentication code through the authentication code index.

Then, the information storage unit 1735 associates the customer information included in the wireless terminal registration information with the confirmed (or generated) wireless terminal unique information and the communication company information, and transmits the processed wireless terminal identification information to the storage medium 1745 A database associated with a financial director or a financial director, and a storage medium 1745 including one or more databases provided in a system for processing authentication through a disposable authentication code).

According to the embodiment of the present invention, when the storage medium 1745 is a financial ledger, the customer information is included in the customer ledger, and the wireless terminal unique information and the communication company information are stored in the form of an additional information ledger And is preferably registered in the ledger D / B.

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 23 authenticates and activates the wireless communication disposable authentication function provided in the wireless terminal provided with the authentication code index information through the user authentication information, The information storage unit 1735 may further store the user authentication information in the storage medium 1745 (not shown), and thus the present invention is not limited thereto.

Referring to FIG. 17, the information registration server 1700 confirms (or generates) two or more pieces of authentication code index information to be associated with the wireless terminal specific information when the wireless terminal specific information is confirmed (or generated) An information storage unit 1735 for storing the authentication code index information check / generation unit 1725, the wireless terminal unique information and the two or more authentication code index information confirmed (or generated) in association with the storage medium 1745, And further comprising:

When the wireless terminal specific information is confirmed (or generated), the authentication code index information check / generation unit 1725 determines whether authentication code index management D / B (not shown), or generates two or more new authentication code index information that does not overlap with a previously authenticated (or generated) authentication code index, and the information storage unit 1735 And stores the wireless terminal unique information stored in the storage medium 1745 in association with two or more authentication code index information confirmed (or generated).

Referring to FIG. 17, the information registration server 1700 registers two or more disposable authentication code generation information for using the customer wireless terminal as a wireless communication disposable authenticator with two or more authentication code index information, A one-time authentication code generation information check / generation unit 1730 for checking (or generating) two or more one-time authentication code generation information to be associated with the two or more authentication code index information, And an information storage unit 1735 for storing index information and the confirmed (or generated) disposable authentication code generation information in association with each other in the storage medium 1745.

When the two or more one-time-use authentication code generation information for using the customer wireless terminal as a wireless communication disposable authenticator is registered in advance in the ledger in association with two or more authentication code index information, the disposable authentication code generation information confirmation / 1730) receives from the disposable authentication code generation information management D / B (not shown) two or more disposable authentication code generation information to be provided to the customer wireless terminal when the customer wireless terminal is used as a wireless communication disposable authenticator And generates two or more new one-off authentication code generation information that does not overlap with the authentication code index that is confirmed (or generated), and the information storage unit 1735 stores the one-time authentication code generation information stored in the storage medium 1745 Two or more authentication code index information (or wireless terminal unique information) and the confirmed (or generated) And the authentication code index information is stored in association with each other.

When one-off authentication code generation information corresponding to each of the two or more authentication code index information is dynamically generated in real time in the course of using the customer wireless terminal as a wireless communication disposable authenticator according to another embodiment of the present invention, The function configuration for confirming (or generating) two or more one-time authentication code generation information associated with code index information and storing them in the storage medium 1745 may be omitted, and thus the present invention is not limited thereto.

18 is a diagram illustrating a process of registering wireless terminal registration information according to an embodiment of the present invention.

In more detail, FIG. 18 shows a case where a program having an information registration interface is provided in the information registration terminal shown in FIG. 17, the information registration terminal drives the program to transmit the customer information, the wireless terminal information, (Or selecting) the wireless terminal registration information including the wireless terminal registration information including the wireless terminal registration information and the wireless terminal registration information, the client wireless terminal is authenticated using the wireless terminal as the wireless disposable authentication unit implementing the one- (Or generating) the wireless terminal specific information, associating the wireless terminal specific information with the wireless terminal specific information and the communication company information, and storing the wireless terminal specific information in the storage medium, wherein the authentication code index information associated with the wireless terminal unique information, (Or generates) the disposable authentication code generation information associated with the storage As for the process of storing the body, for example, if the information registering terminal to the service area terminal, showing the exemplary method for registering the mobile station registration information through the window terminal.

Those skilled in the art will be able to conceive of various methods of registering the wireless terminal registration information by referring to and / or modifying the FIG. 18, And the present invention is not limited to the method shown in FIG.

For example, when the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated in real time in the course of using the customer wireless terminal as a wireless communication disposable authenticator, the disposable authentication code generation information is confirmed (or generated) The process of storing the data in the storage medium may be omitted, and thus the present invention is not limited thereto.

Hereinafter, in FIG. 18, the information registration terminal shown in FIG. 17 is referred to as a "terminal" for convenience sake, and the information registration server shown in FIG.

Referring to FIG. 18, a terminal equipped with a program having the information registration interface authenticates an information registration right (for example, a teller authority) by connecting a communication channel with the server, And outputs an information registration interface for inputting (or selecting) wireless terminal registration information including at least one piece of information (1800).

Then, the terminal inputs (or selects) the wireless terminal registration information including one or more client information, wireless terminal information, and communication company information through the information registration interface (1805).

If the terminal inputs (or selects) wireless terminal registration information including the customer information, the wireless terminal information, and the communication company information through the information registration interface (1810), the terminal registers the input And transmits wireless terminal registration information including wireless terminal information and communication company information to the server (1815).

The customer information preferably includes at least one of the customer's personal information (e.g., name, resident registration number, address, contact information), member information (e.g., member ID / PW information) .

According to an embodiment of the present invention, when the storage medium is a financial ledger, the customer information preferably includes at least one customer-specific information for identifying the customer through a customer ledger registered in the financial ledger, And at least one customer specific information matching the subscriber information registered in the communication company to which the customer wireless terminal is subscribed.

The wireless terminal information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, (For example, an electronic serial number (ESN)), and a wireless terminal opening number.

The communication company information is information for identifying a wireless communication company to which the wireless terminal corresponding to the wireless terminal unique information is subscribed, and it preferably includes the communication company server information provided in the communication company.

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 5 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, Preferably, the wireless terminal registration information further includes user authentication information for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal in the disposable authentication code authentication system.

Then, the server receives and reads the wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information, and verifies the validity of the wireless terminal (1820).

According to an embodiment of the present invention, the wireless terminal validation includes checking whether one or more ledger information matching the wireless terminal registration information is registered in the ledger D / B on the financial system associated with the information registration system .

For example, the wireless terminal validation check includes checking whether the customer information included in the wireless terminal registration information is registered in the customer ledger provided in the ledger D / B on the financial system associated with the information registration system desirable.

Also, the wireless terminal validity check may be performed by providing the customer information and the wireless terminal information to a communication company server corresponding to the communication company information (or wireless terminal information) based on the customer information, the wireless terminal information, and the communication company information, And checking whether subscriber information including the customer information and the wireless terminal information is subscribed to.

If the validity of the wireless terminal is not authenticated (1825), the server generates and transmits information registration error information to the terminal (1830), and does not perform the wireless terminal registration information registration procedure.

On the other hand, if the validity of the wireless terminal is authenticated (1825), the server uses the wireless wireless terminal as a wireless communication disposable authenticator for implementing the disposable authentication code through the authentication code index based on the wireless terminal information included in the wireless terminal registration information (1835), or the customer wireless terminal unique information is generated (1835).

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the wireless terminal specific information is confirmed (or generated) (1840), the server concatenates the client information included in the wireless terminal registration information with the confirmed (or generated) wireless terminal unique information and the communication company information and stores (1845).

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 5 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, The server preferably stores the user authentication information in the storage medium (not shown), and thus the present invention is not limited thereto.

Further, the server checks (or generates) two or more pieces of authentication code index information associated with the wireless terminal specific information and two or more pieces of one-time authentication code generation information associated with the two or more pieces of authentication code index information (1850) The wireless terminal unique information and the authentication code index information are linked and stored in the storage medium, and the authentication code index information and the one-time authentication code generation information are associated with each other and stored in the storage medium (1855) (1860), and completes the registration procedure for the wireless terminal registration information.

FIG. 19 is a diagram illustrating a process of registering wireless terminal registration information according to another embodiment of the present invention.

In more detail, FIG. 19 is a flowchart illustrating a method of connecting a communication channel to the information registration server shown in FIG. 17 through a communication network in the information registration terminal shown in FIG. 17, (Or selecting) wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information to the information registration terminal, wherein the information registration terminal provides the information registration interface with the information registration interface (Or selects) wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information, and transmits the selected wireless terminal registration information to the information registration server through the wireless terminal registration information To authenticate the use as a wireless communication disposable authenticator to implement a one-off authentication code (Or generates) the customer's wireless terminal unique information, and stores the customer information, the wireless terminal specific information, and the communication company information in a storage medium, wherein the authentication code index information associated with the wireless terminal unique information, (Or creating) the one-time authentication code generation information associated with the information, and storing the information in the storage medium. For example, when the information registration terminal is a client terminal, And shows the method of registering registration information.

Those skilled in the art will be able to conceive of various methods of registering the wireless terminal registration information by referring to and / or modifying FIG. 19, but the present invention is not limited to the above- And the present invention is not limited to the method shown in FIG. 19.

For example, when the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated in real time in the course of using the customer wireless terminal as a wireless communication disposable authenticator, the disposable authentication code generation information is confirmed (or generated) The process of storing the data in the storage medium may be omitted, and thus the present invention is not limited thereto.

Hereinafter, in FIG. 19, the information registration terminal shown in FIG. 17 is referred to as a "terminal" for convenience's sake, and the information registration server shown in FIG.

Referring to FIG. 19, when the terminal connects a communication channel with the server to request registration of wireless terminal registration information (1900), the server generates a web page including an information registration interface for registering the wireless terminal registration information (Or extracts) the web page including the information registration interface (1905), and transmits the web page including the information registration interface to the terminal through the communication channel (1910).

Then, the terminal inputs (or selects) the wireless terminal registration information including at least one customer information, wireless terminal information, and communication company information through the information registration interface (1915).

If the terminal inputs (or selects) wireless terminal registration information including the customer information, the wireless terminal information, and the communication company information through the information registration interface in step 1920, the terminal accesses the input And transmits wireless terminal registration information including wireless terminal information and communication company information to the server (1925).

The customer information preferably includes at least one of the customer's personal information (e.g., name, resident registration number, address, contact information), member information (e.g., member ID / PW information) .

According to an embodiment of the present invention, when the storage medium is a financial ledger, the customer information preferably includes at least one customer-specific information for identifying the customer through a customer ledger registered in the financial ledger, And at least one customer specific information matching the subscriber information registered in the communication company to which the customer wireless terminal is subscribed.

The wireless terminal information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, (For example, an electronic serial number (ESN)), and a wireless terminal opening number.

The communication company information is information for identifying a wireless communication company to which the wireless terminal corresponding to the wireless terminal unique information is subscribed, and it preferably includes the communication company server information provided in the communication company.

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 5 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, Preferably, the wireless terminal registration information further includes user authentication information for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal in the disposable authentication code authentication system.

Then, the server receives and reads the wireless terminal registration information including at least one of the customer information, the wireless terminal information, and the communication company information, and verifies the validity of the wireless terminal (1930).

According to an embodiment of the present invention, the wireless terminal validation includes checking whether one or more ledger information matching the wireless terminal registration information is registered in the ledger D / B on the financial system associated with the information registration system .

For example, the wireless terminal validation check includes checking whether the customer information included in the wireless terminal registration information is registered in the customer ledger provided in the ledger D / B on the financial system associated with the information registration system desirable.

Also, the wireless terminal validity check may be performed by providing the customer information and the wireless terminal information to a communication company server corresponding to the communication company information (or wireless terminal information) based on the customer information, the wireless terminal information, and the communication company information, And checking whether subscriber information including the customer information and the wireless terminal information is subscribed to.

If the validity of the wireless terminal is not authenticated (1935), the server transmits a disposable authentication code to the wireless terminal based on the wireless terminal information included in the wireless terminal registration information, (1945), the wireless terminal specific information for authenticating the use of the customer wireless terminal or the customer wireless terminal specific information.

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the wireless terminal unique information is confirmed (or generated) (1950), the server processes the client information included in the wireless terminal registration information, the wireless terminal unique information confirmed (or generated) (1955).

According to the embodiment of the present invention, when the disposable authentication code authentication system shown in FIG. 5 authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal provided with the authentication code index information through the user authentication information, The server preferably stores the user authentication information in the storage medium (not shown), and thus the present invention is not limited thereto.

*

Also, the server confirms (or generates) (in step 1960) two or more pieces of authentication code index information associated with the wireless terminal unique information, disposable authentication code generation information associated with each of the two or more pieces of authentication code index information, And stores the authentication code index information and the one-time authentication code generation information in association with each other in the storage medium (1965).

20 is a diagram illustrating a configuration of a system for providing an authentication code index according to an embodiment of the present invention.

20 is a flowchart illustrating a method of authenticating the use of a customer wireless terminal 2035 as a wireless communication disposable authenticator to a storage medium 2030 through the information registration system shown in FIG. And provides the two or more authentication code index information to the wireless terminal 2035 corresponding to the unique information of the customer wireless terminal 2035. In this case, Those skilled in the art will be able to refer and / or modify FIG. 20 to illustrate various embodiments of the authentication code index providing system configuration (e.g., some configuration portions may be omitted, or fragmented, or combined) However, the present invention is not limited to the above-described embodiments, Only exemplary method is not limited that technical feature.

Hereinafter, components corresponding to one or more means and / or functional configurations for providing the two or more authentication code index information to the customer wireless terminal 2035 on the index providing system shown in FIG. 20 may be referred to as " 2000).

Referring to FIG. 20 according to an embodiment of the present invention, the authentication code index providing system includes a wireless terminal 2035 to be used as the wireless communication disposable authenticator, which is provided with the two or more authentication code index information, And identifies the unique information of the wireless terminal 2035 registered in the storage medium 2030 and two or more authentication code index information through the index providing system shown in FIG. 17, And an index providing server 2000 for providing the two or more authentication code index information to the client terminal through a wireless communication network.

The wireless terminal 2035 to be used as the wireless communication disposable authenticator includes a memory for storing two or more authentication code index information provided from the index providing server 2000 and a memory for storing the authentication code index information, One of the two or more authentication code index information stored in the memory via the communication network is provided to the one-time authentication code authentication system shown in FIG. 23. In the one-time authentication code authentication system, the wireless terminal 2035 ) As the wireless communication disposable authenticator, transmits the one-time authentication code generation information (or the first partial disposable authentication code generation information including a part of the one-time authentication code generation information) corresponding to the authentication code index information , The disposable authentication code generation information And generates a disposable authentication code (N) of N (N> = 2) digits through the received one-time authentication code generation information (or a part of the one-time authentication code generation information) Referring to FIG. 24, a detailed description of the functional configuration of the wireless terminal 2035 will be given.

The index providing server 2000 provided on the authentication code index providing system is connected to the wireless terminal 2035 to be used as the wireless communication disposable authenticator with the disposable authentication code authentication system side authentication code Generically refers to one or more servers (or devices) provided in a financial institution, or one or more servers (or devices) provided in a system for processing authentication via a disposable authentication code, or the server (or device) The present invention can be embodied as one or more programs recorded on a recording medium provided, and thus the present invention is not limited thereto.

Referring to FIG. 20, the index providing server 2000 includes a wireless terminal 2035 checking unit 2005 (or a wireless terminal 2035) for checking the unique information of the wireless terminal 2035 to be used as the wireless communication disposable authenticator An authentication code index information verifying unit 2010 for verifying two or more pieces of authentication code index information to be provided to the wireless terminal 2035 corresponding to the unique information of the wireless terminal 2035 in association with the storage medium 2030, (Or the authentication code index information verifying means) and the wireless terminal 2035 to be used as the wireless communication disposable authenticator through a wireless communication network (for example, a wireless communication network corresponding to the communication company information stored in the storage medium 2030) And an authentication code index information providing unit 2015 (or authentication code index information providing unit) for providing the above-identified two or more pieces of authentication code index information to the wireless terminal 2035 .

The wireless terminal 2035 identification unit 2005 identifies the wireless terminal 2035 unique to the wireless terminal 2035 registered in the storage medium 2030 through the information registration system shown in FIG. The identification information of the wireless terminal 2035 is verified and the authentication code index information verifier 2010 confirms the authenticity of the wireless terminal 2035 in association with the storage medium 2030. [ (Or extracts) two or more pieces of authentication code index information to be provided to the wireless terminal 2035 corresponding to the unique ID information 2035. If the two or more pieces of authentication code index information are stored in the storage medium 2030 It is preferable that the authentication code index information verifying unit 2010 generates two or more pieces of authentication code index information to be provided to the wireless terminal 2035 so as not to be duplicated.

When the authentication code index information providing unit 2015 determines that two or more pieces of authentication code index information to be provided to the wireless terminal 2035 are received, the authentication code index information providing unit 2015 transmits the authentication code index information to the wireless communication network (2035) to be used as the wireless communication disposable authenticator through the wireless communication network corresponding to the communication company information stored in the authentication code index information May be stored in a memory unit included in the wireless terminal 2035. [

Referring to FIG. 20, the index providing server 2000 may associate with the storage medium 2030, two or more authentication code index information provided to the wireless terminal 2035 corresponding to the unique information of the wireless terminal 2035, A partial disposable authentication code generation information confirmation unit 2020 (or partial disposal authentication code generation information confirmation means) for confirming the first partial disposable authentication code generation information including a part of the generated disposable authentication code generation information, The generated disposable authentication code is transmitted to the wireless terminal 2035 to be used as the wireless communication disposable authenticator through the wireless communication network to which the terminal 2035 is connected (for example, wireless communication network corresponding to the communication company information stored in the storage medium 2030) Partial disposable authentication code generation information providing part 2025 (or partial disposable authentication code generation information providing part) which provides the first part disposable authentication code generation information including part of the information And the one-time authentication code generation information corresponding to the two or more pieces of authentication code index information is not stored in the storage medium 2030. Alternatively, The first part of the one-time authentication code generation information including a part of the one-time authentication code generation information is transmitted from the wireless terminal 2035 to the wireless terminal 2035, (2035) may be omitted, and thus the present invention is not limited thereto.

The partial disposable authentication code generation information confirmation unit 2020 identifies the one-time-use authentication code generation information in the storage medium 2030 when the two disposable authentication code generation information corresponding to the two or more authentication code index information are generated and stored in the storage medium 2030 In association with two or more pieces of authentication code index information provided to the wireless terminal 2035 corresponding to the unique information of the wireless terminal 2035, two or more disposable authentication code generation information to be provided to the wireless terminal 2035 And the first partial disposable authentication code generation information including a part of the disposable authentication code is confirmed.

Here, when the wireless terminal 2035 is used as a wireless communication disposable authenticator, the first partial disposable authentication code generation information may include a disposable authentication code to be provided to the wireless terminal 2035 in the disposable authentication code authentication system shown in FIG. When the wireless terminal 2035 is used as a wireless communication disposable authenticator, a part of the generated information includes a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal 2035 in the disposable authentication code authentication system shown in FIG. 23, When the wireless terminal 2035 is used as a wireless communication disposable authenticator, one or more verification values for verifying the one-time authentication code generation information provided to the wireless terminal 2035 in the one-time authentication code authentication system shown in FIG. 23 .

When the first partial disposable authentication code generation information to be provided to the wireless terminal 2035 is confirmed, the partial disposable authentication code generation information providing part 2025 transmits the partial disposable authentication code generation information to the wireless communication network (for example, (2035) to be used as the wireless communication disposable authenticator through a wireless communication network corresponding to the communication company information stored in the storage medium (2030), a first part disposable authentication code It is preferable that a part of the disposable authentication code generation information is stored in a memory unit included in the wireless terminal 2035. [

*

FIG. 21 is a diagram illustrating a process of providing an authentication code index according to an embodiment of the present invention.

In more detail, FIG. 21 shows a process of providing two or more pieces of authentication code index information to a wireless terminal that uses a wireless terminal as a wireless communication disposable authenticator in the authentication code index providing system shown in FIG. 20, Those skilled in the art will be able to refer to and modify various aspects of the authentication code index providing process in reference to FIG. 21, but the present invention is not limited thereto And the technical characteristics thereof are not limited only by the method shown in FIG.

Hereinafter, in FIG. 21, the index providing server shown in FIG. 20 is referred to as a "server" for the sake of convenience.

Referring to FIG. 21, the server confirms (2100) a wireless terminal to provide two or more authentication code index information corresponding to wireless terminal unique information registered through the information registration system shown in FIG. 17, And checks two or more authentication code index information associated with the wireless terminal unique information corresponding to the wireless terminal providing the two or more authentication code index information (2105).

If two or more authentication code index information to be provided to the wireless terminal to be used as the wireless communication disposable authenticator is confirmed 2110, the server transmits the authentication code index information to the wireless communication network (e.g., (2115), the two or more pieces of authentication code index information are stored in a memory unit provided in the wireless terminal, and the authentication code index information is provided to the wireless terminal to be used as the wireless communication disposable authenticator .

FIG. 22 is a diagram illustrating a process of providing a part of the one-time authentication code generation information associated with the authentication code index information according to an embodiment of the present invention.

More specifically, FIG. 22 is a flowchart illustrating a process of providing authentication code index information shown in FIG. 21 by using two or more pieces of authentication code index information provided to a wireless terminal to be used as the wireless communication disposable authenticator and two or more pieces of disposable authentication code generation information The method of providing two or more first partial disposable authentication code generation information corresponding to a part of the first partial disposable authentication code is provided to the wireless terminal. Those skilled in the art will be able to refer to FIG. 22 and / It is possible to deduce various methods for providing a part of the disposable authentication code generation information associated with the authentication code index information by modifying the authentication code index information. However, the present invention includes all of the above- The technical features are not limited only by the implementation method shown in FIG.

Hereinafter, in FIG. 22, the index providing server shown in FIG. 20 is referred to as a "server" for the sake of convenience.

*

Referring to FIG. 22, in connection with a storage medium, the server transmits two or more authentication code index information provided to a wireless terminal to be used as the wireless communication disposable authenticator through the process of providing authentication code index information shown in FIG. 21 At least two pieces of first partial disposable authentication code generation information corresponding to a part of the above one-time authentication code generation information are confirmed (2200).

Here, when the wireless terminal is used as a wireless communication disposable authenticator, the first disposable authentication code generation information includes a part of disposable authentication code generation information to be provided to the wireless terminal in the disposable authentication code authentication system shown in FIG. 23, When the terminal is used as a wireless communication disposable authenticator, a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal in the disposable authentication code authentication system shown in FIG. 23, It is preferable that the one-time authentication code authentication system shown in FIG. 1 includes at least one verification value for verifying the one-time authentication code generation information provided to the wireless terminal.

If two or more first partial disposable authentication code generation information corresponding to a part of two or more disposable authentication code generation information associated with each of the two or more authentication code index information provided to the wireless terminal to be used as the wireless communication disposable authenticator is confirmed (2205 ), The server transmits to the wireless terminal to be used as the wireless communication disposable authenticator through the wireless communication network (e.g., the wireless communication network corresponding to the communication company information stored in the storage medium) connected to the wireless terminal, It is preferable that at least two pieces of first partial disposable authentication code generation information corresponding to a part are provided (2210), and the first disposable authentication code generation information is stored in a memory unit provided in the wireless terminal.

FIG. 23 is a diagram illustrating a configuration of a disposable authentication code authentication system that implements a disposable authentication code through an authentication code index according to an embodiment of the present invention.

23 is a flowchart illustrating an authentication code index providing system shown in FIG. 20 through authentication code index information provided to a wireless terminal 2370 to be used as a wireless communication disposable authenticator and wireless unique information of the wireless terminal 2370 (Or second part disposable authentication code generation information) corresponding to the authentication code index information to the wireless terminal 2370 after the wireless terminal 2370 is authorized to use the wireless terminal 2370 as a wireless communication disposable authenticator (N> = 2) digits of the disposable authentication code (N) through the one-time authentication code generation information (or the second partial disposable authentication code generation information) by the wireless terminal 2370 And authenticates the generated disposable authentication code N. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments, (E.g., some of the components are omitted, or fragmented, or combined) for a disposable authentication code authentication system that implements the disposable authentication code through the authentication code index by referring and / However, the present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Hereinafter, the authentication code index information transmitted from the customer wireless terminal 2370 on the disposable authentication code authentication system shown in FIG. 23 is received, and the wireless terminal 2370 that transmitted the authentication code index information is referred to as a wireless communication disposable Authentication code generation information corresponding to the authentication code index information to the wireless terminal 2370 and transmits the disposable authentication code generation information to the wireless terminal 2370 using the N One or more means for authenticating the number of single-use authentication codes N and / or a component corresponding to the functional configuration is referred to as "index providing server" for convenience.

Referring to FIG. 23 according to an embodiment of the present invention, the authentication code index providing system includes a wireless terminal 2370 to be used as the wireless communication disposable authenticator, and the authentication code index And transmits the disposable authentication code generation information corresponding to the authentication code index information to the wireless terminal 2370 after the wireless terminal 2370 that has transmitted the authentication code index information is used as the wireless communication disposable authentication unit And an authentication server 2300 for authenticating the N-odd number of one-time authentication codes N generated by the wireless terminal 2370 through the one-time authentication code generation information.

The wireless terminal 2370 to be used as the wireless communication disposable authenticator stores authentication code index information provided through the authentication code index providing system shown in FIG. 20, and when using the wireless terminal 2370 as a wireless communication disposable authenticator, After providing the authentication code index information to the authentication server 2300 through the wireless communication network and allowing the authentication server 2300 to use the wireless terminal 2370 as a wireless communication disposable authenticator, (Or the second partial disposable authentication code generation information including the remaining part of the disposable authentication code generation information) corresponding to the index information is received, the disposable authentication code generation information is received via the wireless communication network , The received one-time authentication code generation information (or the remaining one part of the one-time authentication code generation information Is a general term for a wireless communication terminal device having a function of generating an N-digit number of one-time authentication code (N) through the second partial disposable authentication code generation information). The detailed description of the functional configuration of the wireless terminal 24.

The authentication server 2300 provided on the authentication code index providing system receives the authentication code index information from the wireless terminal 2370 to be used as the wireless communication disposable authenticator through the wireless communication network and transmits the authentication code index information After providing the wireless terminal 2370 with the disposable authentication code generation information corresponding to the authentication code index information after approving the use of the wireless terminal 2370 as the wireless communication disposable authenticator, One or more servers (or devices) provided in a financial institution as a collective term of the disposable authentication code authentication system side component that authenticates the N-digit disposable authentication code (N) generated through the authentication code generation information, or a disposable authentication code One or more servers (or devices) provided in a system for processing authentication, or a recording medium provided in the server (or apparatus) The present invention is not limited thereto.

Referring to FIG. 23, the authentication server 2300 receives the authentication code index information from the wireless terminal 2370 to be used as the wireless communication disposable authenticator, and provides the disposable authentication code generation information to the wireless terminal 2370 And a wireless interface unit (2305) for connecting a wireless data communication communication channel for wireless communication or exchanging a wireless message.

According to an embodiment of the present invention, when the wireless communication network provides a data communication channel, the wireless interface unit 2305 may transmit the data communication channel from the wireless terminal 2370 to be used as the wireless communication disposable authenticator according to the data communication protocol of the wireless communication network It is preferable to connect the wireless communication channel for receiving the authentication code index information and providing the wireless terminal 2370 with the disposable authentication code generation information.

According to another embodiment of the present invention, when the wireless communication network provides the message exchange protocol, the wireless interface unit 2305 transmits the message exchange protocol to the wireless terminal 2370 And provides a message exchange interface for providing the wireless terminal 2370 with the disposable authentication code generation information.

Referring to FIG. 23, when the authentication server 2300 transmits the authentication code index information to the wireless terminal 2370 to be used as the wireless communication disposable authenticator, the authentication server 2300 transmits the authentication code index information through the wireless interface 2305 And a wireless terminal 2370 unique information verifying unit 2315 (or wireless terminal) for verifying unique information of the wireless terminal 2370 that transmitted the authentication code index information, And the received authentication code index information among the two or more authentication code index information associated with the unique information of the wireless terminal 2370 in association with the storage medium 2360 (Or the wireless terminal 2370) authenticating unit 2320 for authenticating the wireless terminal 2370 to the wireless communication disposable authenticator by checking whether the wireless terminal 2370 is authenticated by the wireless terminal 2370 Authentication code generation information associated with the received authentication code index information among the two or more one-time-use authentication code generation information (or second partial disposal authentication code generation information) stored in the storage medium 2360, (Or second partial disposable authentication code generation information) to be provided to the wireless terminal 2370 by the authentication code generation information (or the second partial disposable authentication code generation information) to be provided to the wireless terminal 2370 or corresponds to the received authentication code index information A disposable authentication code generation information confirmation / generation unit 2325 (or disposable authentication code generation information confirmation / generation means) for generating authentication code generation information (or second partial disposable authentication code generation information) Disposable authentication code generation information providing part 2335 (or disposable authentication code generating information providing part 2335) for providing the disposable authentication code generating information to the wireless terminal 2370 (Or code structure information providing means). If the received authentication code index information is securely received through encryption (or data structure modification), the secure authentication code index information is decrypted Or restores the original authentication code index information through the restoration of the data structure) and provides the authentication code generation information (or the second partial disposable authentication code generation information) to the wireless terminal 2370 by the security processing, (Or security processing means) for performing security processing of the authentication code generation information (or second partial disposal authentication code generation information) through encryption (or data structure modification), and a security processing unit 2330 When the user authentication information is transmitted from the wireless terminal 2370 according to the intention of the user authentication unit 2370, To the authentication, and formed by further comprising: a user authentication unit (or user authentication means, not shown) that provides an authentication result of the user authentication information to the wireless terminal (2370) it is preferred.

The wireless terminal 2370 provided with the authentication code index information through the authentication code index providing system shown in FIG. 20 transmits the authentication code index information to the wireless communication network 2370 in order to use the wireless terminal 2370 as the wireless communication disposable authenticator. The index information receiving unit 2310 receives the authentication code index information through the wireless interface unit 2305. [

The wireless terminal 2370 unique information of the wireless terminal 2370 (for example, the wireless terminal 2370 to be used as the wireless communication disposable authenticator) that transmitted the authentication code index information according to an embodiment of the present invention, The index information receiving unit 2310 receives the authentication code from the wireless terminal 2370 through the wireless interface unit 2305 if it can be confirmed through the data communication protocol of the wireless communication network or the message exchange protocol provided by the wireless communication unit 2305, It is preferable to receive the index information.

In accordance with another embodiment of the present invention, the communication server 2365 checks the authentication code index information transmitted from the wireless terminal 2370 (for example, the wireless terminal 2370 to be used as the wireless communication disposable authenticator) The communication company server 2365 confirms the unique information of the wireless terminal 2370 of the wireless terminal 2370 and attaches the identified wireless terminal 2370 specific information to the authentication code index information , The index information receiving unit 2310 receives the authentication code index information transmitted from the wireless terminal 2370 through the wireless interface unit 2305 and the unique information of the wireless terminal 2370 attached from the communication company server 2365 .

In accordance with another embodiment of the present invention, the communication server 2365 confirms the authentication code index information transmitted from the wireless terminal 2370 (for example, the wireless terminal 2370 to be used as the wireless communication disposable authenticator) When the communication company server 2365 confirms the unique information of the wireless terminal 2370 of the wireless terminal 2370 in the communication company server 2365 and then transmits the confirmed wireless terminal 2370 specific information in the communication company server 2365 The index information receiving unit 2310 receives the authentication code index information from the wireless terminal 2370 via the wireless interface unit 2305. The unique information of the wireless terminal 2370 is transmitted to the wireless terminal 2370 ) Unique information verifying unit 2315. [0157]

If the received authentication code index information and the unique information of the wireless terminal 2370 are encrypted and received, the security processing unit 2330 decrypts the secured authentication code index information and the unique information of the wireless terminal 2370, The authentication code index information and the unique information of the wireless terminal 2370 are restored.

The wireless terminal 2370 unique information of the wireless terminal 2370 (for example, the wireless terminal 2370 to be used as the wireless communication disposable authenticator) that transmitted the authentication code index information according to an embodiment of the present invention, When the authentication code index information is received through the index information receiving unit 2310 in the case where it can be confirmed through the data communication protocol or the message exchange protocol of the wireless communication network provided by the wireless terminal 2305, Unit 2315 analyzes the data communication protocol or the message exchange protocol of the wireless communication network through the wireless interface unit 2305 and transmits unique information of the wireless terminal 2370 of the wireless terminal 2370 that transmitted the authentication code index information Is confirmed.

In accordance with another embodiment of the present invention, the communication server 2365 checks the authentication code index information transmitted from the wireless terminal 2370 (for example, the wireless terminal 2370 to be used as the wireless communication disposable authenticator) The communication company server 2365 confirms the unique information of the wireless terminal 2370 of the wireless terminal 2370 and attaches the identified wireless terminal 2370 specific information to the authentication code index information . When the authentication code index information with the unique information of the wireless terminal 2370 is received through the index information receiving unit 2310, the wireless terminal 2370 unique information verifying unit 2315 reads the authentication code index information And confirms the unique information of the wireless terminal 2370 attached to the authentication code index information.

In accordance with another embodiment of the present invention, the communication server 2365 confirms the authentication code index information transmitted from the wireless terminal 2370 (for example, the wireless terminal 2370 to be used as the wireless communication disposable authenticator) When the communication company server 2365 confirms the unique information of the wireless terminal 2370 of the wireless terminal 2370 in the communication company server 2365 and then transmits the confirmed wireless terminal 2370 specific information in the communication company server 2365 The identification information of the wireless terminal 2370 is transmitted to the wireless terminal 2360 that has transmitted the authentication code index information from the communication company server 2365. Upon receiving the authentication code index information through the index information receiving unit 2310, (2370) unique information of the mobile terminal (2370).

The authentication unit 2320 of the wireless terminal 2370 transmits the authentication information to the storage medium 2360 that stores the unique information of the wireless terminal 2370 and two or more authentication code index information through the information registration system shown in FIG. When the validity of the unique information of the wireless terminal 2370 is confirmed and the validity of the unique information of the wireless terminal 2370 is confirmed, And checks whether the received authentication code index information is included in two or more pieces of authentication code index information stored in the storage medium 2360. If the authentication code index information includes two pieces of authentication code index information, When it is confirmed by the authorization code index information of the director, the wireless terminal 2370 corresponding to the wireless terminal 2370 specific information is approved as the wireless communication disposable authenticator The features.

If the wireless terminal 2370 is approved as a wireless communication disposable authenticator, the disposable authentication code generation information confirmation / generation unit 2325 generates two or more disposable authentication codes, which are stored in the storage medium 2360, in association with the authentication code index information Disposable authentication code generation information (or second partial disposable authentication code generation information) associated with the received authentication code index information among the code generation information (or the second partial disposable authentication code generation information) to the wireless terminal 2370 (Or second partial disposable authentication code generation information) corresponding to the received authentication code index information, or dynamically generates authentication code generation information (or second partial disposal authentication code generation information) corresponding to the received authentication code index information .

According to an embodiment of the present invention, two or more pieces of authentication code index information corresponding to the two or more pieces of authentication code index information are stored in the storage medium 2360 through the information registration system shown in FIG. 2 or the authentication code index providing system shown in FIG. When the above-described one-time authentication code generation information is stored, the disposable authentication code generation information confirmation / generation part 2325 confirms the one-time authentication code generation information corresponding to the received authentication code index information from the storage medium 2360 desirable.

When the disposable authentication code generation information is not stored in the storage medium 2360 according to another embodiment of the present invention and the disposable authentication code generation information corresponding to the received authentication code index information is dynamically generated, It is preferable that the authentication code generation information check / generation unit 2325 dynamically real-time generates the disposable authentication code generation information corresponding to the authentication code index information approved by the wireless terminal 2370 as the wireless communication disposable authenticator.

(E.g., the wireless terminal 2370 to be used as the wireless communication disposable authenticator) through the authentication code index providing system shown in FIG. 20, a first portion including a part of the disposable authentication code generation information When the disposable authentication code generation information is provided in advance, the disposable authentication code generation information confirmation / generation unit 2325 generates the one-time authentication code generation information that matches the partial disposable authentication code generation information provided to the wireless terminal 2370 (Or generates) the second partial disposable authentication code generation information including the second partial disposal authentication code generation information.

If the first partial disposable authentication code generation information provided to the wireless terminal 2370 according to an embodiment of the present invention is a part of the one-time authentication code generation information to be provided to the wireless terminal 2370, The information confirmation / generation unit 2325 preferably confirms (or generates) the remaining part of the disposable authentication code generation information with the second partial disposable authentication code generation information to be provided to the wireless terminal 2370.

According to another embodiment of the present invention, when the first partial disposable authentication code generation information provided to the wireless terminal 2370 is a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal 2370, The disposable authentication code generation information confirmation / generation unit 2325 confirms (or generates) the disposable authentication code generation information to be combined with the combination code with the second partial disposable authentication code generation information to be provided to the wireless terminal 2370 desirable.

According to another embodiment of the present invention, when the first partial disposable authentication code generation information provided to the wireless terminal 2370 is a verification value for verifying the disposable authentication code generation information, the disposable authentication code generation information confirmation / The unit 2325 preferably confirms (or generates) the disposable authentication code generation information verifiable by the verification value with the second partial disposable authentication code generation information to be provided to the wireless terminal 2370.

If the security code is generated and provided to the wireless terminal 2370, the disposable authentication code generation information check / generation unit 2325 determines whether the authentication When the disposable authentication code generation information corresponding to the code index information is confirmed (or generated), the security processing unit 2330 encrypts the authentication code generation information (or the second partial disposable authentication code generation information) And a security processing unit.

According to the embodiment of the present invention, when the data structure of the authentication code generation information (or the second partial disposable authentication code generation information) is changed and security processing is performed, the security processing unit 2330 generates the authentication code generation information (Or partial rearrangement authentication code generation information (partial partial disposable authentication code generation information)) is reconfigured (or rearranged) according to a preset method or a predetermined method, and the authentication code generation information (Or rearranged) according to an arbitrary combination (or arrangement) scheme, the security processing unit 2330 transmits the reconfigured (or rearranged) authentication code generation information (or the second partial disposable authentication code generation information) To restore the original data structure for the original authentication code generation information (or the second partial disposal authentication code generation information) in the authentication server 2300 To include a data recovery information (e.g., identifier identifying a recombinant (or rearranged) scheme (or index)) is preferred.

Here, the data recombination (or rearrangement) for the authentication code generation information (or the second partial disposable authentication code generation information) may be performed by a nibble unit, a specific digit unit, a byte unit, a word unit, Recombination (or rearrangement) is preferable.

According to the embodiment of the present invention, the security processing unit 2330 can selectively process any one of the authentication code generation information (or the second partial disposal authentication code generation information) And that all possible alterations to the security process are encompassed.

If the disposable authentication code generation information is confirmed (or generated) or secured, the disposable authentication code generation information providing unit 2335 transmits the disposable authentication code generation information to the wireless terminal 2370 via the wireless communication network 2305 (For example, the wireless terminal 2370 to be used as the wireless communication disposable authenticator).

Alternatively, if the second partial disposable authentication code generation information is confirmed (or generated) or securely processed, the disposable authentication code generation information providing part 2335 transmits the disposable authentication code to the disposable authentication code generation information providing part 2335 via the wireless interface 2305 It is desirable to transmit the remaining portion of the disposable authentication code generation information to the wireless terminal 2370 (e.g., the wireless terminal 2370 to be used as the wireless communication disposable authenticator).

The disposable authentication code generation information (or the second partial disposable authentication code) is generated by the disposable authentication code generation information providing unit 2335 to the wireless terminal 2370 (for example, the wireless terminal 2370 to be used as the wireless communication disposable authenticator) The wireless terminal 2370 transmits the disposable authentication code generation information (or the first partial disposable authentication code generation information provided by the wireless terminal 2370) and the disposable authentication code generation information provision unit 2335 to the wireless terminal 2370, (One-time authentication code generation information) that is combined (or verified) on the basis of the second partial one-time authentication code generation information provided by the first partial authentication code generation information provided by the one- The code N is transmitted to the authentication request terminal 2375 (for example, a collective name of a wired terminal or a wireless terminal requesting authentication via the disposable authentication code) Is input through the interface, characterized in that the transmission through a communications network.

Referring to FIG. 23, the authentication server 2300 transmits an N-digit number of disposable authentication code (ID) generated by the wireless terminal 2370 to be used as the wireless communication disposable authenticator through the disposable authentication code input interface at the authentication request terminal 2375 N) and receives the disposable authentication code (N) from the authentication request terminal 2375 through the communication network when it is transmitted through the communication network, and a disposable authentication code receiving unit 2340 (or disposable authentication code receiving means) A verification code generation unit 2345 (or verification code generation means) that generates an N-digit number of one-time verification codes N through the one-time authentication code generation information provided to the wireless terminal 2370, A disposable authentication code authentication unit 2350 (or disposable authentication code authentication unit) for comparing the received disposable authentication code N with the generated disposable verification code N; And the comparison result of the verifying code (N) characterized in that obtained by having the authentication request to the terminal (2375) outputs, or both the authentication result processing unit 2355 (or the authentication result processing unit) for storing the set medium.

When the authentication request terminal 2375 receives an N-digit disposable authentication code (N) generated by the wireless terminal 2370 to be used as the wireless communication disposable authenticator through the disposable authentication code input interface and transmits the disposable authentication code N through the communication network, The code receiving unit 2340 receives an N-digit disposable authentication code N from the authentication request terminal 2375 through the communication network.

When the disposable authentication code N is received, the verification code generator 2345 generates the disposable authentication code N provided to the wireless terminal 2370 to be used as a wireless communication disposable authenticator to generate the disposable authentication code N And generates an N-digit number of one-time verification code (N) through the one-time authentication code generation information in the same manner as the method in which the wireless terminal (2370) generates the disposable authentication code (N).

If the disposable authentication code N is received and the disposable verification code N is generated, the disposable authentication code authentication unit 2350 receives the disposable authentication code N received from the authentication request terminal 2375, And authenticates the received disposable authentication code (N) by comparing the generated disposable verification code (N) with the disposable authentication code (N). The authentication result processor (2355) ) And the disposable verification code (N) to the authentication request terminal (2375) and outputs the comparison result to the authentication request terminal (2375) or stores the result in the predetermined medium so that the post-processing according to the authentication result of the disposable authentication code .

24 is a diagram illustrating a functional configuration of a wireless terminal 2400 that implements a disposable authentication code through an authentication code index according to an embodiment of the present invention.

In more detail, FIG. 24 illustrates a case where a wireless terminal 2400 connected to a mobile communication network operating on a Code Division Multiple Access (WCDMA) / Wideband Code Division Multiple Access (WCDMA) 2400 through the one-time authentication code authentication system shown in FIG. 23 through one of the two or more kinds of authentication code index information provided through the authentication code index providing system shown in FIG. 20 Code generation information, generates an N-digit number of one-time authentication code (N) through the one-time authentication code generation information, and outputs the disposable authentication code (N). If the person skilled in the art is familiar with the present invention , Referring to and / or modifying FIG. 24, the other terminal station implementing the one-time authentication code through the authentication code index (For example, a wireless terminal device connected to a wireless network based on an HSDPA, or a wireless terminal device connected to an IEEE 802.16x based portable Internet), and an implementation method for various functional configurations corresponding to each terminal device characteristic The present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

The wireless terminal 2400 for providing a CDMA / WCDMA based mobile communication service according to an embodiment of the present invention includes an outer body, a speaker, a microphone, a keypad, a liquid crystal display (LCD) An antenna, a battery 2425, and the like, and internally includes a modem chip (for example, a modem chip) including a function of a CDMA (Code Division Multiple Access) modem, a CPU / MPU (Central Processing Unit / Micro Processing Unit) A duplexer filter for separating a transmission signal from a single antenna, a power amplifier for amplifying a transmission signal, a high power amplifier (HPA), a high-power transmission An isolator to prevent the signal from returning in the opposite direction, an RF / IF SAW filter to remove the desired out-of-band spurious signal, a frequency up circuit of the transmission path, A downconversion circuit, a VCTCXO (Voltage Controlled Temperature Compensated X-tal Oscillator) corresponding to a reference clock source, a UHF frequency synthesizer used as a local signal of frequency up-down conversion, and a codec chip for converting an analog voice signal into a digital signal The internal components are gradually integrated into the modem chip. In addition to the core components for the mobile communication service, the modem chip may include various multimedia services or additional services. Various functions are being integrated together.

Referring to FIG. 24, the wireless terminal 2400, which implements the disposable authentication code through the authentication code index, includes a control unit 2405 corresponding to the modem chip, a screen output unit 2405 corresponding to an LCD (Liquid Crystal Display) A sound processing unit 2415 corresponding to the microphone / speaker, a key input unit 2420 corresponding to the keypad, a radio processing unit 2430 corresponding to the antenna and various RF modules, A memory unit 2440 and a battery 2425 for power supply.

In addition, the wireless terminal 2400 may further include a camera unit (not shown) for reading image information for providing various multimedia services or various additional services corresponding thereto, or may be connected to a near- It is preferable to further include a local communication unit (not shown).

The wireless terminal 2400 may also include an IC chip (for example, an integrated circuit (IC) chip) mounted or detached from the wireless terminal 2400 for providing various financial (or settlement) services, ) Chip or a Universal Subscriber Identity Module (USIM), and an IC chip reader 2435 for reading / writing information (or data) to / from the IC chip.

The control unit 2405 includes a processor including a CPU / MPU provided in the modem chip and an execution memory, and includes a program routine for providing a function peculiar to the wireless terminal 2400 from the memory device, (Or an integrated circuit) provided for the bus BUS for inputting / outputting program data, and an electronic circuit (or an integrated circuit) provided for the bus BUS. The memory unit 2440 or the memory device A program routine loaded into the execution memory and processed through the processor to perform a specific function, or a generic term of program data (thus, a record of the wireless terminal 2400 to implement the disposable authentication code via the authentication code index) The program routine to be recorded on the medium is shown as being included in the control unit 2405 for convenience, The program routine of the controller 2405 basically includes an operating system routine (not shown), at least one system management routine (e.g., a power management routine, a channel (forward / backward) (Not shown). The control unit 2405 realizes a variety of functional configurations to be implemented in the wireless terminal 2400. [0033] FIG.

According to the method of the present invention, after power is supplied to the wireless terminal 2400, the operating system routine (not shown), at least one or more system management routines (not shown), and various system variables corresponding thereto, 2405, the wireless terminal 2400 can be configured to perform a system setting detailed state, a pilot channel acquisition detailed state, a synchronization channel acquisition detailed state, and a timing conversion detailed state Quot; mobile station initialization state "

After performing the booting procedure, the operating system routine (not shown), at least one system management routine (not shown) and various system variables corresponding thereto are loaded into the execution memory provided in the controller 2405, The mobile terminal 2400 is set to an operation mode corresponding to the "mobile station call waiting state ", the" system access state ", or the " (Call Processing) procedure.

According to the method of the present invention, the function of implementing the disposable authentication code through the authentication code index is such that the wireless terminal 2400 starts (or realizes) through the key input in the operation mode corresponding to the " ).

The screen output unit 2410 is a function configuration unit for a screen for confirming each operation mode of the wireless terminal 2400 and a corresponding operation state of the wireless terminal 2400. The screen output unit 2410 includes one or more And a driver for driving the screen output device. The control unit 2405 may output at least one key data input through the key input unit 2420 in conjunction with the control unit 2405, A function processing screen and a function processing result screen corresponding to at least one function (or a program) provided in the wireless terminal 2400 or at least a function screen And outputs one or more contents (e.g., text contents, image contents, multimedia contents).

According to the embodiment of the present invention, the screen output unit 2410 displays a menu screen corresponding to the function of implementing the disposable authentication code through the authentication code index, a function processing screen for implementing the disposable authentication code (N) And a screen output means for outputting a function process result screen for outputting the disposable authentication code (N).

The sound processing unit 2415 processes a sound input and output in each operation mode of the wireless terminal 2400. The sound processing unit 2415 decodes at least one or more encoded sound data and supplies the decoded sound data to the wireless terminal 2400 And a vocoder and a codec for encoding and outputting a sound signal input through a microphone provided in the wireless terminal 2400 and encoding the sound signal.

According to the embodiment of the present invention, the sound processing unit 2415 receives sound data corresponding to a ring back tone through the speaker in an operation mode corresponding to the "system access state" among the respective operation modes of the wireless terminal 2400 It is preferable to decode and output the voice signal, or to encode and input the voice signal through the microphone in the operation mode corresponding to the "call channel state ", or to decode and output the voice signal through the speaker.

In addition, the sound processing unit 2415 may reproduce at least one or more sound contents or multimedia contents provided in (or downloaded from) the wireless terminal 2400 in at least one operation mode including the "mobile station call waiting state" It is preferable that the sound data corresponding to the content to be reproduced is decoded and output.

The key input unit 2420 includes a key input unit having at least one key button including a numeric key, a character key, and a function key, And a driver for driving the key input device. Accordingly, the key input device detects at least one key input signal generated by clicking (or inputting) the key button.

According to the present invention, when a key input signal is detected from a key button provided in the key input device in an input mode controlled by the control unit 2405 or at least one or more operation modes, the key input unit 2420 detects (E.g., MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, and MH_KEY_RELEASEEVENT) corresponding to the received key input signal, and provides the generated key event to the control unit 2405. The control unit 2405 controls the wireless terminal (For example, storing (managing) at least one key data corresponding to a specific key event in each input mode, or an operation mode) in the current input mode of the key input module 2400, or in the operation mode, Or reads key data from the key table to the key event), or executes a function defined by matching with the key event And reading the instruction word.

According to the embodiment of the present invention, the key input unit 2420 inputs a telephone number in an operation mode corresponding to the "mobile station call standby state" among the operation modes of the wireless terminal 2400, It is preferable to change the operation mode of the wireless terminal 2400 to the operation mode corresponding to the "system access state ".

The key input unit 2420 inputs a function key (e.g., a menu key) in an operation mode corresponding to the "mobile station call standby state" among the operation modes of the wireless terminal 2400, It is preferable to execute various functions provided in the mobile terminal.

According to the embodiment of the present invention, the key input unit 2420 preferably performs a function of key input means for inputting at least one key data corresponding to a function of implementing the disposable authentication code through the authentication code index .

The radio processor 2430 is a functional unit for the radio terminal 2400 to connect a radio channel to a base station on a mobile communication network based on CDMA / WCDMA, and includes a CDMA modem and various RF modules (e.g., a duplexer filter, Amplifier, a high power amplifier (HPA), an isolator, an RF / IF SAW filter, a frequency upstream circuit, a frequency downconversion circuit, a VCTCXO corresponding to a reference clock source, a UHF frequency synthesizer, A slot mode or a power control in response to each operation mode of the wireless terminal 2400 in cooperation with the controller 2405. [ Hand-off, or a call processing procedure according to an embodiment of the present invention.

According to an embodiment of the present invention, the radio processing unit 2430 may perform a radio frequency signal transmission / reception function (for example, antenna control, modulation, synthesis, and transmission of radio frequency signals) corresponding to a function of implementing a disposable authentication code through the authentication code index, Amplification, filtering, and the like).

Particularly, the radio processor 2430 processes the information or the signal transmitted from the radio terminal 2400 to the base station in order to implement the one-time authentication code through the authentication code index into the CDMA stack, And a function of reading information or signals from the CDMA stack.

According to another embodiment of the present invention, if the wireless terminal 2400 shown in FIG. 24 is a wireless terminal device connected to a HSDPA-based wireless network, the wireless processor 2430 accesses the HSDPA-based wireless network, The wireless processing unit 2430 may be configured to include a wireless communication function configuration that implements a one-time authentication code through an index, or if the wireless terminal 2400 is a wireless terminal device connected to an IEEE 802.16x-based wireless network, And a wireless communication function for accessing the IEEE 802.16x-based wireless network and implementing the disposable authentication code through the authentication code index, thereby not limiting the present invention.

The IC chip reader unit 2435 is an IC chip (for example, a financial IC chip or a USIM) mounted or detached from the wireless terminal 2400 through an IC chip standard including ISO / IEC 7816 or ISO / IEC 14443, IEC 7816 standard, or a noncontact IC card corresponding to the above ISO / IEC 14443 standard, for exchanging at least one piece of information (or data or command) And the IC card reader exchanges at least one piece of information (or data or command) with the IC chip through an APDU (Application Protocol Data Unit).

Referring to the specification including ISO / IEC 7816 or ISO / IEC 14443, an IC chip mounted or detached from a customer's wireless terminal receives power supply VCC, a reset signal RST, a clock signal CLK, An input / output interface (not shown) for communicating (e.g., exchanging commands or data) with the IC chip reader unit 2435 through contact points such as ground (GND), programming power supply (VPP), or input / output (I / O) A ROM (Read Only Memory), a RAM (random access memory), and a random access memory (RAM), each of which is composed of at least one computing element including a central processing unit (CPU), a microprocessor A memory (not shown) made up of at least one memory element including an access memory (EEPROM), an electrically erasable and programmable read only memory (EEPROM), and a flash memory (FM) (for example, ROM stores a chip operating system (COS) for managing and operating internal resources of the IC card. Power is supplied from the IC chip reader 2435 through a power supply (VCC) contact point of the input / output interface The COS stored in the memory is loaded into the execution memory to control the overall operation of the IC chip and the application protocol data unit (APDU), such as an APDU (Application Protocol Data Unit ) To control the exchange of information or data between the IC chip and the IC chip reader unit 2435. [

According to the present invention, IC chip storage information (for example, IC chip program code and data) for implementing a disposable authentication code is stored in the memory of the IC chip through an authentication code index, A storage unit (not shown) for storing a data set corresponding to information or data read out and read and / or used by a processor provided in a customer wireless terminal; and a storage unit (not shown) (E.g., a JAVA Applet in the case of a Javacard) used by a processor of the customer wireless terminal to interact with the instruction set of the COS Processing corresponding to the application including the calling code and the execution code processed by the processor unit The processor (not shown) is provided with a processor (not shown). The processor (not shown) reads an instruction from a processor provided in the customer wireless terminal via the input / output interface through an APDU, (Not shown), and provides the result or the read information or data to the processor provided in the customer wireless terminal via the input / output interface through the APDU .

Here, the memory of the IC chip includes a security structure based on ISO / IEC 10202. According to this, the memory includes a protection area in which secret information such as a chip serial number (CSN) is stored, a COS control area, The IC chip storage information for the present invention is stored in an area excluding the protection area and the COS control area. desirable.

According to the ISO / IEC 7816 or ISO / IEC 14443 ICC standard, the memory has one master file (MF) corresponding to a root file and at least one storage An ATR (Answer To Reset) including function information on information, at least one Dedicated File (DF) corresponding to each ICC storage information, and a Smart Card service And a file structure including an element file (EF) containing substantial information or data. The IC chip storage information for the present invention also includes the above-described file structure.

According to the embodiment of the present invention, it is preferable that the IC chip includes at least one of the user authentication IC chip storing information for authenticating the validity of the user of the wireless terminal 2400 or the terminal authentication IC chip storing information.

The user authentication IC chip storage information or the terminal authentication IC chip storage information may be stored in the IC chip using the user authentication information input through the key input unit 2420 as an IC chip authentication code (e.g., a PIN (Personal Identification Number) It is preferable to return the user authentication result information after authenticating the user of the terminal 2400 (or the wireless terminal 2400), and if it is a person having ordinary knowledge in the technical field of the present invention, (Or a wireless terminal 2400) of the wireless terminal 2400 via an IC chip authentication code and a technology feature that authenticates the user of the wireless terminal 2400 (or the wireless terminal 2400) Since the technical characteristics of returning the authentication result information are known, a detailed description thereof will be omitted for the sake of convenience.

The memory unit 2440 may include a storage medium for storing at least one piece of information (or data) in the wireless terminal 2400, or a nonvolatile memory corresponding to a recording medium for recording a program code corresponding to at least one program routine A ROM (Read Only Memory) corresponding to the read-only memory, a flash memory (FM) capable of reading / writing, and an EEPROM (Electrically Erasable and Programmable Read Only Memory) .

According to an embodiment of the present invention, system information of the non-volatile memory that should not be erased is stored in the non-volatile memory, and the flash memory is provided with an operating system routine, a call processing program routine, Program routines and information or data therefor are stored in the EEPROM. In the EEPROM, at least one or more of the terminal registration related parameters and telephone numbers (e.g., address book) extracted or generated during the execution of the application provided in the wireless terminal 2400 Information (or data) is preferably stored.

According to an embodiment of the present invention, the memory unit 2440 may store the two or more authentication code index information provided through the authentication code index providing system shown in FIG. 20 in order to implement the one- The authentication server 2485 for transmitting the authentication code index information of any one of the two or more authentication code index information to use the wireless terminal 2400 as a wireless communication disposable authenticator, It is preferable to store the authentication server 2485 information corresponding to the authentication server 2485 to receive the one-time authentication code generation information corresponding to the authentication code index information.

If the first partial disposable authentication code generation information is provided to the wireless terminal 2400 through the authentication code index providing system shown in FIG. 20, the memory 2440 transmits the disposable authentication code through the authentication code index It is preferable to further store the first partial disposable authentication code generation information provided through the authentication code index providing system shown in FIG.

Referring to FIG. 24, the wireless terminal 2400 implementing the one-time authentication code through the authentication code index includes an information input unit 2445 for receiving user authentication information through the key input unit 2420 .

In order to implement the disposable authentication code through the authentication code index, the information input unit 2445 outputs the user authentication information input interface in cooperation with the screen output unit 2410, and transmits the authentication code The authentication processing unit 2450 requests the user to input the user authentication information into the user authentication information interface through the key input unit 2420 .

Here, the user authentication information may include at least one of a personal identification number (PIN) for authenticating and activating the wireless communication disposable authenticator function of the wireless terminal 2400 in the authentication server 2485, Or more.

Alternatively, the user authentication information may authenticate the wireless communication disposable authenticator function of the wireless terminal 2400 through the user authentication IC chip storage information or the terminal authentication IC chip storage information provided in the IC chip (or USIM) And a personal identification number (PIN) for activating the personal identification number, or a password.

Alternatively, the user authentication information may include a password for authenticating and activating the wireless communication disposable authenticator function of the wireless terminal 2400 in the wireless terminal 2400. In this case, Is preferably stored in the memory unit 2440 (not shown).

Referring to FIG. 24, in order to implement the disposable authentication code through the authentication code index, the wireless terminal 2400 transmits the authentication code to the wireless terminal 2400 (FIG. 24) based on the user authentication information input through the information input unit 2445 (2450) for authenticating and activating the wireless communication disposable authenticator function provided in the memory unit (2440) when the wireless communication disposable authenticator function is activated, and an authentication processing unit A security processing unit 2465 for encrypting or changing the data structure to securely transmit the transmission target authentication code index information to the authentication server 2485, The security-processed transmission object authentication code index information is transmitted to the authentication server 2485 through the wireless transmission unit 2430 2460), and the security processing unit 2465 may be omitted according to the intention of those skilled in the art.

When the user authentication information for authenticating and activating the wireless communication disposable authentication function provided in the wireless terminal 2400 is inputted through the information input unit 2445, the authentication processing unit 2450 transmits the authentication information to the information input unit 2445 And authenticates and activates the wireless communication disposable authenticator function provided in the wireless terminal 2400 based on the user authentication information input through the wireless terminal 2400.

When the authentication server 2485 receives and authenticates the user authentication information in accordance with an embodiment of the present invention, the authentication processing unit 2450 may communicate with the radio processing unit 2430 via the information input unit 2445 Transmits the inputted user authentication information to the authentication server 2485 and receives user authentication result information for authenticating and activating the wireless communication disposable authentication function provided in the wireless terminal 2400 from the authentication server 2485 .

According to another embodiment of the present invention, when authenticating the user authentication information through an IC chip (or a USIM) provided in the wireless terminal 2400, the authentication processing unit 2450 may include the IC chip reader unit 2435, (Or USIM), which is input through the information input unit 2445, to the IC chip (or USIM), and transmits a wireless communication disposable authentication It is preferable to receive the user authentication result for authenticating and activating the base function.

According to another embodiment of the present invention, in the case where the wireless terminal 2400 authenticates the user authentication information, the authentication processing unit 2450 transmits the user authentication information inputted through the information input unit 2445, (Or generates) the user authentication result for authenticating and activating the wireless communication disposable authenticator function included in the wireless terminal 2400 by comparing the user authentication information (not shown) stored in the wireless terminal 2440 with the user authentication information (not shown).

According to another embodiment of the present invention, the function of authenticating the user authentication information is performed by the authentication server 2485 (or a separate user authentication server) according to the type of the user authentication information (for example, password, ID / PW, In this case, the authentication processing unit 2450 transmits the user authentication information to the authentication server 2485 (or a separate user authentication server), and the authentication server 2485 (or a separate user authentication It is possible to receive and read the authentication result of the user authentication information from the server and activate it.

If the wireless communication disposable authenticator function of the wireless terminal 2400 is activated on the basis of the user authentication information, the index check unit 2455 transmits the authentication code index information of two or more authentication codes stored in the memory unit 2440 And the transmission target authentication code index information is randomly selected and confirmed from two or more pieces of authentication code index information stored in the memory unit 2440, It is preferable to select and confirm it according to the set authentication code index information selection policy.

If the transmission subject authentication code index information is confirmed by the index confirmation unit 2455, the security processing unit 2465 encrypts the transmission subject authentication code index information to securely transmit the transmission subject authentication code index information to the authentication server 2485 And the key for encryption may be stored in the memory unit 2440 or may be stored in the USIM.

Alternatively, the security processing unit 2465 may change the data structure of the transmission subject authentication code index information to securely transmit the transmission subject authentication code index information to the authentication server 2485, It is preferable to include a preset method or a predetermined method.

According to an embodiment of the present invention, the security processing unit 2465 preferably recombines (or rearranges) the data combination (or arrangement) of the transmission object authentication code index information according to a preset method or a predetermined method, When the transmission subject authentication code index information is recombined (or rearranged) according to a certain combination (or arrangement) scheme, the security processing unit 2465 adds the transmission subject authentication code index information to the reassembled It is preferable that the server 2485 include data restoration information (e.g., an identifier (or index) identifying the recombination (or rearrangement) method) for restoring the original data structure of the original transmission target authentication code index information Do.

The data recombination (or rearrangement) with respect to the transmission subject authentication code index information is preferably recombined (or rearranged) by nibble unit, specific digit unit, byte unit, word unit, or specific block unit Do.

If the transmission target authentication code index information is encrypted or the data structure is changed by the security processing unit 2465, the index transmission unit 2460 transmits the authentication target information to the authentication server 2485 through the wireless processing unit 2430 And transmits the security-processed transmission object authentication code index information to the corresponding authentication server 2485.

Upon receiving the authentication code index information, the authentication server 2485 reads the protocol between the wireless terminal 2400 and the authentication server 2485 to confirm the unique information of the wireless terminal 2400, And confirms the unique information of the wireless terminal 2400 in association with the communication company server on the wireless communication network through which the wireless terminal 2400 is transmitted and received. The wireless terminal 2400 is connected to the wireless communication disposable authenticator (Or the second partial disposable authentication code generation information) corresponding to the authentication code index information is confirmed when the wireless terminal 2400 is approved to use the wireless terminal 2400 as a wireless communication disposable authenticator (Or generates) the data to the wireless terminal 2400.

Referring to FIG. 24, in order to implement the disposable authentication code through the authentication code index information, the wireless terminal 2400 transmits, from the authentication server 2485 in association with the wireless processing unit 2430, (Or second partial disposable authentication code generation information) corresponding to the disposable authentication code generation information (or the second partial disposable authentication code generation information).

When the authentication server 2485 approves the use of the wireless terminal 2400 as a wireless communication disposable authenticator, the receiving unit 2470 receives the authentication code index 2455 from the authentication server 2485 in cooperation with the wireless processor 2430, When the first partial disposable authentication code generation information is stored in the memory unit 2440, the authentication server generates the disposable authentication code corresponding to the authentication code index information from the authentication server 2485 It is preferable to receive the second partial disposable authentication code generation information.

According to the method of the present invention, the disposable authentication code generation information (or the second partial disposable authentication code generation information) can be encrypted in the authentication server 2485 or transmitted with the data structure changed. In this case It is preferable that the security processing unit 2465 decrypts the security-processed disposable authentication code generation information (or the second partial disposable authentication code generation information) or restores the original data structure.

Referring to FIG. 24, in order to implement the disposable authentication code through the authentication code index, the wireless terminal 2400 transmits the disposable authentication code generation information (or the second partial disposable authentication code generation information (Or retrieved) from the disposable authentication code generation information (or the first partial disposable authentication code generation information stored in the memory 2440 and the second partial disposable authentication code generation information) An authentication code generation unit 2475 for generating an N-digit number of one-time authentication code N through the one-time authentication code generation information And an output processing unit 2480 for outputting the output data.

When the disposable authentication code generation information is received from the authentication server 2485 according to an embodiment of the present invention, the authentication code generation unit 2475 transmits the received disposable authentication code generation information to the disposable authentication code (N) And generates an N-digit disposable authentication code (N) according to a predetermined one-time authentication code generation standard.

When the second partial disposable authentication code generation information is received from the authentication server 2485 in accordance with another embodiment of the present invention, the authentication code generation unit 2475 generates the first partial disposable authentication code, which is stored in the memory unit 2440, Generating disposable authentication code generation information corresponding to the seed value for generating the disposable authentication code (N) by combining (or concatenating) the authentication code generation information and the second disposable authentication code generation information, or generating the disposable authentication code The disposable authentication code generation information is confirmed as a seed value for generating the disposable authentication code (N) through the authentication code generation information, and the generated (or confirmed) As the seed value for generating the disposable authentication code N, and generating the N-digit disposable authentication code (N) according to the predetermined disposable authentication code generation standard do.

If the first partial disposable authentication code generation information stored in the memory unit 2440 is stored, the authentication code generation unit 2475 generates the disposable authentication code N of N digits through the first partial disposable authentication code generation information, (1 < n < N) digit of the disposable authentication code (N), generates a disposable authentication code (Nn) of (Nn) digits through the received second partial disposable authentication code generation information, It is possible to combine (or concatenate) the disposable authentication code n and the disposable authentication code Nn to generate an N-digit disposable authentication code N, so that the present invention is not limited thereto.

When the N-digit disposable authentication code N is generated by the authentication code generation unit 2475, the output processing unit 2480 transmits the generated N-digit disposable authentication code N to a certain area on the screen of the wireless terminal 2400. [

According to an embodiment of the present invention, the output processing unit 2480 outputs a disposable authentication code output screen on the screen of the wireless terminal 2400 in association with the screen output unit 2410, It is preferable to output the generated N-digit disposable authentication code (N).

According to another embodiment of the present invention, the output processing unit 2480 outputs the disposable authentication code output area to the screen area currently output on the screen of the wireless terminal 2400 in association with the screen output unit 2410 And outputs the generated N-digit disposable authentication code (N) to the disposable authentication code output area.

According to another embodiment of the present invention, when the wireless terminal 2400 is provided with a local communication unit (not shown) and a local communication channel is connected to an authentication request terminal located near by the local communication unit, 2400 can output the N-digit disposable authentication code (N) to the authentication request terminal through the local communication unit, and thus the present invention is not limited thereto.

FIG. 25 is a diagram illustrating a process of transmitting an authentication code index in a wireless terminal according to an embodiment of the present invention.

In more detail, FIG. 25 is a flowchart illustrating an operation of the wireless terminal shown in FIG. 24 by using the wireless terminal as a wireless communication disposable authenticator through the disposable authentication code authentication system shown in FIG. 23, 2 partial one-off authentication code generation information) received from the authentication-code-index providing system shown in FIG. 20, And transmits the index information to the authentication server shown in FIG. 23. As a person skilled in the art, referring to and / or modifying FIG. 25, Various implementations of the process of transmitting a code index (e.g., some steps may be omitted, Is would be able to infer the exemplary method, the order changed), the present invention is made, including any exemplary way in which the inference, to which the technical feature that is not limited to the exemplary method shown in the figure 25.

Referring to FIG. 25, the wireless terminal checks whether a menu (or a key button) for implementing a disposable authentication code is input through an authentication code index (step 2500), and if the menu (or key Button is input (2505), the wireless terminal outputs a user authentication information input interface on the wireless terminal screen and confirms whether user authentication information is inputted through the user authentication information input interface (2510).

Here, the user authentication information preferably includes at least one or more personal identification numbers (PINs) or passwords for authenticating and activating the wireless communication disposable authentication function of the wireless terminal in the authentication server Do.

Alternatively, the user authentication information may be generated by authenticating and activating the wireless communication disposable authenticator function of the wireless terminal through the user authentication IC chip storage information or the terminal authentication IC chip storage information provided in the IC chip (or USIM) The personal identification number (PIN), or the password.

*

Alternatively, the user authentication information may include a password for authenticating and activating the wireless communication disposable authenticator function of the wireless terminal in the wireless terminal. In this case, the user authentication information may be stored in the memory unit (Not shown) is preferable.

If it is confirmed that the user authentication information is input (2515), the wireless terminal authenticates and activates the wireless communication disposable authentication function provided in the wireless terminal based on the user authentication information (2520).

According to an embodiment of the present invention, when the authentication server receives and authenticates the user authentication information, the wireless terminal transmits the inputted user authentication information to the authentication server in cooperation with the wireless processing unit, It is preferable that the server receives user authentication result information for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal.

According to another embodiment of the present invention, when the user authentication information is authenticated through an IC chip (or USIM) provided in the wireless terminal, the wireless terminal transmits the user authentication information Information to the IC chip (or USIM), and receives a user authentication result for authenticating and activating the wireless communication disposable authenticator function provided in the wireless terminal from the IC chip (or USIM).

According to another embodiment of the present invention, when the wireless terminal authenticates the user authentication information, the wireless terminal compares the inputted user authentication information with user authentication information (not shown) stored in the memory unit (Or generates) a user authentication result for activating and activating the wireless communication disposable authenticator function provided in the wireless terminal.

If the wireless communication disposable authenticator function of the wireless terminal is not activated (2525), the wireless terminal disables (or initializes) the wireless communication disposable authentication function of the wireless terminal (2530).

On the other hand, when the wireless communication disposable authenticator function of the wireless terminal is activated (2525), the wireless terminal is provided with the one-time authentication code authentication system shown in FIG. One transmission target authentication code index information is selected (2535).

According to an embodiment of the present invention, the wireless terminal randomly selects one of the two or more pieces of authentication code index information stored in the memory unit, or selects one of the two or more pieces of authentication code index information It is preferable to select one piece of authentication code index information, and it is preferable that a different index value is selected every time the transmission target authentication code index information is selected.

If the transmission subject authentication code index information is selected (2540) and the transmission subject authentication code index information is secured (2545), the wireless terminal transmits the transmission subject authentication code index information to the authentication server securely Or performs a security process of changing the data structure of the transmission target authentication code index information (2550).

When changing the data structure of the transmission subject authentication code index information according to the embodiment of the present invention, the wireless terminal transmits the data combination (or arrangement) of the transmission subject authentication code index information according to a preset method or a predetermined method (Or rearrangement), and when the transmission subject authentication code index information is rearranged (rearranged) according to a certain combination (or rearrangement) scheme, the wireless terminal transmits the rearranged (Or an index (or index) identifying the reassembly (or reordering) scheme) for restoring the original data structure of the original transmission subject authentication code index information in the authentication server, .

The data recombination (or rearrangement) with respect to the transmission subject authentication code index information is preferably recombined (or rearranged) by nibble unit, specific digit unit, byte unit, word unit, or specific block unit Do.

According to an embodiment of the present invention, the wireless terminal can selectively process any one of the transmission target authentication code index information, and the present invention includes all the changing methods for the security processing It is clear that this is done.

If the transmission subject authentication code index information is secured (2550), or if the security processing is omitted (2545), the wireless terminal transmits the transmission subject authentication code index information to the authentication server via the wireless communication network (2555).

FIGS. 26A and 26B illustrate a process of providing disposable authentication code generation information after the wireless terminal is used as a wireless communication disposable authenticator according to an embodiment of the present invention.

26A and 26B illustrate a case where the authentication code index information is transmitted from the wireless terminal shown in FIG. 24 through the authentication code index transmission process shown in FIG. 25 to the authentication server shown in FIG. After confirming the wireless terminal unique information corresponding to the wireless terminal transmitting the authentication code index information, transmits the authentication code index information to the wireless communication disposable authenticator through the authentication code index information and wireless terminal unique information (Or second part disposable authentication code generation information) to the wireless terminal after the user is approved to use the wireless terminal, specifically, a method of confirming the wireless terminal specific information through protocol reading FIG.

Those skilled in the art will be able to refer to and / or modify the drawings 26a and 26b to provide the disposable authentication code generation information after the use of the wireless terminal is approved as a wireless communication disposable authenticator It is to be understood that the invention may be practiced otherwise than as specifically described herein, but it is to be understood that the invention includes all such contemplated embodiments, The technical features thereof are not limited only by the method of implementation.

Referring to FIGS. 26A and 26B, when the authentication code index information is transmitted from the wireless terminal shown in FIG. 24 through the authentication code index transmission process shown in FIG. 25, the authentication server transmits the authentication code index information to the wireless terminal (2600).

If the authentication code index information is securely transmitted (2605) through encryption (or data structure change) in the wireless terminal, the authentication server decrypts (or restores) the secure authentication code index information, And restores the original authentication code index information and wireless terminal unique information (2610)

Also, the authentication server reads the protocol used for receiving the authentication code index information (e.g., a data communication protocol or a message exchange protocol included in the wireless communication network) and transmits the authentication code index information to the wireless terminal that transmitted the authentication code index information (2615).

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the wireless terminal specific information is confirmed (2620), the authentication server checks wireless terminal specific information matched with the received wireless terminal specific information in association with the storage medium (2625).

If the wireless terminal unique information matching the received wireless terminal unique information is not confirmed from the storage medium (2630), the authentication server transmits wireless terminal validity error information to the wireless terminal through the wireless communication network and outputs the information 2635).

On the other hand, if wireless terminal unique information matching the received wireless terminal unique information is confirmed (2630) from the storage medium, the authentication server associates the wireless terminal unique information with the wireless terminal unique information, And checks whether the received authentication code index information is included (2640).

If it is not confirmed that the received authentication code index information is included among the two or more authentication code index information stored in the storage medium (2645), the authentication server transmits wireless terminal validity error information to the wireless terminal through the wireless communication network And outputs it (2635).

Meanwhile, when it is confirmed that the received authentication code index information is included in two or more authentication code index information stored in the storage medium (2645), the authentication server approves the use of the wireless terminal as a wireless communication disposable authenticator (2650) .

If the wireless terminal is not approved for use as a wireless communication disposable authenticator (2655), the authentication server transmits wireless terminal validity error information to the wireless terminal through a wireless communication network and outputs the wireless terminal validity error information (2635).

Meanwhile, if the wireless terminal is approved for use as a wireless communication disposable authenticator (2655), the authentication server generates disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator, (Or generates) (2660).

If the disposable authentication code generation information corresponding to the authentication code index information is stored in the storage medium according to an embodiment of the present invention, the authentication server extracts the disposable authentication code generation information corresponding to the authentication code index information . &Lt; / RTI &gt;

According to another embodiment of the present invention, when the disposable authentication code generation information is not stored in the storage medium and the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated, It is preferable that the disposable authentication code generation information corresponding to the authentication code index information approved as the wireless communication disposable authenticator is dynamically generated in real time.

The first partial disposable authentication code generation information including a part of the one-time authentication code generation information is transmitted to the wireless terminal (for example, the wireless terminal to be used as the wireless communication disposable authenticator) through the authentication code index providing system shown in FIG. 20 The authentication server confirms (or generates) the second partial disposable authentication code generation information including the remaining part of the one-time authentication code generation information matched with the partial disposable authentication code generation information previously provided to the wireless terminal desirable.

According to an embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a part of the disposable authentication code generation information to be provided to the wireless terminal, the authentication server generates the disposable authentication code It is preferable to confirm (or generate) the remaining part with the second partial disposable authentication code generation information to be provided to the wireless terminal.

According to another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal, (Or generates) the disposable authentication code generation information to be combined with the first partial disposable authentication code generation information to be provided to the wireless terminal.

According to still another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a verification value for verifying the disposable authentication code generation information, It is preferable that the authentication code generation information is confirmed (or generated) by the second partial disposable authentication code generation information to be provided to the wireless terminal.

If the disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator is confirmed (or generated) (2665) 2 disposable authentication code generation information) (2670), the authentication server encrypts the disposable authentication code generation information (or the second disposable authentication code generation information) to securely transmit it to the authentication server, or encrypts the disposable authentication code The security processing for changing the data structure of the authentication code generation information (or the second one-time-use authentication code generation information) is performed (2675).

When changing the data structure of the disposable authentication code generation information (or the second disposable authentication code generation information) according to the method of the present invention, the authentication server generates the disposable authentication code generation information (or the second one- (Or rearrangement) the data combination (or arrangement) of the disposable authentication code (or the arrangement) of the disposable authentication code according to a predetermined scheme or a predetermined scheme, and the disposable authentication code generation information (Or rearranged) according to the disposable authentication code generation information, the authentication server adds the disposable authentication code generation information (or the second disposable authentication code generation information) to the recombination (or rearranged) Data restoration information for restoring the original data structure for the code generation information (or the second one-time-use authentication code generation information) It is desirable to include an identifier (or index) that identifies the recombination (or rearrangement) scheme.

Here, the data recombination (or rearrangement) for the disposable authentication code generation information (or the second disposable authentication code generation information) may be performed by a nibble unit, a specific digit unit, a byte unit, a word unit, Recombination (or rearrangement) is preferable.

According to the embodiment of the present invention, the authentication server can selectively process any one of the one-time-use authentication code generation information (or the second one-time-use authentication code generation information) And that all such modifications are possible in light of the above teachings.

If the disposable authentication code generation information (or second disposable authentication code generation information) is securely handled (2675), or if the security processing is omitted (2670), the authentication server transmits the disposable authentication code to the wireless terminal The disposable authentication code generation information (or second disposable authentication code generation information) is transmitted (2680).

27A and 27B are diagrams illustrating a process of providing disposable authentication code generation information after the wireless terminal is used as a wireless communication disposable authenticator according to another embodiment of the present invention.

In more detail, FIGS. 27A and 27B show the case where the authentication code index information is transmitted from the wireless terminal shown in FIG. 24 through the authentication code index transmission process shown in FIG. 25, (Or intercepts) the authentication code index information, and transmits the authentication code index information to the authentication server shown in FIG. 23 by attaching the wireless terminal unique information to the authentication server shown in FIG. 23, After the wireless terminal is allowed to use the wireless terminal as a wireless communication disposable authenticator through the authentication code index information and wireless terminal unique information, the wireless terminal transmits the disposable authentication code generation information (or the second partial disposable authentication code generation information The present invention is not limited to the above-described embodiments, and various changes and modifications may be made without departing from the scope of the present invention. Various steps of the process of providing the disposable authentication code generation information after the wireless terminal is approved to be used as the wireless communication disposable authenticator by referring to and / or modifying the drawings 27a and 27b (for example, some steps are omitted, However, the present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited to those shown in FIGS. 27A and 27B only.

Referring to FIGS. 27A and 27B, if the authentication code index information is transmitted from the wireless terminal shown in FIG. 24 through the authentication code index transmission process shown in FIG. 25, (2700) the authentication code index information transmitted from the wireless terminal, and confirms the wireless terminal specific information corresponding to the wireless terminal transmitting the authentication code index information (2705).

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the specific information of the wireless terminal is confirmed (2710), the communication company server transmits the identification information of the wireless terminal to the authentication server by attaching the identified wireless terminal specific information to the authentication code index information (2715) Receives the authentication code index information to which the wireless terminal unique information is attached from the communication company server, and checks wireless terminal specific information attached to the authentication code index information (2720).

If the authentication code index information to which the wireless terminal unique information is attached is securely transmitted (2725) through encryption (or data structure change) in the wireless terminal, the authentication server transmits the security- And restores original authentication code index information and wireless terminal unique information through decryption (or restoration of data structure) (2730)

Thereafter, the authentication server confirms the wireless terminal specific information matched with the received wireless terminal specific information in association with the storage medium (2735).

If the wireless terminal unique information matching the received wireless terminal unique information is not confirmed from the storage medium (2740), the authentication server transmits wireless terminal validity error information to the wireless terminal through the wireless communication network and outputs the information 2745).

Meanwhile, if the wireless terminal unique information matching the received wireless terminal unique information is confirmed from the storage medium (2740), the authentication server associates the wireless terminal unique information with the wireless terminal unique information, It is checked if the received authentication code index information is included (2750).

If it is not confirmed that the received authentication code index information is included among the two or more authentication code index information stored in the storage medium (2755), the authentication server transmits wireless terminal validity error information to the wireless terminal through the wireless communication network And outputs it (2745).

On the other hand, when it is confirmed that the received authentication code index information is included in the two or more authentication code index information stored in the storage medium (2755), the authentication server approves the use of the wireless terminal as a wireless communication disposable authenticator (2760) .

If the wireless terminal is not approved for use as a wireless communication disposable authenticator (2765), the authentication server transmits wireless terminal validity error information to the wireless terminal through a wireless communication network and outputs the wireless terminal validity error information (2745).

Meanwhile, when the wireless terminal is approved for use as a wireless communication disposable authenticator (2765), the authentication server generates disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator, (Or generates) (2770).

If the disposable authentication code generation information corresponding to the authentication code index information is stored in the storage medium according to an embodiment of the present invention, the authentication server extracts the disposable authentication code generation information corresponding to the authentication code index information . &Lt; / RTI &gt;

According to another embodiment of the present invention, when the disposable authentication code generation information is not stored in the storage medium and the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated, It is preferable that the disposable authentication code generation information corresponding to the authentication code index information approved as the wireless communication disposable authenticator is dynamically generated in real time.

The first partial disposable authentication code generation information including a part of the one-time authentication code generation information is transmitted to the wireless terminal (for example, the wireless terminal to be used as the wireless communication disposable authenticator) through the authentication code index providing system shown in FIG. 20 The authentication server confirms (or generates) the second partial disposable authentication code generation information including the remaining part of the one-time authentication code generation information matched with the partial disposable authentication code generation information previously provided to the wireless terminal desirable.

According to an embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a part of the disposable authentication code generation information to be provided to the wireless terminal, the authentication server generates the disposable authentication code It is preferable to confirm (or generate) the remaining part with the second partial disposable authentication code generation information to be provided to the wireless terminal.

According to another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal, (Or generates) the disposable authentication code generation information to be combined with the first partial disposable authentication code generation information to be provided to the wireless terminal.

According to still another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a verification value for verifying the disposable authentication code generation information, It is preferable that the authentication code generation information is confirmed (or generated) by the second partial disposable authentication code generation information to be provided to the wireless terminal.

If the disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator is confirmed (or generated) (2775), the disposable authentication code generation information 2 disposable authentication code generation information) (2780), the authentication server encrypts the disposable authentication code generation information (or the second disposable authentication code generation information) to securely transmit the authentication information to the authentication server, The security processing for changing the data structure of the authentication code generation information (or the second disposable authentication code generation information) is performed (2785).

When changing the data structure of the disposable authentication code generation information (or the second disposable authentication code generation information) according to the method of the present invention, the authentication server generates the disposable authentication code generation information (or the second one- (Or rearrangement) the data combination (or arrangement) of the disposable authentication code (or the arrangement) of the disposable authentication code according to a predetermined scheme or a predetermined scheme, and the disposable authentication code generation information (Or rearranged) according to the disposable authentication code generation information, the authentication server adds the disposable authentication code generation information (or the second disposable authentication code generation information) to the recombination (or rearranged) Data restoration information for restoring the original data structure for the code generation information (or the second one-time-use authentication code generation information) It is desirable to include an identifier (or index) that identifies the recombination (or rearrangement) scheme.

Here, the data recombination (or rearrangement) for the disposable authentication code generation information (or the second disposable authentication code generation information) may be performed by a nibble unit, a specific digit unit, a byte unit, a word unit, Recombination (or rearrangement) is preferable.

According to the embodiment of the present invention, the authentication server can selectively process any one of the one-time-use authentication code generation information (or the second one-time-use authentication code generation information) And that all such modifications are possible in light of the above teachings.

If the disposable authentication code generation information (or second disposable authentication code generation information) is securely handled (2785), or if the security processing is omitted (2780), the authentication server transmits the disposable authentication code to the wireless terminal Transmits the disposable authentication code generation information (or second disposable authentication code generation information) (2790).

FIGS. 28A and 28B are diagrams illustrating a process of providing disposable authentication code generation information after approval of use of a wireless terminal as a wireless communication disposable authenticator according to another embodiment of the present invention.

In more detail, FIG. 28A and FIG. 28B show the case where the authentication code index information is transmitted from the wireless terminal shown in FIG. 24 through the authentication code index transmission process shown in FIG. 25, After receiving the authentication code index information and the wireless terminal information corresponding to the wireless terminal transmitting the authentication code index information from the communication company server, transmits the authentication code index information and the wireless terminal unique information to the wireless communication disposable (Or second partial disposable authentication code generation information) to the wireless terminal after the use of the wireless terminal is approved by the authentication server. More specifically, Specific information corresponding to the wireless terminal information through the communication company server It illustrates an exemplary method for requesting and receiving.

Those skilled in the art will be able to refer to and / or modify the drawings 28a and 28b to provide the disposable authentication code generation information after the wireless terminal is approved to be used as a wireless communication disposable authenticator It is to be understood that the invention may be practiced otherwise than as specifically described herein without departing from the scope of the invention as set forth in the appended claims. The technical features thereof are not limited only by the method of implementation.

For example, the wireless terminal specific information can be transmitted to the authentication server by confirming data communication or message exchange between the wireless terminal and the authentication server in the communication company server without a request from the authentication server. And that all possible embodiments are encompassed.

Referring to FIGS. 28A and 28B, when the authentication code index information is transmitted from the wireless terminal shown in FIG. 24 through the authentication code index transmission process shown in FIG. 25, the authentication server transmits the authentication code index information to the wireless terminal (2800).

If the authentication code index information is securely transmitted through the encryption (or data structure change) in the wireless terminal (2805), the authentication server decrypts (or restores the data structure) the secured authentication code index information, And restores the original authentication code index information and wireless terminal unique information (2810)

Also, the authentication server reads the protocol used for receiving the authentication code index information (e.g., a data communication protocol or a message exchange protocol included in the wireless communication network) and transmits the authentication code index information to the wireless terminal that transmitted the authentication code index information (2815).

If the wireless terminal information is confirmed (2820), the authentication server requests and receives wireless terminal specific information corresponding to the wireless terminal information to the communication company server (2825).

Here, the wireless terminal specific information includes a wireless terminal telephone number corresponding to the wireless terminal of the customer, a UICC (Universal IC Card) / USIM (Universal Subscriber Identity) serial number mounted on the wireless terminal, The UICC / USIM serial number, the terminal serial number, the wireless terminal number, the wireless terminal number, the terminal serial number (e.g., ESN (Electronic Serial Number) It is preferable to include at least one unique combination number generated by combining one or more of all (or a part of) the opening numbers.

If the wireless terminal specific information is received from the communication company server (2830), the authentication server checks wireless terminal specific information matched with the received wireless terminal specific information in association with the storage medium (2835).

If the wireless terminal unique information matching the received wireless terminal specific information is not confirmed from the storage medium (2840), the authentication server transmits wireless terminal validity error information to the wireless terminal through the wireless communication network and outputs the information 2845).

Meanwhile, if the wireless terminal unique information matching the received wireless terminal unique information is confirmed (2840) from the storage medium, the authentication server associates the wireless terminal unique information with the wireless terminal unique information, And checks whether the received authentication code index information is included (2850).

If it is not confirmed that the received authentication code index information is included among the two or more authentication code index information stored in the storage medium (2855), the authentication server transmits wireless terminal validity error information to the wireless terminal through the wireless communication network And outputs it (2845).

On the other hand, if it is confirmed that the received authentication code index information is included in two or more pieces of authentication code index information stored in the storage medium (2855), the authentication server approves the use of the wireless terminal as a wireless communication disposable authenticator (2860) .

If the wireless terminal is not approved for use as a wireless communication disposable authenticator (2865), the authentication server transmits wireless terminal validity error information to the wireless terminal through the wireless communication network and outputs the wireless terminal validity error information (2845).

If the wireless terminal is approved for use as a wireless communication disposable authenticator (2865), the authentication server generates disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator, (Or generates) (2870).

If the disposable authentication code generation information corresponding to the authentication code index information is stored in the storage medium according to an embodiment of the present invention, the authentication server extracts the disposable authentication code generation information corresponding to the authentication code index information . &Lt; / RTI &gt;

According to another embodiment of the present invention, when the disposable authentication code generation information is not stored in the storage medium and the disposable authentication code generation information corresponding to the authentication code index information is dynamically generated, It is preferable that the disposable authentication code generation information corresponding to the authentication code index information approved as the wireless communication disposable authenticator is dynamically generated in real time.

The first partial disposable authentication code generation information including a part of the one-time authentication code generation information is transmitted to the wireless terminal (for example, the wireless terminal to be used as the wireless communication disposable authenticator) through the authentication code index providing system shown in FIG. 20 The authentication server confirms (or generates) the second partial disposable authentication code generation information including the remaining part of the one-time authentication code generation information matched with the partial disposable authentication code generation information previously provided to the wireless terminal desirable.

According to an embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a part of the disposable authentication code generation information to be provided to the wireless terminal, the authentication server generates the disposable authentication code It is preferable to confirm (or generate) the remaining part with the second partial disposable authentication code generation information to be provided to the wireless terminal.

According to another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a combination code to be combined with the disposable authentication code generation information to be provided to the wireless terminal, (Or generates) the disposable authentication code generation information to be combined with the first partial disposable authentication code generation information to be provided to the wireless terminal.

According to still another embodiment of the present invention, when the first partial disposable authentication code generation information provided in the wireless terminal is a verification value for verifying the disposable authentication code generation information, It is preferable that the authentication code generation information is confirmed (or generated) by the second partial disposable authentication code generation information to be provided to the wireless terminal.

If the disposable authentication code generation information (or second disposable authentication code generation information) to be provided to the wireless terminal approved for use as the wireless communication disposable authenticator is confirmed (or generated) (2875), the disposable authentication code generation information 2 disposable authentication code generation information) (2880), the authentication server encrypts the disposable authentication code generation information (or the second disposable authentication code generation information) to securely transmit the authentication information to the authentication server, The security processing for changing the data structure of the authentication code generation information (or the second disposable authentication code generation information) is performed (2885).

When changing the data structure of the disposable authentication code generation information (or the second disposable authentication code generation information) according to the method of the present invention, the authentication server generates the disposable authentication code generation information (or the second one- (Or rearrangement) the data combination (or arrangement) of the disposable authentication code (or the arrangement) of the disposable authentication code according to a predetermined scheme or a predetermined scheme, and the disposable authentication code generation information (Or rearranged) according to the disposable authentication code generation information, the authentication server adds the disposable authentication code generation information (or the second disposable authentication code generation information) to the recombination (or rearranged) Data restoration information for restoring the original data structure for the code generation information (or the second one-time-use authentication code generation information) It is desirable to include an identifier (or index) that identifies the recombination (or rearrangement) scheme.

Here, the data recombination (or rearrangement) for the disposable authentication code generation information (or the second disposable authentication code generation information) may be performed by a nibble unit, a specific digit unit, a byte unit, a word unit, Recombination (or rearrangement) is preferable.

According to the embodiment of the present invention, the authentication server can selectively process any one of the one-time-use authentication code generation information (or the second one-time-use authentication code generation information) And that all such modifications are possible in light of the above teachings.

If the disposable authentication code generation information (or second disposable authentication code generation information) is securely processed (2885), or if the security processing is omitted (2880), the authentication server transmits the disposable authentication code to the wireless terminal Transmits the disposable authentication code generation information (or second disposable authentication code generation information) (2890).

29 is a diagram illustrating a process of generating a disposable authentication code according to an embodiment of the present invention.

In more detail, FIG. 29 is a flowchart illustrating a process of providing disposable authentication code generation information to the wireless terminal illustrated in FIG. 24 through the process of providing the disposable authentication code generation information shown in FIG. 26, FIG. 27, (N) through the use of the disposable authentication code generation information. As a person skilled in the art to which the present invention pertains, reference is made to FIG. 29 and / or modification (For example, some steps may be omitted or the procedure may be changed), the present invention may include all of the above-described embodiments. And the technical features thereof are not limited only by the method shown in FIG.

Referring to FIG. 29, when the disposable authentication code generation information is provided to the wireless terminal shown in FIG. 24 through the process of providing the disposable authentication code generation information shown in FIG. 26, FIG. 27 or FIG. 28, The disposable authentication code generation information is received from the authentication server (2900).

If the disposable authentication code generation information is received (2905), the authentication server generates and transmits the disposable authentication code generation information through encryption (or data structure modification) (2910) The original one-time authentication code generation information is restored (2915) through decryption (or data structure restoration) of the processed one-off authentication code generation information,

If the disposable authentication code generation information is restored (2915) to the original disposable authentication code generation information through decryption (or data structure restoration), or if the security processing of the disposable authentication code generation information is omitted 2910, The terminal uses the received one-time authentication code generation information as a seed value for generating a one-time authentication code (N), generates an N-digit number of one-time authentication code (N) according to a predetermined one- (2920).

If the disposable authentication code (N) is generated (2925), the wireless terminal outputs the generated N-digit disposable authentication code (N) to a predetermined area on the screen of the wireless terminal (2930).

According to another embodiment of the present invention, when the wireless terminal has a local communication function and a local communication channel is connected to the authentication request terminal through the local communication, the wireless terminal transmits the N-digit number of disposable It is possible to output the authentication code N to the authentication request terminal, and thus the present invention is not limited thereto.

FIG. 30 is a diagram illustrating a process of generating a disposable authentication code according to another embodiment of the present invention.

In more detail, FIG. 30 is a flowchart illustrating a method of generating disposable authentication code according to an exemplary embodiment of the present invention when the second partial disposable authentication code generation information is provided to the wireless terminal shown in FIG. 24 through the process of providing the disposable authentication code generation information shown in FIG. 26, FIG. 27, The wireless terminal generates an N-digit disposable authentication code (N) based on the first partial disposable authentication code generation information and the second partial disposable authentication code generation information stored in the memory unit. Those skilled in the art will appreciate that various ways of practicing the process of generating the disposable authentication code (e.g., omitting some steps or changing the order) may be implemented by referring to and / It will be appreciated that the present invention includes all such contemplated embodiments, And the technical characteristics thereof are not limited.

Referring to FIG. 30, if the second partial disposable authentication code generation information is provided to the wireless terminal shown in FIG. 24 through the process of providing the disposable authentication code generation information shown in FIG. 26, FIG. 27 or FIG. 28, The terminal receives the second partial disposable authentication code generation information from the authentication server (3000).

If the second partial disposable authentication code generation information is received (3005) and the second partial disposable authentication code generation information is securely transmitted (3010) through encryption (or data structure change) at the authentication server, The wireless terminal restores the original second partial disposable authentication code generation information through decryption (or data structure restoration) of the secure partial second disposable authentication code generation information (3015)

If the second partial disposable authentication code generation information is restored (3015) to the original second partial disposable authentication code generation information through decryption (or data structure restoration), the security processing of the second partial disposable authentication code generation information If it is omitted (3010), the wireless terminal combines (or concatenates) the first partial disposable authentication code generation information stored in the memory unit with the second disposable authentication code generation information to generate the disposable authentication code (N) Generates disposable authentication code generation information corresponding to the seed value or identifies the second disposable authentication code generation information as a seed value for generating the disposable authentication code (N) through the first partial disposable authentication code generation information (3020).

If the one-time authentication code generation information is not generated (or confirmed) through the first partial disposable authentication code generation information and the second partial disposable authentication code generation information (3025), the wireless terminal outputs the one-time authentication code generation error information (3030).

On the other hand, when the disposable authentication code generation information is generated (or confirmed) through the first partial disposable authentication code generation information and the second partial disposable authentication code generation information (3025), the wireless terminal generates the one- (3035) an N-digit number of one-time authentication code (N) according to a predetermined one-time authentication code generation standard by using the code generation information as a seed value for generating a one-time authentication code (N).

If the first partial disposable authentication code generation information stored in the memory unit is stored, the wireless terminal generates n (1 < = n < N) number of digits of the disposable authentication code (n), generating a disposable authentication code (n) of the number of digits (N) It is possible to combine (or concatenate) the disposable authentication codes Nn to generate an N-digit disposable authentication code N, and thus the present invention is not limited thereto.

If the disposable authentication code N is generated 3040, the wireless terminal outputs the generated N-digit disposable authentication code N to a predetermined area on the screen of the wireless terminal 3045.

According to another embodiment of the present invention, when the wireless terminal has a local communication function and a local communication channel is connected to the authentication request terminal through the local communication, the wireless terminal transmits the N-digit number of disposable It is possible to output the authentication code N to the authentication request terminal, and thus the present invention is not limited thereto.

FIG. 31 is a diagram illustrating a process of authenticating a disposable authentication code according to an embodiment of the present invention.

In more detail, FIG. 31 is a flowchart illustrating a method of generating a one-time use authentication code according to an exemplary embodiment of the present invention. Referring to FIG. 31, The disposable authentication code N is transmitted to the authentication server shown in FIG. 23. In response to the disposable authentication code N, the authentication server generates a disposable verification code N matching the disposable authentication code N, Code N. It will be understood by those skilled in the art that references to and / or variations on this figure 31 are indicative of various ways of practicing the disposable authentication code authentication process For example, some embodiments may be omitted or the order may be altered), but the present invention encompasses all such envisioned methods of implementation , Only the exemplary method shown in the figure 31 is not limited its technical characteristics.

Referring to FIG. 31, if the wireless terminal shown in FIG. 24 generates an N-digit number of one-time authentication code (N) through the process of generating the disposable authentication code shown in FIG. 29 or 30, (N) generated by the wireless terminal through the disposable authentication code input interface (3105), and transmits the disposable authentication code to the authentication server via the communication network Transmits the input disposable authentication code N (3110).

The authentication server receives the disposable authentication code N through the communication network, and confirms the disposable authentication code generation information corresponding to the received disposable authentication code N (3115).

If the disposable authentication code generation information is confirmed (3120), the authentication server generates an N-digit disposable verification code (N) through the confirmed disposable authentication code generation information (3125).

If the disposable verification code generation information is generated (3120), the authentication server compares the disposable authentication code (N) with the disposable verification code (N) to authenticate the disposable authentication code (3135).

If the disposable authentication code is not authenticated (3140), the authentication server provides the disposable authentication code authentication error information to the authentication request terminal and outputs it (3145).

If the disposable authentication code is authenticated (3140), the authentication server provides the disposable authentication code authentication result to the authentication request terminal and outputs the disposable authentication code authentication result to the terminal, The result is output or stored (3150).

100: authentication code index providing means 105: index information receiving means
110: wireless terminal unique information verification means 115: wireless terminal authentication means
120: Disposable authentication code generation information confirmation means
125: Disposable authentication code generation information providing means
130: authentication means 135: storage medium
140: communication company server 145: wireless terminal
150: authentication request terminal

Claims (4)

A method executed via a server communicating with a user wireless terminal having installed a program implementing a wireless communication based disposable authenticator,
A first step of the server communicating with the program of the user wireless terminal to confirm the unique information of the user wireless terminal and to check the unique index information determined to be non-redundant;
A second step of the server associating the unique information of the user wireless terminal with the identified index information and providing the identified index information to the program of the user wireless terminal;
A third step of the server receiving the index information from the program of the user wireless terminal when the program of the user wireless terminal is used as a wireless communication based disposable authenticator; And
And a fourth step of the server authenticating the received index information through the stored index information and using the program of the user wireless terminal as a wireless communication based disposable authenticator,
The index information is provided to the user wireless terminal and stored in a designated storage area through the program. After the program is executed in the user wireless terminal and is used as a disposable authenticator, the index information is extracted from the designated storage area through the program, And transmitting the one-time authentication code.
The method according to claim 1,
Wherein the server verifies the authentication code generation information corresponding to the one-time authentication code to be generated and approved as a wireless communication-based disposable authenticator through the index information, stores the authentication code generation information in association with the index information, Providing at least a portion of the generated information to the user wireless terminal,
Wherein at least a portion of the authentication code generation information is stored in a designated storage area of the user wireless terminal.
The method according to claim 1,
The third step may further include the step of the server receiving unique information of the user wireless terminal through a program of the user wireless terminal,
Wherein the fourth step includes the step of allowing the server to use the user wireless terminal installed with the program through the index information and unique information as a wireless communication based disposable authenticator, .
3. The method of claim 2,
When the server is authorized to use the program of the user wireless terminal as a wireless communication based disposable authenticator, the server provides another part of the authentication code generation information for generating the disposable authentication code through the wireless communication based disposable authenticator to the user wireless terminal The method further comprising the step of:

Images