KR20200071052A - Message service apparatus and authentication verification method the same - Google Patents

Abstract

The present invention relates to a message service device and an authentication verification method thereof. The authentication verification method of the message service device includes the steps of: transmitting a service authentication request signal including a channel ID of a communication channel through which a message transmission request signal is input, to an authentication device; and receiving, from the authentication device that has registered the white list by including the channel ID of the communication channel to which the registration request signal is received as an authentication channel ID, a service authentication request response signal including authentication result information according to a result of comparing the channel ID of the service authentication request signal with the channel ID for authentication of the white list.

Description

Message service device and its authentication confirmation method {MESSAGE SERVICE APPARATUS AND AUTHENTICATION VERIFICATION METHOD THE SAME}

The present invention relates to a message service device and a method for verifying authentication thereof, and more particularly, to a message service device for transmitting or blocking a message with reference to a white list when a message transmission request is requested, and a method for verifying the authentication.

As is well known, the message service is to provide services such as a short messaging service (SMS) and a multimedia messaging service (MMS) to a mobile communication terminal device, and the message reception blocking service includes a specific reply number. It is only sending or blocking messages.

These message services and message reception blocking services are still used in general mobile communication services between people, but recently, they have been spotlighted in machine-to-machine communication services.

The communication service between machine and machine is various such as Internet of Communication (IoT), Machine to Machine communication (M2M), Machine Type Communication (MTC), Smart Device communication, or Machine oriented communication. Is being called.

An example of such a machine-to-machine communication service is a technique in which a message-based terminal control device transmits a control message to a terminal device having an M2M function.

In this case, security is very important in the case of transmitting a control message to the terminal device, and usually only a message including a specific reply number is transmitted.

According to the prior art, when the transmission of a message is requested, the message service device requests service authentication from the authentication device. If the reply number included in the message is included in the pre-registered white list, the message is processed as authentication pass. The service device transmits the corresponding message to the terminal device only when the authentication is processed.

However, according to the prior art, the reply number could be exposed during communication between the message service device and the authentication device. In this case, there was a problem in that an unexpected message could be transmitted to the terminal device through the change of the reply number.

Republic of Korea Patent Publication No. 10-2013-0058392, date of publication June 04, 2013.

According to an embodiment of the present invention, a message service device and a method for verifying authentication are provided by using a combination of a channel ID of a communication channel through which a message transmission request signal is input to an outgoing number, an incoming number or a reply number, and then encrypting it for authentication. do.

The problem to be solved of the present invention is not limited to those mentioned above, and another problem to be solved that is not mentioned will be clearly understood by those having ordinary knowledge to which the present invention belongs from the following description.

The authentication verification method performed by the message service device according to an aspect of the present invention comprises the steps of transmitting a service authentication request signal including a channel ID of a communication channel through which a message transmission request signal is input, and a registration request signal. Authentication result information according to a result of comparing the channel ID of the service authentication request signal with the channel ID for authentication of the white list from the authentication device that registered the white list by including the channel ID of the incoming communication channel as the channel ID for authentication. And receiving a service authentication request response signal including.

Message service device according to another aspect of the present invention, an encryption unit for generating a service authentication request signal including the channel ID of the communication channel through which the message transmission request signal is input, and the generated service authentication request signal is transmitted to the authentication device The signal transmitting unit and the channel ID of the communication channel to which the registration request signal is received are registered as a channel ID for authentication. The channel ID of the service authentication request signal and the channel ID for authentication of the white list are registered from the authentication device. It includes a signal receiving unit for receiving a service authentication request response signal containing the authentication result information according to the comparison result.

According to an embodiment of the present invention, a channel ID of a communication channel through which a message transmission request signal is input is combined with a calling number, a called number, or a reply number, and then encrypted and used for authentication.

In this way, the channel ID used for communication for authentication is assigned by the SMS/MMS operator for a call coming into a specific line, so it is not possible to operate at the origin of the message, etc. There is an effect in that the possibility of an injustice message being transmitted to the terminal device through the modification is resolved.

1 is a configuration diagram of a mobile communication service system including a message service device according to an embodiment of the present invention.
2 is a block diagram of a message service device according to an embodiment of the present invention.
3 is a flowchart for explaining an authentication verification method and a message service method by a message service device according to an embodiment of the present invention.

Advantages and features of the present invention, and methods for achieving them will be clarified with reference to embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in various different forms, and only the embodiments allow the disclosure of the present invention to be complete, and common knowledge in the technical field to which the present invention pertains. It is provided to completely inform the person having the scope of the invention, and the present invention is only defined by the scope of the claims.

In describing embodiments of the present invention, when it is determined that a detailed description of known functions or configurations may unnecessarily obscure the subject matter of the present invention, the detailed description will be omitted. In addition, terms to be described later are terms defined in consideration of functions in an embodiment of the present invention, which may vary according to a user's or operator's intention or practice. Therefore, the definition should be made based on the contents throughout this specification.

1 is a configuration diagram of a mobile communication service system including a message service device according to an embodiment of the present invention.

As shown in this, the mobile communication service system according to the embodiment includes a message-based terminal control device 100, a mobile communication network 200, a terminal device 300, and the like, and the mobile communication network 200 includes a message service device 210 ), a home location register 220, an authentication device 230, and the like.

The message-based terminal control device 100 transmits a message transmission request signal requesting the terminal device 300 to transmit a message to the message service device 210 through a specific line provided by the mobile communication network 200, and the message service The device 210 receives a response signal to the message transmission request.

The mobile communication network 200 is a Long Term Evolution (LTE) communication system using an Evolved Packet Core (EPC) network, a Wideband Code Division Multiple Access (WCDMA) communication system, a Global System for Mobile (GSM) communication system, and a Code Division (CDMA). Various mobile communication systems such as a multiple access (TDMA) communication system and a time division multiple access (TDMA) communication system may be implemented alone or in combination.

The message service device 210 of the mobile communication network 200 encrypts the channel ID of the communication channel through which the message transmission request signal is received from the message-based terminal control device 100, and then encrypts the channel ID to the calling number, called party number, or reply number to authenticate the service. The request signal is transmitted to the authentication device 230, and when authentication is passed based on the authentication result included in the service authentication request response signal received from the authentication device 230, a corresponding message is transmitted to the terminal device 300. .

The home location register 220 returns routing information that can be used when transmitting a message to the terminal device 300 at the request of the message service device 210. When the message-based terminal control device 100 subscribes to the specific number reception blocking service, the home location register 220 includes and transmits the reception blocking service identifier when transmitting routing information to the message service device 210.

The authentication device 230 decodes the service authentication request signal received from the message service device 210, and then displays authentication result information according to the result of comparing the call number, the called number or the reply number and the channel ID with a pre-registered white list. The service authentication request response signal including the generated authentication result information is transmitted to the message service device 210.

The terminal device 300 receives the message requested by the message-based terminal control device 100 and transmitted from the message service device 210 of the mobile communication network 200. The terminal device 300 may be implemented as various terminal devices equipped with a modem chip for mobile communication.

2 is a block diagram of a message service device 210 according to an embodiment of the present invention.

As shown in this, the message service device 210 according to the embodiment includes a signal receiving unit 211, a signal transmitting unit 212, an encryption unit 213, and a message processing unit 214.

The signal receiving unit 211 receives a message transmission request signal requesting to transmit a message to the terminal device from the message-based terminal control device 100 through a specific line, and from the home location register 220 to the terminal device 300 After receiving the routing information that can be used when transmitting the message, and after the authentication device 230 decodes the service authentication request signal, the calling number, the called number, or the reply number and the channel ID are compared with the pre-registered white list. When a service authentication request response signal including authentication result information is transmitted, it is received.

The signal transmitting unit 212 transmits a signal requesting routing information that can be used when transmitting a message to the terminal device 300 to the home location register 220, and authenticates the service authentication request signal generated by the encryption unit 213. Device 230.

The encryption unit 213 generates a service authentication request signal by encrypting a channel ID of a communication channel through which a message transmission request signal is input to an outgoing number, a destination number, or a reply number included in the message transmission request signal, and then encrypting it.

The message processing unit 214 transmits a message to the terminal device 300 when the authentication is performed based on the authentication result information included in the service authentication request response signal received from the authentication device 230 by the signal receiving unit 211. .

3 is a flowchart for explaining a method for verifying authentication and a message service by the message service device 210 according to an embodiment of the present invention.

As shown in this, in the message service method according to the embodiment, the authentication device receiving the whitelist registration request signal from the message-based terminal control device authenticates the calling number for authentication, the called number for authentication, the reply number for authentication, and authentication And registering or updating the white list including the channel ID for the application (401, 403).

Then, the message service device further comprises the steps of transmitting a message transmission request response signal (405, 407) after receiving a message transmission request signal requesting to transmit a message to the terminal device from the message-based terminal control device.

Subsequently, the message service device receiving the message transmission request signal further includes a step 409 of requesting routing information from the home location register.

Further, when the home location register transmits the routing information request response signal including the reception blocking service identifier, the message service device further includes a step 411 of receiving.

Subsequently, when the routing information request response signal includes the reception blocking service identifier, the message service device determines the channel ID of the communication channel in which the message transmission request signal is input to the calling number, called number, or reply number included in the message transmission request signal. After the combination, further comprising the step of transmitting an encrypted service authentication request signal to the authentication device (413).

Then, when the authentication device decodes the service authentication request signal, and transmits the service authentication request response signal including authentication result information according to the result of comparing the calling number, the called number or the reply number and the channel ID with a pre-registered white list. The message service device further comprises the steps of receiving (415, 417, 419).

Subsequently, the message service device further includes the step of transmitting the message to the terminal device (421, 423, 425) only when the authentication passes based on the authentication result information included in the service authentication request response signal.

Hereinafter, an authentication verification method and a message service method by a message service device according to an embodiment of the present invention will be described in more detail with reference to FIGS. 1 to 3.

First, the message-based terminal control device 100 connects to the mobile communication network 200 and transmits a whitelist registration request signal to the authentication device 230. At this time, the message-based terminal control apparatus 100 may transmit the whitelist registration request signal after encrypting it using a symmetric key encryption algorithm or the like (401).

Then, the authentication device 403 registers or updates the calling number for authentication, the called number for authentication, and the reply number for authentication included in the white list registration request signal to the white list. At this time, the channel ID of the communication channel to which the whitelist registration request signal is input is used as an authentication channel ID and is registered or updated together in the whitelist. Here, if the message-based terminal control device 100 transmits after encrypting the whitelist registration request signal, the authentication device 403 also decrypts using a symmetric key encryption algorithm, etc., and then performs a whitelist registration or update procedure. It can be performed (403).

In this way, the message-based terminal control device 100 accesses the mobile communication network 200 while the white list is registered by the authentication device 230, and sends a message transmission request signal requesting the terminal device 300 to transmit a message. Is transmitted to the message service device 210, and the signal receiving unit 211 of the message service device 210 receives it (405).

Subsequently, the signal transmission unit 212 of the message service device 210 transmits a message transmission request response signal to the message-based terminal control device 100 (407), and the routing of the terminal device 300 to the home location register 220 A routing information request signal for requesting information is transmitted (409).

Then, the home location register 220 returns a routing information request response signal including routing information that can be used when transmitting a message to the terminal device 300 to the message service device 210, and the message service device 210 The signal receiving unit 211 receives it. At this time, the home location register 220 transmits the message-based terminal control device 100 by including the reception blocking service identifier in the routing information request response signal if the subscription to the reception blocking service for a specific number is received (411).

Then, the encryption unit 213 of the message service device 210 combines the channel ID of the communication channel in which the message transmission request signal is received from the calling number, the called number, or the reply number included in the message transmission request signal received in step 405. It is then encrypted to generate an encrypted service authentication request signal. At this time, the encryption unit 213 may generate a service authentication request signal encrypted by a method such as changing the order of numbers using a symmetric key encryption algorithm.

Subsequently, the signal transmission unit 212 of the message service device 210 transmits a service authentication request signal generated by the encryption unit 213 to the authentication device 230, and the authentication device 230 receives it (413) .

Next, the authentication device 230 decodes the service authentication request signal using a symmetric key encryption algorithm or the like (415), and records the calling number, called party number, reply number, and channel ID included in the decoded service authentication request signal. Performs authentication comparing with the registered white list (417), and transmits a service authentication request response signal including authentication result information according to the result to the message service device 210, and a signal receiving unit of the message service device 210 211 receives it (419).

Subsequently, the message processing unit 214 of the message service device 210 checks authentication result information included in the service authentication request response signal (421), and if the authentication has passed, transmits the message requested in step 405 to the terminal device ( 300).

On the other hand, if the message processing unit 214 of the message service device 210 does not pass authentication based on the authentication result information included in the service authentication request response signal, the message requested to be transmitted at 405 is sent to the terminal device 300. Block without transmitting (425).

As described so far, according to an embodiment of the present invention, a channel ID of a communication channel through which a message transmission request signal is input is combined with a calling number, a called number or a reply number, and then encrypted and used for authentication.

In this way, the channel ID used for communication for authentication is assigned by the SMS/MMS operator for a call coming into a specific line, so it is not possible to operate at the origin of the message, etc. The possibility of an injustice message being transmitted to the terminal device through a modification or the like is eliminated.

Combinations of each step of the flowchart attached to the present invention may be performed by computer program instructions. These computer program instructions may be mounted on a processor of a general purpose computer, special purpose computer, or other programmable data processing equipment, so that the instructions performed through the processor of a computer or other programmable data processing equipment are described in each step of the flowchart. It creates a means to do them. These computer program instructions can also be stored in computer readable or computer readable memory that can be oriented to a computer or other programmable data processing equipment to implement a function in a particular way, so that computer readable or computer readable memory It is also possible for the instructions stored in to produce an article of manufacture containing instructions means for performing the functions described in each step of the flowchart. Computer program instructions can also be mounted on a computer or other programmable data processing equipment, so a series of operational steps are performed on a computer or other programmable data processing equipment to create a process that is executed by the computer to generate a computer or other programmable data. It is also possible for instructions to perform processing equipment to provide steps for performing the functions described in each step of the flowchart.

Further, each step may represent a module, segment, or portion of code that includes one or more executable instructions for executing the specified logical function(s). It should also be noted that in some alternative embodiments it is also possible that the functions mentioned in the steps occur out of order. For example, the two steps shown in succession may in fact be performed substantially simultaneously, or the steps may sometimes be performed in reverse order depending on the corresponding function.

The above description is merely illustrative of the technical idea of the present invention, and those skilled in the art to which the present invention pertains may make various modifications and variations without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical spirit of the present invention, but to explain, and the scope of the technical spirit of the present invention is not limited by these embodiments. The scope of protection of the present invention should be interpreted by the claims below, and all technical thoughts within the equivalent range should be interpreted as being included in the scope of the present invention.

According to an embodiment of the present invention, the channel ID assigned by the SMS/MMS operator for a call coming in a specific line is encrypted after being combined with a calling number, a called number or a reply number, and then used for communication for authentication. It is impossible to operate in the back, and since it is encrypted, the security is improved as much as possible, thereby eliminating the possibility of an unexpected message being transmitted to the terminal device through the change of the reply number.

The present invention can be used in a machine-to-machine communication service, such as when a message-based terminal control device transmits a control message to a terminal device having an M2M function.

100: message-based terminal control device 200: mobile communication network
210: message service device 211: signal receiver
212: signal transmission unit 213: encryption unit
214: Message processing unit 220: Home location register
230: authentication device 300: terminal device

Claims (5)

As an authentication verification method performed by the message service device,
Transmitting a service authentication request signal including a channel ID of a communication channel through which a message transmission request signal is received, to an authentication device;
In the result of comparing the channel ID of the service authentication request signal with the channel ID for authentication of the white list, from the authentication device that has registered the white list by including the channel ID of the communication channel to which the registration request signal is received as an authentication channel ID. And receiving a service authentication request response signal including authentication result information according to the method.
How to verify authentication. According to claim 1,
Requesting routing information from a home location register after receiving the message transmission request signal;
Receiving a routing information request response signal including a reception blocking service identifier from the home location register;
And transmitting the service authentication request signal to the authentication device when the reception blocking service identifier is included in the routing information request response signal.
How to verify authentication. A computer-readable recording medium storing a computer program,
The computer program,
Claim 1 or 2 comprising instructions for causing the processor to perform the method according to claim 2
Computer-readable recording media. An encryption unit for generating a service authentication request signal including a channel ID of a communication channel through which a message transmission request signal is input;
A signal transmitter for transmitting the generated service authentication request signal to an authentication device;
In the result of comparing the channel ID of the service authentication request signal with the channel ID for authentication of the white list, from the authentication device that has registered the white list by including the channel ID of the communication channel to which the registration request signal is received as the authentication channel ID. It includes a signal receiving unit for receiving a service authentication request response signal containing the authentication result information according to
Message service device. The method of claim 4,
When the signal transmission request signal is received by the signal reception unit, the signal transmission unit transmits a routing information request signal requesting routing information to a home location register,
The signal receiving unit receives a routing information request response signal including a reception blocking service identifier from the home location register,
When the reception blocking service identifier is included in the routing information request response signal, the signal transmission unit transmits the service authentication request signal to the authentication device.
Message service device.

Images