KR20230020872A - System and Method of Storing and Confirming Digital Certificate - Google Patents

Abstract

The present invention relates to a digital certificate issuance and confirmation system and a digital certificate issuance and confirmation method using the same which increase security of digital certificate issuance and have an effect of allowing a user to conveniently use them through user authentication of a mobile communication terminal, face-to-face authentication of a digital certificate applicant, and authentication to confirm whether the mobile communication terminal is used by a face-to-face authenticated user.

Description

Digital certificate issuance and confirmation system and digital certificate issuance and confirmation method using the same {System and Method of Storing and Confirming Digital Certificate}

The present invention relates to a digital certificate issuance and confirmation system using a mobile communication terminal and a digital certificate issuance and confirmation method using the same, and more particularly, a digital certificate issued by a digital certificate management server is stored in a user's smartphone, and the user It relates to a system for utilizing a certificate stored in one's smartphone and a digital certificate issuance and confirmation method applied thereto.

Various certificates such as a resident registration card to identify the identity of each individual, a medical insurance card to receive medical insurance, a driver's license, a student ID, and a license are used. These certificates are usually issued in the form of printing on paper or plastic, and the purpose of proof has been achieved by a method in which the user possesses and presents these physical certificates.

However, when the certificate is presented and verified in a form printed on paper or plastic, counterfeiting or falsification is likely to occur, and it is difficult to ascertain whether falsification or falsification has occurred. In particular, it is almost impossible for the general public to visually check whether an elaborately forged ID card or license is forged. In particular, due to the development of digital devices, counterfeiting or falsification is becoming easier, but there is a problem in that there is no proper way to check it.

On the other hand, physical certificates printed on paper or plastic are vulnerable to loss or damage. In particular, in the case of losing a certificate in which personal information is described in detail, such as an identification card, it may be abused for financial crimes, etc., and there is a problem in that the procedure for reissuance is complicated when lost. Furthermore, when the physical certificate is damaged and reissued, there is a problem in that paper or plastic is wasted.

In addition, various certificates such as ID cards, student ID cards, employee ID cards, licenses, and graduation certificates are stored separately, making it difficult to manage.

In order to solve this problem, a digital certificate should be used, but there is a problem in that an efficient system and method for issuing and transmitting a digital certificate and utilizing it without risk of forgery or falsification have not been proposed.

An object of the present invention is to provide a system capable of issuing, storing, and verifying digital certificates with high security through a smartphone. In addition, an object of the present invention is to provide a method for issuing, storing, and verifying digital certificates with high security.

The present invention authenticates a smartphone user in order to provide a digital certificate issuance and confirmation system and method that can be issued and used conveniently with high security, and the administrator verifies and authenticates the user's real ID and face-to-face, , It consists of a process of authenticating whether or not the mobile communication terminal to be issued with the digital certificate corresponds to the mobile communication terminal that has been authenticated face-to-face with the user.

According to the present invention, there is an effect of allowing a digital certificate to be easily stored in a mobile communication terminal such as a smart phone and utilized while having high security.

1 shows a digital certificate issuing system according to a first embodiment of the present invention.
2 is a signal processing diagram illustrating a process of issuing a digital certificate according to the first embodiment of the present invention.
3 shows a digital certificate issuing system according to a second embodiment of the present invention.
4 is a signal processing diagram illustrating a process of issuing a digital certificate according to a second embodiment of the present invention.
5 shows a digital certificate issuing system according to a third embodiment of the present invention.
6 is a signal processing diagram illustrating a process of issuing a digital certificate according to a third embodiment of the present invention.
7 is a first embodiment showing a digital certificate verification system according to the present invention.
8 is a signal processing diagram illustrating a digital certificate verification method using the digital certificate verification system shown in FIG. 7;
9 is a second embodiment showing a digital certificate verification system according to the present invention.
10 is a signal processing diagram illustrating a digital certificate verification method using the digital certificate verification system shown in FIG. 9;

Hereinafter, a digital certificate issuance and confirmation system using a mobile communication terminal and a digital certificate issuance and confirmation method using the same according to the present invention will be described in detail with reference to the accompanying drawings.

The present invention can be applied to issuing and confirming all certificates issued in paper or plastic form as digital certificates, such as identification cards (resident registration card, student ID card, employee ID card, etc.), driver's license, medical insurance card, license, etc. For this purpose, an identification card will be described as an example.

In addition, in the present invention, a user's mobile communication terminal in which an identification card is stored may correspond to various devices having a wireless communication function, but hereinafter, a smartphone will be described as an example for convenience of explanation.

1 shows a digital certificate issuing system according to a first embodiment of the present invention.

An application capable of communicating with the ID management server 13 and the authentication server 14 is installed in the smartphone 11 shown in FIG. 1 . The application installed on the smartphone 11 communicates with the authentication server 14 to perform a user authentication procedure, and communicates with the ID management server 13 to receive and store the issued digital ID card. . In addition, the application installed on the smartphone 11 performs a function of scanning the QR code displayed on the processing terminal 12 and transmitting the scanned result value to the ID management server 13.

The processing terminal 12 is a terminal for confirming the user face-to-face offline and transmitting the confirmed information in order to issue a digital ID card. The processing terminal 12 may be a dedicated terminal for issuing a digital ID card, or may be a PC (Personal Computer) installed with a program capable of transmitting and receiving information by communicating with the ID management server 13.

The ID management server 13 receives a request for issuing a digital ID card from the smart phone 11, issues a digital ID card corresponding thereto, transmits the digital ID card to the smart phone 11, and performs a function of managing the digital ID card.

User information of the smartphone 11 is pre-registered in the authentication server 14, and user authentication is performed according to a user authentication request transmitted from the smartphone 11. The authentication server 14 may be a mobile communication service provider that has user information after user registration is completed upon opening of the smartphone 11, and user information and corresponding smartphone 11 information through a user confirmation procedure. It may be another organization or business that can perform user authentication because it stores .

2 is a signal processing diagram illustrating a process of issuing a digital certificate according to the first embodiment of the present invention.

The user drives the digital ID management application installed on his/her smartphone 11 (S201) and requests the ID management server 13 to issue an ID (S202). Here, the digital ID management application is downloaded and installed from the application server by the user using the smartphone 11, and is an application that requests, receives, and manages a digital ID card.

In order to transmit the digital ID to the smart phone 11, it is necessary to check whether the person requesting the issuance of the digital ID through the smart phone is the owner of the smart phone 11. That is, the identification card management server 13 performs authentication for the user of the smartphone 11 in order to check whether the user who requested the issuance of the identification card using the smartphone 11 is a registered user of the smartphone 11. Needs to be.

In order to classify and manage authentication results for the smart phone 11 user, the ID management server 13 allocates a request number to the received ID issuance request (S203).

The ID management server 13 requests user authentication for the smartphone 11 user to the authentication server 14 (S204). At this time, the user authentication request may include a smartphone number and a request number.

The authentication server 14 requests user authentication information from the smartphone 11 to authenticate the user of the smartphone 11 (S205).

User authentication in the authentication server 14 can be performed by comparing user authentication information already stored in the authentication server 14 with the number of the smartphone 11 to confirm whether matching user authentication information has been received. . Therefore, the authentication server 14 transmits existing information that can confirm whether a user is a user to the smartphone 11, for example, real ID information (driver's license number, date of issue, etc.), biometric information, credit card information, password, etc. can request When the user of the smartphone 11 inputs user authentication information, the smartphone 11 transmits the input user authentication information to the authentication server 14 (S206).

On the other hand, user authentication compares user authentication information such as biometric information and password stored in the smartphone during the application installation process with user authentication information input according to the user authentication information request, and checks whether the smartphone 11 matches. may be performed. In this case, user authentication is performed in the smartphone 11, and the authentication result value is transmitted to the authentication server 14 as user authentication information. (S206)

The authentication server 14 may perform user authentication by comparing user authentication information transmitted by the smart phone 11 with user authentication information stored in the authentication server (S207). Alternatively, user authentication may be performed by checking the authentication result value transmitted by the smart phone 11 (S207).

When user authentication is completed (S207), the authentication server 14 transmits the authentication result to the ID management server 13 (S208). At this time, the authentication result may be transmitted including the number of the smartphone 11 that performed the authentication and the request number.

According to the authentication result, the ID management server 13 stores the authentication result corresponding to the requested number (S209), and requests application information for digital ID issuance from the smartphone 11 to issue the digital ID (S209). S210).

When the user inputs application information necessary for issuing a digital ID card, such as the applicant's name, ID, and address, through the smartphone 11 and transmits it to the ID management server 13 (S211), the ID management server 13 receives One application information is stored (S212).

As described above, when the user completes the digital ID issuance application using the application installed on the smartphone 11, a face-to-face authentication process is performed. That is, the user presents the real ID to the administrator, and the administrator visually checks whether the photo on the real ID matches the appearance of the user of the smartphone 11 requesting issuance of the digital ID.

When the administrator authenticates the user of the smartphone 11 through the face-to-face authentication process, the administrator accesses the ID management server 13 through the processing terminal 12 to view the smartphone user's application information, and the application information is the user's Check whether the information matches the information on the physical identification card.

When the confirmation is completed, the manager inputs issuance information including the confirmed manager ID to the processing terminal 12 (S213), and the processing terminal 12 transmits the issuance information to the ID card management server 13 (S213). S214). Here, transmission of the issuance information may be performed by various methods including an electronic signature method.

When the processing terminal 12 transmits the issuance information to the ID card management server 13, the ID card management server 13 approves issuance of the digital ID card to the user of the smart phone 11 (S215). When digital ID issuance approval (S215) is completed, a scannable code for issuance target smartphone authentication is generated and stored to correspond to the smartphone 11, and transmitted to the processing terminal 12 (S216). Here, the scannable code means a code that can read information through scanning in the smart phone 11, such as a QR code or barcode, and is preferably a QR code.

The processing terminal 12 receiving the QR code displays the received QR code on the display of the processing terminal 12 (S217).

The user of the smartphone 11 scans the QR code displayed on the display of the processing terminal 12 using the smartphone 11 (S218), and transmits the scanned result to the ID management server 13 (S218). S219). The ID management server 13 compares the stored QR code and the received scan result value (S220), and if they match, transmits the digital ID card to the smartphone (S221), and the user sends the digital ID card to his or her smartphone 11. is stored (S222).

3 shows a digital certificate issuing system according to a second embodiment of the present invention.

An application capable of communicating with the ID management server 33 and the authentication server 34 is installed in the smartphone 31 shown in FIG. 3 . The application installed in the smartphone 31 communicates with the authentication server 34 to perform a user authentication procedure, and communicates with the ID management server 33 to receive and store the issued digital ID card. . In addition, the application installed in the smartphone 31 performs a function of receiving a QR code from the authentication server 34 and expressing it.

The processing terminal 32 is a terminal for confirming the user face-to-face offline and transmitting the confirmed information in order to issue a digital ID card. The processing terminal 32 may be a dedicated terminal for issuing a digital ID card, or may be a PC (Personal Computer) installed with a program capable of transmitting and receiving information by communicating with the ID management server 13 .

A scanner 36 for scanning the QR code displayed on the smartphone 31 is connected to the processing terminal 32 . The QR code scanned through the scanner 36 is input to the processing terminal 32, and the identification card management server 33 performs authentication of the issuing target smartphone using the input QR code scan result.

The ID management server 33 receives a request for issuing a digital ID card from the smartphone 31, issues a digital ID card corresponding thereto, transmits the digital ID card to the smart phone 31, and performs a function of managing the digital ID card.

User information of the smartphone 41 is pre-registered in the authentication server 44, and user authentication is performed according to a user authentication request transmitted from the smartphone 41. The authentication server 44 may be a mobile communication service provider that has user information after user registration is completed upon opening of the smartphone 41, and user information and corresponding smartphone 11 information through a user confirmation procedure. It may be another organization or business that can perform user authentication because it stores .

4 is a signal processing diagram illustrating a process of issuing a digital certificate according to a second embodiment of the present invention.

The user drives the digital ID management application installed on his/her smartphone 31 (S401) and requests the ID management server 33 to issue an ID (S402). Here, the digital ID management application is downloaded and installed from the application server by the user using the smartphone 31, and is an application that requests, receives, and manages a digital ID card.

In order to transmit the digital ID to the smart phone 31, it is necessary to check whether the person requesting the issuance of the digital ID through the smart phone is the owner of the smart phone 31. Therefore, the identification card management server 33 performs user authentication for the user of the smartphone 31 in order to check whether the user requesting ID issuance using the smartphone 31 is a registered user of the smartphone 31. need to do

In order to classify and manage the user authentication result for the smart phone 31 user, the ID management server 33 allocates a request number to the received ID card issuance request (S403).

The ID management server 33 requests user authentication for the smartphone 31 user to the authentication server 34 (S404). At this time, the user authentication request may include a smartphone number and a request number.

The authentication server 34 requests user authentication information from the smartphone 31 to authenticate the user of the smartphone 31 (S405).

User authentication in the authentication server 34 can be performed by comparing user authentication information already stored in the authentication server 34 with the number of the smartphone 31 to determine whether matching user authentication information has been received. there is. Therefore, the authentication server 34 requests the smartphone 31 for information that can confirm whether or not the user is a user, for example, real ID information (driver's license number, date of issue, etc.), biometric information, credit card information, password, etc. can When the user of the smartphone 31 inputs user authentication information, the smartphone 31 transmits the input user authentication information to the authentication server 34 (S406).

On the other hand, user authentication compares user authentication information such as biometric information and password stored in the smartphone during the application installation process with user authentication information input according to the user authentication information request, and checks whether the smartphone 31 matches. may be performed. In this case, user authentication is performed in the smartphone 31, and the authentication result value is transmitted to the authentication server 34 as user authentication information. (S406)

The authentication server 34 may perform user authentication by comparing user authentication information transmitted by the smartphone 31 with user authentication information stored in the authentication server (S407). Alternatively, user authentication may be performed by checking the authentication result value transmitted by the smartphone 31 (S407).

When user authentication is completed (S407), the authentication server 34 transmits the authentication result to the ID management server 33 (S408). At this time, the authentication result may be transmitted including the number of the smartphone 31 that performed the authentication and the request number.

According to the authentication result, the ID management server 33 stores the authentication result corresponding to the requested number (S409), and requests the application information for digital ID issuance to the smartphone 31 to issue the digital ID (S409). S410).

When the user enters the application information necessary for issuing a digital ID card, such as the applicant's name, ID, address, etc. through the smartphone 31, and transmits it to the ID management server 33 (S411), the ID management server 33 receives One application information is stored (S412).

As described above, when the user completes the digital ID issuance application using the application installed on the smartphone 31, a face-to-face authentication process is performed. That is, the user presents the real ID to the manager, and the manager visually checks whether the photo on the real ID matches the appearance of the user of the smart phone 31 requesting issuance of the digital ID.

When the administrator authenticates the user of the smartphone 31 through the face-to-face authentication process, the administrator accesses the ID management server 33 through the processing terminal 32 to view the smartphone user's application information, and the application information is the user's Check whether the information matches the information on the physical identification card.

When the confirmation is completed, the manager inputs issuance information including the confirmed manager ID to the processing terminal 32 (S413), and the processing terminal 12 transmits the issuance information to the ID management server 33 (S413). S414). Here, transmission of the issuance information may be performed by various methods including an electronic signature method.

When the processing terminal 12 transmits issuance approval information to the ID card management server 33, the ID card management server 33 approves issuance of the digital ID card for the user of the smart phone 31 (S415). When digital ID issuance approval (S415) is completed, a scannable code for issuing target smartphone authentication is generated and stored to correspond to the smartphone 31, and transmitted to the smartphone 31 (S416). Here, the scannable code means a code that can read information through scanning in the smart phone 31, such as a QR code or barcode, and is preferably a QR code.

The smartphone 31 receiving the QR code displays the received QR code on the screen of the smartphone 31 (S417).

The manager uses the scanner 36 connected to the processing terminal 32 to scan the QR code displayed on the screen of the smartphone 31 (S418), and the processing terminal 32 sends the scanned result to the ID management server 13 ) (S419). The ID management server 43 compares the stored QR code and the received scan result value (S420), and if they match, transmits the digital ID card to the smartphone (S421), and the user sends the digital ID card to his or her smartphone 11. is stored (S422).

5 shows a digital certificate issuing system according to a third embodiment of the present invention.

An application capable of communicating with the identification card management server 53, the authentication server 54, and the issuance code transmission server 57 is installed in the smart phone 51 shown in FIG. The application installed on the smartphone 51 communicates with the authentication server 54 to perform a user authentication procedure, and communicates with the ID management server 53 to receive and store the issued digital ID card. . In addition, the application installed in the smart phone 51 performs a function of transmitting the processing terminal ID obtained from the processing terminal ID storage unit 56 to the issuance code transmission server 57 .

The processing terminals 52 are terminals for confirming the user face-to-face offline and transmitting the confirmed information in order to issue a digital ID card. Each of the processing terminals 52a, 52b... is given a processing terminal ID.

The processing terminal 52a may be a dedicated terminal for issuing a digital ID card, or may be a PC (Personal Computer) installed with a program capable of transmitting and receiving information by communicating with the ID management server 53.

The ID management server 53 receives a request for issuing a digital ID card from the smart phone 51, issues a digital ID card corresponding thereto, transmits the digital ID card to the smart phone 51, and performs a function of managing the digital ID card.

User information of the smart phone 51 is pre-registered in the authentication server 54, and user authentication is performed according to a user authentication request transmitted from the smart phone 51. The authentication server 54 may be a mobile communication service provider having user information after user registration is completed upon opening of the smartphone 51, and user information and corresponding smartphone 51 information through a user confirmation procedure. It may be another organization or business that can perform user authentication because it stores .

The processing terminal ID storage unit 56 is a device that stores a processing terminal ID corresponding to a specific processing terminal and provides the processing terminal ID to the smart phone 51 . The processing terminal ID storage unit 56 is a device that can store information such as, for example, a QR code, barcode, NFC, etc., stores the processing terminal ID and provides the processing terminal ID to a smartphone in various ways. can It is preferable that the ID storage unit 56 at the end of processing is implemented in an NFC method to prevent copying.

The issuance code transfer server 57 receives the processing terminal ID and the issuance code from the smart phone 51, and determines the processing terminal 52a to transmit the issuance code. At this time, the processing terminal to transmit the issuance code may be determined using the processing terminal ID.

6 is a signal processing diagram illustrating a process of issuing a digital certificate according to a third embodiment of the present invention.

The user drives the digital ID management application installed on his/her smartphone 51 (S601) and requests the ID management server 53 to issue an ID (S602). Here, the digital ID management application is downloaded and installed from the application server by the user using the smart phone 51, and is an application that requests, receives, and manages a digital ID card.

In order to transmit the digital ID to the smart phone 51, it is necessary to check whether the person requesting digital ID issuance through the smart phone is the owner of the smart phone 51. Therefore, the ID management server 53 performs authentication for the user of the smart phone 51 in order to check whether the user requesting ID issuance using the smart phone 51 is a registered user of the smart phone 51. Needs to be.

In order to classify and manage the user authentication result for the smart phone 51 user, the ID management server 53 allocates a request number to the received ID issuance request (S603).

The ID management server 53 requests user authentication for the smart phone 51 user to the authentication server 54 (S604). At this time, the user authentication request may include a smartphone number and a request number.

The authentication server 54 requests user authentication information from the smartphone 51 to authenticate the user of the smartphone 51 (S605).

User authentication in the authentication server 54 can be performed by comparing user authentication information already stored in the authentication server 54 with the number of the smartphone 51 to determine whether matching user authentication information has been received. there is. Accordingly, the authentication server 54 may request biometric information, credit card information, password, etc. for confirming whether the user is a user or not from the smartphone 51 . When the user of the smartphone 51 inputs user authentication information, the smartphone 51 transmits the input user authentication information to the authentication server 54 (S606).

On the other hand, user authentication compares user authentication information such as biometric information and password stored in the smartphone during the application installation process with user authentication information input according to the user authentication information request, and checks whether the smartphone 51 matches. may be performed. In this case, user authentication is performed on the smartphone 51, and the authentication result value is transmitted to the authentication server 54 as user authentication information. (S606)

The authentication server 54 may perform user authentication by comparing user authentication information transmitted by the smart phone 51 with user authentication information stored in the authentication server (S607). Alternatively, user authentication may be performed by checking the authentication result value transmitted by the smartphone 51 (S607).

When user authentication is completed, the authentication server 54 transmits the authentication result to the ID management server 53 (S608). At this time, the authentication result may be transmitted including the number of the smart phone 51 that performed the authentication and the request number.

According to the authentication result, the ID management server 53 stores the authentication result corresponding to the requested number (S609), and requests the application information for digital ID issuance to the smartphone 51 to issue the digital ID (S609). S610).

When the user inputs application information necessary for issuing a digital ID card, such as the applicant's name, ID, and address, through the smartphone 51 and transmits it to the ID management server 53 (S611), the ID management server 53 receives One application information is stored (S612).

As described above, when the user completes the digital ID issuance application using the application installed on the smartphone 51, a face-to-face authentication process is performed. That is, the user presents the real identification card to the manager, and the manager visually checks whether the picture on the real identification card matches the appearance of the user of the smart phone 51 requesting issuance of the digital identification card.

When the administrator confirms the user of the smartphone 51 through the face-to-face authentication process, the administrator accesses the ID management server 53 through the processing terminal 52 to view the application information of the smartphone user, and the application information is the user's Check whether the information matches the information on the physical identification card.

When the confirmation is completed, the manager inputs the issuance information including the confirmed manager ID to the processing terminal 52a (S613), and the processing terminal 52a transmits the issuance information to the identification card management server 53 (S613). S614). Here, transmission of the issuance information may be performed by various methods including a digital signature method.

When the processing terminal 52a transmits issuance information to the identification card management server 53, the identification card management server 53 approves issuance of a digital ID card for the user of the smartphone 51, and issues corresponding to the smartphone 51. A code is generated (S615). Then, the identification card management server 53 transmits the generated issuance code to the smartphone 51 for issuance target smartphone authentication.

When the issue code is received in the user's smart phone 51, the user acquires the processing terminal ID from the processing terminal ID providing unit 56 (S617). When the processing terminal ID providing unit 56 is implemented as a QR code or barcode, the user uses the smartphone 51 to scan the QR code or barcode displayed on the processing terminal ID providing unit 56 to obtain the processing terminal. get ID Meanwhile, when the processing terminal ID providing unit 56 is implemented in an NFC method, the user may acquire the processing terminal ID by tagging the smart phone 51 to the processing terminal ID providing unit 56 . In general, since a scanning method such as a QR code or barcode is vulnerable to forgery or falsification, the processing terminal ID providing unit 56 is preferably implemented in the form of an NFC tag.

The processing terminal ID is an identifier for distinguishing a plurality of processing terminals 52 connected to the issuance code transmission server 57 from each other. Accordingly, the issuance code transfer server 57 may specify the processing terminal 52a to which the issuance code is to be delivered from among the plurality of processing terminals 52 by using the processing terminal ID.

When the user obtains the processing terminal ID using the smartphone 51, the issuance code received from the identification card management server 53 and the issuance information including the processing terminal ID are transmitted to the issuance code transfer server 57 (S618). ). The issue code delivery server 57 transmits the issue code to the processing terminal 52a corresponding to the processing terminal ID (S619).

The processing terminal 52a receiving the issuance code transmits the received issuance code to the identification card management server 53 (S620), and the identification card management server 53 compares the stored issuance code with the received issuance code (S621). If they match, the digital ID is transmitted to the smartphone (S622), and the user stores the digital ID in his or her smartphone 51 (S623).

When a digital certificate is issued and stored in a user's smartphone according to the method described in the above embodiments, the user can submit the digital certificate stored in the smartphone when necessary, and also confirm whether the submitted digital certificate is valid. do. Hereinafter, a system and method for submitting and verifying a digital certificate stored in a smartphone will be described.

7 is a first embodiment showing a digital certificate verification system according to the present invention.

An application capable of communicating with the ID management server 73 is installed in the smartphone 71 shown in FIG. 7 . The application installed on the smart phone 71 communicates with the ID management server 73 to receive an authentication code and performs a function of expressing it on the smart phone 71.

The confirmation terminal 72 scans the authentication code expressed on the smartphone 71 in a scannable form such as a QR code or barcode, transmits it to the ID management server 73, and receives the confirmation result from the ID management server 33 perform the function of expression.

The verification terminal 72 may be a dedicated terminal for verifying the validity of the digital ID card, and may be a PC (Personal Computer) installed with a program capable of transmitting and receiving authentication codes and authentication results by communicating with the ID management server 73. may be

The ID management server 73 receives a request for an authentication code for validating a digital ID card from the smartphone 71, generates an authentication code corresponding thereto, transmits the authentication code to the smartphone 71, and uses the authentication code to It performs the function of judging the validity of

The ID management server 73 stores digital ID cards issued by the various methods described in the above embodiments, and stores information related to issuance of digital ID cards, such as the smartphone number that received the digital ID card and the date and time of issuance.

8 is a signal processing diagram illustrating a digital certificate verification method using the digital certificate verification system shown in FIG. 7;

The user drives the digital ID management application installed in his/her smartphone 71 (S801). Also, although not shown in the drawing, a user identification process may be performed through communication with the ID management server 73 .

The smart phone 71 transmits an authentication code request message including a digital ID to the ID management server 73 (S802). Here, the digital ID submitted to the ID management server 73 is received by the smartphone 71 from the ID management server 73 through the digital ID issuance process, and is associated with the smartphone 71 number or user ID. It may be a specific code, or it may be image information of an actual identification card.

The ID management server 73 checks whether the digital ID included in the authentication code request message received from the smart phone 71 is valid. That is, it is checked whether the received digital ID is the same as that issued by the ID management server 73 (S803), and if it is determined that it is the same, an authentication code corresponding to the received digital ID is generated (S804).

The ID management server 73 transmits the generated authentication code to the smartphone 71 as scannable information such as a QR code or barcode (S805). The smartphone 71 displays the scannable information (eg, QR code) received from the ID management server 73 (S806), and the confirmer uses the scanner 76 connected to the confirmation terminal 72 to The QR code displayed on the phone 71 is scanned (S807).

The confirmation terminal 72 obtains the authentication code from the QR code and transmits it to the ID management server 73 (S808), and the ID management server 73 checks the validity of the received authentication code (S809). That is, it is checked whether the authentication code generated by the ID management server 73 and transmitted to the smartphone 71 in step S804 matches the authentication code transmitted by the confirmation terminal 72a in step S808.

According to the confirmation result, the identification card management server 73 transmits the authentication result to the confirmation terminal 72a (S810), and the confirmation terminal 72a receiving it expresses the authentication result received from the identification card management server 73. (S811).

9 is a second embodiment showing a digital certificate verification system according to the present invention.

An application capable of communicating with the identification card management server 93 and the issuance code delivery server 94 is installed in the smartphone 91 shown in FIG. 9 . The application installed in the smartphone 91 performs a function of receiving an authentication code by communicating with the identification card management server 53 and transmitting the received authentication code to the authentication code delivery server 97 together with the confirmation terminal ID. .

The confirmation terminals 92 receive the authentication code from the authentication code delivery server 97, transmit it to the ID management server 94, and receive and display the authentication result from the ID management server 94. . Confirmation terminals 92 are each given a confirmation terminal ID. The verification terminal 92a may be a dedicated terminal for verifying a digital ID, and is a PC (Personal Computer) installed with a program capable of transmitting and receiving information by communicating with the ID management server 93 and the issuance code delivery server 97. It could be.

The ID management server 93 receives a request for an authentication code for validating a digital ID card from the smart phone 91 , generates authentication codes corresponding thereto, and transmits them to the smart phone 91 . In addition, it determines the validity of the verification code transmitted by the verification terminal 92a and transmits the result to the verification terminal 92a.

The confirmation terminal ID providing unit 96 stores a confirmation terminal ID corresponding to a specific confirmation terminal, and provides the confirmation terminal ID to the smartphone 91 . The confirmation terminal ID providing unit 96 is a device that can store information such as, for example, a QR code, barcode, NFC, etc., stores the confirmation terminal ID and provides the processing terminal ID to the smartphone in various ways. It is a device that can The identification terminal ID storage unit 96 is preferably implemented in an NFC method for copy protection.

The authentication code delivery server 97 receives the processing terminal ID and authentication code from the smart phone 91, and determines the confirmation terminal 92a to transmit the authentication code. At this time, the confirmation terminal to transmit the authentication code can be determined using the confirmation terminal ID.

10 is a signal processing diagram illustrating a digital certificate verification method using the digital certificate verification system shown in FIG. 9;

The user drives the digital ID management application installed on his/her smartphone 91 (S1001) and transmits an authentication code request message including the digital ID to the ID management server 93 (S1002). Here, the digital ID submitted to the ID management server 93 is received by the smartphone 91 from the ID management server 93 through the digital ID issuance process, and is associated with the smartphone 91 number or user ID. It may be a specific code, or it may be image information of an actual identification card.

The ID management server 93 checks whether the digital ID included in the authentication code request message received from the smart phone 91 is valid. That is, it is checked whether the received digital ID is the same as that issued by the ID management server 93 (S1003), and if it is determined to be the same, an authentication code corresponding to the received digital ID is generated (S1004).

When the authentication code is received in the user's smart phone 91, the user acquires the confirmation terminal ID from the confirmation terminal ID provider 96 (S1006). If the confirmation terminal ID providing unit 96 is implemented as a QR code or barcode, the user scans the QR code or barcode displayed on the confirmation terminal ID providing unit 96 using the smartphone 51 to obtain a confirmation terminal. get ID On the other hand, when the verification terminal ID providing unit 96 is implemented in the NFC method, the user can acquire the verification terminal ID by tagging the smartphone 91 to the verification terminal ID providing unit 96 . In general, since a scanning method such as a QR code or barcode is vulnerable to forgery or falsification, it is preferable that the confirmation terminal ID providing unit 96 is implemented in the form of an NFC tag.

The verification terminal ID is an identifier for distinguishing a plurality of verification terminals 92 connected to the verification code delivery server 97 from each other. Therefore, the authentication code transmission server 57 can specify the confirmation terminal 92a to deliver the authentication code from among the plurality of confirmation terminals 92 by using the confirmation terminal ID.

When the user obtains the verification terminal ID from the verification terminal ID providing unit 96 using the smartphone 91, the verification information including the verification code received from the identification card management server 93 and the verification terminal ID is delivered to the verification code. It is transmitted to the server 97 (S1007). Then, the authentication code transmission server 57 transmits the authentication code to the confirmation terminal 92a corresponding to the confirmation terminal ID (S1008).

Upon receiving the authentication code, the verification terminal 92a transmits the received authentication code to the ID management server 93 (S1009), and the ID management server 53 verifies the validity of the received authentication code (S1010). That is, it is checked whether the authentication code generated by the ID management server 93 and transmitted to the smartphone 91 in step S1004 matches the authentication code transmitted by the verification terminal 92a in step S1009.

According to the confirmation result, the identification card management server 93 transmits the authentication result to the confirmation terminal 92a (S1011), and the confirmation terminal 92a receiving it expresses the authentication result received from the identification card management server 93. (S1012).

11, 31, 51, 71, 91: smartphone 12, 32, 52: processing terminal
13, 33, 53, 73, 93: ID management server 14, 34, 54: authentication server
15, 35, 55, 95: Network 36, 76: Scanner
57: Issuance code delivery server 97: Authentication code delivery server
72, 92: confirmation terminal 56: processing terminal ID storage unit
96: confirmation terminal ID storage unit

Claims (6)

Receiving an authentication result for a user of a mobile communication terminal from an authentication server;
receiving application information for digital certificate issuance from the mobile communication terminal;
Receiving issuance information from a processing terminal;
transmitting a code for authentication of the mobile communication terminal to the processing terminal;
receiving the code from the mobile communication terminal; and
Transmitting a digital certificate to the mobile communication terminal
A digital certificate issuing method comprising a.
A mobile communication terminal installed with applications that perform digital certificate application, storage, and management functions;
a processing terminal that receives and transmits digital certificate issuance information and receives and displays a code corresponding to the issuance information; and
An identification that receives a digital certificate application from the mobile communication terminal, generates a code corresponding to the application and transmits it to the processing terminal, receives the code from the mobile communication terminal, and transmits the digital certificate to the mobile communication terminal management server
A digital certificate issuance system comprising a.
Receiving an authentication result for a user of a mobile communication terminal from an authentication server;
receiving application information for digital certificate issuance from the mobile communication terminal;
Receiving issuance information from a processing terminal;
transmitting a code for authenticating the mobile communication terminal to the mobile communication terminal;
receiving the code from the processing terminal; and
Transmitting a digital certificate to the mobile communication terminal
A digital certificate issuing method comprising a.
A mobile communication terminal installed with applications that perform digital certificate application, storage, and management functions;
a processing terminal that receives and transmits digital certificate issuance information and receives and displays a code corresponding to the issuance information; and
An identification card that receives a digital certificate application from the mobile communication terminal, generates a code corresponding to the application and transmits it to the mobile communication terminal, receives the code from the processing terminal, and transmits the digital certificate to the mobile communication terminal. management server
A digital certificate issuance system comprising a.
a processing terminal ID providing unit in which the processing terminal ID is stored;
a mobile communication terminal having an application for performing digital certificate application, storage, and management functions installed, and transmitting an issuing code and a processing terminal ID obtained from the processing terminal ID providing unit;
an issuance code delivery server that receives the processing terminal ID and the issuance code from the mobile communication terminal and transmits the issuance code to a processing terminal corresponding to the processing terminal ID;
Receiving a digital certificate application from the mobile communication terminal, generating an issuance code corresponding to the application and transmitting it to the mobile communication terminal, receiving and verifying the issuance code, and issuing a digital certificate to the mobile communication terminal according to the result ID management server that transmits; and
A digital certificate issuing system comprising a processing terminal for receiving issuance information, transmitting the issuance information to the identification card management server, and transmitting the issuance code received from the issuance code delivery server to the identification card management server.
Receiving an authentication result for a user of a mobile communication terminal from an authentication server;
receiving application information for digital certificate issuance from the mobile communication terminal;
Receiving issuance information from a processing terminal;
transmitting a code for authentication of the mobile communication terminal to the processing terminal;
receiving the code from the mobile communication terminal;
transmitting a digital certificate to the mobile communication terminal;
receiving an authentication code request corresponding to the digital certificate from the mobile communication terminal;
Generating an authentication code;
transmitting the authentication code to the mobile communication terminal;
Receiving the authentication code from the confirmation terminal;
checking whether the authentication code transmitted to the mobile communication terminal is the same as the authentication code received from the confirmation terminal; and
Transmitting the confirmation result to the confirmation terminal
Digital certificate verification method comprising a.

Images