KR20190118253A - Simple authentication method and system - Google Patents

Abstract

According to a first aspect of the present invention for achieving the above object, a method for authenticating a user in a simple authentication system includes: a step of allowing an authentication server to receive simple authentication information including a user name and a mobile phone number from a service server; a step of allowing the authentication server to transmit the simple authentication information to a mobile communication company server and to require simple authentication for the user name and the mobile telephone number from the mobile communication company server; a step of allowing the authentication server to receive the additional information of the user from the mobile communication company server when the simple authentication is successful; and a step of allowing the authentication server to provide the additional information of the user to the service server in response to the authentication success. Convenience for authentication can be increased.

Description

Simple authentication method and system

The present invention relates to a user authentication technology, and more particularly, to a simple authentication method and system for improving convenience for a user at the time of authentication.

The authentication service using the mobile communication terminal is activated, so that users authenticate themselves using the mobile communication terminal in their own name when using the online service.

In the authentication process using a mobile communication terminal, the user inputs the user's mobile communication subscription information (date of birth, mobile phone number, carrier information, domestic and foreign information, etc.) on the authentication service screen displayed on his terminal (PC, smartphone, etc.). After receiving the subscriber authentication process to receive the authentication number, and proceeds to the process of entering the authentication number on the screen of the authentication service. The following patent document discloses a personal authentication processing method using a mobile terminal.

However, the authentication using the mobile communication terminal requires a lot of information from the user, thereby exposing the user's privacy and causing inconvenience in input. That is, conventional authentication using a mobile communication terminal requires a user to input a user's name, date of birth, gender, communication company information, and information on foreigners, causing inconvenience during authentication, and exposing a lot of user information. There is a problem.

Korean Patent Publication No. 10-2011-0046989 (2011.05.06 published)

The present invention has been proposed to solve such a problem, and an object thereof is to provide a simple user authentication method and system for improving convenience for authentication by reducing input data of a user input during authentication.

Another object of the present invention is to provide a simple user authentication method and system for providing additional information of a user who has successfully authenticated to a service server (for example, an affiliate server) to easily obtain additional information of a user from a service server. have.

Other objects and advantages of the present invention can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

According to a first aspect of the present invention for achieving the above object, a method for authenticating a user in a simple authentication system, comprising: receiving, by an authentication server, simple authentication information including a user name and a mobile phone number from a service server; Sending, by the authentication server, the simple authentication information to a mobile communication company server, requesting simple authentication for the user name and the mobile telephone number to the mobile communication company server; Receiving, by the authentication server, additional information of a user to the mobile communication company server when the simple authentication is successful; And providing, by the authentication server, additional information of the user to the service server in response to the authentication success.

The method may further include, after the providing, storing, by the service server, additional information of the user and using the additional information for an online service. The service server may utilize the information included in the simple authentication information and the information included in the additional information as membership registration information.

The providing may include: generating, by the authentication server, an authentication number and sending a message including the authentication number based on the mobile telephone number; Receiving, by the authentication server, an authentication number from a user's terminal, and additionally authenticating whether the received authentication number matches the generated authentication number; And if the authentication server succeeds in both the simple authentication and the additional authentication, providing additional information of the user to the service server.

In the sending, the authentication server may generate and send a message including the authentication number in the form of a message received by the sim toolkit application.

The simple authentication system according to the second aspect of the present invention for achieving the above object, receives the simple authentication information including the user name and the mobile phone number from the service server, and transmits the simple authentication information to the mobile communication company server to the user Authentication server for requesting simple authentication of; And managing a database for storing subscriber information, and checking whether or not the user information included in the simple authentication information received from the authentication server and the subscriber information matching the mobile phone number are stored in a database. And a mobile communication server for extracting additional information of the user mapped to the user name and the mobile phone number from the database when the simple authentication succeeds and transmitting the extracted additional information of the user to the authentication server.

The authentication server, if the simple authentication is successful, provides additional information of the user received from the mobile communication company server to the service server.

In addition, the authentication server generates an authentication number and sends a message including the authentication number based on the mobile phone number, and then adds whether the authentication number received from the user's terminal matches the generated authentication number. When the authentication is successful and both the simple authentication and the additional authentication are successful, the additional information of the user may be provided to the service server.

In accordance with a third aspect of the present invention, an apparatus for performing simple authentication of a user in association with a mobile communication company server includes: a communication circuit communicating with the mobile communication company server and a service server; And a processor coupled with the communication circuit. When the processor receives simple authentication information including a user name and a mobile phone number from the service server, the processor transmits the simple authentication information to a mobile communication company server to transfer the simple authentication for the user name and the mobile phone number. Request to a communication company server, and if the simple authentication is successful, and receives additional information of the user to the mobile communication company server, it can provide the additional information of the user to the service server in response to the authentication success.

The present invention has the advantage of reducing the user's input data input at the time of authentication to improve convenience for user authentication and to minimize the exposure of user information to the network.

In addition, the present invention provides an additional information (for example, age group, etc.) of a successful user to the service server (for example, affiliate server), thereby providing the convenience that the user does not have to enter the member information in the service server. have.

In addition, the present invention has an advantage of ensuring simplicity and security at the same time by performing additional authentication, depending on the service type.

The following drawings attached to this specification are illustrative of the preferred embodiments of the present invention, and together with the specific details for carrying out the invention serve to further understand the technical spirit of the present invention, the present invention described in such drawings It should not be construed as limited to matters.
1 is a view showing the configuration of a simple authentication system according to an embodiment of the present invention.
2 is a flowchart illustrating a method of performing simple authentication on a user terminal in a simple authentication system according to an embodiment of the present invention.
3 is a flowchart illustrating a method of performing simple authentication and user authentication on a user terminal in a simple authentication system according to another embodiment of the present invention.
4 is a diagram illustrating a configuration of an apparatus included in a simple authentication system according to an embodiment of the present invention.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, whereby those skilled in the art may easily implement the technical idea of the present invention. There will be. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view showing the configuration of a simple authentication system according to an embodiment of the present invention.

As shown in FIG. 1, the simple authentication system according to an embodiment of the present invention includes a user terminal 100, an authentication server 200, a mobile communication company server 300, and a service server 400.

Each of the user terminal 100, the service server 400, the mobile telecommunication company server 300, and the authentication server 200 communicate with each other through the network 500. The network 500 includes a mobile communication network and a broadband wired communication network. Since the network 500 corresponds to well-known conventional techniques in the present invention, a detailed description thereof will be omitted.

The user terminal 100 is a desktop computer, a tablet computer, a notebook computer, a mobile communication terminal, a smartphone, and the like, and receives an online service from the service server 400. In particular, the user terminal 100 may perform user authentication by inputting the minimized user information to the service server 400. In this case, the user may input simple authentication information including a name and a mobile phone number to attempt authentication with the service server 400. On the other hand, when the user terminal 100 requests the service server 400 for a service requiring identity authentication, the user terminal 100 may receive the corresponding service from the service server 400 after additionally performing the user authentication.

In particular, the user terminal 100 receives the authentication number in conjunction with the authentication server 200, when the user requests the service server 400 for the service that requires the user authentication. When the user terminal 100 is a mobile communication terminal, a short text message including the authentication number may be received. The user terminal 100 may include a universal subscriber identity module (USIM), in which case a Sim Tool Kit application interworking with the USIM may be installed. The user terminal 100 may receive an authentication number through a secure communication channel used when the user terminal 100 is opened, rather than a communication channel used when receiving a text message, by using the sim toolkit application. have.

The service server 400 is a server that provides an online service such as an electronic payment service, a video on demand (VOD) service, an email service, a mass text message, an online shopping service, and the like to the user. In particular, when the service server 400 receives a request for service from the user terminal 100, the service server 400 transmits simple authentication information including the user's name and a mobile phone number to the authentication server 200 to request the user's authentication. . In addition, if the authentication is successful, the service server 400 may receive additional information of the user from the authentication server 200 and include the additional information in the user's information to manage the service. The additional information may include a user's e-mail address, age group information, terminal information, opening date, age classification information, gender, domestic / foreigner information, M-id, and the like. The M-id means a unique value that can be used as an identification key for a mobile telecommunication company dedicated customer. In the age information, information such as under teens, teens, 20s, and 30s may be recorded. In addition, the age can be recorded information such as less than 14 years old, less than 19 years old, 19 years old or more.

The mobile telecommunication company server 300 includes a database storing subscriber information such as a mobile phone number of a user, an International Mobile Subscriber Identity (IMSI), a USIM number, a name, a date of birth, a gender, internal / alien information, and an e-mail address. In particular, when the mobile communication company server 300 receives the simple authentication information from the authentication server 200, the mobile communication company server 300 compares the simple authentication information with the subscriber information of the database and authenticates whether the simple authentication information is correct. If the authentication is successful, the mobile communication company server 300 extracts additional information of the user matching the simple authentication information from the subscriber information and provides the additional information to the authentication server 200.

The authentication server 200 performs simple authentication and user authentication of the user. In detail, when the authentication server 200 receives a simple authentication request of the user terminal from the service server 400, the authentication server 200 checks whether the simple authentication information input by the user is correct by interworking with the mobile communication company server 300.

In one embodiment, if the simple authentication is successful, the authentication server 200 may receive additional information of the user from the mobile communication company server 300 and provide the additional information of the user to the service server 400.

In another embodiment, even if the simple authentication succeeds, if the service requested by the user terminal 100 is a service required for identity authentication, the authentication server 200 generates and sends an authentication number and then receives it from the user terminal 100. By checking whether one authentication number matches, user authentication can be additionally performed. In this case, the authentication server 200 may send a short message including the authentication number to the user terminal 100 or send the authentication number to the SIM toolkit application through a secure channel. In addition, the authentication server 200 may provide additional information of the user to the service server 400 when both simple authentication and user authentication are successful.

2 is a flowchart illustrating a method of performing simple authentication on a user terminal in a simple authentication system according to an embodiment of the present invention.

Referring to FIG. 2, in order to receive a specific service from the service server 400, the user terminal 100 requests a subscription to the service server 400 (S201).

Then, the service server 400 requests the user information to the user terminal 100 to perform simple authentication (S203). In this case, the service server 400 transmits an input window for inputting simple authentication information to the user terminal 100 to induce the user name and the mobile phone number to be input through the simple authentication information.

Subsequently, the user terminal 100 receives a user name and a mobile phone number from the user based on the input window, and transmits simple authentication information including the user name and the mobile phone number to the service server 400 (S205). . In this case, the user terminal 100 may additionally include the carrier information in the simple authentication information. In other words, the user may input only the name and the mobile phone number as the authentication information without inputting all the date of birth, gender, and information of foreigners and the like in the authentication.

Next, the service server 400 transmits the simple authentication information to the authentication server 200, and requests the user's authentication (S207). In addition, the authentication server 200 after verifying whether the simple input information meets the set standard, and if the verification is successful by passing the simple authentication information to the mobile communication company server 300, the data contained in the simple authentication information The mobile station server 300 requests the authentication of whether the data is correct (S209).

Then, the mobile communication company server 300 compares the simple authentication information with the subscriber information being stored in itself, and authenticates whether the simple authentication information is correct (S211). That is, the mobile communication company server 300 checks the user name and the mobile phone number included in the simple authentication information, and authenticates whether the subscriber information including both the user name and the mobile phone number is stored in the database.

If the authentication fails, the mobile communication company server 300 transmits the authentication failure to the authentication server 200, and the authentication server 200 notifies the service server 400 of the simple authentication failure. Then, the service server 400 notifies the user terminal 100 of the authentication failure and stops the membership.

On the other hand, if the authentication is successful, the mobile communication company server 300 extracts additional information of the user matching the simple authentication information to the subscriber information (S213). That is, the mobile communication company server 300 extracts subscriber information including both the user name and the mobile phone number included in the simple authentication information, and from the extracted subscriber information, the user's e-mail address, gender, age group information, home address, and terminal. One or more additional information is extracted from information, opening date, age classification information, domestic / foreigner information, and M-id. In addition to the above-described data, various types of information may be recorded in the additional information according to an agreement between the authentication server 200 and the mobile communication company server 300.

Subsequently, the mobile telecommunication company server 300 transmits an authentication success notification message including the additional information of the user to the authentication server 200 (S215). In other words. When simple authentication succeeds, the mobile communication company server 300 transmits an authentication success notification message including additional information of the user to the authentication server 200.

Then, the authentication server 200 transmits the authentication success notification message to the service server 400 (S217), and thus the service server 400 recognizes that the user terminal 100 has succeeded in authentication. In addition, the service server 400 checks the additional information of the user included in the authentication success notification message (S219), and stores the user name, the mobile phone number, and the additional information included in the simple authentication information as the user information (S221). .

Thereafter, the service server 400 may further proceed with a procedure for setting an ID and a password of the user in association with the user terminal 100 to complete a member registration procedure.

Through the method as shown in FIG. 2, the user may proceed with authentication by inputting minimal information, and the service server 400 obtains additional information of the user from the authentication server 200 instead of the user terminal 100 and the user. It can be stored as information (ie member information).

3 is a flowchart illustrating a method of performing simple authentication and user authentication for a user terminal in a simple authentication system according to another embodiment of the present invention.

In the description with reference to FIG. 3, portions overlapping with FIG. 2 will be compressed and summarized.

Referring to FIG. 3, the user terminal 100 requests a subscription to the service server 400 (S301). Then, in order to perform simple authentication, the service server 400 requests user information to the user terminal 100 (S303), and the user terminal 100 services simple authentication information including a user name and a mobile phone number. The server 400 transmits the data to the server 400 (S305).

Next, the service server 400 transmits the simple authentication information to the authentication server 200 to request authentication of the user (S307), and the authentication server 200 transmits the simple authentication information to the mobile communication company server 300. By transmitting to, the authentication request whether the data contained in the simple authentication information is accurate to the mobile communication company server 300 (S309).

Then, the mobile communication company server 300 compares the simple authentication information and the subscriber information stored in the database, and authenticates whether the simple authentication information is correct (S311).

If the authentication fails, the mobile communication company server 300 transmits the authentication failure to the authentication server 200, and the authentication server 200 notifies the service server 400 of the simple authentication failure. Then, the service server 400 notifies the user terminal 100 of the authentication failure and stops the membership.

On the other hand, if the authentication is successful, the mobile communication company server 300 extracts subscriber information including both the user name and the mobile phone number included in the simple authentication information, and the user's email address, gender, and age group from the extracted subscriber information. At least one additional information is extracted from terminal information, opening date, age classification information, domestic / foreigner information, M-id, and the like (S313). Subsequently, the mobile communication company server 300 transmits an authentication success notification message including the additional information of the user to the authentication server 200 (S315).

Then, the authentication server 200 generates an authentication number upon successful authentication, and sends a message including the authentication number to the mobile communication terminal having the mobile telephone number (S317). When the mobile communication terminal having the mobile phone number is the user terminal 100, a message including the authentication number is sent to the user terminal 100. The authentication number may be sent in a short text message. Alternatively, the authentication number may be included in a message received from the SIM toolkit application, and the message may be sent to the SIM toolkit application through a secure channel. On the other hand, the authentication server 200 in conjunction with the service server 400, to check the type of service that the service server proceeds, the service type is required for identity authentication services (eg, membership service, electronic payment service, user information) Only in the case of a change service, etc.), authentication can be performed selectively.

The authentication server 200 sending the authentication number requests the user terminal 100 to input the authentication number (S319). Then, the user terminal 100 receives the authentication number from the user, and transmits the received authentication number to the authentication server 200 (S321). Next, the authentication server 200 receives the authentication number from the user terminal 100, and authenticates whether or not the received authentication number matches the authentication number sent in step S317, and performs the user's own authentication (S323). ).

Next, when the authentication of the user identity fails, the authentication server 200 transmits the authentication failure to the service server 400, the service server 400 transmits a non-member registration message to the user terminal 100, Suspend membership.

On the other hand, the authentication server 200 checks the additional information of the user received from the mobile carrier server 300, if the user's own authentication is successful, and the authentication success notification message containing the additional information of the user service server ( 400) (S325). Then, after recognizing that the user terminal 100 has successfully authenticated, the service server 400 checks additional information of the user included in the authentication success notification message (S327). Subsequently, the service server 400 stores the user name, mobile phone number, and additional information included in the simple authentication information as user information (S329). Thereafter, the service server 400 may further proceed with a procedure for setting an ID and a password of the user in association with the user terminal 100 to complete a member registration procedure.

Through the method as shown in FIG. 3, the authentication server 200 may selectively perform the user's own authentication as necessary. When both simple authentication and additional authentication succeed, the user additional information is provided to the service server 400. can do.

On the other hand, the description with reference to Figures 2 and 3 described as performing simple authentication at the time of membership registration, according to the authentication policy of the service server 400, a simple authentication may be applied in various ways. For example, the service server 400 may use the simple authentication of the present invention to proceed with the occupancy authentication of the user terminal 100. In addition, simple authentication according to the present invention may be used in the authentication of a social network service of a smartphone.

In addition, the service server 400 may use additional user information for the online service. For example, the service server 400 may utilize additional information of the user as big data and may also be used for customer marketing.

4 is a diagram illustrating a configuration of an apparatus included in a simple authentication system according to an embodiment of the present invention. The apparatus shown in FIG. 4 may be an authentication server 200. As shown in FIG. 4, the apparatus includes a processor 410, a memory 420, and communication circuitry 430.

The processor 410 may implement the functions, processes, and / or methods proposed in the present invention. For example, the processor 410 may be implemented to perform the operation of the authentication server 200 according to the above-described embodiment of the present invention. The processor 410 may perform an operation of the authentication server 200 disclosed in the embodiments of FIGS. 2 and 3. The processor 410 may include an application-specific integrated circuit (ASIC), another chipset, a logic circuit, a data processing device, and / or a converter for translating baseband signals and radio signals.

The memory 420 may include read-only memory (ROM), random access memory (RAM), flash memory, memory card, storage medium, and / or other storage device.

The communication circuit 430 performs communication through an external port or communication by an RF signal. The communication circuit 430 may communicate with the network 500, other mobile gateway devices, and communication devices. The communication circuit 430 may use any of a plurality of communication standards, protocols and techniques, including but not limited to other suitable communication protocols including, but not limited to, those not yet developed at the time of filing of the present application.

When the embodiment is implemented in software, the above-described method may be implemented as a module (process, function, etc.) for performing the above-described function. The module may be stored in the memory 420 and executed by the processor 410. The memory 420 may be inside or outside the processor 410 and may be connected to the processor 410 by various well-known means.

As described above, the simple authentication system according to the present invention improves convenience for user authentication by reducing user input data input at the time of authentication, and minimizes the exposure of user information to the network. In addition, the simple authentication system according to the present invention provides additional information (eg, age information) of a user who has successfully authenticated to the service server 400, so that the user does not have to input user information to the service server 400 one by one. To be convenient. In addition, the simple authentication system according to the present invention secures simplicity and security at the same time by selectively performing additional authentication according to the service type.

While this specification contains many features, such features should not be construed as limiting the scope of the invention or the claims. Also, the features described in the individual embodiments herein can be implemented in combination in a single embodiment. Conversely, various features described in a single embodiment herein can be implemented individually in various embodiments or in combination as appropriate.

Although the operations are described in a particular order in the drawings, they should not be understood as being performed in a particular order as shown, or in a sequence of successive orders, or all described actions being performed to obtain a desired result. . Multitasking and parallel processing may be advantageous in certain circumstances. In addition, it should be understood that the division of various system components in the above-described embodiments does not require such division in all embodiments. The program components and systems described above may generally be packaged in a single software product or multiple software products.

The method of the present invention as described above may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

100: user terminal
200: authentication server
300: mobile carrier server
400: service server
500: network
410: processor
420: memory
430: communication circuit

Claims (8)

A method of authenticating a user in a simple authentication system.
Receiving, by the authentication server, simple authentication information including a user name and a mobile phone number from the service server;
Sending, by the authentication server, the simple authentication information to a mobile communication company server, requesting simple authentication for the user name and the mobile telephone number to the mobile communication company server;
Receiving, by the authentication server, additional information of a user to the mobile communication company server when the simple authentication is successful; And
And providing, by the authentication server, additional information of the user to the service server in response to the authentication success. The method of claim 1,
After the providing step,
And storing, by the service server, the additional information of the user and using the additional information for the online service. The method of claim 2,
And the service server utilizes the information included in the simple authentication information and the information included in the additional information as membership registration information. The method of claim 1,
The providing step,
Generating, by the authentication server, an authentication number and sending a message including the authentication number based on the mobile telephone number;
Receiving, by the authentication server, an authentication number from a terminal of a user, and further authenticating whether the received authentication number matches the generated authentication number; And
And if the authentication server succeeds in both the simple authentication and the additional authentication, providing additional information of the user to the service server. The method of claim 4, wherein
The sending step,
The authentication server, a simple authentication method, characterized in that for generating a message containing the authentication number in the form of a message that is received from the SIM toolkit application. An authentication server for receiving simple authentication information including a user name and a mobile phone number from a service server and requesting simple authentication of a user by transmitting the simple authentication information to a mobile communication company server; And
Manage a database for storing subscriber information, and perform simple authentication by checking whether or not the user information included in the simple authentication information received from the authentication server and the subscriber information matching the mobile phone number are stored in the database. And a mobile telecommunication company server for extracting additional information of the user mapped to the user name and the mobile phone number from the database if the simple authentication succeeds and transmitting the extracted additional information of the user to the authentication server.
The authentication server,
If the simple authentication is successful, the simple authentication system, characterized in that for providing the additional information of the user received from the mobile communication server server to the service server. The method of claim 6,
The authentication server,
After generating the authentication number and sending the message containing the authentication number based on the mobile phone number, and further authenticates whether the authentication number received from the user's terminal and the generated authentication number match, and the simple authentication and If all of the additional authentication is successful, the simple authentication system, characterized in that for providing the additional information of the user to the service server. In the device for performing a simple authentication of the user in conjunction with the carrier server,
Communication circuitry for communicating with the mobile communication company server and a service server; And
A processor coupled with the communication circuit,
The processor,
When the simple authentication information including the user name and the mobile phone number is received from the service server, the simple authentication information is transmitted to the mobile communication company server, and the simple authentication for the user name and the mobile phone number is transmitted to the mobile communication company server. Request,
And receiving the additional information of the user to the mobile communication company server when the simple authentication is successful, and providing the additional information of the user to the service server in response to the successful authentication.

Images