KR20180109025A - Method and System for Providing Certification by using Reverse Direction Reply Message, and Record Medium - Google Patents

Abstract

The present invention relates to an authentication method using a reverse reply message, capable of safely and inexpensively authenticating validity of a service. The authentication method using a reverse reply message comprises: a step of performing a procedure for checking a user mobile number, an authentication code, and synchronization information; a step of mapping the user′s mobile number with a generated authentication code to store the same in a predetermined medium for an effective time; a step of transmitting a normal message through a predetermined telephone network, and displaying a security code including the authentication code and the synchronization information on a web/application screen of a user terminal through a data network; a step of performing a message authentication procedure; a step of checking a transmission number of a reverse message to perform a transmission authentication procedure; a step of checking the authentication code included in a message body area of the reverse message to perform a code authentication procedure; and a step of generating an authentication result for providing a service of a service server based on transmission and code authentication results to provide the authentication result to the service server or the user terminal.

Description

TECHNICAL FIELD The present invention relates to an authentication method and system using a reverse reply message and a recording medium therefor,

The present invention relates to a system and a method for controlling a messaging combination of a reverse reply message corresponding to a reverse message sent backward through a telephone network from a mobile phone of a user based on reply writing of a forward message forwarded to a user's mobile phone via one or more telephone networks, And verifies the validity of the service provided to the user through a separate data network separated from the telephone network by using the disposable authentication code input in the message body area of the reverse reply message corresponding to the reply of the message.

There is provided an SMS authentication for generating an authentication number from a server on the Internet, sending an SMS including the authentication number to a user's cellular phone, and receiving and authenticating the authentication number through a terminal of a user connected to the Internet. However, since the conventional SMS authentication includes the authentication number in the SMS and is sent to the user's mobile phone (= forward transmission), not only can it be captured easily through character interception, but also can easily be taken by phishing, And includes a variety of problems that can be authenticated by inputting a key through a terminal of a third party rather than a terminal used by an actual user because the terminal is authenticated by inputting a key. Accordingly, the Financial Supervisory Service (FSS) recommends the use of the conventional SMS authentication for the additional authentication such as financial transactions, and some banks (for example, NH bank, etc.) have already stopped the conventional SMS authentication service.

Meanwhile, in addition to the SMS authentication for authenticating and forwarding the SMS including the authentication number, the ARS authentication is provided to input and receive the authentication number by dialing the ARS-based phone with the user's telephone. However, such conventional ARS authentication also poses problems such as incoming call control, voice interception, inaccessibility of hearing-impaired persons, restriction of overseas use, and generation of two to three times higher costs than SMS authentication, but there are other alternatives It is a temporary use until now.

Meanwhile, in addition to the conventional SMS authentication and ARS authentication, an app authentication method is provided in which an app is installed in a user's smartphone and additional authentication is provided using the app. However, such a conventional application authentication method has a problem that it is abused by a memory hacking or the like for a smart phone, and has a problem that it can not be used in a feature phone in which an app can not be installed other than a smart phone.

As a result, an additional low-cost and safe authentication method is needed while eliminating the problems of conventional SMS authentication, ARS authentication, and application authentication, and the presently proposed method has technically difficult problems to solve the above problems .

An object of the present invention to overcome the above-mentioned problems is to provide a method and system for generating a predetermined authentication code when requesting authentication for providing a service from a service server providing a service designated by a user terminal used by a user, And the synchronization information is included in the message body area of the forward message to be sent to the user's mobile phone via a separated separate telephone network and synchronized to be outputted through the Web / App screen of the user terminal, After the authentication code is mapped and stored, a forward message including a designated telephone number designated as a calling number is sent to the user's cellular phone via the telephone network, and at the same time, The security code including the authentication code is displayed on the web / And outputs the synchronization information to the mobile terminal. The mobile terminal recognizes the web / application screen of the user terminal based on the reply writing of the forward message from the mobile phone of the user who has received the forward message, And receiving a reverse message including the designated telephone number as a called number, authenticating whether the received reverse message is a reverse received message in response to a forward message sent to the user's cellular phone, and authenticating the message body area of the reverse message An authentication method and system using a reverse reply message for authenticating that the authentication code included in the user terminal is a code corresponding to the security code output through the web / And a recording medium.

The authentication method using the reverse reply message according to the present invention is a method for interworking with a service server providing a designated service to a user and exchanging a message via a mobile phone and a telephone network of a user, The method comprising the steps of: confirming a mobile phone number of a user at the time of authentication for providing a service of the service server, checking a dynamically generated authentication code for providing the service, A first step of checking a synchronization information included in a message body area of the forward message and synchronized to be outputted through a web application screen of a user terminal, The second, which maps and keeps on the specified medium for the specified expiration time And a forwarding message including the message content specified in the message body area and a forward message including the designated phone number as a calling number and being transmitted through a designated telephone network, A third step of outputting the security code including the authentication code and the synchronization information via a web / app screen of the user terminal via a separate data network separated from the telephone network; Wherein the mobile terminal includes the mobile phone number of the user as a calling number based on the reply writing of the forward message from the mobile terminal and includes the designated phone number as a called number, A reverse message containing the authentication code entered in the message body area. A step of performing a message authentication procedure to authenticate whether the message is validly received via the telephone network; and a step of, if the reverse message is validly received, A fifth step of verifying an authentication code included in the message body area of the reverse message and performing a code authentication procedure for authenticating whether the message matches the authentication code mapped to the mobile phone number; And a sixth step of generating an authentication result for providing the service of the service server based on the result of the code authentication and providing the result of authentication to the service server or the user terminal.

In the authentication method using the reverse reply message according to the present invention, the first step is used as a calling number of a forward message to be transmitted through the telephone network, including the mobile phone number of the user as a called number, And a step of confirming a designated telephone number to be used as a destination number of an uplink message to be received by the base station.

In the authentication method using the reverse reply message according to the present invention, the synchronization information may include information included in service information of the service server, at least a part of information included in the service information, Generated or determined to be output in synchronization with the information included in the user information, at least a part of the information included in the user information, the information registered by the user, and the message body area of the forward message, And at least one of the information.

In the authentication method using a reverse reply message according to the present invention, the second step may further include starting counting an effective time for maintaining a mapping relationship between the mobile phone number and the authentication code, Determining whether the validity time has elapsed, and deactivating the mapping relationship between the mobile phone number and the authentication code when the validity time has elapsed.

In the authentication method using a reverse reply message according to the present invention, the security code may include an authentication code to be input to a message body area of the reverse message, or may include an authentication code to be input to the message body area of the reverse message And a combination of arbitrary dummy codes.

In the authentication method using a reverse reply message according to the present invention, the third step may include: synchronizing information included in a message body area of a forward message sent to the mobile phone number of the user; And outputting instruction information for instructing confirmation of the synchronization state of the output synchronization information through the web / application screen of the user terminal.

In the authentication method using the reverse reply message according to the present invention, in the third step, the authentication code output through the web / application screen of the user terminal is transmitted to the message body area of the reverse message corresponding to the reply of the forward message And outputting guide information for guiding the user to input and reply through the Web / App screen of the user terminal.

In the authentication method using the reverse reply message according to the present invention, in the third step, the authentication code output through the web / application screen of the user terminal in the message body area of the forward message sent to the mobile phone number of the user, The method comprising the step of including guidance information for inputting and returning to the message body region of the reverse message corresponding to the reply of the forward message.

In the authentication method using the reverse reply message according to the present invention, in the third step, security information for guiding the forward message forwarded to the user's mobile phone number to be used with confidence is transmitted through the web / And outputting the output signal.

In the authentication method using the reverse reply message according to the present invention, the security information may include content information indicating a user that a direction message for authenticating service provision by a designated service provider is sent to the mobile phone number of the user, Information indicating that the forward message including the designated message number is sent to the mobile phone number of the user, content information indicating that the forward message including the designated phone number is sent to the mobile phone number of the user, The content information includes at least one content information.

In the authentication method using the reverse reply message according to the present invention, the reverse message is a message sent through a telephone network to which a mobile phone of the user is subscribed. In a communication company system providing the telephone network of the mobile phone, And the calling number of the message is matched with the calling number included in the message. If the calling number of the message matches the calling number of the mobile phone, a designated phone number corresponding to the called number included in the message Number of times.

In the authentication method using the reverse reply message according to the present invention, the fourth step may include: checking the reverse message received at the designated telephone number, reading the number system of the origination number of the reverse message, And verifying that the reverse message is a valid message that can be used for the authentication procedure when the calling number of the reverse message is the number system of the mobile phone number.

In the authentication method using a reverse reply message according to the present invention, the fourth step may include: checking a reverse message received at the designated phone number; mapping a mobile phone number and an authentication code corresponding to a calling number of the reverse message And a step of authenticating the reverse message as a valid message that can be used in the authentication procedure before the expiration time has elapsed.

The authentication method using a reverse reply message according to the present invention comprises the steps of: maintaining i (i > = 1) inserted codes set to be automatically inserted into a message body area of a message when a message is transmitted from a data network via a telephone network Analyzing the code included in the message body area of the reverse message received at the designated telephone number and checking whether the code includes at least one of the i inserted codes, And authenticating the reverse message as a valid message that can be used in the authentication procedure if the at least one insertion code is not included in the message body area of the message.

In the authentication method using the reverse reply message according to the present invention, j (j > = 1) exception codes, which are not used as authentication codes among codes that can be input in the message body area of the reverse message, Analyzing the code included in the message body area of the reverse message received at the designated telephone number to determine whether the message includes at least one exception code among the j exception codes; If the at least one exception code is not included in the message body area of the reverse message, confirming that the reverse message is effectively received.

In the authentication method using the reverse reply message according to the present invention, when at least one exception code is included in the message body area of the reverse message, the error of the message body area of the reverse message through the web / And outputting the information.

In the authentication method using the reverse reply message according to the present invention, the fifth step includes processing to output the generated error information through the Web / App screen of the user terminal when an error occurs in the origination authentication or the code authentication And further comprising:

In the authentication method using the reverse reply message according to the present invention, the error information is not transmitted to the user's mobile phone through the forward message in the event of the error.

The recording medium using the reverse reply message according to the present invention is characterized in that a program for executing the method of the first aspect is recorded.

The authentication system using the reverse reply message according to the present invention is a system capable of exchanging messages via a mobile phone and a telephone network of a user and interworking with a user terminal used by a user through a separate data network separated from the telephone network, A mobile phone number confirmation unit for confirming a mobile phone number of a user and an authentication code confirmation unit for checking a dynamically generated authentication code for providing a service, A synchronization information verifying unit for confirming synchronization information to be outputted synchronously, a mapping maintaining unit for mapping the mobile phone number of the user and the generated authentication code to maintain the mobile phone number for a valid time specified on a designated medium, and a mobile phone number of the user as a destination number And the designated telephone number specified as the calling number. A message sending unit for processing a message specified in a message body area and a forward message including the synchronization information to be sent via a designated telephone network and a separate data network separate from the telephone network, An information output unit for outputting the security code including the authentication code and the synchronization information through an information output unit and a mobile phone number of the user based on the reply writing of the forward message from the mobile phone of the user who has received the forward message, And a reverse message including the authentication code input by the user in the message body area of the security code output through the Web / App screen of the user terminal, including the designated telephone number as a called number, via the telephone network And a message receiving unit A message authentication unit for authenticating a validity of an uplink message and an originating authentication unit for authenticating the originating number of the uplink message when the uplink message is effectively received and authenticating whether the mobile phone matches a valid mobile phone number on the designated medium, A code authentication unit for verifying an authentication code included in the message body area of the message body and matching the authentication code mapped to the mobile phone number and an authentication result for providing the service based on the result of the authentication of origin and the code authentication And a result processing unit for providing a result.

According to the present invention, the messaging combination characteristic of the reverse reply message corresponding to the reverse message sent backward through the telephone network from the mobile phone of the user based on the reply writing of the forward message forwarded to the user's mobile phone via the at least one telephone network, An advantage of securely and inexpensively authenticating the validity of the service provided to the user through the separate data network separated from the telephone network by using the disposable authentication code input in the message body area of the reverse reply message corresponding to the reply of the forward message .

1 is a diagram illustrating a configuration of an authentication system using a reverse reply message according to an embodiment of the present invention.
2 is a diagram illustrating an information confirmation and mapping process for an authentication procedure based on a reverse reply message according to an embodiment of the present invention.
3 is a diagram illustrating a process of sending a forward message via a telephone network and a process of outputting an authentication code via a data network according to an embodiment of the present invention.
4 is a diagram illustrating a process of authenticating the validity of a service provided through a data network using a reverse reply message received via a telephone network according to an embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention.

In other words, the following embodiments correspond to the preferred embodiment of the preferred embodiment of the present invention. In the following embodiments, a specific configuration (or step) is omitted, or a specific configuration (or step) (Or steps), or an embodiment that incorporates functions implemented in more than one configuration (or step) into any one configuration (or step), a particular configuration (or step) It will be apparent that the present invention is not limited to the embodiments described below. Therefore, it should be clearly stated that various embodiments corresponding to subsets or combinations based on the following embodiments can be subdivided based on the filing date of the present invention.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

FIG. 1 is a diagram illustrating a configuration of an authentication system using a reverse reply message according to an embodiment of the present invention.

In more detail, FIG. 1 illustrates a method of generating a predetermined authentication code when requesting authentication for providing a service from a service server 175 that provides a service designated by a user terminal 170 used by a user, And the synchronization information to be output through the Web / App screen of the user terminal 170 is checked, and the synchronization information is output to the user's mobile phone 180 via the separate telephone network, The generated authentication code is mapped and stored, and a forward message including the designated telephone number designated as the calling number is sent to the user's cellular phone 180 via the telephone network, A security code including the authentication code is displayed on the web / application screen of the user terminal 170 via the data network, And outputs the authentication code to the user terminal 170. The user terminal 170 recognizes the web / application screen of the user terminal 170 based on the reply writing of the forward message from the user's mobile phone 180 receiving the forward message, And receiving the reverse message including the designated telephone number as the called number and verifying that the received reverse message is a reverse received message with the reply of the forward message sent to the user's cell phone 180 At the same time, the authentication code included in the message body area of the reverse message is authenticated as a code corresponding to the security code output through the web / application screen of the user terminal 170, As shown in Fig. 1, and is a schematic diagram showing the structure of a system that has a general knowledge in the technical field of the present invention If so, it will be possible to refer to and / or modify the FIG. 1 to derive various implementations of the configuration of the authentication system (e.g., some of the constructs may be omitted, or broken down or combined) The present invention is not limited to the above-described embodiments.

The system of the present invention includes a user's mobile phone 180 capable of exchanging messages via at least one telephone network including a mobile telephone network of a mobile communication company, a user terminal 170 used by a user to receive a designated service, A service server 175 for providing a service designated by the user terminal 170 through a separate data network separated from the service network 170 and a service server 175 for exchanging messages with the user's mobile phone 180 via the telephone network, And an operation server 100 interlocked with a user terminal 170 used by a user through a separate data network.

The user's cellular phone 180 is a mobile communication terminal capable of transmitting and receiving messages via one or more telephone networks including a cellular phone network of a mobile communication company, and may preferably include a feature phone or a smart phone subscribed to a mobile communication company.

According to an embodiment of the present invention, the user's mobile phone 180 can receive SMS (Short Message Service), EMS (Enhanced Messaging Service), MMS (Multimedia Message Service ), And / or may send at least one message of SMS, EMS, MMS through the message center. Hereinafter, the present invention will be described with reference to an embodiment in which the message transmitted / received to / from the user's cell phone 180 via the telephone network is 'SMS'. However, in the present invention, the embodiment of the message is not limited to 'SMS', and the user's mobile phone 180 can transmit / receive to / from the user's mobile phone 180 via one or more telephone networks including the mobile communication network of the mobile communication company It is evident that any message is included in the scope of the present invention.

The service server 175 is connected to a service provider 170 through a separate data network separate from the telephone network used for sending and receiving messages to and from the user's mobile phone 180, A web-based service is preferably provided using the user terminal 170 used by the user, or an application specified in the user terminal 170 used by the user is installed, and the application-based Can be provided. For example, the service server 175 may include an Internet banking server used by a financial institution including a bank to provide a web-based Internet banking service to a user terminal 170 used by a user. Alternatively, the service server 175 may include a home trading server used by a financial institution including a securities company to provide a home trading service through a home trading application installed in a user terminal 170 used by a user.

The user terminal 170 is a general term of a terminal used by a user to receive a designated service from the service server 175 via a separate data network separated from the telephone network and is preferably connected to a wired data network such as a wired Internet A wired terminal such as a personal computer or a notebook computer, and a wireless terminal such as a tablet PC or a notebook connected to a wireless data network including a wireless LAN.

According to an embodiment of the present invention, the user terminal 170 includes a browser for receiving a web-based service from the service server 175, or a browser for receiving a web-based service from the service server 175 You can install the app.

The operating server 100 is capable of exchanging messages with the user's mobile phone 180 via one or more telephone networks and is capable of exchanging messages through a separate data network separated from the telephone network, The present invention relates to a server-side configuration for performing an authentication procedure according to the present invention, wherein the operating server 100 defines a channel through which a message is exchanged with a user's mobile phone 180 via one or more telephone networks as an 'authentication channel' A channel interlocked with the user terminal 170 used by the user through the separate data network separated from the operating network server 100 or the channel connecting the service server 175 to the user terminal 170 ) Is defined as a 'service channel'. In the present invention, the authentication channel including the telephone network and the service channel including the data network are physically and / or logically separated so as not to interfere with each other.

According to an embodiment of the present invention, a message sent from the operation server 100 to a user's mobile phone 180 via an authentication channel including one or more telephone networks is defined as a 'forward message' 180 to a designated telephone number on the operation server 100 via an authentication channel including at least one telephone network is defined as a 'reverse message'.

Referring to FIG. 1, the operation server 100 includes an authentication request confirmation unit 105 for confirming an authentication request for providing a service of the service server 175, a mobile phone number confirmation unit An authentication code confirmation unit 115 for confirming an authentication code dynamically generated for providing the service, and a web / app display unit 115 included in the message body area of the forward message, And a mapping unit 130 for mapping the mobile phone number of the user and the generated authentication code to maintain the synchronization information for a designated valid time, A mobile phone number of the user is included as a called number and is used as a calling number of a forward message to be transmitted through the telephone network and a reverse message to be received in response to the forward message A specified number check unit 120 to identify the specified phone number be used as a new number may be further provided.

The service server 175 of the service providing organization requests authentication for providing the service while providing the web / application based service to the user terminal 170 through the service channel including the designated data network, 105 receives authentication request information requesting authentication of the service using a message transmitted / received through an authentication channel including one or more telephone networks separated from the data network by the service server 175.

According to an embodiment of the present invention, the authentication request information may be interworking information for interworking with the user terminal 170 through the service channel including the data network in the operation server 100, Service identification information for identifying the service to be provided to the user through the user terminal 170, user identification information for identifying the user, service information about the service to be provided to the user through the user terminal 170 in the service server 175 (For example, financial transaction information in the case of an Internet banking service, securities transaction information in the case of a home trading service, etc.), partial information of the service information, mobile phone number of the user identified by the service server 175, One authentication code, and synchronization information confirmed by the service server 175. [

On the other hand, upon confirming the authentication request for service provision of the service server 175 through the authentication request confirmation unit 105, the mobile phone number checking unit 110 may check the mobile phone number of the user through the authentication channel via one or more telephone networks 180), and at the same time, the user's mobile phone 180 uses the mobile phone number of the user to be used as the calling number of the reverse message to be transmitted in the backward direction through the authentication channel, based on the reply writing of the forward message Check.

According to the first mobile phone number confirmation embodiment of the present invention, the service server 175 receives the mobile phone number from the user through the user terminal 170 or registers the mobile phone number in the DB of the service server 175 (For example, included in the authentication request information provided to the operation server 100) to the operation server 100, and the mobile phone number check unit 110 checks the mobile phone number of the user The mobile phone number of the user can be received from the server 175.

According to the second mobile phone number identification method of the present invention, the mobile phone number identification unit 110 may be connected to the user terminal 170 used by the user via the data network (for example, (In cooperation with the user terminal 170 based on the interworking information included in the request information), and receive and receive the mobile phone number of the user from the user terminal 170. [

According to the third embodiment of the present invention, the service server 175 and the operation server 100 share user information, and the mobile phone number identification unit 110 identifies the mobile phone number (E.g., user identification information included in the authentication request information received from the service server 175), and confirm the mobile phone number of the user by referring to the designated DB on the operation server 100 side.

Meanwhile, at the time of confirming the authentication request for providing the service of the service server 175 through the authentication request confirmation unit 105, the authentication code confirmation unit 115 checks the authentication code dynamically generated for providing the service .

According to the first authentication code checking embodiment of the present invention, the service server 175 may generate a random number authentication code dynamically using a random number generation algorithm, or may include a dynamic seed including a time value or a random number value One or more seeds can be applied to the specified hash algorithm to dynamically generate disposable authorization codes or any combination from arbitrary numbers and / or characters and / or combinations of symbols stored in the database can be selected for dynamic use with disposable authentication codes And may provide the authentication code dynamically generated (or determined) as described above to the operation server 100 (for example, provided in the authentication request information provided to the operation server 100), and the authentication The code verification unit 115 may receive the authentication code from the service server 175. [

According to the second authentication code checking embodiment of the present invention, the authentication code checking unit 115 may dynamically generate a random number authentication code using a random number generating algorithm, or may generate a dynamic seed containing a time value or a random number One or more included seeds may be applied to a specified hash algorithm to dynamically generate a disposable authentication code or to select any combination from a DB that stores any number and / or a combination of letters and / or symbols to generate a disposable authentication code . ≪ / RTI >

Meanwhile, at the time of confirming the authentication request for service provision of the service server 175 through the authentication request confirmation unit 105, the designated number confirmation unit 120 may include the mobile phone number of the user as a called number, And identifies at least one designated telephone number designated for use as a destination number of a reverse message to be received in response to the forward message. The designated telephone number is a telephone number designated for use in the authentication procedure using the reverse reply message according to the present invention and includes either a representative telephone number or a telephone number selected from two or more assigned / registered telephone numbers .

On the other hand, upon confirmation of the authentication request for service provision of the service server 175 through the authentication request confirmation unit 105, the synchronization information confirmation unit 125 may include the mobile phone number of the user as a called number, Apps screen of the user terminal 170 used by the user through the service channel is included in the message body area of the forward message to be forwarded through the authentication channel including the at least one telephone network, Check synchronization information to be output through synchronization.

According to an embodiment of the present invention, the synchronization information confirmation unit 125 may include information included in the service information provided by the service server 175, at least a part of information included in the service information, Outputting the information included in the user information, at least a part of the information included in the user information, the information registered by the user, the message body area of the forward message, and the web / Or synchronization information including at least one of information dynamically generated or determined.

The mobile phone number of the user to be used as the destination number of the forward message forwarded to the user's mobile phone 180 is confirmed through the mobile phone number confirmation unit 110 and the service code is confirmed through the authentication code confirmation unit 115 The mapping maintaining unit 130 maps the mobile phone number of the user and the generated authentication code and stores the mobile phone number in a designated medium (e.g., a designated DB or a memory area).

According to an embodiment of the present invention, the mapping unit 130 stores and maintains the mobile phone number and the authentication code of the user on a designated medium for a specified valid time period. To this end, the mapping unit 130 stores The mobile phone number and the authentication code are mapped and stored, and at the same time, an effective time for maintaining the mapping relationship between the mobile phone number and the authentication code is counted, and the mobile phone number and the authentication code are mapped to the medium until the effective time elapses It is desirable to maintain the state. On the other hand, after the mobile phone number and the authentication code are mapped on the designated medium, the mapping maintaining unit 130 checks whether the effective time for maintaining the mapping relationship has elapsed, It is desirable to deactivate the code mapping relationship.

Referring to FIG. 1, the operation server 100 includes the mobile phone number of the user as a called number, the designated phone number as a calling number, a forward message including the contents of the message specified in the message body area, A message sending unit 135 for sending a message via a designated telephone network, a message sending unit 135 for sending the message via the designated telephone network, and a separate data network separate from the telephone network, And an information output unit 140 for outputting the security code and the synchronization information.

If the mobile phone number of the user and the generated authentication code are mapped on the medium designated by the mapping holding unit 130, the message sending unit 135 may include the mobile phone number of the user as a called number, A message number indicating that the message is a message sent for authentication related to the service information output on the web / application screen of the user terminal 170, And / or message content indicating that authentication is to be performed through reply of this message, and / or message content indicating that an authentication code output on the web / application screen of the user terminal 170 is to be returned and the like) Forward message.

According to the embodiment of the present invention, the message sending unit 135 transmits the authentication code output through the Web / App screen of the user terminal 170 to the message body area of the forward message, A forward message may be constructed which further includes guidance information for inputting and returning to the message body area of the reverse message.

Meanwhile, the message sending unit 135 may form a forward message including the synchronization information confirmed through the synchronization information confirmation unit 125 in the message body area of the forward message.

If the forwarding message including the mobile phone number of the user as a destination number and including the designated phone number as the calling number and including the message body, the message forwarding unit 135 transmits the forwarding destination (E.g., a telephone network used by the server 100 to send a message such as SMS), and the forward message is transmitted through the sending-side telephone network to the mobile phone number of the user And is received by the mobile phone 180 of the user through an authentication channel via a message center provided in the mobile communication network of the corresponding mobile communication company.

If the forwarding telephone network and the mobile telephone network of the mobile communication company corresponding to the mobile telephone number of the user are the same telephone network, the forward message is transmitted to the user's mobile phone via the authentication channel including the mobile telephone network corresponding to the mobile telephone number of the user 180). If the sending-side telephone network and the mobile telephone network of the mobile communication company corresponding to the mobile telephone number of the user are different kinds of telephone networks, the forward message is sent through the sending-side telephone network and the designated standard (for example, The standard for interworking), and then received by the mobile phone network of the mobile communication company corresponding to the mobile phone number of the user via the message center to the mobile phone network.

On the other hand, when the mobile phone number of the user and the generated authentication code are mapped on the designated medium, the information output unit 140 transmits the authentication code to the user terminal 170 And outputs the security code including the authentication code through the web /

According to the first security code embodiment of the present invention, it is preferable that the security code includes the authentication code confirmed by the authentication code checking unit 115, / App screen and then input to the message body area of the reverse message corresponding to the reply of the forward message sent to the user's mobile phone 180. [ For example, if the authentication code confirmed by the authentication code checking unit 115 is '12', the security code may include '12', '12' is a message body area of the reverse message Lt; / RTI >

According to the second security code embodiment of the present invention, the security code may include a code combination obtained by combining an authentication code and an arbitrary dummy code, which are identified through the authentication code checking unit 115, in a designated code structure, The dummy code includes any code that is output through the web / application screen of the user terminal 170 but is not input into the message body area of the reverse message. For example, if the authentication code confirmed by the authentication code checking unit 115 is '12' and the dummy code is '34', the security code may be '1234' concatenating '12' and '34' '12' is input to the message body region of the reverse message, and '34' may not be inputted to the message body region of the reverse message.

According to the embodiment of the present invention, the information output unit 140 may transmit the service information and the service information through a Web / App screen of the user terminal 170 through a service channel including a separate data network separated from the telephone network. Or to output the security code to the service information related screen being output through the web / application screen of the user terminal 170. [

According to an embodiment of the present invention, the information output unit 140 processes the security code output through the web / application screen of the user terminal 170, And output the synchronization information through a screen.

According to the embodiment of the present invention, the synchronization information confirmed by the synchronization information confirmation unit 125 is included in the message body area of the forward message sent to the user's mobile phone number through the message sending unit 135, When the synchronization information is output to the web / application screen of the base user terminal 170, the information output unit 140 outputs the synchronization information through the Web / App screen of the imaginary user terminal 170 , And instructs the mobile terminal 180 to confirm whether the synchronization information output through the web / application screen of the user terminal 170 is synchronized with the synchronization information included in the message body area of the forward message received by the user's mobile phone 180 And output the instruction information through the web / application screen of the user terminal 170. For example, if the synchronization information is 'xx', 'xx' is included in the message body region of the forward message and 'xx' is also output to the web / application screen of the user terminal 170, Unit 140 transmits instruction information for instructing the user to confirm whether 'xx' outputted on the web / application screen of the user terminal 170 is included in the message body area of the forward message received by the user's mobile phone 180, And output it through the web / application screen of the terminal 170. [ In this case, the user confirms whether the synchronization information included in the message body area of the forward message is synchronized with the synchronization information output through the web / application screen of the user terminal 170, The authentication code output through the Web / App screen can be input to the message body area of the reverse message corresponding to the reply of the forward message.

According to the embodiment of the present invention, the information output unit 140 inputs the authentication code output through the web / application screen of the user terminal 170 into the message body area of the reverse message corresponding to the reply of the forward message And output the information through the web / application screen of the user terminal 170. The web /

If the security code including the authentication code is output through the Web / App screen of the user terminal 170, the information output unit 140 responds to the reply of the forward message received by the user's mobile phone 180 And transmits the authentication code output from the web / application screen of the user terminal 170 to the user terminal 170 through the web / application screen of the user terminal 170 . For example, when the security code including the authentication code '12' is output through the web / application screen of the user terminal 170, the information output unit 140 outputs the security code including the authentication code ' The user terminal 170 may configure the guide information to guide the user to input a two-digit number being output on the screen into the message body area of the reverse message corresponding to the reply of the forward message received by the user's cellular phone 180, To be outputted through the web / application screen of the web browser.

Meanwhile, when a security code obtained by combining an authentication code and an arbitrary dummy code is output through the web / application screen of the user terminal 170, a security code output from the web / The user terminal 170 selects the authentication code except for the authentication code and inputs it to the message body area of the reverse message corresponding to the reply of the forward message received by the user's mobile phone 180, / App screen. For example, when a security code including '1234', which is a combination of an authentication code '12' and an arbitrary dummy code '34', is output through the Web / App screen of the user terminal 170, Corresponding to the reply of the forward message received by the user's cellular phone 180, the number corresponding to the first two digits of the numbers included in the security code outputting on the Web / App screen of the user terminal 170, The user terminal 170 may configure the guide information to guide the user through the web / app screen of the user terminal 170. In this case,

Meanwhile, according to another embodiment of the present invention, the guidance information may be included in a message body area of a forward message sent to the user's cellular phone 180. In this case, A forwarding message including the mobile phone number of the mobile communication terminal as a called number, the designated telephone number as a calling number, and further including the guidance information in a message body area, so as to be transmitted through an authentication channel via one or more telephone networks can do.

According to the embodiment of the present invention, since the forward message including the content of the message designated by the mobile number of the user is to be sent or sent, the information output unit 140 may transmit the relief information inducing the forward message to use safely And output the resultant through the web / application screen of the user terminal 170. [ Here, the security information may include content information indicating a user that a direction message for authenticating service provision by a designated service provider is sent to the mobile phone number of the user, a forward message including content of a message specified in the message body area, Content information indicating at least one (or a combination of two) of information indicating that the forwarding message including the designated phone number is sent to the mobile phone number of the user is transmitted to the mobile phone number of the user, . ≪ / RTI > This allows the user to safely use the forward message received by his / her cell phone 180.

Referring to FIG. 1, the operation server 100 includes the mobile phone number of the user as a calling number based on the reply writing of the forward message from the mobile phone 180 of the user who has received the forward message, Receives a reverse message including the authentication code input by the user in the message body area of the security code output through the web / application screen of the user terminal 170 including the telephone number as the destination number via the telephone network A message receiver 145 for confirming the received reverse-direction message via the telephone network, and a control unit 145 for checking whether the reverse message is a valid reverse message validly received from the user's mobile phone 180 via one or more telephone networks, And a message authentication unit 150 for performing a message authentication procedure.

The user who owns the mobile phone 180 corresponding to the mobile phone number confirms the contents of the message included in the message body area of the forward message received by the mobile phone 180 of the mobile phone 180, Check the security code displayed on the app screen.

If predetermined synchronization information is included in the message body area of the forward message received by the user's mobile phone 180 and predetermined synchronization information is output through the Web / App screen of the user terminal 170, It is possible to check whether the synchronization information included in the message body area and the synchronization information output through the web / app screen of the user terminal 170 are in a synchronized state. If the synchronization information is synchronized, Lt; RTI ID = 0.0 > a < / RTI >

According to the embodiment of the present invention, the message body area of the forward message received by the user's mobile phone 180 and the web / app screen of the user terminal 170 are transmitted to the user terminal 170 And a guidance information for guiding the user to return the authentication code output through the web / application screen of the web / application screen of the user terminal to the message body region of the reverse message corresponding to the reply of the forward message, (For example, an authentication code guided to enter through the guidance information among the security codes output through the web / application screen of the user terminal 170) output via the web / The user terminal 170 displays the message on the web / app screen of the user terminal 170 in the message body area of the reverse message based on the reply writing of the forward message received by the user's mobile phone 180 The authentication code corresponding to the guidance information among the security codes can be inputted and returned. When the mobile phone 180 is a smart phone, an authentication code corresponding to the guide information is input from the security code output through the Web / App screen of the user terminal 170 through reply writing as in the example of FIG. 1 If the mobile phone 180 is a feature phone, the 'reply' menu is selected on the screen displaying the forward message, and the 'security' code displayed on the web / It is possible to input and return the authentication code corresponding to the authentication code.

According to the method of the present invention, the reverse message is sent backward from the user's mobile phone 180 based on the reply writing of the forward message, automatically includes the mobile phone number of the user as the calling number, And the received authentication code is included in the message body area.

The present invention is directed to the reverse direction of a forward message sent to the user's cell phone 180 by including the designated phone number as a calling number and including the mobile phone number of the user as a called number, And a reverse message including the designated telephone number as a called number is defined as a reverse reply message of the message reply structure for the authentication procedure of the present invention.

According to an embodiment of the present invention, the reverse message is transmitted from the user's mobile phone 180 as a message sent backward from the user's mobile phone 180 based on the reply writing of the forward message, ) Is transmitted to the subscribed communication company system. The communication company system checks the device information of the mobile phone 180 that has sent the reverse message and the mobile phone number actually given to the mobile phone 180 by referring to the DB managing the mobile phone 180 subscribed to the mobile phone 180, Verifies that the cell phone 180 that has sent the reverse message is the cell phone 180 that is subscribed to the cell phone 180 and verifies the cell phone 180 that is the cell phone 180 that has been verified to be subscribed to the cell phone 180, It is determined whether or not a cell phone number corresponding to the calling number included in the uplink message is actually given (i.e., the cell phone number actually assigned to the cell phone 180 that sent the uplink message matches the calling number included in the uplink message) . If the cell phone number of the mobile phone 180 matches the calling number of the uplink message, the communication company system relays the uplink message to be transmitted to the designated phone number corresponding to the called number included in the uplink message . For example, if the hacker has a clone phone replicating the user's phone 180, there is a possibility that the forward message is also received by the clone phone in addition to the valid phone 180 of the user. The reverse message transmitted backward from the clone phone can be blocked by the communication company system.

The message receiver 145 includes the mobile phone number of the user as a calling number and the designated phone number as a called number based on the reply writing of the forward message from the user's mobile phone 180 receiving the forward message And receives a reverse message including the authentication code input by the user in the message body area from the security code output through the web / application screen of the user terminal 170 via the telephone network or a separate message server Quot; omitted ").

When the reverse message is received (or confirmed) via the message receiver 145, the message authenticator 150 receives the reverse message from the user's mobile phone 180 via one or more telephone networks And performs a message authentication procedure for authenticating the valid reverse message.

According to the first message authentication embodiment of the present invention, the message authentication unit 150 reads the number system of the origination number of the reverse message received (or confirmed) through the message receiver 145, Check if it is a numbering system. According to the embodiment of the present invention, since the reverse message received (or confirmed) through the message receiver 145 is a message received backward with the reply of the forward message sent to the user's mobile phone 180, The number must be the user's mobile number. However, a message (for example, SMS or the like) via the telephone network can not only be sent to the mobile phone 180, but can also be a wired telephone connected to a wired telephone network, an Internet telephone or a VoIP phone based on the Internet network, You can also send a message via the phone network through the designated gateway. The message authenticator 150 checks whether the number system of the origination number of the reverse message is a number system of the mobile phone number. If the origination number of the reverse message is identified as the number system of the mobile phone number, Authenticate with a valid message available for the authentication procedure, or otherwise automatically discard the reverse message. According to the method of the present invention, when a reverse message is transmitted from the mobile phone 180 to which the mobile phone 180 is subscribed, the communication company system to which the mobile phone 180 is subscribed, It is set so as to relay the reverse message to the receiver only when it is verified that the mobile phone number actually matched with the calling number of the reverse message is matched with the calling number of the reverse message so that if the calling number of the reverse message is a mobile phone number, It can be regarded as a real mobile phone 180. [ According to the embodiment of the present invention, if a communication company subscribed to a fixed line telephone, an internet telephone, or a VoIP phone other than the mobile communication company to which the mobile phone 180 is subscribed also implements the function of verifying the calling number of the reverse message, In addition to the mobile phone 180 that is subscribed to the mobile communication company, the message authentication unit 150 may be extended to a wired telephone, an internet telephone, a VoIP phone, etc. In this case, VoIP phone, and the present invention is not limited thereto.

According to the second message authentication embodiment of the present invention, the message authenticator 150 confirms the mobile phone number corresponding to the calling number of the reverse message received (or confirmed) through the message receiver 145, It is checked whether the valid time for maintaining the mapping state between the number and the authentication code has elapsed or has elapsed. According to the embodiment of the present invention, the message authentication unit 150 reads the effective time counted by mapping with the mobile phone number corresponding to the calling number of the uplink message, and determines whether the valid time is before or after the effective time elapses . If the validity time has not elapsed, the message authentication unit 150 can authenticate the uplink message with a valid message that can be used in the authentication procedure. Otherwise, the message authentication unit 150 can automatically discard the uplink message.

According to the third message authentication embodiment of the present invention, when the message authentication unit 150 sends a message via the telephone network in the data network, the message authentication unit 150 may transmit i (i 1) You can keep the embedded code. Preferably, the i inserted codes are transmitted to a server on a data network (for example, a message sending unit included in the operating server 100 of FIG. 1) other than a terminal on the telephone network (e.g., mobile phone 180 subscribed to the mobile telephone network, (For example, '[', 'Web', and the like) are set to be automatically inserted into the message body area of a message sent via the telephone network in the data network when a message is sent from the ' , 'web', 'WEB', 'web', ']'. Meanwhile, when the mobile phone number is included as a calling number through the message receiver 145 and a reverse message including a designated phone number as a called number is received (or confirmed), the message authentication unit 150 transmits, (Or verified) through the receiver 145 to determine whether it contains at least one embedded code of the i embedded codes. If the message authentication unit 150 does not include at least one embedded code in the message body area of the uplink message, the message authentication unit 150 determines that the uplink message is not transmitted via the telephone network on the data network, (E.g., mobile phone 180 subscribed to the mobile telephone network), and authenticate the uplink message as a valid message available for the authentication procedure. Otherwise, the uplink message may be automatically discarded.

Meanwhile, when at least one embedded code is included in the message body area of the reverse message, the message authentication unit 150 transmits the web / application of the user terminal 170 corresponding to the reverse message (E.g., a Web / App screen of the user terminal 170 matched with the mobile number, which is the originating number of the uplink message, or a web / application screen of the user terminal 170 matched with the designated phone number, / App screen) and output error information on the message body area of the reverse message through the Web / App screen of the user terminal 170. [ However, when a forward message including error information generated by including an insertion code specified in a message body area of the reverse message is sent to the user's mobile phone 180, a cost for sending a message via the telephone network is additionally generated, It is preferable that the error information for the message body area of the reverse message is not forwarded to the forward message because the error message is generated in the replica phone when the user has the replica phone replicating the mobile phone 180 .

According to the fourth message authentication embodiment of the present invention, the message authenticator 150 may receive the message body area of the reverse message through key input means (for example, a key button, a touch screen, etc.) It is possible to keep j (j ≥ 1) exception codes that can not be used as authentication codes among inputable codes. For example, when the authentication code is composed of only digits including '1' to '9' and '0', the message authenticating unit 150 transmits' J excepting codes including codes such as all the characters except for the numbers including '1' to '9' and '0' and symbols (including spaces such as 'space bar'). If the authentication code includes numbers and alphabets including '1' to '9' and '0', the message authenticator 150 may generate a code that can be input through key input means of the mobile phone 180 You can keep j exception codes that contain codes such as all letters and symbols except the middle and the English alphabet. If the authentication code includes a number including '1' to '9' and '0' and a Korean word, the message authenticator 150 may generate a code that can be input through a key input unit of the mobile phone 180 You can keep j exception codes that contain codes such as all digits and symbols except for Chinese digits and Hangul characters. Meanwhile, when the mobile phone number is included as a calling number through the message receiver 145 and a reverse message including a designated phone number as a called number is received (or confirmed), the message authentication unit 150 transmits, (Or verified) through the receiver 145 to determine whether it contains at least one exception code among the j exception codes. If the message authentication unit 150 does not include at least one exception code in the message body area of the uplink message, the message authentication unit 150 receives an authentication code in the message body area of the uplink message from the user ' It is possible to authenticate the reverse message as a valid message that can be used in the authentication procedure without regard to the error, and to consider the input error in the reverse message to be automatically discarded.

According to the embodiment of the present invention, when at least one exception code is included in the message body area of the uplink message, the message authentication unit 150 transmits the exception message to the web / application of the user terminal 170 corresponding to the uplink message (E.g., a Web / App screen of the user terminal 170 matched with the mobile number, which is the originating number of the uplink message, or a web / application screen of the user terminal 170 matched with the designated phone number, And displays error information on an input error occurring in the authentication code included in the message body area of the reverse message through the web / app screen of the user terminal 170. [ However, when a forward message including error information for an input error including an exception code specified in a message body area of the reverse message is sent to the user's mobile phone 180, a cost for sending a message via the telephone network is added And if the hacker has a clone phone in which the user's cellular phone 180 is cloned, it is possible to recognize the occurrence of an error in the clone phone, so that error information on the message body area of the reverse message is not sent in a forward message However, the present invention is not limited thereto.

According to the fifth message authentication embodiment of the present invention, the message authenticator 150 may be configured to at least partially combine at least two embodiments among the first through fourth message authentication embodiments to generate the reverse message Authenticating with a valid message available for the authentication procedure, and thus the present invention is not limited thereto.

Referring to FIG. 1, when the reverse message is validly received, the operation server 100 checks the origination number of the reverse message to match a mobile phone number mapped to a designated phone number corresponding to the called number of the reverse message A source authentication unit 155 for performing an origin authentication process for authenticating whether the mobile phone number matches an authentication code mapped to the mobile phone number and a verification code included in a message body area of the reverse message, And generates an authentication result for providing the service of the service server 175 based on a result of the origination authentication and the code authentication and provides the authentication result to the service server 175 or the user terminal 170 And a result processing unit (165).

When the validity of the uplink message is authenticated through the message authentication unit 150, the originating authentication unit 155 identifies the origination number of the uplink message, and validates the origination number to the designated medium The mobile terminal authenticates whether the mobile phone number matches the mobile phone number. According to the embodiment of the present invention, it is preferable that the designated medium effectively maintains the mapping relationship between the mobile phone number and the authentication code only for a designated valid time, and after the effective time has elapsed, The mobile phone number may be mapped with a completely different authentication code even if it is not confirmed or even confirmed.

According to the embodiment of the present invention, when the valid mobile phone number is not confirmed through the designated medium or if the originating number of the reverse message does not match the mobile phone number confirmed through the designated medium, (For example, a web / app screen of the user terminal 170 matched with the mobile phone number, which is the calling number of the reverse message, or a web / app screen of the user terminal 170 corresponding to the reverse message, To check the Web / App screen of the user terminal 170 matched with the designated telephone number as the called party number), and to output the error information for the outgoing authentication through the Web / App screen of the user terminal 170 have. However, when a forward message including the error information for the outgoing authentication is sent to the user's cell phone 180, a cost for sending a message via the telephone network is additionally generated, and a hacker replicates the cell phone 180 of the user It is preferable not to send the error information of the origination authentication in the forward message, but the present invention is not limited thereto.

When the validity of the uplink message is authenticated through the message authenticator 150, the code authenticator 160 checks the authentication code included in the message body area of the uplink message, And / or after verifying an authentication code mapped to a designated telephone number corresponding to the called number of the reverse message, the mobile communication terminal transmits the message of the reverse message And performs a code authentication procedure for authenticating whether an authentication code included in the body area matches an authentication code confirmed through the designated medium. According to the method of the present invention, it is preferable that the designated medium effectively maintains the mapping relationship between the mobile phone number and the authentication code only for a designated valid time, and after the effective time has elapsed, The mobile phone number may be mapped with the authentication code of another authentication procedure even if the mapped authentication code is not confirmed or even confirmed.

According to the embodiment of the present invention, when a valid authentication code is not confirmed through the designated medium or an authentication code included in the message body area of the reverse message does not match the authentication code confirmed through the designated medium, The code authentication unit 160 checks the Web / App screen of the user terminal 170 corresponding to the uplink message (for example, the web / app screen of the user terminal 170 matched with the mobile number, (Or a web / app screen of the user terminal 170 matched with a designated telephone number, which is a destination number of the uplink message), and transmits error information on the code authentication through the web / To be output. However, when a forward message including error information on the code authentication is sent to the user's cell phone 180, a cost for sending a message via the telephone network is additionally generated, and a hacker may copy the cell phone 180 of the user It is preferable not to send the error information of the code authentication to the forward message, but the present invention is not limited thereto.

The result processing unit 165 confirms the result of the outgoing authentication performed by the outgoing authentication unit 155 and checks the result of the code authentication performed by the code authentication unit 160, And outputs the generated authentication result information to the service server 175 and / or transmits the generated authentication result information to the user terminal 170. [ And displays it on the web / application screen of the user terminal 170. [

If the generated authentication result information is provided to the service server 175 or the user terminal 170, the result processing unit 165 may map the mobile phone number of the user and the authentication code (Or deactivates) the relationship so that a third party (or hacker) can block attempts to exploit the mapping relationship regardless of the remaining time of the validity time maintaining the mapping relationship.

2 is a diagram illustrating an information confirmation and mapping process for an authentication procedure based on a reverse reply message according to an embodiment of the present invention.

In more detail, FIG. 2 shows a case where a user's mobile phone number is confirmed at the time of authentication for providing a service, a dynamically generated authentication code is confirmed for providing the service, and the mobile phone number of the user is included as a called number, The user terminal 170 is used as a calling number of a forward message to be transmitted and at the same time a designated telephone number to be used as a called number of a reverse message to be received in response to the forward message is included and is included in a message body area of the forward message, The mobile phone number of the user and the generated authentication code are mapped and stored and maintained for a designated valid time in a designated medium. Those of ordinary skill in the art will be able to refer to and / It will be appreciated that various implementations of the process may be inferred (e.g., some of the steps may be omitted, or alternate implementations), but the present invention includes all of the above- And the technical features thereof are not limited only by the illustrated method.

Referring to FIG. 2, the user terminal 170 requests (200) a service designated by the service server 175 of the service providing organization via the data network through the designated web / application screen, and the service server 175 The user terminal 170 confirms the designated service request via the data network 205 and checks the service information required for providing the requested service through the data network 210. For example, when the service providing organization is a bank, the service server 175 is an Internet banking server, and the service request is a money transfer request, the service server 175 transmits a request to the user terminal 170, The user can confirm the transfer information for the account transfer (210). If the service information for providing the service is not confirmed, the service server 175 may perform a process of communicating with the user terminal 170 through the data network to check the service information for providing the service 210).

Meanwhile, when the service information for providing the service is confirmed, the service server 175 confirms whether to perform the authentication using the reverse reply message according to the present invention for providing the service using the confirmed service information (215) . If authentication using a reverse reply message is not required for providing the service, the service server 175 performs a procedure of providing a service using the service information to the user terminal 170 through the data network 220, and the user terminal 170 performs a procedure of receiving a service through the data network from the service server 175 through a web / application screen (step 225).

Meanwhile, when authentication using the reverse reply message is to be performed for providing the service, the service server 175 configures the authentication request information including the service information and provides the authentication request information to the designated operation server 100 (230) The operation server 100 receives the authentication request information from the service server 175, and determines whether authentication for the service provision is requested (235).

When confirming the authentication request for service provision of the service server 175, the operating server 100 is used as a destination number of a forward message to be transmitted to the user's cellular phone 180 through an authentication channel via one or more telephone networks (240) the mobile phone number of the user to be used as the calling number of the reverse message to be transmitted backward through the authentication channel based on the reply writing of the forward message in the user mobile phone (180).

According to the first mobile phone number confirmation embodiment of the present invention, the service server 175 receives the mobile phone number from the user through the user terminal 170 or registers it in the DB of the service server 175 And the operation server 100 may receive the mobile phone number of the user from the service server 175 in operation 240.

According to the second mobile phone number identification method of the present invention, the operation server 100 may operate in cooperation with the user terminal 170 used by the user through the data network (for example, the authentication request information received from the service server 175 The user terminal 170 may receive and receive a mobile phone number of the user from the user terminal 170 (operation 240).

According to the third embodiment of the present invention, the service server 175 and the operation server 100 share the user information, and the operation server 100 receives the identifier (E.g., user identification information included in the authentication request information received from the service server 175), the mobile phone number of the user can be confirmed 240 by referring to the designated DB on the operation server 100 side.

Meanwhile, at the time of confirming the authentication request for providing the service of the service server 175, the operating server 100 confirms the authentication code dynamically generated for providing the service (245).

According to the first authentication code checking embodiment of the present invention, the service server 175 may generate a random number authentication code dynamically using a random number generation algorithm, or may include a dynamic seed including a time value or a random number value One or more seeds can be applied to the specified hash algorithm to dynamically generate disposable authorization codes or any combination from arbitrary numbers and / or characters and / or combinations of symbols stored in the database can be selected for dynamic use with disposable authentication codes And may provide the authentication code dynamically generated (or determined) as described above to the operation server 100 (for example, provided in the authentication request information provided to the operation server 100), and the operation The server 100 may receive the authentication code from the service server 175 (245).

According to the second authentication code checking embodiment of the present invention, the operation server 100 may generate a random number authentication code dynamically using a random number generation algorithm, or may include a dynamic seed including a time value or a random number value One or more seeds can be applied to the specified hash algorithm to dynamically generate disposable authorization codes or any combination from arbitrary numbers and / or characters and / or combinations of symbols stored in the database can be selected for dynamic use with disposable authentication codes (245).

On the other hand, upon confirming the authentication request for providing the service of the service server 175, the operation server 100 may include the mobile phone number of the user as a destination number, ), And at the same time, the user's mobile phone (180) uses the designated telephone number designated for use as the called number of the reverse message to be forwarded in the reverse direction through the authentication channel based on the writing of the forward message (250).

On the other hand, upon confirming the authentication request for providing the service of the service server 175, the operation server 100 includes the mobile phone number of the user as the called number and includes the designated phone number as the calling number, (255) included in the message body area of the forward message to be forwarded through the authentication channel, and confirms the synchronization information to be output through the web / app screen of the user terminal 170 used by the user through the service channel, .

The mobile phone number of the user is confirmed and a dynamically generated authentication code for providing the service is confirmed and used as a calling number of a forward message to be forwarded to the mobile phone 180 of the user, When the designated telephone number to be used as the destination number of the reverse message to be received is identified, the operation server 100 maps the mobile phone number of the user and the generated authentication code to a designated medium (e.g., a specified DB or memory area) (260). ≪ / RTI >

After the mobile phone number and the authentication code of the user are mapped on the designated storage medium, the operation server 100 determines whether the validity period of maintaining the mapping relationship between the mobile phone number and the authentication code held in the designated medium has passed (265). If the expiration time for maintaining the mapping relationship between the mobile phone number and the authentication code has elapsed, the operation server 100 deactivates the mapping relationship between the mobile phone number and the authentication code held in the designated storage medium (270).

3 is a diagram illustrating a process of sending a forward message via a telephone network and a process of outputting an authentication code via a data network according to an embodiment of the present invention.

In more detail, FIG. 3 illustrates a case where after the mobile phone number and the authentication code of the user are mapped, the mobile phone number of the user is included as the called number, the designated phone number is included as the calling number, And transmits the security code including the authentication code through the web / application screen of the user terminal 170 via a separate data network separate from the telephone network, It is to be understood by those skilled in the art that reference may be made and / or modified to the accompanying drawings in order to provide a more detailed description of various implementations of the process Is omitted, or the sequence is changed), but the present invention can be applied to all of the above- And the technical features thereof are not limited only by the method shown in FIG.

Referring to FIG. 3, when the mobile phone number and the authentication code of the user are mapped to the designated media through the process of FIG. 2, the operation server 100 includes the mobile phone number of the user as the called number, And configures a forward message including the contents of the message specified in the message body area and the synchronization information, and processes the forward message to be forwarded via the designated telephone network (305).

The mobile phone 180 corresponding to the mobile phone number of the user receives the forward message 310 via the mobile telephone network to which the mobile phone 180 is subscribed 310 and transmits the designated message content included in the message body area of the forward message E.g., guide information, etc.) and synchronization information (315).

Meanwhile, the operation server 100 confirms the web / application screen of the user terminal 170 corresponding to the forward message (320), and transmits the forward message to the operating server 100 via the separate data network, (325) to output the security code including the authentication code through the web / application screen of the terminal 170 (step 325), and the security code output from the web / application screen of the user terminal 170 Guidance information for selecting the authentication code and inputting the authentication code into the message body area of the reverse message corresponding to the reply of the forward message and returning the forward message to the user, and forwarding the forward message received by the user's cellular phone 180 via the telephone network (Step 325) so as to output at least one of the security information for inducing the user terminal 170 and the synchronization information to be output through the web / app screen of the user terminal 170.

The user terminal 170 receives the security code including the authentication code through the data network and outputs the security code through the web / application screen (330), and transmits the security code including the guidance information, the security information, The above information may further be received through the data network and output through the web / app screen (330).

FIG. 4 is a diagram illustrating a process of authenticating the validity of a service provided through a data network using a reverse reply message received via a telephone network according to an embodiment of the present invention.

In more detail, in FIG. 4, a forward message via a telephone network is transmitted to a user's cell phone 180, a security code is output through a web / application screen of the user terminal 170, The mobile phone 180 includes the mobile phone number of the user as a calling number based on the reply writing of the forward message and includes the designated phone number as a called number and outputs it through the web / A message authentication procedure is performed to authenticate whether a reverse message including an authentication code entered in a message body area by a user is validly received via the telephone network, and if the reverse message is validly received, The called number is checked and the mobile telephone number mapped to the designated telephone number corresponding to the called number of the reverse message And a code authentication procedure for verifying the authentication code included in the message body area of the reverse message and authenticating whether the mobile phone number matches the authentication code mapped to the mobile phone number. Those skilled in the art will be able to refer to and / or modify Figure 4 to derive various implementations of the process (e.g., omitting some of the steps or changing the order) However, the present invention includes all of the above-mentioned embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Referring to FIG. 4, when a forward message via the telephone network is transmitted to the user's mobile phone 180 through the process of FIG. 3 and the security code is outputted through the web / application screen of the user terminal 170, After confirming the synchronization information synchronized with the message body region of the forward message and the web / application screen of the user terminal 170, the synchronization state is confirmed, and the message body region of the forward message and the web / The authentication code selected from the security codes output on the web / application screen of the user terminal 170 is selected in accordance with the guidance information output to at least one side of the application screen and is input to the message body area of the reply writing of the forward message, The mobile phone 180 receives the authentication code in the message body area of the reply message of the forward message (400).

If the authentication code selected from the security code output on the web / application screen of the user terminal 170 is input to the message body area of the reply write of the forward message, the mobile phone 180 transmits a reply message to the forward message The user terminal 170 includes the mobile phone number of the user as a calling number, the designated phone number as a called number, and the security code output through the Web / App screen of the user terminal 170, (405) the reverse message including the authentication code through the designated mobile telephone network (405), and the operation server (100) transmits the forwarding message including the designated telephone number as the called number based on the reply writing of the forward message, (410) the reverse message forwarded from the reverse link 180 via one or more telephone networks.

When the user's mobile phone 180 receives the reverse telephone number including the designated telephone number as the called number via the at least one telephone network, the operation server 100 includes the designated telephone number as the called number, A message authentication procedure for authenticating the validity of the received reverse message is performed (415).

According to the first message authentication embodiment of the present invention, the operation server 100 reads out the number system of the origination number of the received reverse message, and confirms whether the number system corresponds to the mobile phone number. According to the method of the present invention, since the reverse message is a message received in the reverse direction with the reply of the forward message sent to the user's mobile phone 180, the calling number of the reverse message must be the mobile number of the user. However, a message (for example, SMS or the like) via the telephone network can not only be sent to the mobile phone 180, but can also be a wired telephone connected to a wired telephone network, an Internet telephone or a VoIP phone based on the Internet network, You can also send a message via the phone network through the designated gateway. The operation server 100 checks whether the number system of the origination number of the reverse message is a number system of the mobile phone number, and if the origination number of the reverse message is confirmed as the number system of the mobile number, (415) with a valid message available for the procedure.

According to the second message authentication embodiment of the present invention, the operation server 100 confirms the mobile phone number corresponding to the origination number of the received reverse message, and determines an effective time for maintaining the mapping state of the mobile phone number and the authentication code It is confirmed whether or not it has passed or has elapsed. According to the embodiment of the present invention, the operation server 100 reads out the effective time counted by mapping with the mobile phone number corresponding to the calling number of the uplink message, and confirms whether the valid time is before or after the effective time has elapsed have. If the expiration time is before the expiration time, the operating server 100 may authenticate the reverse message with a valid message available for the authentication procedure (415).

According to the third message authentication embodiment of the present invention, when the operation server 100 sends a message via the telephone network in the data network, i (i > = 1) inserts that are automatically inserted into the message body area of the message You can keep your code. Preferably, when the i inserted codes are transmitted from a server on a data network, not a terminal on the telephone network (for example, the mobile phone 180 subscribed to the mobile telephone network) via the telephone network, Code that is set to be automatically inserted into the message body area of a message to be sent. For example, the code may include one or more codes of '[', 'Web', 'web', 'WEB', 'web', ' . Meanwhile, when a reverse message including the mobile number as a calling number and a designated telephone number as a called number is received, the operating server 100 analyzes the code included in the message body area of the received reverse message And at least one of the i inserted codes is included. If the mobile terminal does not include at least one embedded code in the message body area of the reverse message, the operation server 100 determines that the reverse message is not transmitted via the telephone network on the data network, The mobile phone 180 subscribed to the telephone network, or the like) to authenticate the reverse message as a valid message available for the authentication procedure (415).

According to the fourth message authentication embodiment of the present invention, the operation server 100 inputs (inputs) the message body area of the reverse message through the key input means (for example, a key button, a touch screen, etc.) It is possible to keep j (j ≥ 1) exception codes that are not used as authentication codes among the possible codes. For example, when the authentication code is composed of only digits including '1' to '9' and '0', the operating server 100 transmits '1' J " including codes such as all the characters except for the numbers including '0' to '9' and '0' (including spaces such as 'space bar') and the like. Meanwhile, when the authentication code includes numbers and alphabets including '1' to '9' and '0', the operating server 100 transmits a code that can be input through key input means of the mobile phone 180 You can keep j exception codes that contain codes such as all letters and symbols except numbers and alphabets. Meanwhile, when the authentication code includes digits including '1' to '9' and '0' and Hangul words, the operating server 100 transmits a code that can be inputted through key input means of the mobile phone 180 You can keep j exception codes containing codes such as all characters and symbols except numbers and Hangul characters. Meanwhile, when a reverse message including the mobile number as a calling number and a designated telephone number as a called number is received, the operating server 100 analyzes the code included in the message body area of the received reverse message Check whether it contains at least one exception code of j exception codes. If the at least one exception code is not included in the message body area of the uplink message, the operation server 100 determines that the input error (415), the authentication server may authenticate the reverse message as a valid message that can be used in the authentication procedure without considering the authentication code.

According to the fifth message authentication embodiment of the present invention, the operation server 100 authenticates the reverse message through at least part of at least two embodiments of the first to fourth message authentication embodiments (415) with a valid message available for the procedure, thereby not limiting the invention.

If the validity of the uplink message is not authenticated, the operation server 100 generates error information of the message authentication procedure 420, and transmits the error information to the user terminal 170 via the data / (425). The user terminal (170) receives the error information of the message authentication procedure through the data network and outputs the error information through the web / application screen (430). Meanwhile, the operation server 100 may discard the error message (435).

On the other hand, if the validity of the reverse message is not authenticated, the operation server 100 confirms the origination number of the reverse message, and authenticates whether the confirmed origination number matches the mobile number validated in the designated medium Authentication process is performed (440).

If the origination number of the reverse message does not match the mobile number identified through the designated medium, the operation server 100 generates the error information of the origination authentication procedure 420, The user terminal 170 processes the error information of the origination authentication procedure through the web / application screen of the user terminal 170 (step 425). The user terminal 170 receives the error information of the origination authentication procedure through the data network, (430). Meanwhile, the operation server 100 may discard the error message (435).

If the source number of the reverse message is matched with the mobile phone number confirmed through the designated medium, the operation server 100 checks the authentication code included in the message body area of the reverse message, And / or a mapped number mapped to a designated phone number corresponding to the called number of the uplink message, and then transmits the mapped message to the mobile station via the designated medium, (445) a code authentication procedure for authenticating whether an authentication code included in the message body area matches an authentication code identified through the designated medium.

If the authentication code included in the message body region of the reverse message does not match the authentication code mapped to the mobile phone number, the operation server 100 generates error information of the code authentication procedure 420, The user terminal 170 processes the error information of the code authentication procedure through the Web / App screen of the user terminal 170 (425), and the user terminal 170 transmits error information of the code authentication procedure through the data network And outputs it through the web / app screen (430). Meanwhile, the operation server 100 may discard the error message (435).

If the authentication code included in the message body area of the reverse message is matched with the authentication code mapped to the mobile phone number, the operation server 100 searches the service server 175 based on the results of the origination authentication and the code authentication, And provides the authentication result to the service server 175 or the user terminal 170 in step 450. The user terminal 170 receives the reverse response message for providing the service of the service server 175, Based on the authentication result based on the backward reply message, the service server 175 receives the authentication result based on the designated service through the web / application screen of the user terminal 170 via the data network Can be provided.

100: Operation server 105: Authentication request confirmation part
110: mobile phone number confirmation unit 115: authentication code verification unit
120: designation number confirmation unit 125: synchronization information confirmation unit
130: mapping maintaining unit 135: message sending unit
140: Information output unit 145: Message receiving unit
150: message authentication unit 155: origin authentication unit
160: Code authentication unit 165: Result processing unit
170: user terminal 175: service server
180: Mobile phone

Claims (20)

And is executed through an operation server that can interoperate with a service server providing a designated service to a user and exchange messages via a user's cellular phone and a telephone network and interworking with a user terminal used by a user through a separate data network separated from the telephone network In the method,
The method comprising: confirming a mobile phone number of a user at the time of authentication for providing a service of the service server, confirming a dynamically generated authentication code for providing the service, receiving the authentication code included in the message body area of the forward message, A first step of performing a procedure for confirming synchronization information to be outputted in synchronization through an app screen;
A second step of mapping the mobile phone number of the user and the generated authentication code and maintaining the mobile phone number for a specified valid time period on a designated medium;
A mobile phone number of the user is included as a called number, a specified designated telephone number is included as a calling number, a forward message including the contents of the message specified in the message body area and the synchronization information is sent via a designated telephone network, A third step of outputting the security code including the authentication code and the synchronization information through a separate data network separated through a Web / App screen of the user terminal;
Wherein the mobile terminal includes the mobile phone number of the user as a calling number based on the reply writing of the forward message from the mobile phone of the user who has received the forward message and includes the designated phone number as the called number, A fourth step of performing a message authentication procedure for authenticating whether a reverse message including an authentication code entered in a message body area by a user among the security codes output via the telephone network is validly received via the telephone network;
A source authentication procedure for authenticating a source number of the uplink message and authenticating whether the mobile communication terminal is matched with a mobile phone number validated in the designated medium when the uplink message is effectively received and an authentication code included in the message body area of the uplink message A fifth step of performing a code authentication procedure for authenticating whether the mobile phone number matches the authentication code mapped to the mobile phone number; And
And generating an authentication result for providing a service of the service server based on a result of the origination authentication and the code authentication, and providing the authentication result to the service server or the user terminal.
2. The method according to claim 1,
Further comprising the step of using the mobile phone number of the user as a called number and being used as a calling number of a forward message to be transmitted through the telephone network and a designated telephone number to be used as a called number of an uplink message to be received in response to the forward message And transmitting the reverse response message.
2. The method of claim 1,
Information included in service information of the service server,
At least a part of information included in the service information,
Information included in user information about the user,
At least a part of information included in the user information,
Information registered by the user,
Wherein the at least one message comprises at least one of a message body area of the forward message and information dynamically generated or determined for outputting in synchronization with a web / app screen of the user terminal.
The method according to claim 1,
Wherein the second step further includes counting an effective time for maintaining a mapping relationship between the mobile phone number and the authentication code,
Confirming whether the validity period of maintaining the mapping relationship has elapsed; And
And deactivating the mapping relationship between the mobile phone number and the authentication code when the valid time has elapsed.
The method of claim 1,
Includes an authentication code to be entered into a message body area of the reverse message, or
And a combination of the authentication code and an arbitrary dummy code not input in a message body area of the reverse message.
2. The method according to claim 1,
The mobile terminal transmits instruction information for instructing synchronization status of the synchronization information included in the message body area of the forward message sent to the mobile phone number of the user and the synchronization information output through the web / And outputting the generated response message through the application screen.
2. The method according to claim 1,
The guidance information for guiding the user to input the authentication code output through the web / application screen of the user terminal into the message body area of the reverse message corresponding to the reply of the forward message and to return the guide information to the user terminal via the web / And transmitting the reverse response message to the authentication server.
2. The method according to claim 1,
An authentication code output from the web / application screen of the user terminal is input to a message body area of a forward message sent to the mobile phone number of the user, and is returned to the message body area of the reverse message corresponding to the reply of the forward message The method of claim 1, further comprising the step of including guidance information on the reverse response message.
2. The method according to claim 1,
Further comprising the step of outputting, through the web / application screen of the user terminal, security information for guiding the user to safely use the forward message sent to the mobile phone number of the user. Way.
10. The method according to claim 9,
Content information for notifying a user that a direction message for authenticating service provision by a designated service provider is sent to the mobile phone number of the user,
Content information for informing the user that a forward message including the content of the message specified in the message body area is sent to the mobile phone number of the user,
And contents information indicating that a forward message including a designated telephone number as a calling number has been sent to the mobile telephone number of the user is included in the authentication information.
2. The method of claim 1,
A message sent from a telephone network to which a user's mobile phone is subscribed, verifies whether the cell phone number actually assigned to the cell phone that sent the message matches the calling number included in the message, When the mobile telephone number of the message is matched with the calling number of the message, the message is received through the communication company system at the designated telephone number corresponding to the called number included in the message.
The method as claimed in claim 1,
Confirming a reverse message received at the designated telephone number;
Reading the number system of the origination number of the reverse message and confirming whether the number system corresponds to the mobile phone number; And
And authenticating the reverse message as a valid message that can be used in the authentication procedure when the calling number of the reverse message is the number system of the mobile phone number.
The method as claimed in claim 1,
Confirming a reverse message received at the designated telephone number; And
Confirming whether a valid time for maintaining a mapping state of a mobile phone number and an authentication code corresponding to a calling number of the reverse message has elapsed; And
And authenticating the uplink message with a valid message that can be used in the authentication procedure if the valid time is before the expiration time elapses.
The method according to claim 1,
Further comprising the step of maintaining i (i > = 1) embedded codes set to be automatically inserted into the message body area of the message when the message is transmitted from the data network via the telephone network,
In the fourth step,
Analyzing a code included in the message body area of the reverse message received at the designated telephone number and confirming whether it includes at least one of the i inserted codes; And
And authenticating the reverse message as a valid message that can be used in the authentication procedure if the reverse message does not include at least one embedded code in the message body area of the reverse message.
The method according to claim 1,
(J > = 1) exception codes that are not used as authentication codes among codes that can be input in the message body area of the reverse message in the user's cellular phone,
In the fourth step,
Analyzing the code included in the message body area of the reverse message received at the designated telephone number and confirming whether at least one of the j exception codes is included; And
Further comprising: confirming that the reverse message is validly received if the at least one exception code is not included in the message body area of the reverse message.
16. The method of claim 15,
And outputting error information for a message body area of the uplink message through a Web / App screen of the user terminal when the at least one exception code is included in the message body area of the uplink message. The authentication method using the reverse reply message.
The method as claimed in claim 1,
And outputting the generated error information through the Web / App screen of the user terminal when an error occurs in the origination authentication or the code authentication.
18. The method of claim 17,
And does not send the error information to the user's cellular phone through the forward message upon occurrence of the error.
A computer-readable recording medium storing a program for executing the method of claim 1.
A system capable of exchanging messages via a mobile phone and a telephone network of a user and interworking with a user terminal used by a user through a separate data network separated from the telephone network,
A mobile phone number confirmation unit for confirming the mobile phone number of the user;
An authentication code confirmation unit for confirming a dynamically generated authentication code for service provision;
A synchronization information checking unit included in the message body area of the forward message and confirming synchronization information to be outputted in synchronization through the web / app screen of the user terminal;
A mapping unit configured to map the mobile phone number of the user and the generated authentication code and maintain the mapped mobile phone number for a designated valid time period;
And a message sending unit for sending a forward message including the contents of the message specified in the message body area and the synchronization information through a designated telephone network, including a mobile phone number of the user as a destination number, ;
An information output unit for outputting a security code including the authentication code and the synchronization information through a web / app screen of the user terminal via a separate data network separated from the telephone network;
Wherein the mobile terminal includes the mobile phone number of the user as a calling number based on the reply writing of the forward message from the mobile phone of the user who has received the forward message and includes the designated phone number as the called number, A message reception unit for receiving, via a telephone network, an uplink message including an authentication code input by a user in a message body area of the security code output through the telephone network;
A message authentication unit for authenticating the validity of the reverse message received via the telephone network;
An originating authentication unit for verifying the originating number of the reverse message when the reverse message is received and authenticating whether the mobile phone matches a valid mobile phone number stored in the designated medium;
A code authentication unit for verifying an authentication code included in the message body area of the reverse message and verifying whether the authentication code matches the authentication code mapped to the mobile phone number; And
And a result processor for generating and providing an authentication result for providing the service based on a result of the origination authentication and the code authentication.

Images